LeakIX - Host 138.201.125.166

Host 138.201.125.166

Germany

Hetzner Online GmbH

Ubuntu

Software information

Apache Apache 2.4.18

tcp/10080 tcp/10081 tcp/10087 tcp/443

Apache Apache 2.4.57

tcp/443

Apache Apache 2.4.52

tcp/443 tcp/80

Apache Apache

tcp/8080

nginx nginx 1.10.3

tcp/443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 138.201.125.166
Domain: projects.asco.re
Port: 443
URL: https://projects.asco.re

First seen 2023-02-28 15:02
Last seen 2024-06-20 03:20
Open for 477 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c9ff0dc619ff0dc611a907c8d8cd22d439762b9fe639332c4

Found 85 files trough .DS_Store spidering:

/___bomcheck.php
/___cron.php
/___exec_method.php
/___fmg_flightinfo.php
/___fmg_flightinfo_new.php
/___fmgsyncjob.php
/___json_insert_geopos.php
/___post_flightpattern.php
/___tango_cgs.php
/___uds_rotation.php
/___uds_rotation_boms.php
/___uds_rotation_fromto.php
/app
/audit.php
/css
/curl.txt
/files
/files/Catering_LEJ_Mar03.xlsx
/files/Catering_LEJ_Mar04.xlsx
/files/Catering_LEJ_Mar05.xlsx
/files/Catering_LEJ_Mar06.xlsx
/files/Catering_LEJ_Mar07.xlsx
/files/Catering_LEJ_Mar08.xlsx
/files/Catering_LEJ_Mar09.xlsx
/files/Catering_LEJ_Mar10.xlsx
/files/Catering_LEJ_Mar11.xlsx
/files/Catering_LEJ_Mar12.xlsx
/files/Catering_LEJ_Mar13.xlsx
/files/Catering_LEJ_Mar14.xlsx
/files/Catering_LEJ_Mar15.xlsx
/files/Catering_LEJ_Mar16.xlsx
/files/Catering_LEJ_Mar17.xlsx
/files/Catering_LEJ_Mar19.xlsx
/files/Catering_LEJ_Mar20.xlsx
/files/Catering_LEJ_Mar21.xlsx
/files/exports
/files/tmp
/fmg_task.php
/fmglog.txt
/fonts
/grep
/home.php
/images
/index.php
/index_inline.php
/info.php
/js
/kernel
/kernel/datatable
/kernel/db
/kernel/dbsession
/kernel/format
/kernel/fpdf
/kernel/lib.inc.php
/kernel/PHPExcel-1.8
/kernel/qrcode
/kernel/qrcode/data
/kernel/qrcode/image.php
/kernel/qrcode/qrcode.class.php
/kernel/session
/kernel/tango_cgs
/kernel/tpl
/kernel/validation
/mobile.php
/mobile_dev.php
/mobile_old.php
/order.php
/query.php
/register.php
/reports_save.txt
/requesttest.txt
/restart.php
/signature.html
/sorttest.php
/static
/tangotest.php
/testrequest.php
/touch-icon-iphone-uds.png
/touch-icon-iphone.png
/tpls
/uds_rotation.php
/webuds.php
/webuds_inline.php
/xlstest.php
/Zend

Found on 2024-06-20 03:20

Severity: medium
Fingerprint: 5f32cf5d6962f09c5a2cc21a5a2cc21af1b9048234187e6859266a4fd54bbff0

Found 82 files trough .DS_Store spidering:

/___bomcheck.php
/___cron.php
/___exec_method.php
/___fmg_flightinfo.php
/___fmg_flightinfo_new.php
/___fmgsyncjob.php
/___json_insert_geopos.php
/___post_flightpattern.php
/___tango_cgs.php
/___uds_rotation.php
/___uds_rotation_boms.php
/___uds_rotation_fromto.php
/app
/audit.php
/css
/curl.txt
/files
/files/Catering_LEJ_Mar03.xlsx
/files/Catering_LEJ_Mar04.xlsx
/files/Catering_LEJ_Mar05.xlsx
/files/Catering_LEJ_Mar06.xlsx
/files/Catering_LEJ_Mar07.xlsx
/files/Catering_LEJ_Mar08.xlsx
/files/Catering_LEJ_Mar09.xlsx
/files/Catering_LEJ_Mar10.xlsx
/files/Catering_LEJ_Mar11.xlsx
/files/Catering_LEJ_Mar12.xlsx
/files/Catering_LEJ_Mar13.xlsx
/files/Catering_LEJ_Mar14.xlsx
/files/Catering_LEJ_Mar15.xlsx
/files/Catering_LEJ_Mar16.xlsx
/files/Catering_LEJ_Mar17.xlsx
/files/Catering_LEJ_Mar19.xlsx
/files/Catering_LEJ_Mar20.xlsx
/files/Catering_LEJ_Mar21.xlsx
/files/exports
/files/tmp
/fmg_task.php
/fmglog.txt
/fonts
/grep
/home.php
/images
/index.php
/index_inline.php
/info.php
/js
/kernel
/kernel/datatable
/kernel/db
/kernel/dbsession
/kernel/format
/kernel/fpdf
/kernel/lib.inc.php
/kernel/PHPExcel-1.8
/kernel/qrcode
/kernel/session
/kernel/tango_cgs
/kernel/tpl
/kernel/validation
/mobile.php
/mobile_dev.php
/mobile_old.php
/order.php
/query.php
/register.php
/reports_save.txt
/requesttest.txt
/restart.php
/signature.html
/sorttest.php
/static
/tangotest.php
/testrequest.php
/touch-icon-iphone-uds.png
/touch-icon-iphone.png
/tpls
/uds_rotation.php
/webuds.php
/webuds_inline.php
/xlstest.php
/Zend

Found on 2023-02-28 15:02

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 138.201.125.166
Domain: cateringco.re
Port: 443
URL: https://cateringco.re

First seen 2022-08-29 08:27
Last seen 2024-06-20 03:11
Open for 660 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c9ff0dc619ff0dc611a907c8d8cd22d439762b9fe639332c4

Found 85 files trough .DS_Store spidering:

/___bomcheck.php
/___cron.php
/___exec_method.php
/___fmg_flightinfo.php
/___fmg_flightinfo_new.php
/___fmgsyncjob.php
/___json_insert_geopos.php
/___post_flightpattern.php
/___tango_cgs.php
/___uds_rotation.php
/___uds_rotation_boms.php
/___uds_rotation_fromto.php
/app
/audit.php
/css
/curl.txt
/files
/files/Catering_LEJ_Mar03.xlsx
/files/Catering_LEJ_Mar04.xlsx
/files/Catering_LEJ_Mar05.xlsx
/files/Catering_LEJ_Mar06.xlsx
/files/Catering_LEJ_Mar07.xlsx
/files/Catering_LEJ_Mar08.xlsx
/files/Catering_LEJ_Mar09.xlsx
/files/Catering_LEJ_Mar10.xlsx
/files/Catering_LEJ_Mar11.xlsx
/files/Catering_LEJ_Mar12.xlsx
/files/Catering_LEJ_Mar13.xlsx
/files/Catering_LEJ_Mar14.xlsx
/files/Catering_LEJ_Mar15.xlsx
/files/Catering_LEJ_Mar16.xlsx
/files/Catering_LEJ_Mar17.xlsx
/files/Catering_LEJ_Mar19.xlsx
/files/Catering_LEJ_Mar20.xlsx
/files/Catering_LEJ_Mar21.xlsx
/files/exports
/files/tmp
/fmg_task.php
/fmglog.txt
/fonts
/grep
/home.php
/images
/index.php
/index_inline.php
/info.php
/js
/kernel
/kernel/datatable
/kernel/db
/kernel/dbsession
/kernel/format
/kernel/fpdf
/kernel/lib.inc.php
/kernel/PHPExcel-1.8
/kernel/qrcode
/kernel/qrcode/data
/kernel/qrcode/image.php
/kernel/qrcode/qrcode.class.php
/kernel/session
/kernel/tango_cgs
/kernel/tpl
/kernel/validation
/mobile.php
/mobile_dev.php
/mobile_old.php
/order.php
/query.php
/register.php
/reports_save.txt
/requesttest.txt
/restart.php
/signature.html
/sorttest.php
/static
/tangotest.php
/testrequest.php
/touch-icon-iphone-uds.png
/touch-icon-iphone.png
/tpls
/uds_rotation.php
/webuds.php
/webuds_inline.php
/xlstest.php
/Zend

Found on 2024-06-20 03:11

Severity: medium
Fingerprint: 5f32cf5d6962f09c5a2cc21a5a2cc21af1b9048234187e6859266a4fd54bbff0

Found 82 files trough .DS_Store spidering:

