LeakIX - Host dolci.oneam.dev

Domain dolci.oneam.dev

Italy

Aruba S.p.A.

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 74.122.239.50
Domain: dolci.oneam.dev
Port: 443
URL: https://dolci.oneam.dev

First seen 2024-08-28 19:38
Last seen 2024-10-15 00:18
Open for 47 days

Severity: low
Fingerprint: 5f32cf5d6962f09cf35cbfb3f35cbfb30345d16e44ceb9544db702e3c5fd1daa

Found 29 files trough .DS_Store spidering:

/build
/bundles
/index.php
/js
/media
/media/brand
/media/email
/media/images
/media/images/about.jpg
/media/images/car-brand
/media/images/car-service.jpeg
/media/images/chip-repair.jpeg
/media/images/Frame 1108198.png
/media/images/Frame 1108198@2x.png
/media/images/google-maps.jpg
/media/images/index
/media/images/inpection-center1.png
/media/images/menu-image.png
/media/images/officine-control.png
/media/images/our-cars.jpg
/media/images/our-vehicle-2.jpg
/media/images/our-vehicle.jpg
/media/images/rim-approval.jpeg
/media/images/services
/media/images/team1.png
/media/images/vehicle.png
/media/svg
/media/video
/uploads

Found on 2024-10-15 00:18

Severity: medium
Fingerprint: 5f32cf5d6962f09c7d264b917d264b915302703c15494eaa4ddf1285da309053

Found 52 files trough .DS_Store spidering:

/build
/bundles
/index.php
/js
/media
/media/brand
/media/images
/media/images/about.jpg
/media/images/car-brand
/media/images/car-brand/1.png
/media/images/car-brand/2.png
/media/images/car-brand/3.png
/media/images/car-brand/4.png
/media/images/car-service.jpeg
/media/images/chip-repair.jpeg
/media/images/Frame 1108198.png
/media/images/Frame 1108198@2x.png
/media/images/google-maps.jpg
/media/images/index
/media/images/inpection-center1.png
/media/images/menu-image.png
/media/images/officine-control.png
/media/images/our-cars.jpg
/media/images/our-vehicle-2.jpg
/media/images/our-vehicle.jpg
/media/images/rim-approval.jpeg
/media/images/services
/media/images/services/crystals
/media/images/services/garage
/media/images/services/inspection-center
/media/images/services/inspection-center.jpg
/media/images/services/our-services1.png
/media/images/services/our-services2.jpeg
/media/images/services/our-services3.jpeg
/media/images/services/our-services4.jpeg
/media/images/services/our-services5.jpeg
/media/images/services/roadside-assistance.jpg
/media/images/services/tire
/media/images/team1.png
/media/images/vehicle.png
/media/svg
/media/video
/media/video/convergences.mp4
/media/video/Diagnosi.mp4
/media/video/glass-repair.mp4
/media/video/mechanical.mp4
/media/video/Portiera.mp4
/media/video/Tagliando.mp4
/media/video/tire-balancing.mp4
/media/video/tire-change.mp4
/media/video/tire-storage.mp4
/uploads

Found on 2024-10-14 02:06

Create report

Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 74.122.239.50
Domain: dolci.oneam.dev
Port: 443
URL: https://dolci.oneam.dev/_profiler/empty/search/results

First seen 2024-08-12 13:16
Last seen 2024-08-26 10:19
Open for 13 days
- Fingerprint: 407cf4363b0e62fafca67e0704ef601904ef601904ef601904ef601904ef6019
```
Symfony profiler enabled:
https://dolci.oneam.dev/_profiler/empty/search/results
```
  Found on 2024-08-26 10:19
Create report

Domain summary

dolci.oneam.dev 3

1 recorded

IP summary

74.122.239.50 1