Domain testportal.stadtwerke-haan.de
Germany
Software information
nginx
tcp/443 tcp/80
sw-cp-server
tcp/8443
-
Symfony developement panel enabled
The application has Symfony profiling enabled.
It enables an attacker to access the following sensitive content :
- System configuration
- Request log, including POST request with credentials and/or api keys
IP: 92.205.224.11
Domain: testportal.stadtwerke-haan.de
Port: 443
URL: https://testportal.stadtwerke-haan.de/_profiler/empty/search/resultsFirst seen 2024-02-18 10:00
Last seen 2024-04-18 09:36
Open for 59 days-
Fingerprint: 407cf4363b0e62fafca67e0763c8ab4f63c8ab4f63c8ab4f63c8ab4f63c8ab4f
Symfony profiler enabled: https://testportal.stadtwerke-haan.de/_profiler/empty/search/results
Found on 2024-04-18 09:36
-
Open service 92.205.224.11:443 · testportal.stadtwerke-haan.de
2024-04-18 09:36
HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 09:36:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.1.28 Cache-Control: max-age=0, must-revalidate, private pragma: no-cache Expires: Thu, 18 Apr 2024 09:36:51 GMT X-Debug-Token: ba0d60 X-Debug-Token-Link: https://testportal.stadtwerke-haan.de/_profiler/ba0d60 X-Robots-Tag: noindex Set-Cookie: PHPSESSID=87ajrl8kpclodlvtf5j5vkg5en; path=/; secure; httponly; samesite=lax Vary: Accept-Encoding Access-Control-Allow-Origin: * X-Powered-By: PleskLin
Found 2024-04-18 by HttpPluginCreate report
-
Open service 92.205.224.11:8443 · testportal.stadtwerke-haan.de
2024-04-18 09:36
HTTP/1.1 303 See Other Server: sw-cp-server Date: Thu, 18 Apr 2024 09:36:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Fri, 28 May 1999 00:00:00 GMT Last-Modified: Thu, 18 Apr 2024 09:36:50 GMT Cache-Control: no-store, no-cache, must-revalidate Cache-Control: post-check=0, pre-check=0 Pragma: no-cache P3P: CP="NON COR CURa ADMa OUR NOR UNI COM NAV STA" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Location: https://testportal.stadtwerke-haan.de/login.php X-Content-Type-Options: nosniff
Found 2024-04-18 by HttpPluginCreate report
-
Open service 92.205.224.11:80 · testportal.stadtwerke-haan.de
2024-04-18 09:36
HTTP/1.1 301 Moved Permanently Server: nginx Date: Thu, 18 Apr 2024 09:36:50 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://testportal.stadtwerke-haan.de/ Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
Found 2024-04-18 by HttpPluginCreate report