/___bomcheck.php
/___cron.php
/___exec_method.php
/___fmg_flightinfo.php
/___fmg_flightinfo_new.php
/___fmgsyncjob.php
/___json_insert_geopos.php
/___post_flightpattern.php
/___tango_cgs.php
/___uds_rotation.php
/___uds_rotation_boms.php
/___uds_rotation_fromto.php
/app
/audit.php
/css
/curl.txt
/files
/files/Catering_LEJ_Mar03.xlsx
/files/Catering_LEJ_Mar04.xlsx
/files/Catering_LEJ_Mar05.xlsx
/files/Catering_LEJ_Mar06.xlsx
/files/Catering_LEJ_Mar07.xlsx
/files/Catering_LEJ_Mar08.xlsx
/files/Catering_LEJ_Mar09.xlsx
/files/Catering_LEJ_Mar10.xlsx
/files/Catering_LEJ_Mar11.xlsx
/files/Catering_LEJ_Mar12.xlsx
/files/Catering_LEJ_Mar13.xlsx
/files/Catering_LEJ_Mar14.xlsx
/files/Catering_LEJ_Mar15.xlsx
/files/Catering_LEJ_Mar16.xlsx
/files/Catering_LEJ_Mar17.xlsx
/files/Catering_LEJ_Mar19.xlsx
/files/Catering_LEJ_Mar20.xlsx
/files/Catering_LEJ_Mar21.xlsx
/files/exports
/files/tmp
/fmg_task.php
/fmglog.txt
/fonts
/grep
/home.php
/images
/index.php
/index_inline.php
/info.php
/js
/kernel
/kernel/datatable
/kernel/db
/kernel/dbsession
/kernel/format
/kernel/fpdf
/kernel/lib.inc.php
/kernel/PHPExcel-1.8
/kernel/qrcode
/kernel/session
/kernel/tango_cgs
/kernel/tpl
/kernel/validation
/mobile.php
/mobile_dev.php
/mobile_old.php
/order.php
/query.php
/register.php
/reports_save.txt
/requesttest.txt
/restart.php
/signature.html
/sorttest.php
/static
/tangotest.php
/testrequest.php
/touch-icon-iphone-uds.png
/touch-icon-iphone.png
/tpls
/uds_rotation.php
/webuds.php
/webuds_inline.php
/xlstest.php
/Zend

Found on 2024-06-18 01:38

Severity: medium
Fingerprint: 5f32cf5d6962f09c2a0815492a081549bae151b56a26922bef1319a6307a1738

Found 70 files trough .DS_Store spidering:

/___bomcheck.php
/___cron.php
/___exec_method.php
/___fmg_flightinfo.php
/___fmg_flightinfo_new.php
/___fmgsyncjob.php
/___json_insert_geopos.php
/___post_flightpattern.php
/___tango_cgs.php
/___uds_rotation.php
/___uds_rotation_boms.php
/___uds_rotation_fromto.php
/app
/audit.php
/css
/curl.txt
/files
/files/Catering_LEJ_Mar03.xlsx
/files/Catering_LEJ_Mar04.xlsx
/files/Catering_LEJ_Mar05.xlsx
/files/Catering_LEJ_Mar06.xlsx
/files/Catering_LEJ_Mar07.xlsx
/files/Catering_LEJ_Mar08.xlsx
/files/Catering_LEJ_Mar09.xlsx
/files/Catering_LEJ_Mar10.xlsx
/files/Catering_LEJ_Mar11.xlsx
/files/Catering_LEJ_Mar12.xlsx
/files/Catering_LEJ_Mar13.xlsx
/files/Catering_LEJ_Mar14.xlsx
/files/Catering_LEJ_Mar15.xlsx
/files/Catering_LEJ_Mar16.xlsx
/files/Catering_LEJ_Mar17.xlsx
/files/Catering_LEJ_Mar19.xlsx
/files/Catering_LEJ_Mar20.xlsx
/files/Catering_LEJ_Mar21.xlsx
/files/exports
/files/tmp
/fmg_task.php
/fmglog.txt
/fonts
/grep
/home.php
/images
/index.php
/index_inline.php
/info.php
/js
/kernel
/mobile.php
/mobile_dev.php
/mobile_old.php
/order.php
/query.php
/register.php
/reports_save.txt
/requesttest.txt
/restart.php
/signature.html
/sorttest.php
/static
/tangotest.php
/testrequest.php
/touch-icon-iphone-uds.png
/touch-icon-iphone.png
/tpls
/uds_rotation.php
/webuds.php
/webuds_inline.php
/xlstest.php
/Zend

Found on 2024-05-24 07:09

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Port: 443
URL: https://138.201.125.166

First seen 2021-07-06 13:06
Last seen 2024-06-19 22:47
Open for 1079 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652290b300fd

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://diamant-d365.visualstudio.com/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store

Found on 2024-06-19 22:47

312 Bytes

Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522516af53d

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://DIAMANT-D365@dev.azure.com/DIAMANT-D365/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store

Found on 2023-11-16 17:28

322 Bytes

Severity: high
Fingerprint: 2580fa947e78dd08e645819d2db54f700f3738c8589be738d136d43f1c099bd2

HTTP/1.1 200 OK
Date: Sat, 06 May 2023 00:36:30 GMT
Server: Apache/2.4.18 (Ubuntu)
Vary: Accept-Encoding
Content-Length: 6440
Content-Type: text/html; charset=utf-8
Connection: close

Page title: ascore - Anmeldung[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://DIAMANT-D365@dev.azure.com/DIAMANT-D365/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store

Found on 2023-05-06 00:36

322 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Port: 10081
URL: http://138.201.125.166:10081

First seen 2023-09-03 14:27
Last seen 2024-06-19 22:42
Open for 290 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65221334939c

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/JULITHCH/cateringcore.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main

Found on 2024-06-19 22:42

265 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b16a3666

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://diamant-d365.visualstudio.com/Aviation/_git/cateringcore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main

Found on 2024-06-03 21:49

285 Bytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 138.201.125.166
Port: 10087
URL: http://138.201.125.166:10087

First seen 2023-09-02 07:04
Last seen 2024-06-19 22:08
Open for 291 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c9ff0dc619ff0dc611a907c8d8cd22d439762b9fe639332c4

Found 85 files trough .DS_Store spidering:

/___bomcheck.php
/___cron.php
/___exec_method.php
/___fmg_flightinfo.php
/___fmg_flightinfo_new.php
/___fmgsyncjob.php
/___json_insert_geopos.php
/___post_flightpattern.php
/___tango_cgs.php
/___uds_rotation.php
/___uds_rotation_boms.php
/___uds_rotation_fromto.php
/app
/audit.php
/css
/curl.txt
/files
/files/Catering_LEJ_Mar03.xlsx
/files/Catering_LEJ_Mar04.xlsx
/files/Catering_LEJ_Mar05.xlsx
/files/Catering_LEJ_Mar06.xlsx
/files/Catering_LEJ_Mar07.xlsx
/files/Catering_LEJ_Mar08.xlsx
/files/Catering_LEJ_Mar09.xlsx
/files/Catering_LEJ_Mar10.xlsx
/files/Catering_LEJ_Mar11.xlsx
/files/Catering_LEJ_Mar12.xlsx
/files/Catering_LEJ_Mar13.xlsx
/files/Catering_LEJ_Mar14.xlsx
/files/Catering_LEJ_Mar15.xlsx
/files/Catering_LEJ_Mar16.xlsx
/files/Catering_LEJ_Mar17.xlsx
/files/Catering_LEJ_Mar19.xlsx
/files/Catering_LEJ_Mar20.xlsx
/files/Catering_LEJ_Mar21.xlsx
/files/exports
/files/tmp
/fmg_task.php
/fmglog.txt
/fonts
/grep
/home.php
/images
/index.php
/index_inline.php
/info.php
/js
/kernel
/kernel/datatable
/kernel/db
/kernel/dbsession
/kernel/format
/kernel/fpdf
/kernel/lib.inc.php
/kernel/PHPExcel-1.8
/kernel/qrcode
/kernel/qrcode/data
/kernel/qrcode/image.php
/kernel/qrcode/qrcode.class.php
/kernel/session
/kernel/tango_cgs
/kernel/tpl
/kernel/validation
/mobile.php
/mobile_dev.php
/mobile_old.php
/order.php
/query.php
/register.php
/reports_save.txt
/requesttest.txt
/restart.php
/signature.html
/sorttest.php
/static
/tangotest.php
/testrequest.php
/touch-icon-iphone-uds.png
/touch-icon-iphone.png
/tpls
/uds_rotation.php
/webuds.php
/webuds_inline.php
/xlstest.php
/Zend

Found on 2024-06-19 22:08

Severity: medium
Fingerprint: 5f32cf5d6962f09c5a2cc21a5a2cc21af1b9048234187e6859266a4fd54bbff0

Found 82 files trough .DS_Store spidering:

/___bomcheck.php
/___cron.php
/___exec_method.php
/___fmg_flightinfo.php
/___fmg_flightinfo_new.php
/___fmgsyncjob.php
/___json_insert_geopos.php
/___post_flightpattern.php
/___tango_cgs.php
/___uds_rotation.php
/___uds_rotation_boms.php
/___uds_rotation_fromto.php
/app
/audit.php
/css
/curl.txt
/files
/files/Catering_LEJ_Mar03.xlsx
/files/Catering_LEJ_Mar04.xlsx
/files/Catering_LEJ_Mar05.xlsx
/files/Catering_LEJ_Mar06.xlsx
/files/Catering_LEJ_Mar07.xlsx
/files/Catering_LEJ_Mar08.xlsx
/files/Catering_LEJ_Mar09.xlsx
/files/Catering_LEJ_Mar10.xlsx
/files/Catering_LEJ_Mar11.xlsx
/files/Catering_LEJ_Mar12.xlsx
/files/Catering_LEJ_Mar13.xlsx
/files/Catering_LEJ_Mar14.xlsx
/files/Catering_LEJ_Mar15.xlsx
/files/Catering_LEJ_Mar16.xlsx
/files/Catering_LEJ_Mar17.xlsx
/files/Catering_LEJ_Mar19.xlsx
/files/Catering_LEJ_Mar20.xlsx
/files/Catering_LEJ_Mar21.xlsx
/files/exports
/files/tmp
/fmg_task.php
/fmglog.txt
/fonts
/grep
/home.php
/images
/index.php
/index_inline.php
/info.php
/js
/kernel
/kernel/datatable
/kernel/db
/kernel/dbsession
/kernel/format
/kernel/fpdf
/kernel/lib.inc.php
/kernel/PHPExcel-1.8
/kernel/qrcode
/kernel/session
/kernel/tango_cgs
/kernel/tpl
/kernel/validation
/mobile.php
/mobile_dev.php
/mobile_old.php
/order.php
/query.php
/register.php
/reports_save.txt
/requesttest.txt
/restart.php
/signature.html
/sorttest.php
/static
/tangotest.php
/testrequest.php
/touch-icon-iphone-uds.png
/touch-icon-iphone.png
/tpls
/uds_rotation.php
/webuds.php
/webuds_inline.php
/xlstest.php
/Zend

