nginx
tcp/443 tcp/80
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09cdc57c57adc57c57a06acecbf064bb956b71baf87615d4266
Found 19 files trough .DS_Store spidering: /.git /.vscode /888 /app-download /app-download/images /app-download/js /check.html /index.html /m /qphtml /robots.txt /static /static-tccp /ts-download /ts-download/css /ts-download/images /ts-download/js /ts-download/muse-ui /tsnew-download
Severity: low
Fingerprint: 5f32cf5d6962f09cccdd54a0ccdd54a0904d808d014ac6c4955f1f2917ac405e
Found 13 files trough .DS_Store spidering: /.git /.vscode /888 /app-download /check.html /index.html /m /qphtml /robots.txt /static /static-tccp /ts-download /tsnew-download
Severity: low
Fingerprint: 5f32cf5d6962f09cc169dbbec169dbbe626f729b199cedc206e898fb9876c4bf
Found 15 files trough .DS_Store spidering: /.git /.vscode /888 /app-download /app-download/images /app-download/js /check.html /index.html /m /qphtml /robots.txt /static /static-tccp /ts-download /tsnew-download
Severity: low
Fingerprint: 5f32cf5d6962f09ca0cc0fcfa0cc0fcf947301c8b0d42705be19dc38fb2d4512
Found 25 files trough .DS_Store spidering: /.git /.vscode /888 /app-download /app-download/images /app-download/js /m /m/css /m/font /m/img /m/img/sites /m/img/src /m/js /m/media /m/static /qphtml /qphtml/active /qphtml/css /qphtml/img /qphtml/js /qphtml/mp4 /static /static-tccp /ts-download /tsnew-download
Severity: low
Fingerprint: 5f32cf5d6962f09c3838040e3838040e7ad6bceb561dd3921d235eeb6bbdda05
Found 20 files trough .DS_Store spidering: /.git /.vscode /888 /app-download /app-download/images /app-download/js /m /m/css /m/font /m/img /m/img/sites /m/img/src /m/js /m/media /m/static /qphtml /static /static-tccp /ts-download /tsnew-download
Severity: low
Fingerprint: 5f32cf5d6962f09cdafa5447dafa544751bf49c0f7025fade1f1516096878ee6
Found 18 files trough .DS_Store spidering: /.git /.vscode /888 /app-download /app-download/images /app-download/js /m /m/css /m/font /m/img /m/js /m/media /m/static /qphtml /static /static-tccp /ts-download /tsnew-download
Severity: low
Fingerprint: 5f32cf5d6962f09c11d3744d11d3744d9930cc46c0a50fa3a2807c7ac11d5508
Found 12 files trough .DS_Store spidering: /.git /.vscode /888 /app-download /app-download/images /app-download/js /m /qphtml /static /static-tccp /ts-download /tsnew-download
The following URL (usually /.git/config
) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652241148f2e
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = root@6669786.com:lottery-site/lottery-repo-tccp fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master
Open service 38.207.84.148:80 · www.7410051.com
2024-10-22 07:24
HTTP/1.1 200 OK Server: nginx Date: Tue, 22 Oct 2024 07:24:08 GMT Content-Type: text/html Content-Length: 3558 Last-Modified: Tue, 22 Oct 2024 03:07:36 GMT Connection: close Vary: Accept-Encoding ETag: "671716f8-de6" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes Page title: 欢迎光临 <!DOCTYPE html> <html lang="en"> <head> <script charset="UTF-8" id="LA_COLLECT" src="//sdk.51.la/js-sdk-pro.min.js"></script> <script>LA.init({id:"3G4N9Q4duBIy4IdT",ck:"3G4N9Q4duBIy4IdT"})</script> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width,initial-scale=1.0"> <title>欢迎光临</title> </head> <body style="background: #e6eaeb;"> <div style="position: relative;margin: 200px auto 0;padding: 0 0 22px;border-radius: 15px 15px 5px 5px;background: #fff;box-shadow: 10px 20px 20px rgba(101, 102, 103, .75);width:95%;max-width: 400px;color: #fff;text-align: center;"> <canvas id="canvas" width="200" height="200" style="display:block;position:absolute;top:-100px;left:0;right:0;margin:0 auto;background:#fff;border-radius:50%;"></canvas> <div style="color: #242424;font-size: 28px;padding:111px 0 20px">通过安全加密检测</div> <div style="margin: 25px 0 14px;color: #7b7b7b;font-size: 18px;">AG直营 信誉保证</div> <a id="btn" href="javascript:void(0);" style="display: block;border-radius: 500px;background-color: #ff5656;height: 65px;line-height: 65px;width: 250px;color: #fff;font-size: 