Domain staging-admin.halfpricepackaging.com
United States
Software information
Apache
tcp/443 tcp/80
-
Git configuration and history exposed
The following URL (usually
/.git/config) is publicly accessible and is leaking source code and repository configuration.IP: 20.102.116.25
Domain: staging-admin.halfpricepackaging.com
Port: 443
URL: https://staging-admin.halfpricepackaging.comFirst seen 2024-08-14 11:46
Last seen 2024-08-18 12:55
Open for 4 days-
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522a11181eb[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true longpaths = true [remote "origin"] url = https://halfpricepackaging@dev.azure.com/halfpricepackaging/hpp-wadmin/_git/hpp-wadmin fetch = +refs/heads/*:refs/remotes/origin/* [gc] auto = 0 [http] version = HTTP/1.1 [branch "main"] remote = origin merge = refs/heads/main
Found on 2024-08-18 12:55367 Bytes
-
-
Apache server-status page is publicly available
The server-status page (usually
/server-status) allows server administrators to find out how well their server is performing.This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.
This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.
https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a
IP: 20.102.116.25
Domain: staging-admin.halfpricepackaging.com
Port: 443
URL: https://staging-admin.halfpricepackaging.comFirst seen 2024-08-05 11:13
Last seen 2024-10-17 03:57
Open for 72 days-
Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31c9593098c95930981a65eb33Apache Status Apache Server Status for 127.0.0.1 (via 127.0.0.1) Server Version: Apache/2.4.41 (Ubuntu) Server MPM: prefork Server Built: 2020-08-12T19:46:17 Current Time: Sunday, 20-Dec-2020 08:14:20 UTC Restart Time: Sunday, 20-Dec-2020 07:54:35 UTC Parent Server Config. Generation: 1 Parent Server MPM Generation: 0 Server uptime: 19 minutes 45 seconds Server load: 0.00 0.00 0.00 Total accesses: 3 - Total Traffic: 20 kB - Total Duration: 508 CPU Usage: u.22 s.03 cu0 cs0 - .0211% CPU load .00253 requests/sec - 17 B/second - 6.7 kB/request - 169.333 ms/request 1 requests currently being processed, 4 idle workers ____W........................................................... ................................................................ ...................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process SrvPIDAccMCPU SSReqDurConnChildSlotClientProtocolVHostRequest 0-01040330/1/1_ 0.2011662174340.00.010.01 127.0.0.1http/1.1localhost:8000GET /server-status HTTP/1.1 1-01040340/1/1_ 0.0169319380.00.010.01 127.0.0.1http/1.1localhost:8000GET /server-status HTTP/1.1 2-01040350/1/1_ 0.0163617350.00.010.01 127.0.0.1http/1.1localhost:8000GET /server-status HTTP/1.1 4-01040370/0/0W 0.000000.00.000.00 127.0.0.1http/1.1localhost:8000GET /server-status HTTP/1.1 SrvChild Server number - generation PIDOS process ID AccNumber of accesses this connection / this child / this slot MMode of operation CPUCPU usage, number of seconds SSSeconds since beginning of most recent request ReqMilliseconds required to process most recent request DurSum of milliseconds required to process all requests ConnKilobytes transferred this connection ChildMegabytes transferred this child SlotTotal megabytes transferred this slot Apache/2.4.41 (Ubuntu) Server at 127.0.0.1 Port 8000
Found on 2024-10-17 03:57
-
-
Open service 20.25.65.207:80 · staging-admin.halfpricepackaging.com
2025-12-21 14:10
HTTP/1.1 200 OK Date: Sun, 21 Dec 2025 14:10:46 GMT Server: Apache Cache-Control: no-cache, private Set-Cookie: XSRF-TOKEN=eyJpdiI6IlJxTngxUjU4TnVOdkdOMjlJWXl0UGc9PSIsInZhbHVlIjoiR3VoS3U1RVVLcUNEMEVjVTNvWHlyc1p2ckR6cFAxbk1RM3FhS0RSdnhoWWttM3ZjcXVCZHpUd1d1bURIMmROU2o5MkF1M0ZScHdRRjdPalN2eFJtZjM3dGg4U29mZ2F3TWozVmpDb2NMNlBCNzFtSTRmSTIzQk9Ra0dGb3VZZWsiLCJtYWMiOiJiYzc4NGVjNzI5MjI5YTgyYTNiYWQ4ZjQ3NmUxOTk2ZWE4YzlkYTY2ZWU3MDNkYmU4YmM5ODVjYjc2NDU3NWM1IiwidGFnIjoiIn0%3D; expires=Sun, 21-Dec-2025 16:10:46 GMT; Max-Age=7200; path=/; samesite=lax Set-Cookie: half_price_packaging_session=4kewcMJ7AO64mJRZriP68V5M6RsIUgyyaUFbmVqq; expires=Sun, 21-Dec-2025 16:10:46 GMT; Max-Age=7200; path=/; httponly; samesite=lax Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
Found 2025-12-21 by HttpPluginCreate report
-
Open service 20.25.65.207:443 · staging-admin.halfpricepackaging.com
2025-12-21 14:10
HTTP/1.1 200 OK Date: Sun, 21 Dec 2025 14:10:46 GMT Server: Apache Cache-Control: no-cache, private Set-Cookie: XSRF-TOKEN=eyJpdiI6InpoS3ZWZndNUzZDQUZCTENMbERWVkE9PSIsInZhbHVlIjoiUytkMkRwa0o4dXJTZVFFUEJMSU1RVWpVeGd3K3hvUHRjVUZCU0phNXNpWXFwTkN0R3lWVDR3bkdtOEN6Y1BsbCtsUlplU1dqQllzY3ZDdTYxejZZeUpXWU5DblRjdDZDVy9ZUld1R3VWUlZPRmM4bGpMMHQ1alpzckt1akJZdnAiLCJtYWMiOiJlY2RjOTE5ZTRmZDQzMjgzNTQyZDhkYjEyMjEyNzExMmQ2NmE4Yzk4YWYyZTNlNTVjNDRkYTg5MzQ2MDc5ZTAyIiwidGFnIjoiIn0%3D; expires=Sun, 21-Dec-2025 16:10:46 GMT; Max-Age=7200; path=/; samesite=lax Set-Cookie: half_price_packaging_session=iv5IWWlsr6rzan8W1LJ0uogfwXo9KMG1LMBJRa0z; expires=Sun, 21-Dec-2025 16:10:46 GMT; Max-Age=7200; path=/; httponly; samesite=lax Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
Found 2025-12-21 by HttpPluginCreate report