.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09cdc57c57adc57c57a28063be71c13d2af09307647e453d70d
Found 19 files trough .DS_Store spidering: /comments /comments/feed /favicon.ico /feed /img /wp-content /wp-content/plugins /wp-content/plugins/contact-form-7 /wp-content/plugins/contact-form-7/images /wp-content/plugins/contact-form-7/includes /wp-content/plugins/cookie-notice /wp-content/plugins/slimpack /wp-content/plugins/video-embed-thumbnail-generator /wp-content/themes /wp-content/uploads /wp-includes /wp-includes/wlwmanifest.xml /wp-json /xmlrpc.php
Severity: low
Fingerprint: 5f32cf5d6962f09cdafa5447dafa5447d5175b40a93382b49b1335e40f4e1169
Found 18 files trough .DS_Store spidering: /comments /comments/feed /favicon.ico /feed /img /wp-content /wp-content/plugins /wp-content/plugins/contact-form-7 /wp-content/plugins/contact-form-7/images /wp-content/plugins/contact-form-7/includes /wp-content/plugins/cookie-notice /wp-content/plugins/slimpack /wp-content/plugins/video-embed-thumbnail-generator /wp-content/themes /wp-content/uploads /wp-includes /wp-json /xmlrpc.php
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09cdc57c57adc57c57a28063be71c13d2af09307647e453d70d
Found 19 files trough .DS_Store spidering: /comments /comments/feed /favicon.ico /feed /img /wp-content /wp-content/plugins /wp-content/plugins/contact-form-7 /wp-content/plugins/contact-form-7/images /wp-content/plugins/contact-form-7/includes /wp-content/plugins/cookie-notice /wp-content/plugins/slimpack /wp-content/plugins/video-embed-thumbnail-generator /wp-content/themes /wp-content/uploads /wp-includes /wp-includes/wlwmanifest.xml /wp-json /xmlrpc.php
Severity: low
Fingerprint: 5f32cf5d6962f09cdafa5447dafa5447d5175b40a93382b49b1335e40f4e1169
Found 18 files trough .DS_Store spidering: /comments /comments/feed /favicon.ico /feed /img /wp-content /wp-content/plugins /wp-content/plugins/contact-form-7 /wp-content/plugins/contact-form-7/images /wp-content/plugins/contact-form-7/includes /wp-content/plugins/cookie-notice /wp-content/plugins/slimpack /wp-content/plugins/video-embed-thumbnail-generator /wp-content/themes /wp-content/uploads /wp-includes /wp-json /xmlrpc.php
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.
Severity: critical
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65225b3f5b3a
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://aallur1: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@github.com/VandaPharma/non-24.de.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.
Severity: critical
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65225b3f5b3a
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://aallur1: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@github.com/VandaPharma/non-24.de.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master