LeakIX - Host 103.140.189.169

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 103.140.189.169
Port: 443
URL: https://103.140.189.169

First seen 2023-05-05 08:55
Last seen 2023-08-17 11:02
Open for 104 days

Severity: high
Fingerprint: 5f32cf5d6962f09cee671e0bee671e0bb12912f9ed09088a7159c32983ab0d38

Found 72 files trough .DS_Store spidering:

/.env
/.git
/.gitignore
/.htaccess
/absenmhs
/academic_sisfo.php
/academic_sisfo1.php
/admin
/asset
/assets
/check_setting.php
/class.ezpdf.php
/class.pdf.php
/composer.json
/composer.lock
/config
/dashboard.php
/datadonlot.php
/datepicker
/datepicker2
/dep
/dep/src
/disconnectdb.php
/error
/error_log
/favicon.ico
/font
/fpdf.css
/fpdf.php
/fungsi_validasi.php
/header_pdf.php
/header_pdf2.php
/header_pdf3.php
/header_surat.php
/img
/include
/index.php
/kk
/konfigurasi.mysql.php
/lecturer
/log_in.php
/login_go.php
/mhsw.sql
/ori
/pdfplot.php
/pengembang.lib.php
/petunjuk.php
/petunjuk2.php
/phplot.php
/phplot_data.php
/print_report
/print_reportxls
/pto_lect
/pto_stud
/punksi
/qrcode.php
/README.md
/reset_pass.php
/reset_pass_action.php
/sambungandb.php
/search
/setting_awal.php
/SOP_KRS_PORTAL_MAHASISWA.pdf
/students
/ta
/themes
/ttd
/ubah_pass_dosen.php
/ubah_pass_mhs.php
/util
/util.lib.php
/vendor

Found on 2023-06-28 09:52

Severity: high
Fingerprint: 5f32cf5d6962f09c8ef2655c8ef2655c4f29a2042aedb6f93a1358f016346100

Found 71 files trough .DS_Store spidering:

/.env
/.git
/.gitignore
/.htaccess
/absenmhs
/academic_sisfo.php
/academic_sisfo1.php
/admin
/asset
/assets
/check_setting.php
/class.ezpdf.php
/class.pdf.php
/composer.json
/composer.lock
/config
/dashboard.php
/datadonlot.php
/datepicker
/datepicker2
/dep
/disconnectdb.php
/error
/error_log
/favicon.ico
/font
/fpdf.css
/fpdf.php
/fungsi_validasi.php
/header_pdf.php
/header_pdf2.php
/header_pdf3.php
/header_surat.php
/img
/include
/index.php
/kk
/konfigurasi.mysql.php
/lecturer
/log_in.php
/login_go.php
/mhsw.sql
/ori
/pdfplot.php
/pengembang.lib.php
/petunjuk.php
/petunjuk2.php
/phplot.php
/phplot_data.php
/print_report
/print_reportxls
/pto_lect
/pto_stud
/punksi
/qrcode.php
/README.md
/reset_pass.php
/reset_pass_action.php
/sambungandb.php
/search
/setting_awal.php
/SOP_KRS_PORTAL_MAHASISWA.pdf
/students
/ta
/themes
/ttd
/ubah_pass_dosen.php
/ubah_pass_mhs.php
/util
/util.lib.php
/vendor

Found on 2023-05-05 08:55

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 103.140.189.169
Port: 443
URL: https://103.140.189.169

First seen 2023-02-19 12:53
Last seen 2023-08-16 10:22
Open for 177 days

Severity: medium
Fingerprint: 2580fa947e78dd08e645819ded03389a63b8fcd1b72b2c0368acb1d932958df5

HTTP/1.1 200 OK
Date: Sat, 06 May 2023 13:56:49 GMT
Server: Apache/2.4.41 (Ubuntu)
Set-Cookie: PHPSESSID=nev5mijlb7jbvh3emtarh8a396; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Page title: UNIVERSITAS TEKNOKRAT INDONESIALogin[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/nurisakbar/sisfo-kampus-portal.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main

