nginx 1.12.2
tcp/443 tcp/80
The following URL (usually /.git/config
) is publicly accessible and is leaking source code and repository configuration.
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65227d5bf0d3
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://satohide@bitbucket.org/satohide/l_event.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master
Open service 118.27.35.93:443 · www.l-event.me
2024-06-26 22:48
HTTP/1.1 302 Found Server: nginx/1.12.2 Date: Wed, 26 Jun 2024 22:48:42 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Location: https://www.l-event.me/users/sign_in Cache-Control: no-cache Set-Cookie: _l_marriage_session=N1ybKbMvu3N9nRghsoHzZ0xvLspUIY8ZDOlnS%2Fkohg%2FWJ9EQBE%2BxZ2PEsTyf89p3XH8Hrwo4Y411GAlT%2FKgFN0LQZr%2BvNwhB9QV3BIwbqozQBoMoKOMx7fWCBC%2Fm0o2UxUBpE9I4BCY45gaEzrCUINH98oGibmfH7DqHUMhIXtNo9H2MvWp78dYtQOxmW6StkzHhqrHX9myqnYL0zlj5W72TKV9D--yzEpwEtyina8%2Bomv--pBwrk92jH7sQ%2B7GeKj3B6A%3D%3D; path=/; secure; HttpOnly X-Request-Id: 48c1145e-5b96-4cb8-92ca-93a06ee9e89f X-Runtime: 0.006397 Strict-Transport-Security: max-age=31536000; includeSubDomains <html><body>You are being <a href="https://www.l-event.me/users/sign_in">redirected</a>.</body></html>
Open service 118.27.35.93:443 · www.l-event.me
2024-06-26 05:30
HTTP/1.1 302 Found Server: nginx/1.12.2 Date: Wed, 26 Jun 2024 05:30:55 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Location: https://www.l-event.me/users/sign_in Cache-Control: no-cache Set-Cookie: _l_marriage_session=TdVniR0%2FLlAF4UkES%2BL0DFeLCRxxvSzZVMaBHj4YGexFzXbw%2BBzrfzc2DUzYOSM%2BQVJ77EaeUPqcAct5sjWIeaz4sKNUQzPjObrZ8UmaGEl%2BD7wRqfUqkv5PObWpk5WJG81MtZRIUXPK2adHqzMlkltaKQZQVj73GjmSpiip1DOtpPTrcZ1wCN4uNyD8i6je090U5a21AVcIcz7iQVr3h0cPC7Sr--m3pdtfD73Xy%2Boffv--ghuF2SIg6%2F4Ng3QcibkKTg%3D%3D; path=/; secure; HttpOnly X-Request-Id: db686d63-97ec-4261-ad3f-20252723c6dc X-Runtime: 0.022434 Strict-Transport-Security: max-age=31536000; includeSubDomains <html><body>You are being <a href="https://www.l-event.me/users/sign_in">redirected</a>.</body></html>
Open service 118.27.35.93:80 · www.l-event.me
2024-06-26 05:30
HTTP/1.1 301 Moved Permanently Server: nginx/1.12.2 Date: Wed, 26 Jun 2024 05:30:50 GMT Content-Type: text/html Content-Length: 185 Connection: close Location: https://www.l-event.me/ Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body bgcolor="white"> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx/1.12.2</center> </body> </html>
Open service 118.27.35.93:443 · www.l-event.me
2024-06-24 23:22
HTTP/1.1 302 Found Server: nginx/1.12.2 Date: Mon, 24 Jun 2024 23:22:34 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Location: https://www.l-event.me/users/sign_in Cache-Control: no-cache Set-Cookie: _l_marriage_session=tL9Ei1szBauyXmOA7DSu7e6pf9qvXTi4E9vNh6i0WCjA4USnWEzMgzZIe2EPgLjnwbHzZzvNK7eZC4LZdbX%2FgRSDy4GMsldWWo3QBp9sd6Tci%2FMy9e0MN7SLLD1fQrJiOnz0wgcxU6rBXlQ%2F7IEdpSB9ZAveuWebU9wXmpWvCdRPKqGPly%2Buk7gOIdGl%2BDeVawwdSzd%2Fb9N0vD28E1I04MgN0Ua6--PMOGjkYhSPKUyqfo--oF3BswO75qC4X03GzjkCvw%3D%3D; path=/; secure; HttpOnly X-Request-Id: 4a3876de-b3dd-4c45-bb83-cda8fa40b596 X-Runtime: 0.027609 Strict-Transport-Security: max-age=31536000; includeSubDomains <html><body>You are being <a href="https://www.l-event.me/users/sign_in">redirected</a>.</body></html>
Open service 118.27.35.93:443 · www.l-event.me
2024-06-23 01:27
