Caddy
tcp/80
nginx 1.22.1
tcp/443
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.
Severity: critical
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652214b7a655
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://gitlab-ci-token:glcbt-64_AsKs1xvRuw-r3r61MfoE@gitlab.droidnet.de/droid.ac15/appcreator-cms.git fetch = +refs/heads/*:refs/remotes/origin/* [lfs] repositoryformatversion = 0
Severity: critical
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65223d8dbf18
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://gitlab-ci-token:glcbt-64_zmRXrAAE3hrsQQutyy-4@gitlab.droidnet.de/droid.ac15/appcreator-cms.git fetch = +refs/heads/*:refs/remotes/origin/* [lfs] repositoryformatversion = 0
Severity: critical
Fingerprint: 2580fa947178c88c8f88f4f64b143e4f192660cba91884029ffc42c188889f90
[init] defaultBranch = none [fetch] recurseSubmodules = false [transfer] bundleURI = true [core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://gitlab-ci-token:glcbt-64_ug5xDHxADzzfvJWJHRyC@gitlab.droidnet.de/droid.ac15/appcreator-cms.git fetch = +refs/heads/*:refs/remotes/origin/* [lfs] repositoryformatversion = 0
Open service 49.12.43.166:443 · iss-gut-leipzig.appcms-lm.droidhosting.de
2026-01-11 16:09
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Jan 2026 16:09:36 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=6b7d5ea649af95c9eb99ed6b1cf33e54; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:80 · iss-gut-leipzig.appcms-lm.droidhosting.de
2026-01-11 16:09
HTTP/1.1 308 Permanent Redirect Connection: close Location: https://iss-gut-leipzig.appcms-lm.droidhosting.de/ Server: Caddy Date: Sun, 11 Jan 2026 16:10:34 GMT Content-Length: 0
Open service 2a01:4f8:c013:acbf::1:80 · iss-gut-leipzig.appcms-lm.droidhosting.de
2026-01-11 16:09
HTTP/1.1 308 Permanent Redirect Connection: close Location: https://iss-gut-leipzig.appcms-lm.droidhosting.de/ Server: Caddy Date: Sun, 11 Jan 2026 16:10:33 GMT Content-Length: 0
Open service 2a01:4f8:c013:acbf::1:443 · iss-gut-leipzig.appcms-lm.droidhosting.de
2026-01-11 16:09
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Sun, 11 Jan 2026 16:09:35 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=99d4c2ebea4aeea8faae60b862a888db; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · iss-gut-leipzig.appcms-lm.droidhosting.de
2026-01-10 21:03
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Sat, 10 Jan 2026 21:03:55 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=08ae933c65fc07c0e30332ca3b7fc779; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · iss-gut-leipzig.appcms-lm.droidhosting.de
2026-01-09 21:10
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Fri, 09 Jan 2026 21:10:51 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=dbcd8dfd6883a25a2e7845c715107fb6; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · iss-gut-leipzig.appcms-lm.droidhosting.de
2026-01-08 21:15
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Thu, 08 Jan 2026 21:15:22 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=7af43672bc0d6e57280eae97c7ef51e2; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · iss-gut-leipzig.appcms-lm.droidhosting.de
2026-01-07 21:08
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Wed, 07 Jan 2026 21:08:37 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=8f26f667ab639eadfa23bf38371d6a40; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · iss-gut-leipzig.appcms-lm.droidhosting.de
2026-01-06 21:04
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Tue, 06 Jan 2026 21:04:04 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=e50aeb2246081c2132ed6c8361fb2515; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · iss-gut-leipzig.appcms-lm.droidhosting.de
2026-01-03 21:12
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Sat, 03 Jan 2026 21:12:08 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=335be751c9f03fafee33782f97403839; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · iss-gut-leipzig.appcms-lm.droidhosting.de
2026-01-02 21:20
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Fri, 02 Jan 2026 21:20:35 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=ac7cb51cbb2d61ba1b8f48fc3f471a11; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · iss-gut-leipzig.appcms-lm.droidhosting.de
2026-01-01 21:28
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Thu, 01 Jan 2026 21:28:28 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=b6698823c3826d691fdae1061a5a9cdc; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · iss-gut-leipzig.appcms-lm.droidhosting.de
2025-12-31 21:24
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Wed, 31 Dec 2025 21:24:55 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=d70895cbc943f5cb589527ef121a8ac4; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · iss-gut-leipzig.appcms-lm.droidhosting.de
2025-12-30 21:24
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Tue, 30 Dec 2025 21:24:40 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=4b4e3308ed3c0a17e3997760a03b80d8; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · iss-gut-leipzig.appcms-lm.droidhosting.de
2025-12-22 21:34
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Mon, 22 Dec 2025 21:34:44 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=09cedf58e26fa27b3a5f139bf472f036; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · iss-gut-leipzig.appcms-lm.droidhosting.de
2025-12-20 23:49
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Sat, 20 Dec 2025 23:49:30 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=8dd5fe71ac8b7c0ef645abaae894e5b6; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · iss-gut-leipzig.appcms-lm.droidhosting.de
2025-12-18 23:49
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Thu, 18 Dec 2025 23:49:32 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=837e10011f77d6d331810650d9d3c97c; path=/ Connection: close Transfer-Encoding: chunked