LeakIX - Host www.cavedejurancon.com

Domain www.cavedejurancon.com

France

Ollink Sarl

Ubuntu

Found php information file

PHPinfo page has been found in this directory. The PHPinfo page outputs a large amount of information about the current state of PHP.

This includes information about PHP compilation options and extensions, the PHP version, server information and environment (if compiled as a module), the PHP environment, OS version information, paths, master and local values of configuration options, HTTP headers, and the PHP License.

Environment variables may contain credentials.

https://www.acunetix.com/vulnerabilities/web/phpinfo-page/

IP: 185.198.78.59
Domain: www.cavedejurancon.com
Port: 443
URL: https://www.cavedejurancon.com/info.php

First seen 2021-07-30 19:05
Last seen 2021-09-17 09:57
Open for 48 days

Fingerprint: 2c44e2a6278fb0134173d6fa11291b03d08becb4a7f943afb768408f0e5ce1d8

Found PHP info page:
_SERVER["HTTP_AUTHORIZATION"] = no value
_SERVER["HTTPS"] = on
_SERVER["SSL_SERVER_S_DN_CN"] = prod-cavedejurancon-com.nalta.net
_SERVER["SSL_SERVER_I_DN_C"] = US
_SERVER["SSL_SERVER_I_DN_O"] = Let's Encrypt
_SERVER["SSL_SERVER_I_DN_CN"] = R3
_SERVER["SSL_SERVER_SAN_DNS_0"] = cavedejurancon.com
_SERVER["SSL_SERVER_SAN_DNS_1"] = cavedejurancon.fr
_SERVER["SSL_SERVER_SAN_DNS_2"] = cavedejurancon.vin
_SERVER["SSL_SERVER_SAN_DNS_3"] = cavedejurancon.wine
_SERVER["SSL_SERVER_SAN_DNS_4"] = prod-cavedejurancon-com.nalta.net
_SERVER["SSL_SERVER_SAN_DNS_5"] = www.cavedejurancon.com
_SERVER["SSL_SERVER_SAN_DNS_6"] = www.cavedejurancon.fr
_SERVER["SSL_SERVER_SAN_DNS_7"] = www.cavedejurancon.vin
_SERVER["SSL_SERVER_SAN_DNS_8"] = www.cavedejurancon.wine
_SERVER["SSL_VERSION_INTERFACE"] = mod_ssl/2.4.41
_SERVER["SSL_VERSION_LIBRARY"] = OpenSSL/1.1.1f
_SERVER["SSL_PROTOCOL"] = TLSv1.3
_SERVER["SSL_SECURE_RENEG"] = false
_SERVER["SSL_COMPRESS_METHOD"] = NULL
_SERVER["SSL_CIPHER"] = TLS_AES_256_GCM_SHA384
