LeakIX - Host jalansobat.com

Domain jalansobat.com

The Netherlands

CLOUDFLARENET

Software information

cloudflare

tcp/443 tcp/80

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.

IP: 188.114.97.3
Domain: jalansobat.com
Port: 443
URL: https://jalansobat.com

First seen 2024-03-01 05:02
Last seen 2024-05-12 19:36
Open for 72 days

Severity: critical
Fingerprint: 2580fa947178c88c8f88f4f64b143e4f192660cba918840203659005645536a4

[init]
	defaultBranch = none
[fetch]
	recurseSubmodules = false
[http "https://gitlab.com"]
	sslCAInfo = /home/gitlab-runner/builds/W1z4dNCUH/0/lumoshive/project/gplatform/feature/landing-page.tmp/CI_SERVER_TLS_CA_FILE
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://gitlab-ci-token:glcbt-65_hszK_Tojpv9Cy6sX_RzF@gitlab.com/lumoshive/project/gplatform/feature/landing-page.git
	fetch = +refs/heads/*:refs/remotes/origin/*

Found on 2024-05-12 19:36

499 Bytes

Severity: critical
Fingerprint: 2580fa947178c88c8f88f4f64b143e4f192660cba91884020365900590bce00e

[init]
	defaultBranch = none
[fetch]
	recurseSubmodules = false
[http "https://gitlab.com"]
	sslCAInfo = /home/gitlab-runner/builds/W1z4dNCUH/0/lumoshive/project/gplatform/feature/landing-page.tmp/CI_SERVER_TLS_CA_FILE
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://gitlab-ci-token:glcbt-65_xq_AZWDTaEqL32zdxv7D@gitlab.com/lumoshive/project/gplatform/feature/landing-page.git
	fetch = +refs/heads/*:refs/remotes/origin/*

Found on 2024-03-21 11:51

499 Bytes

Severity: critical
Fingerprint: 2580fa947178c88c8f88f4f64b143e4f192660cba9188402036590050a8937b0

[init]
	defaultBranch = none
[fetch]
	recurseSubmodules = false
[http "https://gitlab.com"]
	sslCAInfo = /home/gitlab-runner/builds/W1z4dNCUH/0/lumoshive/project/gplatform/feature/landing-page.tmp/CI_SERVER_TLS_CA_FILE
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://gitlab-ci-token:glcbt-65_8pFc1L-irAUR5SCLaNcN@gitlab.com/lumoshive/project/gplatform/feature/landing-page.git
	fetch = +refs/heads/*:refs/remotes/origin/*

Found on 2024-03-01 05:02

499 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.