HTTP/1.1 302 Found Server: nginx/1.12.2 Date: Sun, 23 Jun 2024 01:28:07 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Location: https://www.l-event.me/users/sign_in Cache-Control: no-cache Set-Cookie: _l_marriage_session=QvvW%2FMidxqAdfSxiclrSjfxqtlWcK7Jdnj9cPLWcYUgSbvwhq1sZ%2FSkfqlGdOcTFfExWSoXXhXtONLxCxekuQZPxrDP4xdtKkpHc8VWMhKCvWJqbWLH382qTiMSNQKZPXQVRKe3mUUyGdJ0vMq8ze0zch1Ts4sKs53CTGFMfvrM%2F74rmgTNQyNotEJWb2kqWrDsIoS%2FwyoM4XSa989TduC77u1EC--h8Q5MBJ8CwwX3gA1--AOY2mIzNeK1ScgURDGhDCA%3D%3D; path=/; secure; HttpOnly X-Request-Id: e745f255-bba4-406e-9b00-6b5d2ba8eb3f X-Runtime: 0.009913 Strict-Transport-Security: max-age=31536000; includeSubDomains <html><body>You are being <a href="https://www.l-event.me/users/sign_in">redirected</a>.</body></html>
Open service 118.27.35.93:443 · www.l-event.me
2024-06-20 09:29
HTTP/1.1 302 Found Server: nginx/1.12.2 Date: Thu, 20 Jun 2024 09:29:23 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Location: https://www.l-event.me/users/sign_in Cache-Control: no-cache Set-Cookie: _l_marriage_session=jMiE9ecbh9uq3dJDXd7fkiYrToEkI7xqN9lWKpnCLy45nI7bki6cdH6muLO6E69r1Jg%2FMx8kPPH7FA31XS97k5z4X7p2gEhX%2FRAFsFAAVTqOxK7F7sRJ7jnjbv7q3jNJU9Yph%2F7DkO4%2F3BMu8TCGbfDUofyXOhbdtvo7cadg2aOvDscFsd%2FC1EHutgj06rwwHvwr765jZrQLXXbvwi0r4xA%2Fjkqg--nwTqhEl2onwa%2FS43--jw%2BZIadBUZPY91Wb%2B08PZw%3D%3D; path=/; secure; HttpOnly X-Request-Id: 78367550-4db9-4abf-936c-f41f24aea09c X-Runtime: 0.009057 Strict-Transport-Security: max-age=31536000; includeSubDomains <html><body>You are being <a href="https://www.l-event.me/users/sign_in">redirected</a>.</body></html>
Open service 118.27.35.93:443 · www.l-event.me
2024-06-18 00:03
HTTP/1.1 302 Found Server: nginx/1.12.2 Date: Tue, 18 Jun 2024 00:03:33 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Location: https://www.l-event.me/users/sign_in Cache-Control: no-cache Set-Cookie: _l_marriage_session=jPoC63S2BbUfTm6vFlQoCkNKAVn1KCdUbzQL6G5nVmVdQ7tcJAJJcIUlVrb1RkdBP2kKUtq4wPWmV2F21AFH10tm96U3OddiEVSNbD9UwaWCw1QsM1MjA0QhW81CCSbRjl9SSiUBfAI2V06B0OqSt4iM6KBKIwXnoNvmDwrI4%2Fo%2FPAlwV1urNGVvBjmYLtRNPrPB7InVGPlxnZAyA5P9RubFJYTn--HM5Q4LbPCbNMzlrl--a7YKv1Fj6kBCW33h8T5N%2FA%3D%3D; path=/; secure; HttpOnly X-Request-Id: 50bb265b-3f75-4924-ae25-1d84c9122ba1 X-Runtime: 0.008107 Strict-Transport-Security: max-age=31536000; includeSubDomains <html><body>You are being <a href="https://www.l-event.me/users/sign_in">redirected</a>.</body></html>
Open service 118.27.35.93:443 · www.l-event.me
2024-06-16 05:59
HTTP/1.1 302 Found Server: nginx/1.12.2 Date: Sun, 16 Jun 2024 05:59:54 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Location: https://www.l-event.me/users/sign_in Cache-Control: no-cache Set-Cookie: _l_marriage_session=%2F8goU2KAG%2BYPa4toyWV4n5kf%2FD6gMJ8tQvrPJDfkBjSo44KV6rhoh9QuEluVZlpnjybHt9ook6WUk1d%2Bw4poMlhZc9jYmTE80jnsBJmsCwZjvWZZcnDsGkQ2z3ise%2F%2BVhKOu3CFdYvfRTjScv2S3rM30KlOT%2B524flPrXNOJrL8vxgp2Toj6WJWqCmzYe7W4T8%2Fjgg2QduOTIcbaUCkRpBNk9wGT--GyGWwfX63jctYv4D--JJXIeCgN69O%2BYVtQZUALsQ%3D%3D; path=/; secure; HttpOnly X-Request-Id: bd0ca52b-475c-429f-addc-e6d99edb8586 X-Runtime: 0.016002 Strict-Transport-Security: max-age=31536000; includeSubDomains <html><body>You are being <a href="https://www.l-event.me/users/sign_in">redirected</a>.</body></html>
Open service 118.27.35.93:443 · www.l-event.me
2024-06-12 04:23
HTTP/1.1 302 Found Server: nginx/1.12.2 Date: Wed, 12 Jun 2024 04:23:16 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Location: https://www.l-event.me/users/sign_in Cache-Control: no-cache Set-Cookie: _l_marriage_session=KJKOWvl%2FiUuS8k5mCFZfpNaRw%2BZP0kF75UojOgKrBAapi2Gz%2F4NzeodIQ%2BLEgazYehCdzTPpTYbE%2BnJqKGDbh%2Fs3BD256EMQj6IzOvdeO227ButGPnbXhzgiCI3YamXF1FYzXxBO2ZLEY8XoTwF99mHOAisAt3qDdR4kBQqX0TeGCvit609u9CpSuFk0Z9fgeWaW8K0dft45YH1BJ6TL6Qz5f4yx--C8CK9AVWu%2BlJ3WIH--aAOPGzQIK4zwF6cnBnLX7g%3D%3D; path=/; secure; HttpOnly X-Request-Id: a6f661df-a48d-48ce-b4bb-4fa8bbafc816 X-Runtime: 0.006415 Strict-Transport-Security: max-age=31536000; includeSubDomains <html><body>You are being <a href="https://www.l-event.me/users/sign_in">redirected</a>.</body></html>