Found on 2024-05-08 12:55

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 138.201.125.166
Port: 10080
URL: http://138.201.125.166:10080

First seen 2023-09-01 05:53
Last seen 2024-06-19 21:46
Open for 292 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c9ff0dc619ff0dc611a907c8d8cd22d439762b9fe639332c4

Found 85 files trough .DS_Store spidering:

/___bomcheck.php
/___cron.php
/___exec_method.php
/___fmg_flightinfo.php
/___fmg_flightinfo_new.php
/___fmgsyncjob.php
/___json_insert_geopos.php
/___post_flightpattern.php
/___tango_cgs.php
/___uds_rotation.php
/___uds_rotation_boms.php
/___uds_rotation_fromto.php
/app
/audit.php
/css
/curl.txt
/files
/files/Catering_LEJ_Mar03.xlsx
/files/Catering_LEJ_Mar04.xlsx
/files/Catering_LEJ_Mar05.xlsx
/files/Catering_LEJ_Mar06.xlsx
/files/Catering_LEJ_Mar07.xlsx
/files/Catering_LEJ_Mar08.xlsx
/files/Catering_LEJ_Mar09.xlsx
/files/Catering_LEJ_Mar10.xlsx
/files/Catering_LEJ_Mar11.xlsx
/files/Catering_LEJ_Mar12.xlsx
/files/Catering_LEJ_Mar13.xlsx
/files/Catering_LEJ_Mar14.xlsx
/files/Catering_LEJ_Mar15.xlsx
/files/Catering_LEJ_Mar16.xlsx
/files/Catering_LEJ_Mar17.xlsx
/files/Catering_LEJ_Mar19.xlsx
/files/Catering_LEJ_Mar20.xlsx
/files/Catering_LEJ_Mar21.xlsx
/files/exports
/files/tmp
/fmg_task.php
/fmglog.txt
/fonts
/grep
/home.php
/images
/index.php
/index_inline.php
/info.php
/js
/kernel
/kernel/datatable
/kernel/db
/kernel/dbsession
/kernel/format
/kernel/fpdf
/kernel/lib.inc.php
/kernel/PHPExcel-1.8
/kernel/qrcode
/kernel/qrcode/data
/kernel/qrcode/image.php
/kernel/qrcode/qrcode.class.php
/kernel/session
/kernel/tango_cgs
/kernel/tpl
/kernel/validation
/mobile.php
/mobile_dev.php
/mobile_old.php
/order.php
/query.php
/register.php
/reports_save.txt
/requesttest.txt
/restart.php
/signature.html
/sorttest.php
/static
/tangotest.php
/testrequest.php
/touch-icon-iphone-uds.png
/touch-icon-iphone.png
/tpls
/uds_rotation.php
/webuds.php
/webuds_inline.php
/xlstest.php
/Zend

Found on 2024-06-19 21:46

Severity: medium
Fingerprint: 5f32cf5d6962f09c5a2cc21a5a2cc21af1b9048234187e6859266a4fd54bbff0

Found 82 files trough .DS_Store spidering:

/___bomcheck.php
/___cron.php
/___exec_method.php
/___fmg_flightinfo.php
/___fmg_flightinfo_new.php
/___fmgsyncjob.php
/___json_insert_geopos.php
/___post_flightpattern.php
/___tango_cgs.php
/___uds_rotation.php
/___uds_rotation_boms.php
/___uds_rotation_fromto.php
/app
/audit.php
/css
/curl.txt
/files
/files/Catering_LEJ_Mar03.xlsx
/files/Catering_LEJ_Mar04.xlsx
/files/Catering_LEJ_Mar05.xlsx
/files/Catering_LEJ_Mar06.xlsx
/files/Catering_LEJ_Mar07.xlsx
/files/Catering_LEJ_Mar08.xlsx
/files/Catering_LEJ_Mar09.xlsx
/files/Catering_LEJ_Mar10.xlsx
/files/Catering_LEJ_Mar11.xlsx
/files/Catering_LEJ_Mar12.xlsx
/files/Catering_LEJ_Mar13.xlsx
/files/Catering_LEJ_Mar14.xlsx
/files/Catering_LEJ_Mar15.xlsx
/files/Catering_LEJ_Mar16.xlsx
/files/Catering_LEJ_Mar17.xlsx
/files/Catering_LEJ_Mar19.xlsx
/files/Catering_LEJ_Mar20.xlsx
/files/Catering_LEJ_Mar21.xlsx
/files/exports
/files/tmp
/fmg_task.php
/fmglog.txt
/fonts
/grep
/home.php
/images
/index.php
/index_inline.php
/info.php
/js
/kernel
/kernel/datatable
/kernel/db
/kernel/dbsession
/kernel/format
/kernel/fpdf
/kernel/lib.inc.php
/kernel/PHPExcel-1.8
/kernel/qrcode
/kernel/session
/kernel/tango_cgs
/kernel/tpl
/kernel/validation
/mobile.php
/mobile_dev.php
/mobile_old.php
/order.php
/query.php
/register.php
/reports_save.txt
/requesttest.txt
/restart.php
/signature.html
/sorttest.php
/static
/tangotest.php
/testrequest.php
/touch-icon-iphone-uds.png
/touch-icon-iphone.png
/tpls
/uds_rotation.php
/webuds.php
/webuds_inline.php
/xlstest.php
/Zend

Found on 2023-12-23 19:14

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Domain: www.cateringco.re
Port: 443
URL: https://www.cateringco.re

First seen 2022-08-03 13:23
Last seen 2024-06-18 21:00
Open for 685 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652290b300fd

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://diamant-d365.visualstudio.com/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store

Found on 2024-06-18 21:00

312 Bytes

Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522516af53d

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://DIAMANT-D365@dev.azure.com/DIAMANT-D365/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store

Found on 2022-08-03 13:23

322 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Domain: www.beta.cateringco.re
Port: 443
URL: https://www.beta.cateringco.re

First seen 2022-08-03 16:43
Last seen 2024-06-18 20:44
Open for 685 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652290b300fd

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://diamant-d365.visualstudio.com/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store

Found on 2024-06-18 20:44

312 Bytes

Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522516af53d

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://DIAMANT-D365@dev.azure.com/DIAMANT-D365/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store

Found on 2023-11-16 20:48

322 Bytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 138.201.125.166
Domain: cateringcore.asco.re
Port: 443
URL: https://cateringcore.asco.re

First seen 2022-08-29 08:27
Last seen 2024-06-18 20:20
Open for 659 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c9ff0dc619ff0dc611a907c8d8cd22d439762b9fe639332c4

Found 85 files trough .DS_Store spidering:

/___bomcheck.php
/___cron.php
/___exec_method.php
/___fmg_flightinfo.php
/___fmg_flightinfo_new.php
/___fmgsyncjob.php
/___json_insert_geopos.php
/___post_flightpattern.php
/___tango_cgs.php
/___uds_rotation.php
/___uds_rotation_boms.php
/___uds_rotation_fromto.php
/app
/audit.php
/css
/curl.txt
/files
/files/Catering_LEJ_Mar03.xlsx
/files/Catering_LEJ_Mar04.xlsx
/files/Catering_LEJ_Mar05.xlsx
/files/Catering_LEJ_Mar06.xlsx
/files/Catering_LEJ_Mar07.xlsx
/files/Catering_LEJ_Mar08.xlsx
/files/Catering_LEJ_Mar09.xlsx
/files/Catering_LEJ_Mar10.xlsx
/files/Catering_LEJ_Mar11.xlsx
/files/Catering_LEJ_Mar12.xlsx
/files/Catering_LEJ_Mar13.xlsx
/files/Catering_LEJ_Mar14.xlsx
/files/Catering_LEJ_Mar15.xlsx
/files/Catering_LEJ_Mar16.xlsx
/files/Catering_LEJ_Mar17.xlsx
/files/Catering_LEJ_Mar19.xlsx
/files/Catering_LEJ_Mar20.xlsx
/files/Catering_LEJ_Mar21.xlsx
/files/exports
/files/tmp
/fmg_task.php
/fmglog.txt
/fonts
/grep
/home.php
/images
/index.php
/index_inline.php
/info.php
/js
/kernel
/kernel/datatable
/kernel/db
/kernel/dbsession
/kernel/format
/kernel/fpdf
/kernel/lib.inc.php
/kernel/PHPExcel-1.8
/kernel/qrcode
/kernel/qrcode/data
/kernel/qrcode/image.php
/kernel/qrcode/qrcode.class.php
/kernel/session
/kernel/tango_cgs
/kernel/tpl
/kernel/validation
/mobile.php
/mobile_dev.php
/mobile_old.php
/order.php
/query.php
/register.php
/reports_save.txt
/requesttest.txt
/restart.php
/signature.html
/sorttest.php
/static
/tangotest.php
/testrequest.php
/touch-icon-iphone-uds.png
/touch-icon-iphone.png
/tpls
/uds_rotation.php
/webuds.php
/webuds_inline.php
/xlstest.php
/Zend