_SERVER["SSL_CIPHER_EXPORT"] = false
_SERVER["SSL_CIPHER_USEKEYSIZE"] = 256
_SERVER["SSL_CIPHER_ALGKEYSIZE"] = 256
_SERVER["SSL_CLIENT_VERIFY"] = NONE
_SERVER["SSL_SERVER_M_VERSION"] = 3
_SERVER["SSL_SERVER_M_SERIAL"] = 03697E7F780E361B4450B1C8A9942089EC7B
_SERVER["SSL_SERVER_V_START"] = Sep 15 03:24:24 2021 GMT
_SERVER["SSL_SERVER_V_END"] = Dec 14 03:24:23 2021 GMT
_SERVER["SSL_SERVER_S_DN"] = CN=prod-cavedejurancon-com.nalta.net
_SERVER["SSL_SERVER_I_DN"] = CN=R3,O=Let's Encrypt,C=US
_SERVER["SSL_SERVER_A_KEY"] = rsaEncryption
_SERVER["SSL_SERVER_A_SIG"] = sha256WithRSAEncryption
_SERVER["SSL_SESSION_ID"] = e25d555eec836d1f9be45bf43e14b27023222955eeb4887cc87d0e9d6035ffbd
_SERVER["SSL_SESSION_RESUMED"] = Resumed
_SERVER["HTTP_HOST"] = www.cavedejurancon.com
_SERVER["HTTP_USER_AGENT"] = Go-http-client/1.1
_SERVER["HTTP_ACCEPT_ENCODING"] = gzip
_SERVER["HTTP_CONNECTION"] = close
_SERVER["PATH"] = /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
_SERVER["SERVER_SIGNATURE"] = <address>Apache/2.4.41 (Ubuntu) Server at www.cavedejurancon.com Port 443</address>
_SERVER["SERVER_SOFTWARE"] = Apache/2.4.41 (Ubuntu)
_SERVER["SERVER_NAME"] = www.cavedejurancon.com
_SERVER["SERVER_ADDR"] = 172.16.131.199
_SERVER["SERVER_PORT"] = 443
_SERVER["REMOTE_ADDR"] = 167.71.13.196
_SERVER["DOCUMENT_ROOT"] = /var/www/cavedejurancon.com/html/
_SERVER["REQUEST_SCHEME"] = https
_SERVER["CONTEXT_PREFIX"] = no value
_SERVER["CONTEXT_DOCUMENT_ROOT"] = /var/www/cavedejurancon.com/html/
_SERVER["SERVER_ADMIN"] = webmaster@nalta.fr
_SERVER["SCRIPT_FILENAME"] = /var/www/cavedejurancon.com/html/info.php
_SERVER["REMOTE_PORT"] = 21456
_SERVER["GATEWAY_INTERFACE"] = CGI/1.1
_SERVER["SERVER_PROTOCOL"] = HTTP/1.1
_SERVER["REQUEST_METHOD"] = GET
_SERVER["QUERY_STRING"] = no value
_SERVER["REQUEST_URI"] = /info.php
_SERVER["SCRIPT_NAME"] = /info.php
_SERVER["PHP_SELF"] = /info.php
_SERVER["REQUEST_TIME_FLOAT"] = 1631872628.871
_SERVER["REQUEST_TIME"] = 1631872628

