LeakIX - Host sbm.lukiman.com

Domain sbm.lukiman.com

Indonesia

INDO Internet, PT

Ubuntu

Software information

nginx nginx 1.18.0

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 202.159.30.243
Domain: sbm.lukiman.com
Port: 8443
URL: https://sbm.lukiman.com:8443

First seen 2025-10-14 21:45
Last seen 2026-01-13 15:46
Open for 90 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-13 15:46
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 202.159.30.243
Domain: sbm.lukiman.com
Port: 443
URL: https://sbm.lukiman.com

First seen 2025-09-03 00:46
Last seen 2026-01-13 15:46
Open for 132 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522d03c7470
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/steelytoe/exoduz.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2026-01-13 15:46
  
  264 Bytes
Create report

Open service 202.159.30.243:8443 · sbm.lukiman.com

2026-01-09 23:13

HTTP/1.1 302 Found
location: http://sbm.lukiman.com/manager
content-length: 0
date: Fri, 09 Jan 2026 23:13:39 GMT
strict-transport-security: max-age=15768000
x-robots-tag: noindex
connection: close

Found 2026-01-09 by HttpPlugin

Create report

Open service 202.159.30.243:443 · sbm.lukiman.com

2026-01-09 15:17

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 09 Jan 2026 15:17:15 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: yamaha3sid=f5db0612756eb47ffa7b42d3739d75ec; path=/
Vary: Accept-Encoding

Page title:  Web

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
    <head>
        <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
        <title> Web</title>
        <link href="css/eXoduz.css" rel="stylesheet" type="text/css"/>
        <link href="css/blueGray.css" rel="stylesheet" type="text/css"/>
        <!-- For validation engine
        <link rel="stylesheet" href="css/validationEngine.jquery.css" type="text/css"/>
        <script type="text/javascript" src="scripts/jquery.validationEngine-en.js"></script>
        <script type="text/javascript" src="scripts/jquery.validationEngine.js"></script>
        -->
        <!--[if lt IE 7]>
        <link href="css/eXoduz.IE6.css" rel="stylesheet" type="text/css"/><![endif]-->
        <!--[if webkit]>
        <link href="css/eXoduz.webkit.css" rel="stylesheet" type="text/css"/><![endif]-->
        <link href="css/autocomplete.css" rel="stylesheet" type="text/css"/>
        <script type="text/javascript" src="scripts/jquery.min.js"></script>
        <script type="text/javascript" src="scripts/jquery.menu.js"></script>
        <script type="text/javascript" src="scripts/eXoduz.top.js"></script>
        <script type="text/javascript" src="scripts/eXoduz.validate.js"></script>
        <script type="text/javascript" src="scripts/jquery.nyroModal-1.5.2.js"></script>
        <script type="text/javascript">var paramAutoComplete = 'common';</script>
        <script src="scripts/jquery.autocomplete.js" type="text/javascript"></script>
        <script src="scripts/jqDnR.js" type="text/javascript"></script>
        <script src="scripts/strophe.min.js" type="text/javascript"></script>
        <style>
            .autocomplete {background: #fff;color: #000;}
            .companySelect {right: 25px;width: 300px;}
            #slHeadComp {width: 282px;}
            #btnShowCommon {background: #fff url(images/plus.png);background-color: #fff;height: 16px;width: 16px;float: right;}
        </style>
    </head>
    <body>
        <div class="header">
            <div class="exoduz"><span></span></div>
            <div class="comp">
                <div class="allignment">
                    <div id="deco1"></div>
                    <div id="deco2"></div>
                    <img src="images/default/logo.png"/>
                    <div class="companyDetails">
                        <div class="compName"></div>
                        <div class="compInfo">&nbsp;</div>
                    </div>
                </div>
            </div>
        </div>
        <div class="menu"></div>
        <div class="headDivider"></div>
        <div class="leftDock"></div>
        <div class="rightDock"></div>
        <div class="menu intro"></div>
        <div class="headDivider"></div>
        <div class="leftDock">
            <ul id="dock">
                <li id="info">
                    <ul class="free">
                        <li class="head"> Info</li>
                        <li><a class="eInfo" target="_blank" href=""><span></span></a>
                        </li>
                    </ul>
                </li>
            </ul>
        </div>
        <div class="rightDock">
            <div class="langSelector">
                <a href="?langId=id" title="Bahasa Indonesia" class="langButton">ID</a>
                <a href="?langId=en" title="English" class="langButton">EN</a>
                <!--<a href="?langId=jw" title="Basa Jawa" class="langButton">JW</a>-->
            </div>
        </div>

