.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: high
Fingerprint: 5f32cf5d6962f09cee671e0bee671e0bb12912f9ed09088a7159c32983ab0d38
Found 72 files trough .DS_Store spidering: /.env /.git /.gitignore /.htaccess /absenmhs /academic_sisfo.php /academic_sisfo1.php /admin /asset /assets /check_setting.php /class.ezpdf.php /class.pdf.php /composer.json /composer.lock /config /dashboard.php /datadonlot.php /datepicker /datepicker2 /dep /dep/src /disconnectdb.php /error /error_log /favicon.ico /font /fpdf.css /fpdf.php /fungsi_validasi.php /header_pdf.php /header_pdf2.php /header_pdf3.php /header_surat.php /img /include /index.php /kk /konfigurasi.mysql.php /lecturer /log_in.php /login_go.php /mhsw.sql /ori /pdfplot.php /pengembang.lib.php /petunjuk.php /petunjuk2.php /phplot.php /phplot_data.php /print_report /print_reportxls /pto_lect /pto_stud /punksi /qrcode.php /README.md /reset_pass.php /reset_pass_action.php /sambungandb.php /search /setting_awal.php /SOP_KRS_PORTAL_MAHASISWA.pdf /students /ta /themes /ttd /ubah_pass_dosen.php /ubah_pass_mhs.php /util /util.lib.php /vendor
Severity: high
Fingerprint: 5f32cf5d6962f09c8ef2655c8ef2655c4f29a2042aedb6f93a1358f016346100
Found 71 files trough .DS_Store spidering: /.env /.git /.gitignore /.htaccess /absenmhs /academic_sisfo.php /academic_sisfo1.php /admin /asset /assets /check_setting.php /class.ezpdf.php /class.pdf.php /composer.json /composer.lock /config /dashboard.php /datadonlot.php /datepicker /datepicker2 /dep /disconnectdb.php /error /error_log /favicon.ico /font /fpdf.css /fpdf.php /fungsi_validasi.php /header_pdf.php /header_pdf2.php /header_pdf3.php /header_surat.php /img /include /index.php /kk /konfigurasi.mysql.php /lecturer /log_in.php /login_go.php /mhsw.sql /ori /pdfplot.php /pengembang.lib.php /petunjuk.php /petunjuk2.php /phplot.php /phplot_data.php /print_report /print_reportxls /pto_lect /pto_stud /punksi /qrcode.php /README.md /reset_pass.php /reset_pass_action.php /sambungandb.php /search /setting_awal.php /SOP_KRS_PORTAL_MAHASISWA.pdf /students /ta /themes /ttd /ubah_pass_dosen.php /ubah_pass_mhs.php /util /util.lib.php /vendor
The following URL (usually /.git/config
) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947e78dd08e645819ded03389a63b8fcd1b72b2c0368acb1d932958df5
HTTP/1.1 200 OK Date: Sat, 06 May 2023 13:56:49 GMT Server: Apache/2.4.41 (Ubuntu) Set-Cookie: PHPSESSID=nev5mijlb7jbvh3emtarh8a396; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Page title: UNIVERSITAS TEKNOKRAT INDONESIALogin[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/nurisakbar/sisfo-kampus-portal.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b852d696
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/nurisakbar/sisfo-kampus-portal.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: high
Fingerprint: 5f32cf5d6962f09cfb7dc6fdfb7dc6fdcf759747703852c07065afdfb31cdb96
Found 74 files trough .DS_Store spidering: /.env /.git /.gitignore /.htaccess /absenmhs /academic_sisfo.php /academic_sisfo1.php /admin /asset /assets /check_setting.php /class.ezpdf.php /class.pdf.php /composer.json /composer.lock /config /dashboard.php /datadonlot.php /datepicker /datepicker2 /dep /dep/src /disconnectdb.php /error /error_log /favicon.ico /font /fpdf.css /fpdf.php /fungsi_validasi.php /header_pdf.php /header_pdf2.php /header_pdf3.php /header_surat.php /img /include /index.php /kk /konfigurasi.mysql.php /lecturer /log_in.php /login_go.php /mhsw.sql /ori /pdfplot.php /pengembang.lib.php /petunjuk.php /petunjuk2.php /phplot.php /phplot_data.php /print_report /print_reportxls /pto_lect /pto_stud /punksi /punksi/php-qrcode /punksi/php-qrcode/examples /qrcode.php /README.md /reset_pass.php /reset_pass_action.php /sambungandb.php /search /setting_awal.php /SOP_KRS_PORTAL_MAHASISWA.pdf /students /ta /themes /ttd /ubah_pass_dosen.php /ubah_pass_mhs.php /util /util.lib.php /vendor
