nginx 1.10.3
tcp/443 tcp/80
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c3838040e3838040e81a40c418f701912c46b77cfc3b9fddc
Found 20 files trough .DS_Store spidering: /.dist /.git /.vscode /assets /commands /components /config /controllers /controllers/api /controllers/base /db /formatter /gii /mail /models /runtime /tests /vendor /views /web
Severity: low
Fingerprint: 5f32cf5d6962f09cdafa5447dafa54473f0c83e071db40cd10150404ff6f1a10
Found 18 files trough .DS_Store spidering: /.dist /.git /.vscode /assets /commands /components /config /controllers /db /formatter /gii /mail /models /runtime /tests /vendor /views /web
Severity: medium
Fingerprint: 5f32cf5d6962f09cd4047824d4047824e0c747a3a18a16a4553c6ed15042a646
Found 35 files trough .DS_Store spidering: /.dist /.git /.vscode /assets /commands /components /config /controllers /controllers/api /controllers/base /db /formatter /gii /mail /models /runtime /tests /vendor /views /views/layouts /views/menu /views/role /views/site /views/user /web /web/assets /web/css /web/js /web/uploads /web/uploads/guest /web/uploads/guest/2021-03-10 /web/uploads/guest/2021-04-12 /web/uploads/guest/2021-04-13 /web/uploads/presence /web/uploads/user
Severity: medium
Fingerprint: 5f32cf5d6962f09cb3107650b3107650d34b80af33f22ba8679245e5cf03d46e
Found 39 files trough .DS_Store spidering: /.dist /.git /.vscode /assets /commands /components /config /controllers /controllers/api /controllers/base /db /formatter /gii /mail /models /runtime /tests /vendor /views /views/layouts /views/menu /views/role /views/site /views/user /web /web/assets /web/css /web/js /web/uploads /web/uploads/guest /web/uploads/guest/2021-03-10 /web/uploads/guest/2021-04-12 /web/uploads/guest/2021-04-13 /web/uploads/presence /web/uploads/presence/2021-03-08 /web/uploads/presence/2021-03-09 /web/uploads/presence/2021-04-12 /web/uploads/user /web/uploads/user/qr_code
The following URL (usually /.git/config
) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb8774f3de
[core] repositoryformatversion = 0 filemode = false bare = false logallrefupdates = true symlinks = false ignorecase = true [remote "origin"] url = git@github.com:defrindr/mocata.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master
Severity: medium
Fingerprint: 2580fa947e78dd08be42911ea5b73f2d78cd48be07a41a3bf205960762d1f832
HTTP/1.1 302 Found Server: nginx/1.10.3 (Ubuntu) Date: Sat, 06 May 2023 00:05:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Location: web 0 [core] repositoryformatversion = 0 filemode = false bare = false logallrefupdates = true symlinks = false ignorecase = true [remote "origin"] url = git@github.com:defrindr/mocata.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master
Open service 103.41.207.197:443 · guest.batutracking19.id
2024-05-12 20:44
HTTP/1.1 302 Found Server: nginx/1.10.3 (Ubuntu) Date: Sun, 12 May 2024 20:44:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Location: web
Open service 103.41.207.197:443 · guest.batutracking19.id
2024-05-12 19:32
HTTP/1.1 302 Found Server: nginx/1.10.3 (Ubuntu) Date: Sun, 12 May 2024 19:32:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Location: web
Open service 103.41.207.197:443 · guest.batutracking19.id
2024-05-08 20:22
HTTP/1.1 302 Found Server: nginx/1.10.3 (Ubuntu) Date: Wed, 08 May 2024 20:22:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Location: web
Open service 103.41.207.197:80 · guest.batutracking19.id
2024-05-01 05:15
HTTP/1.1 301 Moved Permanently Server: nginx/1.10.3 (Ubuntu) Date: Wed, 01 May 2024 05:15:38 GMT Content-Type: text/html Content-Length: 194 Connection: close Location: https://guest.batutracking19.id/ Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body bgcolor="white"> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx/1.10.3 (Ubuntu)</center> </body> </html>
Open service 103.41.207.197:443 · guest.batutracking19.id
2024-05-01 05:15
HTTP/1.1 302 Found Server: nginx/1.10.3 (Ubuntu) Date: Wed, 01 May 2024 05:15:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Location: web
Open service 103.41.207.197:443 · guest.batutracking19.id
2024-05-01 01:12
HTTP/1.1 302 Found Server: nginx/1.10.3 (Ubuntu) Date: Wed, 01 May 2024 01:12:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Location: web
Open service 103.41.207.197:443 · guest.batutracking19.id
2024-04-30 21:34
HTTP/1.1 302 Found Server: nginx/1.10.3 (Ubuntu) Date: Tue, 30 Apr 2024 21:35:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Location: web
Open service 103.41.207.197:443 · guest.batutracking19.id
2024-04-28 20:42
HTTP/1.1 302 Found Server: nginx/1.10.3 (Ubuntu) Date: Sun, 28 Apr 2024 20:43:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Location: web
Open service 103.41.207.197:443 · guest.batutracking19.id
2024-04-28 18:59
HTTP/1.1 302 Found Server: nginx/1.10.3 (Ubuntu) Date: Sun, 28 Apr 2024 18:59:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Location: web
Open service 103.41.207.197:443 · guest.batutracking19.id
2024-04-19 00:40
HTTP/1.1 302 Found Server: nginx/1.10.3 (Ubuntu) Date: Fri, 19 Apr 2024 00:41:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Location: web
Open service 103.41.207.197:443 · guest.batutracking19.id
2024-04-18 23:07
HTTP/1.1 302 Found Server: nginx/1.10.3 (Ubuntu) Date: Thu, 18 Apr 2024 23:07:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Location: web