Found on 2024-06-18 20:20

Severity: medium
Fingerprint: 5f32cf5d6962f09c5a2cc21a5a2cc21af1b9048234187e6859266a4fd54bbff0

Found 82 files trough .DS_Store spidering:

/___bomcheck.php
/___cron.php
/___exec_method.php
/___fmg_flightinfo.php
/___fmg_flightinfo_new.php
/___fmgsyncjob.php
/___json_insert_geopos.php
/___post_flightpattern.php
/___tango_cgs.php
/___uds_rotation.php
/___uds_rotation_boms.php
/___uds_rotation_fromto.php
/app
/audit.php
/css
/curl.txt
/files
/files/Catering_LEJ_Mar03.xlsx
/files/Catering_LEJ_Mar04.xlsx
/files/Catering_LEJ_Mar05.xlsx
/files/Catering_LEJ_Mar06.xlsx
/files/Catering_LEJ_Mar07.xlsx
/files/Catering_LEJ_Mar08.xlsx
/files/Catering_LEJ_Mar09.xlsx
/files/Catering_LEJ_Mar10.xlsx
/files/Catering_LEJ_Mar11.xlsx
/files/Catering_LEJ_Mar12.xlsx
/files/Catering_LEJ_Mar13.xlsx
/files/Catering_LEJ_Mar14.xlsx
/files/Catering_LEJ_Mar15.xlsx
/files/Catering_LEJ_Mar16.xlsx
/files/Catering_LEJ_Mar17.xlsx
/files/Catering_LEJ_Mar19.xlsx
/files/Catering_LEJ_Mar20.xlsx
/files/Catering_LEJ_Mar21.xlsx
/files/exports
/files/tmp
/fmg_task.php
/fmglog.txt
/fonts
/grep
/home.php
/images
/index.php
/index_inline.php
/info.php
/js
/kernel
/kernel/datatable
/kernel/db
/kernel/dbsession
/kernel/format
/kernel/fpdf
/kernel/lib.inc.php
/kernel/PHPExcel-1.8
/kernel/qrcode
/kernel/session
/kernel/tango_cgs
/kernel/tpl
/kernel/validation
/mobile.php
/mobile_dev.php
/mobile_old.php
/order.php
/query.php
/register.php
/reports_save.txt
/requesttest.txt
/restart.php
/signature.html
/sorttest.php
/static
/tangotest.php
/testrequest.php
/touch-icon-iphone-uds.png
/touch-icon-iphone.png
/tpls
/uds_rotation.php
/webuds.php
/webuds_inline.php
/xlstest.php
/Zend

Found on 2024-06-01 03:50

Severity: medium
Fingerprint: 5f32cf5d6962f09c2a0815492a081549bae151b56a26922bef1319a6307a1738

Found 70 files trough .DS_Store spidering:

/___bomcheck.php
/___cron.php
/___exec_method.php
/___fmg_flightinfo.php
/___fmg_flightinfo_new.php
/___fmgsyncjob.php
/___json_insert_geopos.php
/___post_flightpattern.php
/___tango_cgs.php
/___uds_rotation.php
/___uds_rotation_boms.php
/___uds_rotation_fromto.php
/app
/audit.php
/css
/curl.txt
/files
/files/Catering_LEJ_Mar03.xlsx
/files/Catering_LEJ_Mar04.xlsx
/files/Catering_LEJ_Mar05.xlsx
/files/Catering_LEJ_Mar06.xlsx
/files/Catering_LEJ_Mar07.xlsx
/files/Catering_LEJ_Mar08.xlsx
/files/Catering_LEJ_Mar09.xlsx
/files/Catering_LEJ_Mar10.xlsx
/files/Catering_LEJ_Mar11.xlsx
/files/Catering_LEJ_Mar12.xlsx
/files/Catering_LEJ_Mar13.xlsx
/files/Catering_LEJ_Mar14.xlsx
/files/Catering_LEJ_Mar15.xlsx
/files/Catering_LEJ_Mar16.xlsx
/files/Catering_LEJ_Mar17.xlsx
/files/Catering_LEJ_Mar19.xlsx
/files/Catering_LEJ_Mar20.xlsx
/files/Catering_LEJ_Mar21.xlsx
/files/exports
/files/tmp
/fmg_task.php
/fmglog.txt
/fonts
/grep
/home.php
/images
/index.php
/index_inline.php
/info.php
/js
/kernel
/mobile.php
/mobile_dev.php
/mobile_old.php
/order.php
/query.php
/register.php
/reports_save.txt
/requesttest.txt
/restart.php
/signature.html
/sorttest.php
/static
/tangotest.php
/testrequest.php
/touch-icon-iphone-uds.png
/touch-icon-iphone.png
/tpls
/uds_rotation.php
/webuds.php
/webuds_inline.php
/xlstest.php
/Zend

Found on 2023-05-02 12:10

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Domain: staging.cateringco.re
Port: 443
URL: https://staging.cateringco.re

First seen 2023-05-02 12:10
Last seen 2024-06-18 19:03
Open for 413 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652290b300fd

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://diamant-d365.visualstudio.com/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store

Found on 2024-06-18 19:03

312 Bytes

Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522516af53d

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://DIAMANT-D365@dev.azure.com/DIAMANT-D365/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store

Found on 2023-11-06 06:18

322 Bytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 138.201.125.166
Domain: fra.cateringco.re
Port: 80
URL: http://fra.cateringco.re

First seen 2022-08-29 08:27
Last seen 2024-06-18 19:03
Open for 659 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c9ff0dc619ff0dc611a907c8d8cd22d439762b9fe639332c4

Found 85 files trough .DS_Store spidering:

/___bomcheck.php
/___cron.php
/___exec_method.php
/___fmg_flightinfo.php
/___fmg_flightinfo_new.php
/___fmgsyncjob.php
/___json_insert_geopos.php
/___post_flightpattern.php
/___tango_cgs.php
/___uds_rotation.php
/___uds_rotation_boms.php
/___uds_rotation_fromto.php
/app
/audit.php
/css
/curl.txt
/files
/files/Catering_LEJ_Mar03.xlsx
/files/Catering_LEJ_Mar04.xlsx
/files/Catering_LEJ_Mar05.xlsx
/files/Catering_LEJ_Mar06.xlsx
/files/Catering_LEJ_Mar07.xlsx
/files/Catering_LEJ_Mar08.xlsx
/files/Catering_LEJ_Mar09.xlsx
/files/Catering_LEJ_Mar10.xlsx
/files/Catering_LEJ_Mar11.xlsx
/files/Catering_LEJ_Mar12.xlsx
/files/Catering_LEJ_Mar13.xlsx
/files/Catering_LEJ_Mar14.xlsx
/files/Catering_LEJ_Mar15.xlsx
/files/Catering_LEJ_Mar16.xlsx
/files/Catering_LEJ_Mar17.xlsx
/files/Catering_LEJ_Mar19.xlsx
/files/Catering_LEJ_Mar20.xlsx
/files/Catering_LEJ_Mar21.xlsx
/files/exports
/files/tmp
/fmg_task.php
/fmglog.txt
/fonts
/grep
/home.php
/images
/index.php
/index_inline.php
/info.php
/js
/kernel
/kernel/datatable
/kernel/db
/kernel/dbsession
/kernel/format
/kernel/fpdf
/kernel/lib.inc.php
/kernel/PHPExcel-1.8
/kernel/qrcode
/kernel/qrcode/data
/kernel/qrcode/image.php
/kernel/qrcode/qrcode.class.php
/kernel/session
/kernel/tango_cgs
/kernel/tpl
/kernel/validation
/mobile.php
/mobile_dev.php
/mobile_old.php
/order.php
/query.php
/register.php
/reports_save.txt
/requesttest.txt
/restart.php
/signature.html
/sorttest.php
/static
/tangotest.php
/testrequest.php
/touch-icon-iphone-uds.png
/touch-icon-iphone.png
/tpls
/uds_rotation.php
/webuds.php
/webuds_inline.php
/xlstest.php
/Zend

Found on 2024-06-18 19:03

Severity: medium
Fingerprint: 5f32cf5d6962f09c5a2cc21a5a2cc21af1b9048234187e6859266a4fd54bbff0

Found 82 files trough .DS_Store spidering:

/___bomcheck.php
/___cron.php
/___exec_method.php
/___fmg_flightinfo.php
/___fmg_flightinfo_new.php
/___fmgsyncjob.php
/___json_insert_geopos.php
/___post_flightpattern.php
/___tango_cgs.php
/___uds_rotation.php
/___uds_rotation_boms.php
/___uds_rotation_fromto.php
/app
/audit.php
/css
/curl.txt
/files
/files/Catering_LEJ_Mar03.xlsx
/files/Catering_LEJ_Mar04.xlsx
/files/Catering_LEJ_Mar05.xlsx
/files/Catering_LEJ_Mar06.xlsx
/files/Catering_LEJ_Mar07.xlsx
/files/Catering_LEJ_Mar08.xlsx
/files/Catering_LEJ_Mar09.xlsx
/files/Catering_LEJ_Mar10.xlsx
/files/Catering_LEJ_Mar11.xlsx
/files/Catering_LEJ_Mar12.xlsx
/files/Catering_LEJ_Mar13.xlsx
/files/Catering_LEJ_Mar14.xlsx
/files/Catering_LEJ_Mar15.xlsx
/files/Catering_LEJ_Mar16.xlsx
/files/Catering_LEJ_Mar17.xlsx
/files/Catering_LEJ_Mar19.xlsx
/files/Catering_LEJ_Mar20.xlsx
/files/Catering_LEJ_Mar21.xlsx
/files/exports
/files/tmp
/fmg_task.php
/fmglog.txt
/fonts
/grep
/home.php
/images
/index.php
/index_inline.php
/info.php
/js
/kernel
/kernel/datatable
/kernel/db
/kernel/dbsession
/kernel/format
/kernel/fpdf
/kernel/lib.inc.php
/kernel/PHPExcel-1.8
/kernel/qrcode
/kernel/session
/kernel/tango_cgs
/kernel/tpl
/kernel/validation
/mobile.php
/mobile_dev.php
/mobile_old.php
/order.php
/query.php
/register.php
/reports_save.txt
/requesttest.txt
/restart.php
/signature.html
/sorttest.php
/static
/tangotest.php
/testrequest.php
/touch-icon-iphone-uds.png
/touch-icon-iphone.png
/tpls
/uds_rotation.php
/webuds.php
/webuds_inline.php
/xlstest.php
/Zend