        <!-- MULAI BADAN HALAMAN DISINI !!!! -->
        <div class="main">
            <div id="content">
<div class="event"></div>
<div id="loginWrap">
    <div class="headTitle"><div>Login</div></div>
    <div class="formWrap">
        <form id="formLogin" name="formLogin" method="post" action="login_accept.php">
            <label>User ID</label>
            <input type="text" name="txtUserId" id="txtUserId" tabindex="1" />
            <label>Password</label>
            <i

Found 2026-01-09 by HttpPlugin

Create report

Open service 202.159.30.243:80 · sbm.lukiman.com

2026-01-06 16:16

HTTP/1.1 308 Permanent Redirect
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 06 Jan 2026 16:16:59 GMT
Content-Type: text/html
Content-Length: 180
Connection: close
Location: https://sbm.lukiman.com/

Page title: 308 Permanent Redirect

<html>
<head><title>308 Permanent Redirect</title></head>
<body>
<center><h1>308 Permanent Redirect</h1></center>
<hr><center>nginx/1.18.0 (Ubuntu)</center>
</body>
</html>

Found 2026-01-06 by HttpPlugin

Create report

Open service 202.159.30.243:8443 · sbm.lukiman.com

2026-01-06 16:16

HTTP/1.1 302 Found
location: http://sbm.lukiman.com/manager
content-length: 0
date: Tue, 06 Jan 2026 16:16:59 GMT
strict-transport-security: max-age=15768000
x-robots-tag: noindex
connection: close

Found 2026-01-06 by HttpPlugin

Create report

Open service 202.159.30.243:443 · sbm.lukiman.com

2026-01-06 16:16

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 06 Jan 2026 16:17:00 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: yamaha3sid=c9e78d61c306b9f5342696f761052fb4; path=/
Vary: Accept-Encoding

