Domain lp.dandi.fr
France
-
Git configuration and history exposed
The following URL (usually
/.git/config) is publicly accessible and is leaking source code and repository configuration.First seen 2024-09-12 13:09
Last seen 2025-10-21 16:12
Open for 404 days-
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652231da152a[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [submodule] active = . [remote "origin"] url = /var/www/local/lp.dandi.fr.maas.webanyone.net/repo/. fetch = +refs/heads/*:refs/remotes/origin/* [submodule "mautic-whitelabeler"] url = https://github.com/nickian/mautic-whitelabeler.git
Found on 2025-10-21 16:12331 Bytes
-
-
Apache server-status page is publicly available
The server-status page (usually
/server-status) allows server administrators to find out how well their server is performing.This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
First seen 2024-09-10 15:37-
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb314b39dcb34b39dcb399b11824Apache Status Apache Server Status for lp.dandi.fr (via 127.0.0.1) Server Version: Apache/2.4.62 (Debian) Server MPM: event Server Built: 2024-07-18T05:29:16 Current Time: Tuesday, 10-Sep-2024 17:38:00 CEST Restart Time: Tuesday, 10-Sep-2024 17:37:29 CEST Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 31 seconds Server load: 5.66 4.64 4.24 Total accesses: 32 - Total Traffic: 10 kB - Total Duration: 2 CPU Usage: u0 s0 cu0 cs0 1.03 requests/sec - 330 B/second - 320 B/request - .0625 ms/request 1 requests currently being processed, 0 workers gracefully restarting, 49 idle workers SlotPIDStoppingConnections ThreadsAsync connections totalacceptingbusygracefulidlewritingkeep-aliveclosing 0584764no0yes0025000 1584765no0yes1024000 Sum200 1049000 _________________________W________________________.............. ................................................................ ...................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-05847640/1/1_ 0.0029000.00.000.00 127.0.0.1http/1.1localhost:8080OPTIONS / HTTP/1.0 0-05847640/1/1_ 0.0027000.00.000.00 127.0.0.1http/1.1localhost:8080OPTIONS / HTTP/1.0 0-05847640/1/1_ 0.0025000.00.000.00 127.0.0.1http/1.1localhost:8080OPTIONS / HTTP/1.0 0-05847640/1/1_ 0.0025000.00.000.00 127.0.0.1http/1.1localhost:8080OPTIONS / HTTP/1.0 0-05847640/1/1_ 0.007000.00.000.00 127.0.0.1http/1.1localhost:8080OPTIONS / HTTP/1.0 0-05847640/1/1_ 0.006000.00.000.00 127.0.0.1http/1.1localhost:8080OPTIONS / HTTP/1.0 0-05847640/1/1_ 0.005000.00.000.00 127.0.0.1http/1.1localhost:8080OPTIONS / HTTP/1.0 0-05847640/1/1_ 0.002000.00.000.00 127.0.0.1http/1.1localhost:8080OPTIONS / HTTP/1.0 0-05847640/1/1_ 0.003000.00.000.00 127.0.0.1http/1.1localhost:8080OPTIONS / HTTP/1.0 0-05847640/1/1_ 0.002000.00.000.00 127.0.0.1http/1.1lp.dandi.fr:8080GET / HTTP/1.1 0-05847640/1/1_ 0.000000.00.000.00 127.0.0.1http/1.1localhost:8080OPTIONS / HTTP/1.0 0-05847640/1/1_ 0.001000.00.000.00 127.0.0.1http/1.1localhost:8080OPTIONS / HTTP/1.0 0-05847640/1/1_ 0.000000.00.000.00 127.0.0.1http/1.1lp.dandi.fr:8080GET /v2/_catalog HTTP/1.1 1-05847651/2/2W 0.000000.00.000.00 127.0.0.1http/1.1lp.dandi.fr:8080GET /server-status HTTP/1.1 1-05847650/2/2_ 0.0027000.00.000.00 127.0.0.1http/1.1localhost:8080OPTIONS / HTTP/1.0 1-05847650/1/1_ 0.0025000.00.000.00 127.0.0.1http/1.1localhost:8080OPTIONS / HTTP/1.0 1-05847650/1/1_ 0.0016000.00.000.00 127.0.0.1http/1.1localhost:8080OPTIONS / HTTP/1.0 1-05847650/1/1_ 0.008000.00.000.00 127.0.0.1http/1.1localhost:8080OPTIONS / HTTP/1.0 1-05847650/1/1_ 0.004000.00.000.00 127.0.0.1http/1.1localhost:8080OPTIONS / HTTP/1.0 1-05847650/1/1_ 0.000000.00.000.00 127.0.0.1http/1.1lp.dandi.fr:8080GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor 1-05847650/1/1_ 0.002000.00.000.00 127.0.0.1http/1.1localhost:8080OPTIONS / HTTP/1.0 1-05847650/1/1_ 0.003000.00.000.00 127.0.0.1http/1.1lp.dandi.fr:8080GET / HTTP/1.1 1-05847650/1/1_ 0.001000.00.000.00 127.0.0.1http/1.1lp.dandi.fr:8080GET /.vscode/sftp.json HTTP/1.1 1-05847650/1/1_ 0.001000.00.000.00 127.0.0.1http/1.1lp.dandi.fr:8080GET /server HTTP/1.1 1-05847650/1/1_ 0.001000.00.000.00 127.0.0.1http/1.1lp.dandi.fr:8080GET /about HTTP/1.1 1-05847650/1/1_ 0.001000.00.000.00 127.0.0.1http/1.1lp.dandi.fr:8080GET /version HTTP/1.1 1-05847650/1/1_ 0.000000.00.000.00 127.0.0.1http/1.1localhost:8080OPTIONS / HTTP/1.0 1-05847650/1/1_ 0.004000.00.000.00 127.0.0.1http/1.1localhost:8080OPTIONS / HTTP/1.0 1-05847650/1/1_ 0.000000.00.000.00 127.0.0.1http/1.1lp.dandi.fr:8080GET /debug/default/view?panel=config HTTP/1.1 1-05847650/1/1_ 0.006000.00.000.00 127.0.0.1http/1.1localhost:8080OPTIONS / HTTP/1.0 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot Apache/2.4.62 (Debian) Server at lp.dandi.fr Port 80
Found on 2024-09-10 15:37
-