Found on 2024-05-08 20:09

Severity: medium
Fingerprint: 5f32cf5d6962f09cfdf2c773fdf2c77386ffed0f4a408d79df8b20f0aa6e503d

Found 50 files trough .DS_Store spidering:

/___bomcheck.php
/___cron.php
/___exec_method.php
/___fmg_flightinfo.php
/___fmg_flightinfo_new.php
/___fmgsyncjob.php
/___json_insert_geopos.php
/___post_flightpattern.php
/___tango_cgs.php
/___uds_rotation.php
/___uds_rotation_boms.php
/___uds_rotation_fromto.php
/app
/audit.php
/css
/curl.txt
/files
/fmg_task.php
/fmglog.txt
/fonts
/grep
/home.php
/images
/index.php
/index_inline.php
/info.php
/js
/kernel
/mobile.php
/mobile_dev.php
/mobile_old.php
/order.php
/query.php
/register.php
/reports_save.txt
/requesttest.txt
/restart.php
/signature.html
/sorttest.php
/static
/tangotest.php
/testrequest.php
/touch-icon-iphone-uds.png
/touch-icon-iphone.png
/tpls
/uds_rotation.php
/webuds.php
/webuds_inline.php
/xlstest.php
/Zend

Found on 2022-11-07 08:34

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Domain: api.cateringco.re
Port: 443
URL: https://api.cateringco.re

First seen 2023-06-12 07:21
Last seen 2024-06-18 16:32
Open for 372 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65221334939c
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/JULITHCH/cateringcore.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2024-06-18 16:32
  
  265 Bytes
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b16a3666
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://diamant-d365.visualstudio.com/Aviation/_git/cateringcore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2024-06-02 19:59
  
  285 Bytes
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 138.201.125.166
Domain: projects.camso.ch
Port: 443
URL: https://projects.camso.ch

First seen 2023-02-28 15:01
Last seen 2024-06-18 14:19
Open for 475 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c9ff0dc619ff0dc611a907c8d8cd22d439762b9fe639332c4

Found 85 files trough .DS_Store spidering:

/___bomcheck.php
/___cron.php
/___exec_method.php
/___fmg_flightinfo.php
/___fmg_flightinfo_new.php
/___fmgsyncjob.php
/___json_insert_geopos.php
/___post_flightpattern.php
/___tango_cgs.php
/___uds_rotation.php
/___uds_rotation_boms.php
/___uds_rotation_fromto.php
/app
/audit.php
/css
/curl.txt
/files
/files/Catering_LEJ_Mar03.xlsx
/files/Catering_LEJ_Mar04.xlsx
/files/Catering_LEJ_Mar05.xlsx
/files/Catering_LEJ_Mar06.xlsx
/files/Catering_LEJ_Mar07.xlsx
/files/Catering_LEJ_Mar08.xlsx
/files/Catering_LEJ_Mar09.xlsx
/files/Catering_LEJ_Mar10.xlsx
/files/Catering_LEJ_Mar11.xlsx
/files/Catering_LEJ_Mar12.xlsx
/files/Catering_LEJ_Mar13.xlsx
/files/Catering_LEJ_Mar14.xlsx
/files/Catering_LEJ_Mar15.xlsx
/files/Catering_LEJ_Mar16.xlsx
/files/Catering_LEJ_Mar17.xlsx
/files/Catering_LEJ_Mar19.xlsx
/files/Catering_LEJ_Mar20.xlsx
/files/Catering_LEJ_Mar21.xlsx
/files/exports
/files/tmp
/fmg_task.php
/fmglog.txt
/fonts
/grep
/home.php
/images
/index.php
/index_inline.php
/info.php
/js
/kernel
/kernel/datatable
/kernel/db
/kernel/dbsession
/kernel/format
/kernel/fpdf
/kernel/lib.inc.php
/kernel/PHPExcel-1.8
/kernel/qrcode
/kernel/qrcode/data
/kernel/qrcode/image.php
/kernel/qrcode/qrcode.class.php
/kernel/session
/kernel/tango_cgs
/kernel/tpl
/kernel/validation
/mobile.php
/mobile_dev.php
/mobile_old.php
/order.php
/query.php
/register.php
/reports_save.txt
/requesttest.txt
/restart.php
/signature.html
/sorttest.php
/static
/tangotest.php
/testrequest.php
/touch-icon-iphone-uds.png
/touch-icon-iphone.png
/tpls
/uds_rotation.php
/webuds.php
/webuds_inline.php
/xlstest.php
/Zend

Found on 2024-06-18 14:19

Severity: medium
Fingerprint: 5f32cf5d6962f09c5a2cc21a5a2cc21af1b9048234187e6859266a4fd54bbff0

Found 82 files trough .DS_Store spidering:

/___bomcheck.php
/___cron.php
/___exec_method.php
/___fmg_flightinfo.php
/___fmg_flightinfo_new.php
/___fmgsyncjob.php
/___json_insert_geopos.php
/___post_flightpattern.php
/___tango_cgs.php
/___uds_rotation.php
/___uds_rotation_boms.php
/___uds_rotation_fromto.php
/app
/audit.php
/css
/curl.txt
/files
/files/Catering_LEJ_Mar03.xlsx
/files/Catering_LEJ_Mar04.xlsx
/files/Catering_LEJ_Mar05.xlsx
/files/Catering_LEJ_Mar06.xlsx
/files/Catering_LEJ_Mar07.xlsx
/files/Catering_LEJ_Mar08.xlsx
/files/Catering_LEJ_Mar09.xlsx
/files/Catering_LEJ_Mar10.xlsx
/files/Catering_LEJ_Mar11.xlsx
/files/Catering_LEJ_Mar12.xlsx
/files/Catering_LEJ_Mar13.xlsx
/files/Catering_LEJ_Mar14.xlsx
/files/Catering_LEJ_Mar15.xlsx
/files/Catering_LEJ_Mar16.xlsx
/files/Catering_LEJ_Mar17.xlsx
/files/Catering_LEJ_Mar19.xlsx
/files/Catering_LEJ_Mar20.xlsx
/files/Catering_LEJ_Mar21.xlsx
/files/exports
/files/tmp
/fmg_task.php
/fmglog.txt
/fonts
/grep
/home.php
/images
/index.php
/index_inline.php
/info.php
/js
/kernel
/kernel/datatable
/kernel/db
/kernel/dbsession
/kernel/format
/kernel/fpdf
/kernel/lib.inc.php
/kernel/PHPExcel-1.8
/kernel/qrcode
/kernel/session
/kernel/tango_cgs
/kernel/tpl
/kernel/validation
/mobile.php
/mobile_dev.php
/mobile_old.php
/order.php
/query.php
/register.php
/reports_save.txt
/requesttest.txt
/restart.php
/signature.html
/sorttest.php
/static
/tangotest.php
/testrequest.php
/touch-icon-iphone-uds.png
/touch-icon-iphone.png
/tpls
/uds_rotation.php
/webuds.php
/webuds_inline.php
/xlstest.php
/Zend

Found on 2024-05-08 21:45

Severity: medium
Fingerprint: 5f32cf5d6962f09c2a0815492a081549bae151b56a26922bef1319a6307a1738

Found 70 files trough .DS_Store spidering:

/___bomcheck.php
/___cron.php
/___exec_method.php
/___fmg_flightinfo.php
/___fmg_flightinfo_new.php
/___fmgsyncjob.php
/___json_insert_geopos.php
/___post_flightpattern.php
/___tango_cgs.php
/___uds_rotation.php
/___uds_rotation_boms.php
/___uds_rotation_fromto.php
/app
/audit.php
/css
/curl.txt
/files
/files/Catering_LEJ_Mar03.xlsx
/files/Catering_LEJ_Mar04.xlsx
/files/Catering_LEJ_Mar05.xlsx
/files/Catering_LEJ_Mar06.xlsx
/files/Catering_LEJ_Mar07.xlsx
/files/Catering_LEJ_Mar08.xlsx
/files/Catering_LEJ_Mar09.xlsx
/files/Catering_LEJ_Mar10.xlsx
/files/Catering_LEJ_Mar11.xlsx
/files/Catering_LEJ_Mar12.xlsx
/files/Catering_LEJ_Mar13.xlsx
/files/Catering_LEJ_Mar14.xlsx
/files/Catering_LEJ_Mar15.xlsx
/files/Catering_LEJ_Mar16.xlsx
/files/Catering_LEJ_Mar17.xlsx
/files/Catering_LEJ_Mar19.xlsx
/files/Catering_LEJ_Mar20.xlsx
/files/Catering_LEJ_Mar21.xlsx
/files/exports
/files/tmp
/fmg_task.php
/fmglog.txt
/fonts
/grep
/home.php
/images
/index.php
/index_inline.php
/info.php
/js
/kernel
/mobile.php
/mobile_dev.php
/mobile_old.php
/order.php
/query.php
/register.php
/reports_save.txt
/requesttest.txt
/restart.php
/signature.html
/sorttest.php
/static
/tangotest.php
/testrequest.php
/touch-icon-iphone-uds.png
/touch-icon-iphone.png
/tpls
/uds_rotation.php
/webuds.php
/webuds_inline.php
/xlstest.php
/Zend

