nginx
tcp/443 tcp/80
The following URL (usually /.git/config
) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652210800e9a
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = git@github.com:GoodToys-LLC/goodtoys.com.ua.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main [branch "hottest"] remote = origin merge = refs/heads/hottest [branch "hotfix"] remote = origin merge = refs/heads/hotfix [branch "admin_fix"] remote = origin merge = refs/heads/admin_fix [branch "prodaction"] remote = origin merge = refs/heads/prodaction
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522c9367dca
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = git@github.com:GoodToys-LLC/goodtoys.com.ua.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main [branch "hottest"] remote = origin merge = refs/heads/hottest [branch "hotfix"] remote = origin merge = refs/heads/hotfix
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652226567432
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = git@github.com:GoodToys-LLC/goodtoys.com.ua.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main
Open service 81.28.12.12:80 · cdn.goodtoys.com.ua
2024-10-21 18:39
HTTP/1.1 301 Moved Permanently Server: nginx Date: Mon, 21 Oct 2024 18:39:58 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://cdn.goodtoys.com.ua/ X-ID-FE: am3-hw-edge-gpig-gc96 Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
Open service 2a03:90c0:999c::12:443 · cdn.goodtoys.com.ua
2024-10-21 18:39
HTTP/1.1 200 OK Server: nginx Date: Mon, 21 Oct 2024 18:40:04 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/7.4.33 Set-Cookie: PHPSESSID=b3332cf92822807e5aaabe3916e41e77; path=/; HttpOnly Set-Cookie: landing=%2F; path=/; secure; HttpOnly; SameSite=None Set-Cookie: shop_cart=a3a093b514896badc2062dd9203185e6; expires=Wed, 20-Nov-2024 18:40:03 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=None Cache-Control: max-age=0 Strict-Transport-Security: max-age=31536000; traceparent: 00-e6b640116a84f4d5dc53d890c3788eab-f25fee15c8c2d7b1-01 X-ID: am3-hw-edge-gpig-gc96 Access-Control-Allow-Origin: * Cache: MISS X-ID-FE: am3-hw-edge-gpig-gc96
Open service 2a03:90c0:999c::12:80 · cdn.goodtoys.com.ua
2024-10-21 18:39
HTTP/1.1 301 Moved Permanently Server: nginx Date: Mon, 21 Oct 2024 18:39:58 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://cdn.goodtoys.com.ua/ X-ID-FE: am3-hw-edge-gpig-gc96 Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
Open service 81.28.12.12:443 · cdn.goodtoys.com.ua
2024-10-21 18:39
HTTP/1.1 200 OK Server: nginx Date: Mon, 21 Oct 2024 18:40:02 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/7.4.33 Set-Cookie: PHPSESSID=e6dac6d7c849746add2b6fe3d6e101cc; path=/; HttpOnly Set-Cookie: landing=%2F; path=/; secure; HttpOnly; SameSite=None Set-Cookie: shop_cart=1614b694f4e010e786e04806500fca53; expires=Wed, 20-Nov-2024 18:40:02 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=None Cache-Control: max-age=0 Strict-Transport-Security: max-age=31536000; traceparent: 00-c30c4c58bafb4ee2bdde939f88d2cd30-0a2fb27bb3732dfc-01 X-ID: am3-hw-edge-gpig-gc96 Access-Control-Allow-Origin: * Cache: MISS X-ID-FE: am3-hw-edge-gpig-gc96