Page title:  Web

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
    <head>
        <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
        <title> Web</title>
        <link href="css/eXoduz.css" rel="stylesheet" type="text/css"/>
        <link href="css/blueGray.css" rel="stylesheet" type="text/css"/>
        <!-- For validation engine
        <link rel="stylesheet" href="css/validationEngine.jquery.css" type="text/css"/>
        <script type="text/javascript" src="scripts/jquery.validationEngine-en.js"></script>
        <script type="text/javascript" src="scripts/jquery.validationEngine.js"></script>
        -->
        <!--[if lt IE 7]>
        <link href="css/eXoduz.IE6.css" rel="stylesheet" type="text/css"/><![endif]-->
        <!--[if webkit]>
        <link href="css/eXoduz.webkit.css" rel="stylesheet" type="text/css"/><![endif]-->
        <link href="css/autocomplete.css" rel="stylesheet" type="text/css"/>
        <script type="text/javascript" src="scripts/jquery.min.js"></script>
        <script type="text/javascript" src="scripts/jquery.menu.js"></script>
        <script type="text/javascript" src="scripts/eXoduz.top.js"></script>
        <script type="text/javascript" src="scripts/eXoduz.validate.js"></script>
        <script type="text/javascript" src="scripts/jquery.nyroModal-1.5.2.js"></script>
        <script type="text/javascript">var paramAutoComplete = 'common';</script>
        <script src="scripts/jquery.autocomplete.js" type="text/javascript"></script>
        <script src="scripts/jqDnR.js" type="text/javascript"></script>
        <script src="scripts/strophe.min.js" type="text/javascript"></script>
        <style>
            .autocomplete {background: #fff;color: #000;}
            .companySelect {right: 25px;width: 300px;}
            #slHeadComp {width: 282px;}
            #btnShowCommon {background: #fff url(images/plus.png);background-color: #fff;height: 16px;width: 16px;float: right;}
        </style>
    </head>
    <body>
        <div class="header">
            <div class="exoduz"><span></span></div>
            <div class="comp">
                <div class="allignment">
                    <div id="deco1"></div>
                    <div id="deco2"></div>
                    <img src="images/default/logo.png"/>
                    <div class="companyDetails">
                        <div class="compName"></div>
                        <div class="compInfo">&nbsp;</div>
                    </div>
                </div>
            </div>
        </div>
        <div class="menu"></div>
        <div class="headDivider"></div>
        <div class="leftDock"></div>
        <div class="rightDock"></div>
        <div class="menu intro"></div>
        <div class="headDivider"></div>
        <div class="leftDock">
            <ul id="dock">
                <li id="info">
                    <ul class="free">
                        <li class="head"> Info</li>
                        <li><a class="eInfo" target="_blank" href=""><span></span></a>
                        </li>
                    </ul>
                </li>
            </ul>
        </div>
        <div class="rightDock">
            <div class="langSelector">
                <a href="?langId=id" title="Bahasa Indonesia" class="langButton">ID</a>
                <a href="?langId=en" title="English" class="langButton">EN</a>
                <!--<a href="?langId=jw" title="Basa Jawa" class="langButton">JW</a>-->
            </div>
        </div>

        <!-- MULAI BADAN HALAMAN DISINI !!!! -->
        <div class="main">
            <div id="content">
<div class="event"></div>
<div id="loginWrap">
    <div class="headTitle"><div>Login</div></div>
    <div class="formWrap">
        <form id="formLogin" name="formLogin" method="post" action="login_accept.php">
            <label>User ID</label>
            <input type="text" name="txtUserId" id="txtUserId" tabindex="1" />
            <label>Password</label>
            <i

Found 2026-01-06 by HttpPlugin

Create report

Open service 202.159.30.243:443 · sbm.lukiman.com

2026-01-02 23:14

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 02 Jan 2026 23:14:40 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: yamaha3sid=968cca306f0c4fcf283ce015dc93fa67; path=/
Vary: Accept-Encoding