Found on 2024-05-05 14:14

Severity: medium
Fingerprint: 5f32cf5d6962f09cfdf2c773fdf2c77386ffed0f4a408d79df8b20f0aa6e503d

Found 50 files trough .DS_Store spidering:

/___bomcheck.php
/___cron.php
/___exec_method.php
/___fmg_flightinfo.php
/___fmg_flightinfo_new.php
/___fmgsyncjob.php
/___json_insert_geopos.php
/___post_flightpattern.php
/___tango_cgs.php
/___uds_rotation.php
/___uds_rotation_boms.php
/___uds_rotation_fromto.php
/app
/audit.php
/css
/curl.txt
/files
/fmg_task.php
/fmglog.txt
/fonts
/grep
/home.php
/images
/index.php
/index_inline.php
/info.php
/js
/kernel
/mobile.php
/mobile_dev.php
/mobile_old.php
/order.php
/query.php
/register.php
/reports_save.txt
/requesttest.txt
/restart.php
/signature.html
/sorttest.php
/static
/tangotest.php
/testrequest.php
/touch-icon-iphone-uds.png
/touch-icon-iphone.png
/tpls
/uds_rotation.php
/webuds.php
/webuds_inline.php
/xlstest.php
/Zend

Found on 2023-02-28 15:01

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Domain: beta.cateringco.re
Port: 443
URL: https://beta.cateringco.re

First seen 2023-05-02 12:10
Last seen 2024-06-18 13:53
Open for 413 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65221334939c
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/JULITHCH/cateringcore.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2024-06-18 13:53
  
  265 Bytes
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b16a3666
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://diamant-d365.visualstudio.com/Aviation/_git/cateringcore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2024-06-02 15:44
  
  285 Bytes
Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Domain: asco.re
Port: 443
URL: https://asco.re

First seen 2021-08-17 04:50
Last seen 2024-06-18 13:47
Open for 1036 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652290b300fd

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://diamant-d365.visualstudio.com/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store

Found on 2024-06-18 13:47

312 Bytes

Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522516af53d

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://DIAMANT-D365@dev.azure.com/DIAMANT-D365/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store

Found on 2023-11-06 06:18

322 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Domain: lhc.cateringco.re
Port: 443
URL: https://lhc.cateringco.re

First seen 2023-03-03 12:28
Last seen 2024-06-18 12:43
Open for 473 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652290b300fd

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://diamant-d365.visualstudio.com/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store

Found on 2024-06-18 12:43

312 Bytes

Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522516af53d

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://DIAMANT-D365@dev.azure.com/DIAMANT-D365/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store

Found on 2023-11-06 06:18

322 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Domain: fra.cateringco.re
Port: 443
URL: https://fra.cateringco.re

First seen 2022-06-27 06:30
Last seen 2024-06-18 12:43
Open for 722 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652290b300fd

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://diamant-d365.visualstudio.com/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store

Found on 2024-06-18 12:43

312 Bytes

Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522516af53d

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://DIAMANT-D365@dev.azure.com/DIAMANT-D365/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store

Found on 2023-11-06 06:18

322 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Domain: vacations.asco.re
Port: 443
URL: https://vacations.asco.re

First seen 2022-06-27 06:30
Last seen 2024-06-18 12:43
Open for 722 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652290b300fd

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://diamant-d365.visualstudio.com/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store

Found on 2024-06-18 12:43

312 Bytes

Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522516af53d

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://DIAMANT-D365@dev.azure.com/DIAMANT-D365/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store

Found on 2023-11-16 23:20

322 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Domain: test.lhc.cateringco.re
Port: 443
URL: https://test.lhc.cateringco.re

First seen 2023-03-03 12:28
Last seen 2024-06-18 10:47
Open for 472 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652290b300fd

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://diamant-d365.visualstudio.com/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store

Found on 2024-06-18 10:47

312 Bytes

Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522516af53d

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://DIAMANT-D365@dev.azure.com/DIAMANT-D365/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store

Found on 2023-11-16 23:20

322 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Domain: cabsapi.cateringco.re
Port: 443
URL: https://cabsapi.cateringco.re

First seen 2023-07-14 19:49
Last seen 2024-06-18 08:58
Open for 339 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65221334939c
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/JULITHCH/cateringcore.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2024-06-18 08:58
  
  265 Bytes
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b16a3666
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://diamant-d365.visualstudio.com/Aviation/_git/cateringcore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2024-06-04 02:39
  
  285 Bytes
Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Domain: abwesenheit.asco.re
Port: 443
URL: https://abwesenheit.asco.re

First seen 2022-06-27 06:30
Last seen 2024-06-18 08:11
Open for 722 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652290b300fd

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://diamant-d365.visualstudio.com/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store

Found on 2024-06-18 08:11

312 Bytes

Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522516af53d

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://DIAMANT-D365@dev.azure.com/DIAMANT-D365/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store

Found on 2023-11-16 23:20

322 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Domain: datawarehouse.asco.re
Port: 443
URL: https://datawarehouse.asco.re

First seen 2022-06-27 06:30
Last seen 2024-06-18 07:36
Open for 722 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65225bf38ff2

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/thomasriehn/datawarehouse.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2024-06-18 07:36

273 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652290b300fd

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://diamant-d365.visualstudio.com/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store

Found on 2024-01-07 11:42

312 Bytes

Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522516af53d

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://DIAMANT-D365@dev.azure.com/DIAMANT-D365/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store

Found on 2023-11-16 23:20

322 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Domain: testing.cateringco.re
Port: 443
URL: https://testing.cateringco.re

First seen 2023-03-03 12:28
Last seen 2024-06-18 05:18
Open for 472 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652290b300fd

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://diamant-d365.visualstudio.com/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store

Found on 2024-06-18 05:18

312 Bytes

Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522516af53d

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://DIAMANT-D365@dev.azure.com/DIAMANT-D365/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store

Found on 2023-11-16 23:20

322 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Domain: cabsapi.cateringco.re
Port: 80
URL: http://cabsapi.cateringco.re

First seen 2023-07-14 19:49
Last seen 2024-03-10 18:08
Open for 239 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b16a3666
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://diamant-d365.visualstudio.com/Aviation/_git/cateringcore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2024-03-10 18:08
  
  285 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Domain: datawarehouse.asco.re
Port: 80
URL: http://datawarehouse.asco.re

First seen 2022-06-27 06:30
Last seen 2024-01-07 01:00
Open for 558 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65225bf38ff2
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/thomasriehn/datawarehouse.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2024-01-07 01:00
  
  273 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Port: 10082
URL: http://138.201.125.166:10082

First seen 2023-09-02 20:03
Last seen 2023-11-16 16:07
Open for 74 days
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522516af53d
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://DIAMANT-D365@dev.azure.com/DIAMANT-D365/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store
```
  Found on 2023-11-16 16:07
  
  322 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Domain: audits.asco.re
Port: 443
URL: https://audits.asco.re

First seen 2023-03-03 12:28
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522516af53d
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://DIAMANT-D365@dev.azure.com/DIAMANT-D365/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store
```
  Found on 2023-03-03 12:28
  
  322 Bytes
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 138.201.125.166
Domain: beta.cateringco.re
Port: 443
URL: https://beta.cateringco.re

First seen 2022-09-20 07:38
Last seen 2023-02-21 17:38
Open for 154 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c9ff0dc619ff0dc611a907c8d8cd22d439762b9fe639332c4

Found 85 files trough .DS_Store spidering:

/___bomcheck.php
/___cron.php
/___exec_method.php
/___fmg_flightinfo.php
/___fmg_flightinfo_new.php
/___fmgsyncjob.php
/___json_insert_geopos.php
/___post_flightpattern.php
/___tango_cgs.php
/___uds_rotation.php
/___uds_rotation_boms.php
/___uds_rotation_fromto.php
/app
/audit.php
/css
/curl.txt
/files
/files/Catering_LEJ_Mar03.xlsx
/files/Catering_LEJ_Mar04.xlsx
/files/Catering_LEJ_Mar05.xlsx
/files/Catering_LEJ_Mar06.xlsx
/files/Catering_LEJ_Mar07.xlsx
/files/Catering_LEJ_Mar08.xlsx
/files/Catering_LEJ_Mar09.xlsx
/files/Catering_LEJ_Mar10.xlsx
/files/Catering_LEJ_Mar11.xlsx
/files/Catering_LEJ_Mar12.xlsx
/files/Catering_LEJ_Mar13.xlsx
/files/Catering_LEJ_Mar14.xlsx
/files/Catering_LEJ_Mar15.xlsx
/files/Catering_LEJ_Mar16.xlsx
/files/Catering_LEJ_Mar17.xlsx
/files/Catering_LEJ_Mar19.xlsx
/files/Catering_LEJ_Mar20.xlsx
/files/Catering_LEJ_Mar21.xlsx
/files/exports
/files/tmp
/fmg_task.php
/fmglog.txt
/fonts
/grep
/home.php
/images
/index.php
/index_inline.php
/info.php
/js
/kernel
/kernel/datatable
/kernel/db
/kernel/dbsession
/kernel/format
/kernel/fpdf
/kernel/lib.inc.php
/kernel/PHPExcel-1.8
/kernel/qrcode
/kernel/qrcode/data
/kernel/qrcode/image.php
/kernel/qrcode/qrcode.class.php
/kernel/session
/kernel/tango_cgs
/kernel/tpl
/kernel/validation
/mobile.php
/mobile_dev.php
/mobile_old.php
/order.php
/query.php
/register.php
/reports_save.txt
/requesttest.txt
/restart.php
/signature.html
/sorttest.php
/static
/tangotest.php
/testrequest.php
/touch-icon-iphone-uds.png
/touch-icon-iphone.png
/tpls
/uds_rotation.php
/webuds.php
/webuds_inline.php
/xlstest.php
/Zend