The following URL (usually /.git/config
) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b852d696
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/nurisakbar/sisfo-kampus-portal.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main
The following URL (usually /.git/config
) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b852d696
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/nurisakbar/sisfo-kampus-portal.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main
The following URL (usually /.git/config
) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b852d696
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/nurisakbar/sisfo-kampus-portal.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: high
Fingerprint: 5f32cf5d6962f09cee671e0bee671e0bb12912f9ed09088a7159c32983ab0d38
Found 72 files trough .DS_Store spidering: /.env /.git /.gitignore /.htaccess /absenmhs /academic_sisfo.php /academic_sisfo1.php /admin /asset /assets /check_setting.php /class.ezpdf.php /class.pdf.php /composer.json /composer.lock /config /dashboard.php /datadonlot.php /datepicker /datepicker2 /dep /dep/src /disconnectdb.php /error /error_log /favicon.ico /font /fpdf.css /fpdf.php /fungsi_validasi.php /header_pdf.php /header_pdf2.php /header_pdf3.php /header_surat.php /img /include /index.php /kk /konfigurasi.mysql.php /lecturer /log_in.php /login_go.php /mhsw.sql /ori /pdfplot.php /pengembang.lib.php /petunjuk.php /petunjuk2.php /phplot.php /phplot_data.php /print_report /print_reportxls /pto_lect /pto_stud /punksi /qrcode.php /README.md /reset_pass.php /reset_pass_action.php /sambungandb.php /search /setting_awal.php /SOP_KRS_PORTAL_MAHASISWA.pdf /students /ta /themes /ttd /ubah_pass_dosen.php /ubah_pass_mhs.php /util /util.lib.php /vendor
PHPinfo page has been found in this directory. The PHPinfo page outputs a large amount of information about the current state of PHP.
This includes information about PHP compilation options and extensions, the PHP version, server information and environment (if compiled as a module), the PHP environment, OS version information, paths, master and local values of configuration options, HTTP headers, and the PHP License.
Environment variables may contain credentials.
Fingerprint: 2c44e2a6278fb0134173d6fa26de111539577a2704cab0e9fe67fdadc7ae48cd
Found PHP info page: $_SERVER['HTTP_HOST'] = 103.140.189.169 $_SERVER['HTTP_USER_AGENT'] = l9explore/1.3.0 $_SERVER['HTTP_ACCEPT_ENCODING'] = gzip $_SERVER['HTTP_CONNECTION'] = close $_SERVER['PATH'] = /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin $_SERVER['SERVER_SIGNATURE'] = no value $_SERVER['SERVER_SOFTWARE'] = Apache/2.4.41 (Ubuntu) $_SERVER['SERVER_NAME'] = 103.140.189.169 $_SERVER['SERVER_ADDR'] = 103.140.189.169 $_SERVER['SERVER_PORT'] = 80 $_SERVER['REMOTE_ADDR'] = 161.35.86.181 $_SERVER['DOCUMENT_ROOT'] = /home/sia/service $_SERVER['REQUEST_SCHEME'] = http $_SERVER['CONTEXT_PREFIX'] = no value $_SERVER['CONTEXT_DOCUMENT_ROOT'] = /home/sia/service $_SERVER['SERVER_ADMIN'] = pustik@teknokrat.ac.id $_SERVER['SCRIPT_FILENAME'] = /home/sia/service/info.php $_SERVER['REMOTE_PORT'] = 60740 $_SERVER['GATEWAY_INTERFACE'] = CGI/1.1 $_SERVER['SERVER_PROTOCOL'] = HTTP/1.1 $_SERVER['REQUEST_METHOD'] = GET $_SERVER['QUERY_STRING'] = no value $_SERVER['REQUEST_URI'] = /info.php $_SERVER['SCRIPT_NAME'] = /info.php $_SERVER['PHP_SELF'] = /info.php $_SERVER['REQUEST_TIME_FLOAT'] = 1666087763.7477 $_SERVER['REQUEST_TIME'] = 1666087763