Apache 2.4.65
tcp/443
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65227a75ae2f
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://git.lukanet.com/var/www-sub/bt.lukanet.com/www-root fetch = +refs/heads/*:refs/remotes/origin/* [branch "master-1.2.x"] remote = origin merge = refs/heads/master-1.2.x [submodule "library/adodb"] url = https://github.com/mantisbt/ADOdb.git [submodule "library/phpmailer"] url = https://github.com/mantisbt/PHPMailer [submodule "plugins/BarsySupport"] url = ssh://git@bitbucket.org/lukanet/mantisbt-plugin-barsysupport.git [credential] helper = store --file /var/www-sub/bt.lukanet.com/www-root/.git/.git-credentials [branch "master"] remote = origin merge = refs/heads/master [pull] rebase = true
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652247c92b18
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://git.lukanet.com/var/www-sub/bt.lukanet.com/www-root fetch = +refs/heads/*:refs/remotes/origin/* [branch "master-1.2.x"] remote = origin merge = refs/heads/master-1.2.x [submodule "library/adodb"] url = https://github.com/mantisbt/ADOdb.git [submodule "library/phpmailer"] url = https://github.com/mantisbt/PHPMailer [submodule "plugins/BarsySupport"] url = ssh://git@bitbucket.org/lukanet/mantisbt-plugin-barsysupport.git [credential] helper = store --file /var/www-sub/bt.lukanet.com/www-root/.git/.git-credentials [branch "master"] remote = origin merge = refs/heads/master
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652294bd7add
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://btupdate@git.lukanet.com/var/www-sub/bt.lukanet.com/www-root fetch = +refs/heads/*:refs/remotes/origin/* [branch "master-1.2.x"] remote = origin merge = refs/heads/master-1.2.x [submodule "library/adodb"] url = https://github.com/mantisbt/ADOdb.git [submodule "library/phpmailer"] url = https://github.com/mantisbt/PHPMailer [submodule "plugins/BarsySupport"] url = ssh://git@bitbucket.org/lukanet/mantisbt-plugin-barsysupport.git [credential] helper = store --file /var/www-sub/bt.lukanet.com/www-root/.git/.git-credentials [branch "master"] remote = origin merge = refs/heads/master
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522f758d134
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://btupdate@git.lukanet.com/var/www-sub/bt.lukanet.com/www-root fetch = +refs/heads/*:refs/remotes/origin/* [branch "master-1.2.x"] remote = origin merge = refs/heads/master-1.2.x [submodule "library/adodb"] url = https://github.com/mantisbt/ADOdb.git [submodule "library/phpmailer"] url = https://github.com/mantisbt/PHPMailer [submodule "plugins/BarsySupport"] url = ssh://git@bitbucket.org/lukanet/mantisbt-plugin-barsysupport.git [credential] helper = store --file /var/www-sub/bt.lukanet.com/www-root/.git/.git-credentials
Open service 144.91.69.114:443 · alt.bt.lukanet.com
2026-01-10 10:05
HTTP/1.1 302 Found Date: Sat, 10 Jan 2026 10:05:26 GMT Server: Apache/2.4.65 (Debian) X-Content-Type-Options: nosniff Cache-Control: no-store, no-cache, must-revalidate Expires: Sat, 10 Jan 2026 10:05:26 GMT X-Frame-Options: DENY Content-Security-Policy: img-src https://secure.gravatar.com/ 'self' data:; frame-ancestors 'self'; script-src 'self' https://collector.lukanet.com 'nonce-FxdFGyjYol2RU9xjgMFRuNG_Uo9LAZiq' 'self'; default-src 'self'; style-src 'self' 'unsafe-inline' Set-Cookie: PHPSESSID=fd906eddda21d94e7899690c4657cf6b; path=/; secure; HttpOnly; SameSite=Lax Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sat, 10 Jan 2026 10:05:26 GMT Location: https://alt.bt.lukanet.com/login_page.php Content-Length: 0 Content-Type: text/html; charset=utf-8
Open service 144.91.69.114:443 · alt.bt.lukanet.com
2026-01-09 10:07
