LeakIX - Host qcmofibl.ml

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.24.112
Domain: qcmofibl.ml
Port: 443
URL: https://qcmofibl.ml

First seen 2023-06-26 22:05

Severity: medium
Fingerprint: 5f32cf5d6962f09cb1c4b1dfb1c4b1df8709835819175ca7f5d35fc9eb12e6b0

Found 61 files trough .DS_Store spidering:

/.git
/.gitignore
/assets
/assets/css
/assets/img
/assets/img/character
/assets/img/character/0
/assets/img/character/0/down
/assets/img/character/0/left
/assets/img/character/0/right
/assets/img/character/0/right/2.png
/assets/img/character/0/up
/assets/img/character/1
/assets/img/character/1/down
/assets/img/character/1/down/0.png
/assets/img/character/1/down/2.png
/assets/img/character/1/down/tile_0240.png
/assets/img/character/1/left
/assets/img/character/1/left/0.png
/assets/img/character/1/left/1.png
/assets/img/character/1/left/2.png
/assets/img/character/1/right
/assets/img/character/1/right/0.png
/assets/img/character/1/right/1.png
/assets/img/character/1/right/2.png
/assets/img/character/1/up
/assets/img/character/1/up/0.png
/assets/img/character/1/up/1.png
/assets/img/character/1/up/2.png
/assets/img/character/2
/assets/img/character/2/down
/assets/img/character/2/left
/assets/img/character/2/right
/assets/img/character/2/up
/assets/img/character/3
/assets/img/character/3/down
/assets/img/character/3/left
/assets/img/character/3/right
/assets/img/character/3/up
/assets/img/character/4
/assets/img/character/4/down
/assets/img/character/4/left
/assets/img/character/4/right
/assets/img/character/4/up
/assets/img/crate.png
/assets/img/floor.png
/assets/img/target.png
/assets/img/wall.png
/assets/img/wall2.png
/assets/js
/assets/sounds
/assets/sounds/footStep.mp3
/assets/sounds/nextLevel.mp3
/assets/sounds/win.mp3
/assets/vendor
/assets/vendor/notiflix
/assets/vendor/notiflix/notiflix-confirm-aio-3.2.6.min.js
/assets/vendor/notiflix/notiflix-notify-aio-3.2.6.min.js
/assets/vendor/notiflix/notiflix-report-aio-3.2.6.min.js
/index.html
/README.md

Found on 2023-06-26 22:05

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 172.67.218.90
Domain: qcmofibl.ml
Port: 80
URL: http://qcmofibl.ml

First seen 2023-06-26 22:05

Severity: medium
Fingerprint: 5f32cf5d6962f09cb1c4b1dfb1c4b1df8709835819175ca7f5d35fc9eb12e6b0

Found 61 files trough .DS_Store spidering:

/.git
/.gitignore
/assets
/assets/css
/assets/img
/assets/img/character
/assets/img/character/0
/assets/img/character/0/down
/assets/img/character/0/left
/assets/img/character/0/right
/assets/img/character/0/right/2.png
/assets/img/character/0/up
/assets/img/character/1
/assets/img/character/1/down
/assets/img/character/1/down/0.png
/assets/img/character/1/down/2.png
/assets/img/character/1/down/tile_0240.png
/assets/img/character/1/left
/assets/img/character/1/left/0.png
/assets/img/character/1/left/1.png
/assets/img/character/1/left/2.png
/assets/img/character/1/right
/assets/img/character/1/right/0.png
/assets/img/character/1/right/1.png
/assets/img/character/1/right/2.png
/assets/img/character/1/up
/assets/img/character/1/up/0.png
/assets/img/character/1/up/1.png
/assets/img/character/1/up/2.png
/assets/img/character/2
/assets/img/character/2/down
/assets/img/character/2/left
/assets/img/character/2/right
/assets/img/character/2/up
/assets/img/character/3
/assets/img/character/3/down
/assets/img/character/3/left
/assets/img/character/3/right
/assets/img/character/3/up
/assets/img/character/4
/assets/img/character/4/down
/assets/img/character/4/left
/assets/img/character/4/right
/assets/img/character/4/up
/assets/img/crate.png
/assets/img/floor.png
/assets/img/target.png
/assets/img/wall.png
/assets/img/wall2.png
/assets/js
/assets/sounds
/assets/sounds/footStep.mp3
/assets/sounds/nextLevel.mp3
/assets/sounds/win.mp3
/assets/vendor
/assets/vendor/notiflix
/assets/vendor/notiflix/notiflix-confirm-aio-3.2.6.min.js
/assets/vendor/notiflix/notiflix-notify-aio-3.2.6.min.js
/assets/vendor/notiflix/notiflix-report-aio-3.2.6.min.js
/index.html
/README.md

Found on 2023-06-26 22:05

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 172.67.218.90
Domain: qcmofibl.ml
Port: 443
URL: https://qcmofibl.ml

First seen 2023-06-26 22:05

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522a1352dbf

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	ignorecase = true
	precomposeunicode = true
[remote "origin"]
	url = https://ytrack.learn.ynov.com/git/bmayeul/Boxxle.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "develop"]
	remote = origin
	merge = refs/heads/develop
[gitflow "branch"]
	master = master
	develop = develop
[gitflow "prefix"]
	feature = feature/
	release = release/
	hotfix = hotfix/
	support = support/
	versiontag = 
[pull]
	rebase = false

Found on 2023-06-26 22:05

576 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 172.67.218.90
Domain: qcmofibl.ml
Port: 80
URL: http://qcmofibl.ml

First seen 2023-06-26 22:05

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522a1352dbf

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	ignorecase = true
	precomposeunicode = true
[remote "origin"]
	url = https://ytrack.learn.ynov.com/git/bmayeul/Boxxle.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "develop"]
	remote = origin
	merge = refs/heads/develop
[gitflow "branch"]
	master = master
	develop = develop
[gitflow "prefix"]
	feature = feature/
	release = release/
	hotfix = hotfix/
	support = support/
	versiontag = 
[pull]
	rebase = false

Found on 2023-06-26 22:05

576 Bytes

Create report

Domain qcmofibl.ml

United States

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Git configuration and history exposed

Git configuration and history exposed

Domain summary

IP summary