LeakIX - Host zimbcw.com

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 162.241.169.13
Domain: zimbcw.com
Port: 443
URL: https://zimbcw.com

First seen 2024-12-30 14:11
Last seen 2025-02-20 13:38
Open for 51 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b76d324eff136257bc15b1f22dac55bcd5

Found 128 files trough .DS_Store spidering:

/about-us.html
/blog-grid.html
/blog-list.html
/blog-single.html
/blog.html
/contact.html
/css
/events.html
/fonts
/images
/images/background
/images/background/bg-page-title-1.jpg
/images/background/image-1.jpg
/images/background/image-2.jpg
/images/background/image-3.jpg
/images/background/image-4.jpg
/images/fancybox
/images/favicon.ico
/images/gallery
/images/gallery/1.jpg
/images/gallery/10.jpg
/images/gallery/11.jpg
/images/gallery/12.jpg
/images/gallery/13.jpg
/images/gallery/14.jpg
/images/gallery/15.jpg
/images/gallery/16.jpg
/images/gallery/17.jpg
/images/gallery/18.jpg
/images/gallery/19.jpg
/images/gallery/2.jpg
/images/gallery/20.jpg
/images/gallery/21.jpg
/images/gallery/22.jpg
/images/gallery/23.jpg
/images/gallery/24.jpg
/images/gallery/25.jpg
/images/gallery/26.jpg
/images/gallery/27.jpg
/images/gallery/28.jpg
/images/gallery/29.jpg
/images/gallery/3.jpg
/images/gallery/30.jpg
/images/gallery/31.jpg
/images/gallery/32.jpg
/images/gallery/33.jpg
/images/gallery/4.jpg
/images/gallery/5.jpg
/images/gallery/6.jpg
/images/gallery/7.jpg
/images/gallery/8.jpg
/images/gallery/9.jpg
/images/gallery/thumb-1.jpg
/images/gallery/thumb-2.jpg
/images/gallery/thumb-3.jpg
/images/gallery/thumb-4.jpg
/images/icons
/images/logo-2.png
/images/logo-3.png
/images/logo-4.png
/images/logo.png
/images/main-slider
/images/main-slider/image-1.jpg
/images/main-slider/image-2.jpg
/images/main-slider/image-3.jpg
/images/resource
/images/resource/author-thumb-1.jpg
/images/resource/author-thumb-2.jpg
/images/resource/author-thumb-3.jpg
/images/resource/author-thumb-4.jpg
/images/resource/author-thumb-5.jpg
/images/resource/author-thumb-6.jpg
/images/resource/blog-image-1.jpg
/images/resource/blog-image-10.jpg
/images/resource/blog-image-11.jpg
/images/resource/blog-image-12.jpg
/images/resource/blog-image-13.jpg
/images/resource/blog-image-14.jpg
/images/resource/blog-image-15.jpg
/images/resource/blog-image-16.jpg
/images/resource/blog-image-17.jpg
/images/resource/blog-image-18.jpg
/images/resource/blog-image-19.jpg
/images/resource/blog-image-2.jpg
/images/resource/blog-image-3.jpg
/images/resource/blog-image-4.jpg
/images/resource/blog-image-5.jpg
/images/resource/blog-image-6.jpg
/images/resource/blog-image-7.jpg
/images/resource/blog-image-8.jpg
/images/resource/blog-image-9.jpg
/images/resource/certificate-image-1.jpg
/images/resource/certificate-image-2.jpg
/images/resource/certificate-image-3.jpg
/images/resource/certificate-image-4.jpg
/images/resource/featured-image-1.jpg
/images/resource/featured-image-10.jpg
/images/resource/featured-image-11.jpg
/images/resource/featured-image-12.jpg
/images/resource/featured-image-13.jpg
/images/resource/featured-image-14.jpg
/images/resource/featured-image-15.jpg
/images/resource/featured-image-2.jpg
/images/resource/featured-image-3.jpg
/images/resource/featured-image-4.jpg
/images/resource/featured-image-5.jpg
/images/resource/featured-image-6.jpg
/images/resource/featured-image-7.jpg
/images/resource/featured-image-8.jpg
/images/resource/featured-image-9.jpg
/images/resource/featured-thumb-1.jpg
/images/resource/featured-thumb-2.jpg
/images/resource/post-thumb-1.jpg
/images/resource/post-thumb-2.jpg
/images/resource/post-thumb-3.jpg
/images/resource/products
/images/resource/products/cart-thumb-1.jpg
/images/resource/products/cart-thumb-2.jpg
/images/resource/products/cart-thumb-3.jpg
/images/resource/products/cart-thumb-4.jpg
/images/resource/products/cart-thumb-5.jpg
/images/resource/products/cart-thumb-6.jpg
/images/resource/products/image-1.jpg
/images/resource/products/image-10.jpg
/images/resource/products/image-2.jpg
/images/resource/products/image-3.jpg
/images/resource/products/image-4.jpg
/images/resource/products/image-5.jpg

Found on 2025-02-20 13:38

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 162.241.169.13
Domain: zimbcw.com
Port: 80
URL: http://zimbcw.com

First seen 2024-12-30 14:11
Last seen 2025-02-20 15:55
Open for 52 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb92756795

[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	symlinks = false
	ignorecase = true
[remote "origin"]
	url = https://github.com/duke4-4/ZBCW.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main

Found on 2025-02-20 15:55

294 Bytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 162.241.169.13
Domain: zimbcw.com
Port: 80
URL: http://zimbcw.com