Found on 2023-05-06 13:56

274 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b852d696

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/nurisakbar/sisfo-kampus-portal.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main

Found on 2023-02-19 12:53

274 Bytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 103.140.189.169
Domain: siakad.teknokrat.ac.id
Port: 443
URL: https://siakad.teknokrat.ac.id

First seen 2023-06-15 23:42

Severity: high
Fingerprint: 5f32cf5d6962f09cfb7dc6fdfb7dc6fdcf759747703852c07065afdfb31cdb96

Found 74 files trough .DS_Store spidering:

/.env
/.git
/.gitignore
/.htaccess
/absenmhs
/academic_sisfo.php
/academic_sisfo1.php
/admin
/asset
/assets
/check_setting.php
/class.ezpdf.php
/class.pdf.php
/composer.json
/composer.lock
/config
/dashboard.php
/datadonlot.php
/datepicker
/datepicker2
/dep
/dep/src
/disconnectdb.php
/error
/error_log
/favicon.ico
/font
/fpdf.css
/fpdf.php
/fungsi_validasi.php
/header_pdf.php
/header_pdf2.php
/header_pdf3.php
/header_surat.php
/img
/include
/index.php
/kk
/konfigurasi.mysql.php
/lecturer
/log_in.php
/login_go.php
/mhsw.sql
/ori
/pdfplot.php
/pengembang.lib.php
/petunjuk.php
/petunjuk2.php
/phplot.php
/phplot_data.php
/print_report
/print_reportxls
/pto_lect
/pto_stud
/punksi
/punksi/php-qrcode
/punksi/php-qrcode/examples
/qrcode.php
/README.md
/reset_pass.php
/reset_pass_action.php
/sambungandb.php
/search
/setting_awal.php
/SOP_KRS_PORTAL_MAHASISWA.pdf
/students
/ta
/themes
/ttd
/ubah_pass_dosen.php
/ubah_pass_mhs.php
/util
/util.lib.php
/vendor

Found on 2023-06-15 23:42

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 103.140.189.169
Domain: siakad.teknokrat.ac.id
Port: 443
URL: https://siakad.teknokrat.ac.id

First seen 2023-02-16 01:11
Last seen 2023-06-15 23:42
Open for 119 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b852d696

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/nurisakbar/sisfo-kampus-portal.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main

Found on 2023-02-16 01:11

274 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 103.140.189.169
Domain: sisfo-portal-dev.teknokrat.ac.id
Port: 443
URL: https://sisfo-portal-dev.teknokrat.ac.id

First seen 2023-03-29 03:39

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b852d696

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/nurisakbar/sisfo-kampus-portal.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main

Found on 2023-03-29 03:39

274 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 103.140.189.169
Domain: sisfo-portal-dev.teknokrat.ac.id
Port: 80
URL: http://sisfo-portal-dev.teknokrat.ac.id

First seen 2023-03-29 03:39

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b852d696

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/nurisakbar/sisfo-kampus-portal.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main

Found on 2023-03-29 03:39

274 Bytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 103.140.189.169
Domain: sisfo-portal-dev.teknokrat.ac.id
Port: 80
URL: http://sisfo-portal-dev.teknokrat.ac.id

First seen 2023-03-29 03:39

Severity: high
Fingerprint: 5f32cf5d6962f09cee671e0bee671e0bb12912f9ed09088a7159c32983ab0d38

Found 72 files trough .DS_Store spidering:

/.env
/.git
/.gitignore
/.htaccess
/absenmhs
/academic_sisfo.php
/academic_sisfo1.php
/admin
/asset
/assets
/check_setting.php
/class.ezpdf.php
/class.pdf.php
/composer.json
/composer.lock
/config
/dashboard.php
/datadonlot.php
/datepicker
/datepicker2
/dep
/dep/src
/disconnectdb.php
/error
/error_log
/favicon.ico
/font
/fpdf.css
/fpdf.php
/fungsi_validasi.php
/header_pdf.php
/header_pdf2.php
/header_pdf3.php
/header_surat.php
/img
/include
/index.php
/kk
/konfigurasi.mysql.php
/lecturer
/log_in.php
/login_go.php
/mhsw.sql
/ori
/pdfplot.php
/pengembang.lib.php
/petunjuk.php
/petunjuk2.php
/phplot.php
/phplot_data.php
/print_report
/print_reportxls
/pto_lect
/pto_stud
/punksi
/qrcode.php
/README.md
/reset_pass.php
/reset_pass_action.php
/sambungandb.php
/search
/setting_awal.php
/SOP_KRS_PORTAL_MAHASISWA.pdf
/students
/ta
/themes
/ttd
/ubah_pass_dosen.php
/ubah_pass_mhs.php
/util
/util.lib.php
/vendor

Found on 2023-03-29 03:39

Create report

Found php information file

PHPinfo page has been found in this directory. The PHPinfo page outputs a large amount of information about the current state of PHP.

This includes information about PHP compilation options and extensions, the PHP version, server information and environment (if compiled as a module), the PHP environment, OS version information, paths, master and local values of configuration options, HTTP headers, and the PHP License.

Environment variables may contain credentials.

https://www.acunetix.com/vulnerabilities/web/phpinfo-page/

IP: 103.140.189.169
Port: 80
URL: http://103.140.189.169/info.php

First seen 2022-10-18 10:09

Fingerprint: 2c44e2a6278fb0134173d6fa26de111539577a2704cab0e9fe67fdadc7ae48cd

Found PHP info page:
$_SERVER['HTTP_HOST'] = 103.140.189.169
$_SERVER['HTTP_USER_AGENT'] = l9explore/1.3.0
$_SERVER['HTTP_ACCEPT_ENCODING'] = gzip
$_SERVER['HTTP_CONNECTION'] = close
$_SERVER['PATH'] = /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin
$_SERVER['SERVER_SIGNATURE'] = no value
$_SERVER['SERVER_SOFTWARE'] = Apache/2.4.41 (Ubuntu)
$_SERVER['SERVER_NAME'] = 103.140.189.169
$_SERVER['SERVER_ADDR'] = 103.140.189.169
$_SERVER['SERVER_PORT'] = 80
$_SERVER['REMOTE_ADDR'] = 161.35.86.181
$_SERVER['DOCUMENT_ROOT'] = /home/sia/service
$_SERVER['REQUEST_SCHEME'] = http
$_SERVER['CONTEXT_PREFIX'] = no value
$_SERVER['CONTEXT_DOCUMENT_ROOT'] = /home/sia/service
$_SERVER['SERVER_ADMIN'] = pustik@teknokrat.ac.id
$_SERVER['SCRIPT_FILENAME'] = /home/sia/service/info.php
$_SERVER['REMOTE_PORT'] = 60740
$_SERVER['GATEWAY_INTERFACE'] = CGI/1.1
$_SERVER['SERVER_PROTOCOL'] = HTTP/1.1
$_SERVER['REQUEST_METHOD'] = GET
$_SERVER['QUERY_STRING'] = no value
$_SERVER['REQUEST_URI'] = /info.php
$_SERVER['SCRIPT_NAME'] = /info.php
$_SERVER['PHP_SELF'] = /info.php
$_SERVER['REQUEST_TIME_FLOAT'] = 1666087763.7477
$_SERVER['REQUEST_TIME'] = 1666087763

Found on 2022-10-18 10:09

Create report

Host 103.140.189.169

Indonesia

MacOS file listing through .DS_Store file

Git configuration and history exposed

MacOS file listing through .DS_Store file

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

MacOS file listing through .DS_Store file

Found php information file

Domain summary