Page title:  Web

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
    <head>
        <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
        <title> Web</title>
        <link href="css/eXoduz.css" rel="stylesheet" type="text/css"/>
        <link href="css/blueGray.css" rel="stylesheet" type="text/css"/>
        <!-- For validation engine
        <link rel="stylesheet" href="css/validationEngine.jquery.css" type="text/css"/>
        <script type="text/javascript" src="scripts/jquery.validationEngine-en.js"></script>
        <script type="text/javascript" src="scripts/jquery.validationEngine.js"></script>
        -->
        <!--[if lt IE 7]>
        <link href="css/eXoduz.IE6.css" rel="stylesheet" type="text/css"/><![endif]-->
        <!--[if webkit]>
        <link href="css/eXoduz.webkit.css" rel="stylesheet" type="text/css"/><![endif]-->
        <link href="css/autocomplete.css" rel="stylesheet" type="text/css"/>
        <script type="text/javascript" src="scripts/jquery.min.js"></script>
        <script type="text/javascript" src="scripts/jquery.menu.js"></script>
        <script type="text/javascript" src="scripts/eXoduz.top.js"></script>
        <script type="text/javascript" src="scripts/eXoduz.validate.js"></script>
        <script type="text/javascript" src="scripts/jquery.nyroModal-1.5.2.js"></script>
        <script type="text/javascript">var paramAutoComplete = 'common';</script>
        <script src="scripts/jquery.autocomplete.js" type="text/javascript"></script>
        <script src="scripts/jqDnR.js" type="text/javascript"></script>
        <script src="scripts/strophe.min.js" type="text/javascript"></script>
        <style>
            .autocomplete {background: #fff;color: #000;}
            .companySelect {right: 25px;width: 300px;}
            #slHeadComp {width: 282px;}
            #btnShowCommon {background: #fff url(images/plus.png);background-color: #fff;height: 16px;width: 16px;float: right;}
        </style>
    </head>
    <body>
        <div class="header">
            <div class="exoduz"><span></span></div>
            <div class="comp">
                <div class="allignment">
                    <div id="deco1"></div>
                    <div id="deco2"></div>
                    <img src="images/default/logo.png"/>
                    <div class="companyDetails">
                        <div class="compName"></div>
                        <div class="compInfo">&nbsp;</div>
                    </div>
                </div>
            </div>
        </div>
        <div class="menu"></div>
        <div class="headDivider"></div>
        <div class="leftDock"></div>
        <div class="rightDock"></div>
        <div class="menu intro"></div>
        <div class="headDivider"></div>
        <div class="leftDock">
            <ul id="dock">
                <li id="info">
                    <ul class="free">
                        <li class="head"> Info</li>
                        <li><a class="eInfo" target="_blank" href=""><span></span></a>
                        </li>
                    </ul>
                </li>
            </ul>
        </div>
        <div class="rightDock">
            <div class="langSelector">
                <a href="?langId=id" title="Bahasa Indonesia" class="langButton">ID</a>
                <a href="?langId=en" title="English" class="langButton">EN</a>
                <!--<a href="?langId=jw" title="Basa Jawa" class="langButton">JW</a>-->
            </div>
        </div>

        <!-- MULAI BADAN HALAMAN DISINI !!!! -->
        <div class="main">
            <div id="content">
<div class="event"></div>
<div id="loginWrap">
    <div class="headTitle"><div>Login</div></div>
    <div class="formWrap">
        <form id="formLogin" name="formLogin" method="post" action="login_accept.php">
            <label>User ID</label>
            <input type="text" name="txtUserId" id="txtUserId" tabindex="1" />
            <label>Password</label>
            <i

Found 2026-01-02 by HttpPlugin

Create report

Open service 202.159.30.243:8443 · sbm.lukiman.com

2026-01-02 18:48

HTTP/1.1 302 Found
location: http://sbm.lukiman.com/manager
content-length: 0
date: Fri, 02 Jan 2026 18:48:02 GMT
strict-transport-security: max-age=15768000
x-robots-tag: noindex
connection: close

Found 2026-01-02 by HttpPlugin

Create report

Open service 202.159.30.243:80 · sbm.lukiman.com

2025-12-30 16:46

HTTP/1.1 308 Permanent Redirect
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 30 Dec 2025 16:46:44 GMT
Content-Type: text/html
Content-Length: 180
Connection: close
Location: https://sbm.lukiman.com/

Page title: 308 Permanent Redirect

<html>
<head><title>308 Permanent Redirect</title></head>
<body>
<center><h1>308 Permanent Redirect</h1></center>
<hr><center>nginx/1.18.0 (Ubuntu)</center>
</body>
</html>

Found 2025-12-30 by HttpPlugin

Create report

Open service 202.159.30.243:443 · sbm.lukiman.com

2025-12-30 16:46

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 30 Dec 2025 16:46:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: yamaha3sid=2140187ff7c0b7350c1210f1e742b43f; path=/
Vary: Accept-Encoding