Found on 2022-10-25 22:00

Severity: medium
Fingerprint: 5f32cf5d6962f09c2a0815492a081549bae151b56a26922bef1319a6307a1738

Found 70 files trough .DS_Store spidering:

/___bomcheck.php
/___cron.php
/___exec_method.php
/___fmg_flightinfo.php
/___fmg_flightinfo_new.php
/___fmgsyncjob.php
/___json_insert_geopos.php
/___post_flightpattern.php
/___tango_cgs.php
/___uds_rotation.php
/___uds_rotation_boms.php
/___uds_rotation_fromto.php
/app
/audit.php
/css
/curl.txt
/files
/files/Catering_LEJ_Mar03.xlsx
/files/Catering_LEJ_Mar04.xlsx
/files/Catering_LEJ_Mar05.xlsx
/files/Catering_LEJ_Mar06.xlsx
/files/Catering_LEJ_Mar07.xlsx
/files/Catering_LEJ_Mar08.xlsx
/files/Catering_LEJ_Mar09.xlsx
/files/Catering_LEJ_Mar10.xlsx
/files/Catering_LEJ_Mar11.xlsx
/files/Catering_LEJ_Mar12.xlsx
/files/Catering_LEJ_Mar13.xlsx
/files/Catering_LEJ_Mar14.xlsx
/files/Catering_LEJ_Mar15.xlsx
/files/Catering_LEJ_Mar16.xlsx
/files/Catering_LEJ_Mar17.xlsx
/files/Catering_LEJ_Mar19.xlsx
/files/Catering_LEJ_Mar20.xlsx
/files/Catering_LEJ_Mar21.xlsx
/files/exports
/files/tmp
/fmg_task.php
/fmglog.txt
/fonts
/grep
/home.php
/images
/index.php
/index_inline.php
/info.php
/js
/kernel
/mobile.php
/mobile_dev.php
/mobile_old.php
/order.php
/query.php
/register.php
/reports_save.txt
/requesttest.txt
/restart.php
/signature.html
/sorttest.php
/static
/tangotest.php
/testrequest.php
/touch-icon-iphone-uds.png
/touch-icon-iphone.png
/tpls
/uds_rotation.php
/webuds.php
/webuds_inline.php
/xlstest.php
/Zend

Found on 2022-09-20 07:38

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 138.201.125.166
Domain: staging.cateringco.re
Port: 443
URL: https://staging.cateringco.re

First seen 2023-02-01 10:33

Severity: medium
Fingerprint: 5f32cf5d6962f09c9ff0dc619ff0dc611a907c8d8cd22d439762b9fe639332c4

Found 85 files trough .DS_Store spidering:

/___bomcheck.php
/___cron.php
/___exec_method.php
/___fmg_flightinfo.php
/___fmg_flightinfo_new.php
/___fmgsyncjob.php
/___json_insert_geopos.php
/___post_flightpattern.php
/___tango_cgs.php
/___uds_rotation.php
/___uds_rotation_boms.php
/___uds_rotation_fromto.php
/app
/audit.php
/css
/curl.txt
/files
/files/Catering_LEJ_Mar03.xlsx
/files/Catering_LEJ_Mar04.xlsx
/files/Catering_LEJ_Mar05.xlsx
/files/Catering_LEJ_Mar06.xlsx
/files/Catering_LEJ_Mar07.xlsx
/files/Catering_LEJ_Mar08.xlsx
/files/Catering_LEJ_Mar09.xlsx
/files/Catering_LEJ_Mar10.xlsx
/files/Catering_LEJ_Mar11.xlsx
/files/Catering_LEJ_Mar12.xlsx
/files/Catering_LEJ_Mar13.xlsx
/files/Catering_LEJ_Mar14.xlsx
/files/Catering_LEJ_Mar15.xlsx
/files/Catering_LEJ_Mar16.xlsx
/files/Catering_LEJ_Mar17.xlsx
/files/Catering_LEJ_Mar19.xlsx
/files/Catering_LEJ_Mar20.xlsx
/files/Catering_LEJ_Mar21.xlsx
/files/exports
/files/tmp
/fmg_task.php
/fmglog.txt
/fonts
/grep
/home.php
/images
/index.php
/index_inline.php
/info.php
/js
/kernel
/kernel/datatable
/kernel/db
/kernel/dbsession
/kernel/format
/kernel/fpdf
/kernel/lib.inc.php
/kernel/PHPExcel-1.8
/kernel/qrcode
/kernel/qrcode/data
/kernel/qrcode/image.php
/kernel/qrcode/qrcode.class.php
/kernel/session
/kernel/tango_cgs
/kernel/tpl
/kernel/validation
/mobile.php
/mobile_dev.php
/mobile_old.php
/order.php
/query.php
/register.php
/reports_save.txt
/requesttest.txt
/restart.php
/signature.html
/sorttest.php
/static
/tangotest.php
/testrequest.php
/touch-icon-iphone-uds.png
/touch-icon-iphone.png
/tpls
/uds_rotation.php
/webuds.php
/webuds_inline.php
/xlstest.php
/Zend

Found on 2023-02-01 10:33

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Domain: api.tracking.asco.re
Port: 443
URL: https://api.tracking.asco.re

First seen 2022-06-27 06:30
Last seen 2022-12-15 17:53
Open for 171 days
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522516af53d
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://DIAMANT-D365@dev.azure.com/DIAMANT-D365/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store
```
  Found on 2022-06-27 06:30
  
  322 Bytes
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 138.201.125.166
Domain: testing.cateringco.re
Port: 443
URL: https://testing.cateringco.re

First seen 2022-11-07 08:34
Last seen 2022-12-09 09:19
Open for 32 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c9ff0dc619ff0dc611a907c8d8cd22d439762b9fe639332c4

Found 85 files trough .DS_Store spidering:

/___bomcheck.php
/___cron.php
/___exec_method.php
/___fmg_flightinfo.php
/___fmg_flightinfo_new.php
/___fmgsyncjob.php
/___json_insert_geopos.php
/___post_flightpattern.php
/___tango_cgs.php
/___uds_rotation.php
/___uds_rotation_boms.php
/___uds_rotation_fromto.php
/app
/audit.php
/css
/curl.txt
/files
/files/Catering_LEJ_Mar03.xlsx
/files/Catering_LEJ_Mar04.xlsx
/files/Catering_LEJ_Mar05.xlsx
/files/Catering_LEJ_Mar06.xlsx
/files/Catering_LEJ_Mar07.xlsx
/files/Catering_LEJ_Mar08.xlsx
/files/Catering_LEJ_Mar09.xlsx
/files/Catering_LEJ_Mar10.xlsx
/files/Catering_LEJ_Mar11.xlsx
/files/Catering_LEJ_Mar12.xlsx
/files/Catering_LEJ_Mar13.xlsx
/files/Catering_LEJ_Mar14.xlsx
/files/Catering_LEJ_Mar15.xlsx
/files/Catering_LEJ_Mar16.xlsx
/files/Catering_LEJ_Mar17.xlsx
/files/Catering_LEJ_Mar19.xlsx
/files/Catering_LEJ_Mar20.xlsx
/files/Catering_LEJ_Mar21.xlsx
/files/exports
/files/tmp
/fmg_task.php
/fmglog.txt
/fonts
/grep
/home.php
/images
/index.php
/index_inline.php
/info.php
/js
/kernel
/kernel/datatable
/kernel/db
/kernel/dbsession
/kernel/format
/kernel/fpdf
/kernel/lib.inc.php
/kernel/PHPExcel-1.8
/kernel/qrcode
/kernel/qrcode/data
/kernel/qrcode/image.php
/kernel/qrcode/qrcode.class.php
/kernel/session
/kernel/tango_cgs
/kernel/tpl
/kernel/validation
/mobile.php
/mobile_dev.php
/mobile_old.php
/order.php
/query.php
/register.php
/reports_save.txt
/requesttest.txt
/restart.php
/signature.html
/sorttest.php
/static
/tangotest.php
/testrequest.php
/touch-icon-iphone-uds.png
/touch-icon-iphone.png
/tpls
/uds_rotation.php
/webuds.php
/webuds_inline.php
/xlstest.php
/Zend

Found on 2022-12-09 09:19

Severity: medium
Fingerprint: 5f32cf5d6962f09c2a0815492a081549bae151b56a26922bef1319a6307a1738

Found 70 files trough .DS_Store spidering:

/___bomcheck.php
/___cron.php
/___exec_method.php
/___fmg_flightinfo.php
/___fmg_flightinfo_new.php
/___fmgsyncjob.php
/___json_insert_geopos.php
/___post_flightpattern.php
/___tango_cgs.php
/___uds_rotation.php
/___uds_rotation_boms.php
/___uds_rotation_fromto.php
/app
/audit.php
/css
/curl.txt
/files
/files/Catering_LEJ_Mar03.xlsx
/files/Catering_LEJ_Mar04.xlsx
/files/Catering_LEJ_Mar05.xlsx
/files/Catering_LEJ_Mar06.xlsx
/files/Catering_LEJ_Mar07.xlsx
/files/Catering_LEJ_Mar08.xlsx
/files/Catering_LEJ_Mar09.xlsx
/files/Catering_LEJ_Mar10.xlsx
/files/Catering_LEJ_Mar11.xlsx
/files/Catering_LEJ_Mar12.xlsx
/files/Catering_LEJ_Mar13.xlsx
/files/Catering_LEJ_Mar14.xlsx
/files/Catering_LEJ_Mar15.xlsx
/files/Catering_LEJ_Mar16.xlsx
/files/Catering_LEJ_Mar17.xlsx
/files/Catering_LEJ_Mar19.xlsx
/files/Catering_LEJ_Mar20.xlsx
/files/Catering_LEJ_Mar21.xlsx
/files/exports
/files/tmp
/fmg_task.php
/fmglog.txt
/fonts
/grep
/home.php
/images
/index.php
/index_inline.php
/info.php
/js
/kernel
/mobile.php
/mobile_dev.php
/mobile_old.php
/order.php
/query.php
/register.php
/reports_save.txt
/requesttest.txt
/restart.php
/signature.html
/sorttest.php
/static
/tangotest.php
/testrequest.php
/touch-icon-iphone-uds.png
/touch-icon-iphone.png
/tpls
/uds_rotation.php
/webuds.php
/webuds_inline.php
/xlstest.php
/Zend

Found on 2022-11-07 08:34

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Domain: projects.asco.re
Port: 443
URL: https://projects.asco.re

First seen 2022-06-27 06:30
Last seen 2022-11-07 08:34
Open for 133 days
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522516af53d
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://DIAMANT-D365@dev.azure.com/DIAMANT-D365/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store
```
  Found on 2022-06-27 06:30
  