First seen 2024-12-30 14:11
Last seen 2025-02-20 15:55
Open for 52 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b76d324eff136257bc15b1f22dac55bcd5

Found 128 files trough .DS_Store spidering:

/about-us.html
/blog-grid.html
/blog-list.html
/blog-single.html
/blog.html
/contact.html
/css
/events.html
/fonts
/images
/images/background
/images/background/bg-page-title-1.jpg
/images/background/image-1.jpg
/images/background/image-2.jpg
/images/background/image-3.jpg
/images/background/image-4.jpg
/images/fancybox
/images/favicon.ico
/images/gallery
/images/gallery/1.jpg
/images/gallery/10.jpg
/images/gallery/11.jpg
/images/gallery/12.jpg
/images/gallery/13.jpg
/images/gallery/14.jpg
/images/gallery/15.jpg
/images/gallery/16.jpg
/images/gallery/17.jpg
/images/gallery/18.jpg
/images/gallery/19.jpg
/images/gallery/2.jpg
/images/gallery/20.jpg
/images/gallery/21.jpg
/images/gallery/22.jpg
/images/gallery/23.jpg
/images/gallery/24.jpg
/images/gallery/25.jpg
/images/gallery/26.jpg
/images/gallery/27.jpg
/images/gallery/28.jpg
/images/gallery/29.jpg
/images/gallery/3.jpg
/images/gallery/30.jpg
/images/gallery/31.jpg
/images/gallery/32.jpg
/images/gallery/33.jpg
/images/gallery/4.jpg
/images/gallery/5.jpg
/images/gallery/6.jpg
/images/gallery/7.jpg
/images/gallery/8.jpg
/images/gallery/9.jpg
/images/gallery/thumb-1.jpg
/images/gallery/thumb-2.jpg
/images/gallery/thumb-3.jpg
/images/gallery/thumb-4.jpg
/images/icons
/images/logo-2.png
/images/logo-3.png
/images/logo-4.png
/images/logo.png
/images/main-slider
/images/main-slider/image-1.jpg
/images/main-slider/image-2.jpg
/images/main-slider/image-3.jpg
/images/resource
/images/resource/author-thumb-1.jpg
/images/resource/author-thumb-2.jpg
/images/resource/author-thumb-3.jpg
/images/resource/author-thumb-4.jpg
/images/resource/author-thumb-5.jpg
/images/resource/author-thumb-6.jpg
/images/resource/blog-image-1.jpg
/images/resource/blog-image-10.jpg
/images/resource/blog-image-11.jpg
/images/resource/blog-image-12.jpg
/images/resource/blog-image-13.jpg
/images/resource/blog-image-14.jpg
/images/resource/blog-image-15.jpg
/images/resource/blog-image-16.jpg
/images/resource/blog-image-17.jpg
/images/resource/blog-image-18.jpg
/images/resource/blog-image-19.jpg
/images/resource/blog-image-2.jpg
/images/resource/blog-image-3.jpg
/images/resource/blog-image-4.jpg
/images/resource/blog-image-5.jpg
/images/resource/blog-image-6.jpg
/images/resource/blog-image-7.jpg
/images/resource/blog-image-8.jpg
/images/resource/blog-image-9.jpg
/images/resource/certificate-image-1.jpg
/images/resource/certificate-image-2.jpg
/images/resource/certificate-image-3.jpg
/images/resource/certificate-image-4.jpg
/images/resource/featured-image-1.jpg
/images/resource/featured-image-10.jpg
/images/resource/featured-image-11.jpg
/images/resource/featured-image-12.jpg
/images/resource/featured-image-13.jpg
/images/resource/featured-image-14.jpg
/images/resource/featured-image-15.jpg
/images/resource/featured-image-2.jpg
/images/resource/featured-image-3.jpg
/images/resource/featured-image-4.jpg
/images/resource/featured-image-5.jpg
/images/resource/featured-image-6.jpg
/images/resource/featured-image-7.jpg
/images/resource/featured-image-8.jpg
/images/resource/featured-image-9.jpg
/images/resource/featured-thumb-1.jpg
/images/resource/featured-thumb-2.jpg
/images/resource/post-thumb-1.jpg
/images/resource/post-thumb-2.jpg
/images/resource/post-thumb-3.jpg
/images/resource/products
/images/resource/products/cart-thumb-1.jpg
/images/resource/products/cart-thumb-2.jpg
/images/resource/products/cart-thumb-3.jpg
/images/resource/products/cart-thumb-4.jpg
/images/resource/products/cart-thumb-5.jpg
/images/resource/products/cart-thumb-6.jpg
/images/resource/products/image-1.jpg
/images/resource/products/image-10.jpg
/images/resource/products/image-2.jpg
/images/resource/products/image-3.jpg
/images/resource/products/image-4.jpg
/images/resource/products/image-5.jpg

Found on 2025-02-20 15:55

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 162.241.169.13
Domain: zimbcw.com
Port: 443
URL: https://zimbcw.com

First seen 2024-12-30 14:11
Last seen 2025-02-20 13:38
Open for 51 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb92756795

[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	symlinks = false
	ignorecase = true
[remote "origin"]
	url = https://github.com/duke4-4/ZBCW.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main

Found on 2025-02-20 13:38

294 Bytes

Create report

Domain zimbcw.com

United States

MacOS file listing through .DS_Store file

Git configuration and history exposed

MacOS file listing through .DS_Store file

Git configuration and history exposed

Domain summary

IP summary