HTTP/1.1 302 Found Date: Fri, 09 Jan 2026 10:07:23 GMT Server: Apache/2.4.65 (Debian) X-Content-Type-Options: nosniff Cache-Control: no-store, no-cache, must-revalidate Expires: Fri, 09 Jan 2026 10:07:23 GMT X-Frame-Options: DENY Content-Security-Policy: img-src https://secure.gravatar.com/ 'self' data:; frame-ancestors 'self'; script-src 'self' https://collector.lukanet.com 'nonce-6asiJf78fElVgiM1jv20Zl6gUY1dR9qJ' 'self'; default-src 'self'; style-src 'self' 'unsafe-inline' Set-Cookie: PHPSESSID=f1c5a2f96d8fbba3dcd2c7e57082cab0; path=/; secure; HttpOnly; SameSite=Lax Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 09 Jan 2026 10:07:23 GMT Location: https://alt.bt.lukanet.com/login_page.php Content-Length: 0 Content-Type: text/html; charset=utf-8
Open service 144.91.69.114:443 · alt.bt.lukanet.com
2026-01-02 14:45
HTTP/1.1 302 Found Date: Fri, 02 Jan 2026 14:45:38 GMT Server: Apache/2.4.65 (Debian) X-Content-Type-Options: nosniff Cache-Control: no-store, no-cache, must-revalidate Expires: Fri, 02 Jan 2026 14:45:38 GMT X-Frame-Options: DENY Content-Security-Policy: img-src https://secure.gravatar.com/ 'self' data:; frame-ancestors 'self'; script-src 'self' https://collector.lukanet.com 'nonce-zD2uztE_pqEnYGfRcofcnvWRlV5DPY2Y' 'self'; default-src 'self'; style-src 'self' 'unsafe-inline' Set-Cookie: PHPSESSID=431957b8aa3881ac5e7a0fd1d28392ad; path=/; secure; HttpOnly; SameSite=Lax Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 02 Jan 2026 14:45:38 GMT Location: https://alt.bt.lukanet.com/login_page.php Content-Length: 0 Content-Type: text/html; charset=utf-8
Open service 144.91.69.114:443 · alt.bt.lukanet.com
2025-12-22 17:08
HTTP/1.1 302 Found Date: Mon, 22 Dec 2025 17:08:42 GMT Server: Apache/2.4.65 (Debian) X-Content-Type-Options: nosniff Cache-Control: no-store, no-cache, must-revalidate Expires: Mon, 22 Dec 2025 17:08:42 GMT X-Frame-Options: DENY Content-Security-Policy: img-src https://secure.gravatar.com/ 'self' data:; frame-ancestors 'self'; script-src 'self' https://collector.lukanet.com 'nonce-MJmFBBHODo_ROQqQH5ihjDvr1j5BkaLG' 'self'; default-src 'self'; style-src 'self' 'unsafe-inline' Set-Cookie: PHPSESSID=ca042c94559e00faddad356cdc552096; path=/; secure; HttpOnly; SameSite=Lax Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 22 Dec 2025 17:08:42 GMT Location: https://alt.bt.lukanet.com/login_page.php Content-Length: 0 Content-Type: text/html; charset=utf-8
Open service 144.91.69.114:443 · alt.bt.lukanet.com
2025-12-20 17:26
HTTP/1.1 302 Found Date: Sat, 20 Dec 2025 17:26:33 GMT Server: Apache/2.4.65 (Debian) X-Content-Type-Options: nosniff Cache-Control: no-store, no-cache, must-revalidate Expires: Sat, 20 Dec 2025 17:26:33 GMT X-Frame-Options: DENY Content-Security-Policy: img-src https://secure.gravatar.com/ 'self' data:; frame-ancestors 'self'; script-src 'self' https://collector.lukanet.com 'nonce-BDyzwdFdaVc5RGMQicMr5k12DhJiHMFH' 'self'; default-src 'self'; style-src 'self' 'unsafe-inline' Set-Cookie: PHPSESSID=cdd07e98df014327c7705acedc9427b6; path=/; secure; HttpOnly; SameSite=Lax Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sat, 20 Dec 2025 17:26:33 GMT Location: https://alt.bt.lukanet.com/login_page.php Content-Length: 0 Content-Type: text/html; charset=utf-8
Open service 144.91.69.114:443 · alt.bt.lukanet.com
2025-12-19 06:38
HTTP/1.1 302 Found Date: Fri, 19 Dec 2025 06:38:10 GMT Server: Apache/2.4.65 (Debian) X-Content-Type-Options: nosniff Cache-Control: no-store, no-cache, must-revalidate Expires: Fri, 19 Dec 2025 06:38:10 GMT X-Frame-Options: DENY Content-Security-Policy: img-src https://secure.gravatar.com/ 'self' data:; frame-ancestors 'self'; script-src 'self' https://collector.lukanet.com 'nonce-z7hZzXlFdO2Lln9gOpFx4mOGlPUdfj-7' 'self'; default-src 'self'; style-src 'self' 'unsafe-inline' Set-Cookie: PHPSESSID=a765d801cd0f6a45c37679b3ca7df510; path=/; secure; HttpOnly; SameSite=Lax Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 19 Dec 2025 06:38:10 GMT Location: https://alt.bt.lukanet.com/login_page.php Content-Length: 0 Content-Type: text/html; charset=utf-8