Apache
tcp/443
The following URL (usually /.git/config
) is publicly accessible and is leaking source code and repository configuration.
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652204ade9e7
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://wclasses@bitbucket.org/wclasses/wclasses.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [branch "hostgator-master"] remote = origin merge = refs/heads/hostgator-master [branch "permissao"] remote = origin merge = refs/heads/permissao [pull] rebase = false
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652215b2e6cd
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://wclasses@bitbucket.org/wclasses/wclasses.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [branch "hostgator-master"] remote = origin merge = refs/heads/hostgator-master [branch "permissao"] remote = origin merge = refs/heads/permissao
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65227dd123f2
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://wclasses@bitbucket.org/wclasses/wclasses.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [branch "hostgator-master"] remote = origin merge = refs/heads/hostgator-master
The following URL (usually /.git/config
) is publicly accessible and is leaking source code and repository configuration.
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65227dd123f2
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://wclasses@bitbucket.org/wclasses/wclasses.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [branch "hostgator-master"] remote = origin merge = refs/heads/hostgator-master
The following URL is publicly accessible and is leaking deployment credentials
Fingerprint: 13b3a7b17cfc7502c36c325da4df93f0a921714a239824ca0df518f05f1977e8
{ "name": "WClasses Produção", "host": "162.240.237.128", "protocol": "ftp", "port": 21, "username": "desenvolvimento@wclasses.com.br", "password": "Xykkg@190", "remotePath": "/wclasses", "uploadOnSave": false, "useTempFile": false, "openSsh": false }
Open service 162.240.237.128:443 · ipe.wclasses.com.br
2024-06-20 14:42
HTTP/1.1 200 OK Date: Thu, 20 Jun 2024 14:42:22 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=1b33a23a419bdb133651b03f6cba00e7; expires=Mon, 24-Jun-2024 18:42:22 GMT; Max-Age=360000; path=/ Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 <script>top.window.location = 'https://ipe.wclasses.com.br:443/index.php?r=login'</script>
Open service 162.240.237.128:443 · ipe.wclasses.com.br
2024-06-18 05:02
HTTP/1.1 200 OK Date: Tue, 18 Jun 2024 05:02:15 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=8e02db39051801a655cb70ea12349d47; expires=Sat, 22-Jun-2024 09:02:15 GMT; Max-Age=360000; path=/ Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 <script>top.window.location = 'https://ipe.wclasses.com.br:443/index.php?r=login'</script>
Open service 162.240.237.128:443 · ipe.wclasses.com.br
2024-06-16 04:32
HTTP/1.1 200 OK Date: Sun, 16 Jun 2024 04:32:08 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=e31f8d60d84c90a672f3614a2f26c491; expires=Thu, 20-Jun-2024 08:32:08 GMT; Max-Age=360000; path=/ Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 <script>top.window.location = 'https://ipe.wclasses.com.br:443/index.php?r=login'</script>
Open service 162.240.237.128:443 · ipe.wclasses.com.br
2024-06-12 00:29
HTTP/1.1 200 OK Date: Wed, 12 Jun 2024 00:29:26 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=67114d309972d791a53a041090a18ca6; expires=Sun, 16-Jun-2024 04:29:26 GMT; Max-Age=360000; path=/ Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 <script>top.window.location = 'https://ipe.wclasses.com.br:443/index.php?r=login'</script>
Open service 162.240.237.128:443 · ipe.wclasses.com.br
2024-06-10 19:08
HTTP/1.1 200 OK Date: Mon, 10 Jun 2024 19:08:09 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=3f390b983ad9b7dc8f02a5d5a9ffdc62; expires=Fri, 14-Jun-2024 23:08:09 GMT; Max-Age=360000; path=/ Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 <script>top.window.location = 'https://ipe.wclasses.com.br:443/index.php?r=login'</script>
Open service 162.240.237.128:443 · ipe.wclasses.com.br
2024-06-08 17:33
HTTP/1.1 200 OK Date: Sat, 08 Jun 2024 17:33:51 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=ce76f2ece91f3761c8af71e5d44c74a9; expires=Wed, 12-Jun-2024 21:33:51 GMT; Max-Age=360000; path=/ Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 <script>top.window.location = 'https://ipe.wclasses.com.br:443/index.php?r=login'</script>
Open service 162.240.237.128:443 · ipe.wclasses.com.br
2024-06-06 13:54
HTTP/1.1 200 OK Date: Thu, 06 Jun 2024 13:54:19 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=5990f78927ebdf979d20ecf6d7349bc0; expires=Mon, 10-Jun-2024 17:54:19 GMT; Max-Age=360000; path=/ Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 <script>top.window.location = 'https://ipe.wclasses.com.br:443/index.php?r=login'</script>
Open service 162.240.237.128:443 · ipe.wclasses.com.br
2024-06-04 16:13
HTTP/1.1 200 OK Date: Tue, 04 Jun 2024 16:13:48 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=728af5fed6f23bccd06cd6de4f9e4894; expires=Sat, 08-Jun-2024 20:13:48 GMT; Max-Age=360000; path=/ Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 <script>top.window.location = 'https://ipe.wclasses.com.br:443/index.php?r=login'</script>
Open service 162.240.237.128:443 · ipe.wclasses.com.br
2024-06-02 19:29
HTTP/1.1 200 OK Date: Sun, 02 Jun 2024 19:29:20 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=839a1342ec71b079a6fd73d2cb8633f9; expires=Thu, 06-Jun-2024 23:29:20 GMT; Max-Age=360000; path=/ Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 <script>top.window.location = 'https://ipe.wclasses.com.br:443/index.php?r=login'</script>