Apache
tcp/443 tcp/80
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c7cf176427cf176422b63f482103d5b36103d5b36103d5b36
Found 2 files trough .DS_Store spidering: /css /img
Severity: low
Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0fc5b18f05a17c389b1c9001e91c9001e9
Found 3 files trough .DS_Store spidering: /public /public/css /public/img
The following URL (usually /.git/config
) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65223b9961c5
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true ignorecase = true precomposeunicode = true [remote "origin"] url = https://github.com/BrandonKambasha/MCEC.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c7cf176427cf176422b63f482103d5b36103d5b36103d5b36
Found 2 files trough .DS_Store spidering: /css /img
The following URL (usually /.git/config
) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65223b9961c5
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true ignorecase = true precomposeunicode = true [remote "origin"] url = https://github.com/BrandonKambasha/MCEC.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master
Open service 162.241.253.237:80 · www.mcec.melaniacalvin.com
2024-10-18 19:24
HTTP/1.1 301 Moved Permanently Date: Fri, 18 Oct 2024 19:24:41 GMT Server: Apache Location: https://www.mcec.melaniacalvin.com/ Content-Length: 243 Connection: close Content-Type: text/html; charset=iso-8859-1 Page title: 301 Moved Permanently <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>301 Moved Permanently</title> </head><body> <h1>Moved Permanently</h1> <p>The document has moved <a href="https://www.mcec.melaniacalvin.com/">here</a>.</p> </body></html>
Open service 162.241.253.237:443 · www.mcec.melaniacalvin.com
2024-10-18 19:24
HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 19:24:41 GMT Server: Apache Cache-Control: no-cache, private Set-Cookie: XSRF-TOKEN=eyJpdiI6Ik5nZkhYNUJ0MXVsVjY0eVJvS2xBenc9PSIsInZhbHVlIjoiNUpQSkRMazFuK1lHaGRtMndPOU9oNFdRYnBBUlhacGpQUE42MXJwSkV2MlRlYTNZemJDVGFaaHNYM2VkaE5LNlEwa1M1UGVDRjFvdTJ4NWpRVlNka2pMcXE5djhzVGtuNldrVHB1MmtFRm9yOEp1ZmhrUTIzeU90b0JhTk5jeU4iLCJtYWMiOiI1ZDRkODliOGNlOWYzZDBiZDhkMWYwNTY2NGMzZjUyYzAwNzQ2MDFhZTI1OTU5YzNmODhjOTFhNThiNzgxNGNlIiwidGFnIjoiIn0%3D; expires=Fri, 18 Oct 2024 21:24:42 GMT; Max-Age=7200; path=/; samesite=lax Set-Cookie: mcec_session=eyJpdiI6IllvdjdIU0tSN3UrMHpmcWpjS01wTUE9PSIsInZhbHVlIjoiMDBmMkRmWDNSd0Ntb1ZRc0RzakVqd3NKamNlUFJXSzNqNFFCazd5azRoS3hxUnFmbkNDd2pJcitpK1VSaVVQVWdBTjc3MS9RaDJoc2FsMHRERXU4QVc4NmdhMXg2ZXFEc3VsbVlqSTAzU3pZVWpIL1FnbnhXNG1DNndvNUp6K2MiLCJtYWMiOiI0NmRjN2QzNzAzMmY5N2EzODdlNThhZDI5MmM0M2ZlZmQyODNjNzVhZjlmNzA4ZTRhMzE3ZTEyYmNiNWRjZDRiIiwidGFnIjoiIn0%3D; expires=Fri, 18 Oct 2024 21:24:42 GMT; Max-Age=7200; path=/; httponly; samesite=lax Upgrade: h2,h2c Connection: Upgrade, close Cache-Control: max-age=7200 Expires: Fri, 18 Oct 2024 21:24:41 GMT Vary: Accept-Encoding host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Page title: MCEC <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>MCEC</title> <meta content="width=device-width, initial-scale=1.0" name="viewport"> <meta content="" name="keywords"> <meta content="" name="description"> <!-- Favicon --> <link href="https://melaniacalvin.com/public/img/Favicon.ico" rel="icon"> <!-- Google Web Fonts --> <link rel="preconnect" href="https://fonts.googleapis.com"> <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin> <link href="https://fonts.googleapis.com/css2?family=Heebo:wght@400;500;600&family=Nunito:wght@600;700;800&display=swap" rel="stylesheet"> <!-- Icon Font Stylesheet --> <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.10.0/css/all.min.css" rel="stylesheet"> <link href="https://cdn.jsdelivr.net/npm/bootstrap-icons@1.4.1/font/bootstrap-icons.css" rel="stylesheet"> <!-- Libraries Stylesheet --> <link href="lib/animate/animate.min.css" rel="stylesheet"> <link href="lib/owlcarousel/assets/owl.carousel.min.css" rel="stylesheet"> <!-- Customized Bootstrap Stylesheet --> <link href="css/bootstrap.min.css" rel="stylesheet"> <!-- Template Stylesheet --> <link href="css/style2.css" rel="stylesheet"> </head> <body> <!-- Spinner Start --> <div id="spinner" class="show bg-white position-fixed translate-middle w-100 vh-100 top-50 start-50 d-flex align-items-center justify-content-center"> <div class="spinner-border text-primary" style="width: 3rem; height: 3rem;" role="status"> <span class="sr-only">Loading...</span> </div> </div> <!-- Spinner End --> <!-- Navbar Start --> <nav class="navbar navbar-expand-lg bg-white navbar-light shadow sticky-top p-0" style="border-top: 2px solid black;"> <a href="/"> <img style = "width:6cm;;margin-top:-1.5cm;margin-bottom: -2cm" src="https://melaniacalvin.com/public/../img/image4.png" alt="MCEC Logo" > </a> <button type="button" class="navbar-toggler me-4" data-bs-toggle="collapse" data-bs-target="#navbarCollapse"> <span class="navbar-toggler-icon"></span> </button> <div class="collapse navbar-collapse" id="navbarCollapse"> <div class="navbar-nav ms-auto p-4 p-lg-0"> <a href="/" class="nav-item nav-link active">Home</a> <a href="/about" class="nav-item nav-link">About</a> <a href="/courses" class="nav-item nav-link">Courses</a> <a href="https://www.mcec.melaniacalvin.com/login" class="nav-item nav-link">Login</a> </nav> <!-- Navbar End --> <!-- Service Start --> <div class="container-xxl py-5" style="background-color:rgb(25, 145, 220);border-bottom: 2px solid black;border-top: 2px solid black"> <div class="container"> <div class="row g-4"> <div class="col-lg-3 col-sm-6 wow fadeInUp" data-wow-delay="0.1s"> <div class="service-item text-center pt-3"> <div class="p-4"> <i class="fa fa-3x fa-graduation-cap text-primary mb-4"></i> <h5 class="mb-3">M</h5> <h5 >Melania</h5> </div> </div> </div> <div class="col-lg-3 col-sm-6 wow fadeInUp" data-wow-delay="0.3s"> <div class="service-item text-center pt-3"> <div class="p-4"> <i class="fa fa-3x fa-globe text-primary mb-4"></i> <h5 class="mb-3">C</h5> <h5>Calvin</h5> </div> </div> </div> <div class="col-lg-3 col-sm-6 wow fadeInUp" data-wow