Page title:  Web

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
    <head>
        <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
        <title> Web</title>
        <link href="css/eXoduz.css" rel="stylesheet" type="text/css"/>
        <link href="css/blueGray.css" rel="stylesheet" type="text/css"/>
        <!-- For validation engine
        <link rel="stylesheet" href="css/validationEngine.jquery.css" type="text/css"/>
        <script type="text/javascript" src="scripts/jquery.validationEngine-en.js"></script>
        <script type="text/javascript" src="scripts/jquery.validationEngine.js"></script>
        -->
        <!--[if lt IE 7]>
        <link href="css/eXoduz.IE6.css" rel="stylesheet" type="text/css"/><![endif]-->
        <!--[if webkit]>
        <link href="css/eXoduz.webkit.css" rel="stylesheet" type="text/css"/><![endif]-->
        <link href="css/autocomplete.css" rel="stylesheet" type="text/css"/>
        <script type="text/javascript" src="scripts/jquery.min.js"></script>
        <script type="text/javascript" src="scripts/jquery.menu.js"></script>
        <script type="text/javascript" src="scripts/eXoduz.top.js"></script>
        <script type="text/javascript" src="scripts/eXoduz.validate.js"></script>
        <script type="text/javascript" src="scripts/jquery.nyroModal-1.5.2.js"></script>
        <script type="text/javascript">var paramAutoComplete = 'common';</script>
        <script src="scripts/jquery.autocomplete.js" type="text/javascript"></script>
        <script src="scripts/jqDnR.js" type="text/javascript"></script>
        <script src="scripts/strophe.min.js" type="text/javascript"></script>
        <style>
            .autocomplete {background: #fff;color: #000;}
            .companySelect {right: 25px;width: 300px;}
            #slHeadComp {width: 282px;}
            #btnShowCommon {background: #fff url(images/plus.png);background-color: #fff;height: 16px;width: 16px;float: right;}
        </style>
    </head>
    <body>
        <div class="header">
            <div class="exoduz"><span></span></div>
            <div class="comp">
                <div class="allignment">
                    <div id="deco1"></div>
                    <div id="deco2"></div>
                    <img src="images/default/logo.png"/>
                    <div class="companyDetails">
                        <div class="compName"></div>
                        <div class="compInfo">&nbsp;</div>
                    </div>
                </div>
            </div>
        </div>
        <div class="menu"></div>
        <div class="headDivider"></div>
        <div class="leftDock"></div>
        <div class="rightDock"></div>
        <div class="menu intro"></div>
        <div class="headDivider"></div>
        <div class="leftDock">
            <ul id="dock">
                <li id="info">
                    <ul class="free">
                        <li class="head"> Info</li>
                        <li><a class="eInfo" target="_blank" href=""><span></span></a>
                        </li>
                    </ul>
                </li>
            </ul>
        </div>
        <div class="rightDock">
            <div class="langSelector">
                <a href="?langId=id" title="Bahasa Indonesia" class="langButton">ID</a>
                <a href="?langId=en" title="English" class="langButton">EN</a>
                <!--<a href="?langId=jw" title="Basa Jawa" class="langButton">JW</a>-->
            </div>
        </div>

        <!-- MULAI BADAN HALAMAN DISINI !!!! -->
        <div class="main">
            <div id="content">
<div class="event"></div>
<div id="loginWrap">
    <div class="headTitle"><div>Login</div></div>
    <div class="formWrap">
        <form id="formLogin" name="formLogin" method="post" action="login_accept.php">
            <label>User ID</label>
            <input type="text" name="txtUserId" id="txtUserId" tabindex="1" />
            <label>Password</label>
            <i

Found 2025-12-30 by HttpPlugin

Create report

Open service 202.159.30.243:8443 · sbm.lukiman.com

2025-12-30 16:46

HTTP/1.1 302 Found
location: http://sbm.lukiman.com/manager
content-length: 0
date: Tue, 30 Dec 2025 16:46:44 GMT
strict-transport-security: max-age=15768000
x-robots-tag: noindex
connection: close

Found 2025-12-30 by HttpPlugin