.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: high
Fingerprint: 5f32cf5d6962f09cee671e0bee671e0bb12912f9ed09088a7159c32983ab0d38
Found 72 files trough .DS_Store spidering: /.env /.git /.gitignore /.htaccess /absenmhs /academic_sisfo.php /academic_sisfo1.php /admin /asset /assets /check_setting.php /class.ezpdf.php /class.pdf.php /composer.json /composer.lock /config /dashboard.php /datadonlot.php /datepicker /datepicker2 /dep /dep/src /disconnectdb.php /error /error_log /favicon.ico /font /fpdf.css /fpdf.php /fungsi_validasi.php /header_pdf.php /header_pdf2.php /header_pdf3.php /header_surat.php /img /include /index.php /kk /konfigurasi.mysql.php /lecturer /log_in.php /login_go.php /mhsw.sql /ori /pdfplot.php /pengembang.lib.php /petunjuk.php /petunjuk2.php /phplot.php /phplot_data.php /print_report /print_reportxls /pto_lect /pto_stud /punksi /qrcode.php /README.md /reset_pass.php /reset_pass_action.php /sambungandb.php /search /setting_awal.php /SOP_KRS_PORTAL_MAHASISWA.pdf /students /ta /themes /ttd /ubah_pass_dosen.php /ubah_pass_mhs.php /util /util.lib.php /vendor
The following URL (usually /.git/config
) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b852d696
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/nurisakbar/sisfo-kampus-portal.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main
The following URL (usually /.git/config
) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b852d696
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/nurisakbar/sisfo-kampus-portal.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main