22px;text-decoration: none;letter-spacing: 2px;margin:20px auto;cursor:pointer;">链接检测中……</a> </div> <script> window.onload = function() { var canvas = document.getElementById('canvas') , ctx = canvas.getContext('2d') , ras = canvas.width / 2 , index = 0; drawFrame(); function drawFrame() { ctx.clearRect(0, 0, canvas.width, canvas.height); ctx.save(); ctx.translate(ras, ras); ctx.beginPath(); ctx.lineWidth = ras * 0.08; ctx.strokeStyle = "#d1d2d4"; ctx.arc(0, 0, ras * 0.8, 0, Math.PI * 2, false); ctx.stroke(); ctx.strokeStyle = "#00a2ff "; ctx.lineWidth = ras * 0.12; ctx.beginPath(); ctx.arc(0, 0, ras * 0.8, -Math.PI / 2, -Math.PI / 2 + index * Math.PI * 2 / 100, false); ctx.stroke(); ctx.textAlign = 'center'; ctx.textBaseline = 'middle'; ctx.font = ras / 2.2 + 'px Arial'; ctx.fillText(index.toFixed(0) + '%', 0, 0); ctx.restore(); document.title = '加载中 ' + index.toFixed(1) + '%'; if (index < 99.2) { if (index > 90) { index += 1; btn.innerHTML = '请点击进入'; btn.onclick = function() { location.href = 'http://38.207.83.136:25337/k8.html'; } ; btn.style.background = '#36A11E' } else if (index > 60) { index += 1 } else { index += 3 } setTimeout(drawFrame, 20) } else if (index != 100) { index = 100; drawFrame() } else { document.title = '请点击进入' } } } </script> </body> </html>
Open service 38.207.84.148:443 · www.7410051.com
2024-10-22 07:24
HTTP/1.1 200 OK Server: nginx Date: Tue, 22 Oct 2024 07:24:12 GMT Content-Type: text/html Content-Length: 3558 Last-Modified: Tue, 22 Oct 2024 03:07:36 GMT Connection: close Vary: Accept-Encoding ETag: "671716f8-de6" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes Page title: 欢迎光临 <!DOCTYPE html> <html lang="en"> <head> <script charset="UTF-8" id="LA_COLLECT" src="//sdk.51.la/js-sdk-pro.min.js"></script> <script>LA.init({id:"3G4N9Q4duBIy4IdT",ck:"3G4N9Q4duBIy4IdT"})</script> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width,initial-scale=1.0"> <title>欢迎光临</title> </head> <body style="background: #e6eaeb;"> <div style="position: relative;margin: 200px auto 0;padding: 0 0 22px;border-radius: 15px 15px 5px 5px;background: #fff;box-shadow: 10px 20px 20px rgba(101, 102, 103, .75);width:95%;max-width: 400px;color: #fff;text-align: center;"> <canvas id="canvas" width="200" height="200" style="display:block;position:absolute;top:-100px;left:0;right:0;margin:0 auto;background:#fff;border-radius:50%;"></canvas> <div style="color: #242424;font-size: 28px;padding:111px 0 20px">通过安全加密检测</div> <div style="margin: 25px 0 14px;color: #7b7b7b;font-size: 18px;">AG直营 信誉保证</div> <a id="btn" href="javascript:void(0);" style="display: block;border-radius: 500px;background-color: #ff5656;height: 65px;line-height: 65px;width: 250px;color: #fff;font-size: 22px;text-decoration: none;letter-spacing: 2px;margin:20px auto;cursor:pointer;">链接检测中……</a> </div> <script> window.onload = function() { var canvas = document.getElementById('canvas') , ctx = canvas.getContext('2d') , ras = canvas.width / 2 , index = 0; drawFrame(); function drawFrame() { ctx.clearRect(0, 0, canvas.width, canvas.height); ctx.save(); ctx.translate(ras, ras); ctx.beginPath(); ctx.lineWidth = ras * 0.08; ctx.strokeStyle = "#d1d2d4"; ctx.arc(0, 0, ras * 0.8, 0, Math.PI * 2, false); ctx.stroke(); ctx.strokeStyle = "#00a2ff "; ctx.lineWidth = ras * 0.12; ctx.beginPath(); ctx.arc(0, 0, ras * 0.8, -Math.PI / 2, -Math.PI / 2 + index * Math.PI * 2 / 100, false); ctx.stroke(); ctx.textAlign = 'center'; ctx.textBaseline = 'middle'; ctx.font = ras / 2.2 + 'px Arial'; ctx.fillText(index.toFixed(0) + '%', 0, 0); ctx.restore(); document.title = '加载中 ' + index.toFixed(1) + '%'; if (index < 99.2) { if (index > 90) { index += 1; btn.innerHTML = '请点击进入'; btn.onclick = function() { location.href = 'http://38.207.83.136:25337/k8.html'; } ; btn.style.background = '#36A11E' } else if (index > 60) { index += 1 } else { index += 3 } setTimeout(drawFrame, 20) } else if (index != 100) { index = 100; drawFrame() } else { document.title = '请点击进入' } } } </script> </body> </html>