Apache 2.4.18
tcp/80
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652299c343c0
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = git@github.com:r2958/website_new.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main [branch "master"] remote = origin merge = refs/heads/master
Open service 43.175.169.161:80 · tx.andyweiren.com
2026-01-23 11:17
HTTP/1.1 200 OK Date: Fri, 23 Jan 2026 11:17:26 GMT Server: Apache/2.4.18 (Ubuntu) Set-Cookie: PHPSESSID=cholis8rik39jr9gmh9g2rrk94; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Pragma: no-cache Vary: Accept-Encoding Keep-Alive: timeout=5, max=100 Content-Type: text/html; charset=UTF-8 Cache-Control: must-revalidate, no-cache, no-store Transfer-Encoding: chunked X-NWS-LOG-UUID: 1200748499759076608 Connection: close X-Cache-Lookup: Cache Miss
Open service 43.175.169.161:80 · tx.andyweiren.com
2026-01-23 03:34
HTTP/1.1 200 OK Date: Fri, 23 Jan 2026 03:35:08 GMT Server: Apache/2.4.18 (Ubuntu) Set-Cookie: PHPSESSID=pivdcenr5fdikrdr9tk4stjee3; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Pragma: no-cache Vary: Accept-Encoding Keep-Alive: timeout=5, max=100 Content-Type: text/html; charset=UTF-8 Cache-Control: must-revalidate, no-cache, no-store Transfer-Encoding: chunked X-NWS-LOG-UUID: 17805324754435723124 Connection: close X-Cache-Lookup: Cache Miss