IP: 188.114.97.3
Domain: jalansobat.com
Port: 80
URL: http://jalansobat.com

First seen 2024-03-01 05:02
Last seen 2024-03-01 05:02
- Severity: critical
  Fingerprint: 2580fa947178c88c8f88f4f64b143e4f192660cba9188402036590050a8937b0
```
[init]
	defaultBranch = none
[fetch]
	recurseSubmodules = false
[http "https://gitlab.com"]
	sslCAInfo = /home/gitlab-runner/builds/W1z4dNCUH/0/lumoshive/project/gplatform/feature/landing-page.tmp/CI_SERVER_TLS_CA_FILE
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://gitlab-ci-token:glcbt-65_8pFc1L-irAUR5SCLaNcN@gitlab.com/lumoshive/project/gplatform/feature/landing-page.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-03-01 05:02
  
  499 Bytes
Create report

Open service 188.114.97.3:443 · jalansobat.com

2024-05-12 19:36

HTTP/1.1 200 OK
Date: Sun, 12 May 2024 19:36:04 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Last-Modified: Thu, 11 Jan 2024 05:20:03 GMT
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZC2QUDM5F%2FzDYXhrm8hHADEYXGCoZJGfuAJanbnY0FIOUMdOD2PjpLsJVzrxRRX%2BHOe3qw4yDVAsjW%2BOUTlR5Rsajf%2BwQjJrg1S9eut7%2BS%2BnkF3XGBh0y%2BlxHf32LR1d%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 882cdb02b9dc9f3a-FRA
alt-svc: h3=":443"; ma=86400


<!DOCTYPE html>
<html lang="en">

<head>
  <meta charset="UTF-8" />
  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
  <title class="page-title"></title>
  <link class="favicon" rel="icon" type="image/png" sizes="32x32" href="" />
  <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.min.css" rel="stylesheet"
    integrity="sha384-T3c6CoIi6uLrA9TneNEoa7RxnatzjcDSCmG1MXxSR1GAsXEV/Dwwykc2MPK8M2HN" crossorigin="anonymous" />
  <link rel="stylesheet" href="index.css" />
  <script src="https://code.jquery.com/jquery-3.6.0.min.js"
    integrity="sha256-/xUj+3OJU5yExlq6GSYGSHk7tPXikynS7ogEvDej/m4=" crossorigin="anonymous"></script>
  <script src="index.js"></script>
    <!-- Meta Pixel Code -->
    <div id="lp_script"></div>
    <!-- End Meta Pixel Code -->
</head>

<body id="lp_body">
  <!-- Navigation Bar -->
  <nav id="lp_topbar" class="navbar">
    <div class="container justify-content-center">
      <a class="navbar-brand" href="#">
        <img src="" alt="logo" class="w-100 h-100" />
      </a>
    </div>
  </nav>
  <!-- End of Navigation Bar -->

  <div id="top_banner">
    <img src="" alt="top-banner-img" class="img-fluid d-block m-auto">
  </div>

  <div id="right_banner" class="d-none d-lg-block">
    <img src="" alt="right-banner-img" class="img-fluid">
  </div>

  <div id="left_banner" class="d-none d-lg-block">
    <img src="" alt="left-banner-img" class="img-fluid">
  </div>

  <div class="h-100 p-5">
    <div id="lp_container" class="container rounded p-4">
      <div class="row">
        <h1 class="text-register">Daftar</h1>
      </div>
      <form method="POST" onsubmit="event.preventDefault(); return Register()">
        <div class="mb-3">
          <label for="register_username" class="form-label">Nama Pengguna</label>
          <input type="text" class="form-control" id="register_username" onchange="checkUserExist()" required />
          <div id="register_username_warning" class="form-text text-danger d-none"></div>
        </div>
        <div class="mb-3">
          <label for="register_password" class="form-label">Password</label>
          <input type="password" name="password" class="form-control" id="register_password" onkeyup="passwordPattern()"
            onchange="passwordValidation()" required />
          <div id="password-match" class="form-text text-danger"></div>
        </div>
        <div class="mb-3">
          <label for="register_password_retype" class="form-label">Ulangi Password</label>
          <input type="password" class="form-control" name="retypePassword" id="register_password_retype"
            onchange="passwordValidation()" />
          <div id="password-validation" class="form-text text-danger"></div>
        </div>
        <div class="mb-3">
          <label for="register_phone_number" class="form-label">Nomor Telepon</label>
          <div class="d-flex">
            <select name="" id="register_phone_format">
              <option value="62">+62</option>
            </select>
            <input type="text" class="form-control" id="register_phone_number" placeholder="ex: 8123456"
              name="register-phone" pattern="[0-9]{9,12}" onkeyup="return phoneNumberValidation(event)" required />
          </div>
          <div id="phone_number_validation" class="form-text text-danger"></div>
          <div id="phone_number_exist" class="form-text text-danger"></div>
        </div>
        <div id="bank_form_input">
          <div id="" class="mb-3">
            <label class="form-label">Bank</label>
            <select onchange="changeMaxInput()" name="" id="register_bank_selection" class="form-control">
              <option value="">- Pilih Bank Anda -</option>
            </select>
          </div>
          <div id="" class="mb-3">
            <label class="form-label">Bank Account Name</label>
            <input type="text" class="form-control" name="register-bank-account-name" id="register_bank_account_name"
              onkeyup="bankAccountNamePattern()" />
            <div id="register_bank_account_name_warning" cla

Found 2 days ago by HttpPlugin