Found on 2021-09-17 09:57

Fingerprint: 2c44e2a6278fb0134173d6fa11291b03d08becb4a7f943afb768408f2808e413

Found PHP info page:
_SERVER["HTTP_AUTHORIZATION"] = no value
_SERVER["HTTPS"] = on
_SERVER["SSL_SERVER_S_DN_CN"] = prod-cavedejurancon-com.nalta.net
_SERVER["SSL_SERVER_I_DN_C"] = US
_SERVER["SSL_SERVER_I_DN_O"] = Let's Encrypt
_SERVER["SSL_SERVER_I_DN_CN"] = R3
_SERVER["SSL_SERVER_SAN_DNS_0"] = cavedejurancon.com
_SERVER["SSL_SERVER_SAN_DNS_1"] = cavedejurancon.fr
_SERVER["SSL_SERVER_SAN_DNS_2"] = cavedejurancon.vin
_SERVER["SSL_SERVER_SAN_DNS_3"] = cavedejurancon.wine
_SERVER["SSL_SERVER_SAN_DNS_4"] = prod-cavedejurancon-com.nalta.net
_SERVER["SSL_SERVER_SAN_DNS_5"] = www.cavedejurancon.com
_SERVER["SSL_SERVER_SAN_DNS_6"] = www.cavedejurancon.fr
_SERVER["SSL_SERVER_SAN_DNS_7"] = www.cavedejurancon.vin
_SERVER["SSL_SERVER_SAN_DNS_8"] = www.cavedejurancon.wine
_SERVER["SSL_VERSION_INTERFACE"] = mod_ssl/2.4.41
_SERVER["SSL_VERSION_LIBRARY"] = OpenSSL/1.1.1f
_SERVER["SSL_PROTOCOL"] = TLSv1.3
_SERVER["SSL_SECURE_RENEG"] = false
_SERVER["SSL_COMPRESS_METHOD"] = NULL
_SERVER["SSL_CIPHER"] = TLS_AES_256_GCM_SHA384
_SERVER["SSL_CIPHER_EXPORT"] = false
_SERVER["SSL_CIPHER_USEKEYSIZE"] = 256
_SERVER["SSL_CIPHER_ALGKEYSIZE"] = 256
_SERVER["SSL_CLIENT_VERIFY"] = NONE
_SERVER["SSL_SERVER_M_VERSION"] = 3
_SERVER["SSL_SERVER_M_SERIAL"] = 034CB838E8ECC66E452D14536E18429C16F9
_SERVER["SSL_SERVER_V_START"] = Jul 16 22:33:33 2021 GMT
_SERVER["SSL_SERVER_V_END"] = Oct 14 22:33:31 2021 GMT
_SERVER["SSL_SERVER_S_DN"] = CN=prod-cavedejurancon-com.nalta.net
_SERVER["SSL_SERVER_I_DN"] = CN=R3,O=Let's Encrypt,C=US
_SERVER["SSL_SERVER_A_KEY"] = rsaEncryption
_SERVER["SSL_SERVER_A_SIG"] = sha256WithRSAEncryption
_SERVER["SSL_SESSION_ID"] = b8907fb1abd01eba234f08d780c6b53683d7347b67c8338bfa81723ea4a204ea
_SERVER["SSL_SESSION_RESUMED"] = Resumed
_SERVER["HTTP_HOST"] = www.cavedejurancon.com
_SERVER["HTTP_USER_AGENT"] = Go-http-client/1.1
_SERVER["HTTP_ACCEPT_ENCODING"] = gzip
_SERVER["HTTP_CONNECTION"] = close
_SERVER["PATH"] = /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
_SERVER["SERVER_SIGNATURE"] = <address>Apache/2.4.41 (Ubuntu) Server at www.cavedejurancon.com Port 443</address>
_SERVER["SERVER_SOFTWARE"] = Apache/2.4.41 (Ubuntu)
_SERVER["SERVER_NAME"] = www.cavedejurancon.com
_SERVER["SERVER_ADDR"] = 172.16.131.199
_SERVER["SERVER_PORT"] = 443
_SERVER["REMOTE_ADDR"] = 167.71.13.196
_SERVER["DOCUMENT_ROOT"] = /var/www/cavedejurancon.com/html/
_SERVER["REQUEST_SCHEME"] = https
_SERVER["CONTEXT_PREFIX"] = no value
_SERVER["CONTEXT_DOCUMENT_ROOT"] = /var/www/cavedejurancon.com/html/
_SERVER["SERVER_ADMIN"] = webmaster@nalta.fr
_SERVER["SCRIPT_FILENAME"] = /var/www/cavedejurancon.com/html/info.php
_SERVER["REMOTE_PORT"] = 33160
_SERVER["GATEWAY_INTERFACE"] = CGI/1.1
_SERVER["SERVER_PROTOCOL"] = HTTP/1.1
_SERVER["REQUEST_METHOD"] = GET
_SERVER["QUERY_STRING"] = no value
_SERVER["REQUEST_URI"] = /info.php
_SERVER["SCRIPT_NAME"] = /info.php
_SERVER["PHP_SELF"] = /info.php
_SERVER["REQUEST_TIME_FLOAT"] = 1627671943.435
_SERVER["REQUEST_TIME"] = 1627671943

Found on 2021-07-30 19:05

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 185.198.78.59
Domain: www.cavedejurancon.com
Port: 443
URL: https://www.cavedejurancon.com/.git/config

First seen 2021-08-09 06:06
Last seen 2022-09-11 06:50
Open for 398 days
- Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522cd2d6622
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = http://gitlab.naltadev.fr:48204/nalta/cave-de-jurancon.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2021-08-09 06:06
  
  283 Bytes
Create report

Domain summary

www.cavedejurancon.com 3

1 recorded

IP summary

185.198.78.59 1