.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09cdc57c57adc57c57a49308ec395650c53d4daf636d53370c4
Found 19 files trough .DS_Store spidering: /build /css /dashboard /dropify /error_log /fonts /fullcalendar /image-uploader-master /images /img /index.php /js /menu /onesignal /OneSignalSDKWorker.js /plugins /public /robots.txt /scss
Severity: medium
Fingerprint: 5f32cf5d6962f09c9150089691500896398fc38f30799707d633b8ea35d8f96e
Found 37 files trough .DS_Store spidering: /build /css /dashboard /dashboard/assets /dashboard/assets/media /dashboard/assets/media/image /dashboard/assets/media/image/about_us /dashboard/assets/media/image/complaints /dashboard/assets/media/image/explore_meals /dashboard/assets/media/image/food_types /dashboard/assets/media/image/how_it_works /dashboard/assets/media/image/items /dashboard/assets/media/image/meet_the_team /dashboard/assets/media/image/menu /dashboard/assets/media/image/restaurant /dashboard/assets/media/image/school /dashboard/assets/media/image/schools /dashboard/assets/media/image/settings /dashboard/assets/media/image/slideshows /dashboard/assets/media/image/stats /dashboard/assets/media/image/testimonials /dropify /error_log /fonts /fullcalendar /image-uploader-master /images /img /index.php /js /menu /onesignal /OneSignalSDKWorker.js /plugins /public /robots.txt /scss
Severity: low
Fingerprint: 5f32cf5d6962f09c3838040e3838040e7b0d0137c2a36fdf66818dd20576b45d
Found 20 files trough .DS_Store spidering: /build /css /dashboard /dashboard/assets /dropify /error_log /fonts /fullcalendar /image-uploader-master /images /img /index.php /js /menu /onesignal /OneSignalSDKWorker.js /plugins /public /robots.txt /scss
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09cdc57c57adc57c57a49308ec395650c53d4daf636d53370c4
Found 19 files trough .DS_Store spidering: /build /css /dashboard /dropify /error_log /fonts /fullcalendar /image-uploader-master /images /img /index.php /js /menu /onesignal /OneSignalSDKWorker.js /plugins /public /robots.txt /scss
Severity: medium
Fingerprint: 5f32cf5d6962f09c9150089691500896398fc38f30799707d633b8ea35d8f96e
Found 37 files trough .DS_Store spidering: /build /css /dashboard /dashboard/assets /dashboard/assets/media /dashboard/assets/media/image /dashboard/assets/media/image/about_us /dashboard/assets/media/image/complaints /dashboard/assets/media/image/explore_meals /dashboard/assets/media/image/food_types /dashboard/assets/media/image/how_it_works /dashboard/assets/media/image/items /dashboard/assets/media/image/meet_the_team /dashboard/assets/media/image/menu /dashboard/assets/media/image/restaurant /dashboard/assets/media/image/school /dashboard/assets/media/image/schools /dashboard/assets/media/image/settings /dashboard/assets/media/image/slideshows /dashboard/assets/media/image/stats /dashboard/assets/media/image/testimonials /dropify /error_log /fonts /fullcalendar /image-uploader-master /images /img /index.php /js /menu /onesignal /OneSignalSDKWorker.js /plugins /public /robots.txt /scss
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b534e439
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = git@github.com:COMPU-VISION/lunchbox.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b534e439
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = git@github.com:COMPU-VISION/lunchbox.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main