AmazonS3
tcp/443
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652262b78ac8
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true ignorecase = true precomposeunicode = true [remote "origin"] url = git@bitbucket.org:atomationdev/atomation-dashboard-client.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master vscode-merge-base = origin/master [branch "DE_ATM_709"] vscode-merge-base = origin/master remote = origin merge = refs/heads/DE_ATM_709 [branch "develop"] remote = origin merge = refs/heads/develop vscode-merge-base = origin/develop [branch "DE-ATM-727"] vscode-merge-base = origin/develop remote = origin merge = refs/heads/DE-ATM-727 [branch "DE-ATM-722"] remote = origin merge = refs/heads/DE-ATM-722 vscode-merge-base = origin/DE-ATM-722
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb605a5387
[core] repositoryformatversion = 0 filemode = false bare = false logallrefupdates = true symlinks = false ignorecase = true [remote "origin"] url = https://randzn@bitbucket.org/atomationdev/atomation-dashboard-client.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [branch "develop"] remote = origin merge = refs/heads/develop [branch "RD_SD_557"] remote = origin merge = refs/heads/RD_SD_557 [branch "RD_SD_583"] remote = origin merge = refs/heads/RD_SD_583 [branch "RD_ATI_313"] remote = origin merge = refs/heads/RD_ATI_313 [branch "RD_SD_601"] remote = origin merge = refs/heads/RD_SD_601 [branch "RD_ATI_429"] remote = origin merge = refs/heads/RD_ATI_429 [branch "RD_ATI_429_FIX"] remote = origin merge = refs/heads/RD_ATI_429_FIX [branch "EK_SD_933"] remote = origin merge = refs/heads/EK_SD_933 [branch "RD_SD_980"] remote = origin merge = refs/heads/RD_SD_980 [branch "GS-840"] remote = origin merge = refs/heads/GS-840 [branch "ATM_UI_VERSION_1_6_9"] remote = origin merge = refs/heads/ATM_UI_VERSION_1_6_9 [branch "DE-ATM-172"] remote = origin merge = refs/heads/DE-ATM-172 [branch "DE-ATM-171"] remote = origin merge = refs/heads/DE-ATM-171 [branch "DE-ATM-181"] remote = origin merge = refs/heads/DE-ATM-181 [branch "RD_ATM_315"] remote = origin merge = refs/heads/RD_ATM_315 [branch "RD_ATM_316"] remote = origin merge = refs/heads/RD_ATM_316 [branch "RD_ATM_318"] remote = origin merge = refs/heads/RD_ATM_318 [branch "RD_ATM_367"] remote = origin merge = refs/heads/RD_ATM_367
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65227c5e7dd7
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true ignorecase = true precomposeunicode = true [remote "origin"] url = git@bitbucket-atm.org:atomationdev/atomation-dashboard-client.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [branch "develop"] remote = origin merge = refs/heads/develop [branch "DE-ATM-131"] remote = origin merge = refs/heads/DE-ATM-131 [branch "DE-ATM-131-FIX"] remote = origin merge = refs/heads/DE-ATM-131-FIX [branch "DE-ATM-159"] remote = origin merge = refs/heads/DE-ATM-159
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c7cf176427cf17642b9618ce75eab8dfc5eab8dfc5eab8dfc
Found 2 files trough .DS_Store spidering: /.git /src
Open service 13.224.189.65:443 · dashboard.atomation.net
2026-01-23 11:59
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1777
Connection: close
Last-Modified: Tue, 13 Jan 2026 15:07:40 GMT
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
Date: Fri, 23 Jan 2026 11:59:41 GMT
ETag: "6ae3b7bbbb9e4c7a03187812e876a4ca"
X-Cache: Error from cloudfront
Via: 1.1 5aa88f8b53f9cf7386d9ee039cf192cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ATH51-P1
X-Amz-Cf-Id: jmojqyaT4GWo32dD93n-2LEqhiYj0gYxx6zYjFoc7tpXnVTJ-0TluA==
Age: 2
Page title: Atomation Dashboard
<!doctype html>
<html>
<head>
<base href='/'>
<meta charset="utf-8" />
<link rel="apple-touch-icon" sizes="76x76" href="../assets/img/favicon.png" />
<link rel="icon" type="image/png" href="../assets/img/favicon.png" />
<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" />
<title>Atomation Dashboard</title>
<meta content='width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0' name='viewport' />
<meta name="viewport" content="width=device-width" />
<!-- Fonts and icons -->
<link href="https://maxcdn.bootstrapcdn.com/font-awesome/latest/css/font-awesome.min.css" rel="stylesheet">
<link href='https://fonts.googleapis.com/css?family=Roboto:400,700,300,500|Material+Icons' rel='stylesheet' type='text/css'>
<!-- google maps -->
<script src="https://developers.google.com/maps/documentation/javascript/examples/markerclusterer/markerclusterer.js"></script>
<script src="https://maps.googleapis.com/maps/api/js?key=AIzaSyCfFVY-OC0Hz2qfHcUsGsGp6jJr8ujA4uE&libraries=places" async defer></script>
<!--<script src="https://maps.googleapis.com/maps/api/js?key=AIzaSyCfFVY-OC0Hz2qfHcUsGsGp6jJr8ujA4uE&callback=initMap&language=en" async defer></script>-->
<!-- Google Charts -->
<script type="text/javascript" src="https://www.gstatic.com/charts/loader.js"></script>
</head>
<body>
<app-root>
</app-root>
<script type="text/javascript" src="runtime.js"></script><script type="text/javascript" src="polyfills.js"></script><script type="text/javascript" src="styles.js"></script><script type="text/javascript" src="scripts.js"></script><script type="text/javascript" src="vendor.js"></script><script type="text/javascript" src="main.js"></script></body>
</html>