  322 Bytes
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 138.201.125.166
Domain: projects.asco.re
Port: 80
URL: http://projects.asco.re

First seen 2022-08-29 08:27
Last seen 2022-11-07 08:34
Open for 70 days

Severity: medium
Fingerprint: 5f32cf5d6962f09cfdf2c773fdf2c77386ffed0f4a408d79df8b20f0aa6e503d

Found 50 files trough .DS_Store spidering:

/___bomcheck.php
/___cron.php
/___exec_method.php
/___fmg_flightinfo.php
/___fmg_flightinfo_new.php
/___fmgsyncjob.php
/___json_insert_geopos.php
/___post_flightpattern.php
/___tango_cgs.php
/___uds_rotation.php
/___uds_rotation_boms.php
/___uds_rotation_fromto.php
/app
/audit.php
/css
/curl.txt
/files
/fmg_task.php
/fmglog.txt
/fonts
/grep
/home.php
/images
/index.php
/index_inline.php
/info.php
/js
/kernel
/mobile.php
/mobile_dev.php
/mobile_old.php
/order.php
/query.php
/register.php
/reports_save.txt
/requesttest.txt
/restart.php
/signature.html
/sorttest.php
/static
/tangotest.php
/testrequest.php
/touch-icon-iphone-uds.png
/touch-icon-iphone.png
/tpls
/uds_rotation.php
/webuds.php
/webuds_inline.php
/xlstest.php
/Zend

Found on 2022-11-07 08:34

Severity: medium
Fingerprint: 5f32cf5d6962f09c2a0815492a081549bae151b56a26922bef1319a6307a1738

Found 70 files trough .DS_Store spidering:

/___bomcheck.php
/___cron.php
/___exec_method.php
/___fmg_flightinfo.php
/___fmg_flightinfo_new.php
/___fmgsyncjob.php
/___json_insert_geopos.php
/___post_flightpattern.php
/___tango_cgs.php
/___uds_rotation.php
/___uds_rotation_boms.php
/___uds_rotation_fromto.php
/app
/audit.php
/css
/curl.txt
/files
/files/Catering_LEJ_Mar03.xlsx
/files/Catering_LEJ_Mar04.xlsx
/files/Catering_LEJ_Mar05.xlsx
/files/Catering_LEJ_Mar06.xlsx
/files/Catering_LEJ_Mar07.xlsx
/files/Catering_LEJ_Mar08.xlsx
/files/Catering_LEJ_Mar09.xlsx
/files/Catering_LEJ_Mar10.xlsx
/files/Catering_LEJ_Mar11.xlsx
/files/Catering_LEJ_Mar12.xlsx
/files/Catering_LEJ_Mar13.xlsx
/files/Catering_LEJ_Mar14.xlsx
/files/Catering_LEJ_Mar15.xlsx
/files/Catering_LEJ_Mar16.xlsx
/files/Catering_LEJ_Mar17.xlsx
/files/Catering_LEJ_Mar19.xlsx
/files/Catering_LEJ_Mar20.xlsx
/files/Catering_LEJ_Mar21.xlsx
/files/exports
/files/tmp
/fmg_task.php
/fmglog.txt
/fonts
/grep
/home.php
/images
/index.php
/index_inline.php
/info.php
/js
/kernel
/mobile.php
/mobile_dev.php
/mobile_old.php
/order.php
/query.php
/register.php
/reports_save.txt
/requesttest.txt
/restart.php
/signature.html
/sorttest.php
/static
/tangotest.php
/testrequest.php
/touch-icon-iphone-uds.png
/touch-icon-iphone.png
/tpls
/uds_rotation.php
/webuds.php
/webuds_inline.php
/xlstest.php
/Zend

Found on 2022-08-29 08:27

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Domain: it.asco.re
Port: 443
URL: https://it.asco.re

First seen 2022-06-27 06:30
Last seen 2022-11-07 08:34
Open for 133 days
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522516af53d
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://DIAMANT-D365@dev.azure.com/DIAMANT-D365/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store
```
  Found on 2022-06-27 06:30
  
  322 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Domain: tasks.asco.re
Port: 443
URL: https://tasks.asco.re

First seen 2022-06-27 06:30
Last seen 2022-11-07 08:34
Open for 133 days
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522516af53d
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://DIAMANT-D365@dev.azure.com/DIAMANT-D365/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store
```
  Found on 2022-06-27 06:30
  
  322 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Domain: projects.camso.ch
Port: 443
URL: https://projects.camso.ch

First seen 2022-06-27 06:30
Last seen 2022-11-07 08:34
Open for 133 days
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522516af53d
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://DIAMANT-D365@dev.azure.com/DIAMANT-D365/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store
```
  Found on 2022-06-27 06:30
  
  322 Bytes
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 138.201.125.166
Domain: projects.camso.ch
Port: 80
URL: http://projects.camso.ch

First seen 2022-08-29 08:28
Last seen 2022-11-07 08:34
Open for 70 days

Severity: medium
Fingerprint: 5f32cf5d6962f09cfdf2c773fdf2c77386ffed0f4a408d79df8b20f0aa6e503d

Found 50 files trough .DS_Store spidering:

/___bomcheck.php
/___cron.php
/___exec_method.php
/___fmg_flightinfo.php
/___fmg_flightinfo_new.php
/___fmgsyncjob.php
/___json_insert_geopos.php
/___post_flightpattern.php
/___tango_cgs.php
/___uds_rotation.php
/___uds_rotation_boms.php
/___uds_rotation_fromto.php
/app
/audit.php
/css
/curl.txt
/files
/fmg_task.php
/fmglog.txt
/fonts
/grep
/home.php
/images
/index.php
/index_inline.php
/info.php
/js
/kernel
/mobile.php
/mobile_dev.php
/mobile_old.php
/order.php
/query.php
/register.php
/reports_save.txt
/requesttest.txt
/restart.php
/signature.html
/sorttest.php
/static
/tangotest.php
/testrequest.php
/touch-icon-iphone-uds.png
/touch-icon-iphone.png
/tpls
/uds_rotation.php
/webuds.php
/webuds_inline.php
/xlstest.php
/Zend

Found on 2022-11-07 08:34

Severity: medium
Fingerprint: 5f32cf5d6962f09c5a2cc21a5a2cc21af1b9048234187e6859266a4fd54bbff0

Found 82 files trough .DS_Store spidering:

/___bomcheck.php
/___cron.php
/___exec_method.php
/___fmg_flightinfo.php
/___fmg_flightinfo_new.php
/___fmgsyncjob.php
/___json_insert_geopos.php
/___post_flightpattern.php
/___tango_cgs.php
/___uds_rotation.php
/___uds_rotation_boms.php
/___uds_rotation_fromto.php
/app
/audit.php
/css
/curl.txt
/files
/files/Catering_LEJ_Mar03.xlsx
/files/Catering_LEJ_Mar04.xlsx
/files/Catering_LEJ_Mar05.xlsx
/files/Catering_LEJ_Mar06.xlsx
/files/Catering_LEJ_Mar07.xlsx
/files/Catering_LEJ_Mar08.xlsx
/files/Catering_LEJ_Mar09.xlsx
/files/Catering_LEJ_Mar10.xlsx
/files/Catering_LEJ_Mar11.xlsx
/files/Catering_LEJ_Mar12.xlsx
/files/Catering_LEJ_Mar13.xlsx
/files/Catering_LEJ_Mar14.xlsx
/files/Catering_LEJ_Mar15.xlsx
/files/Catering_LEJ_Mar16.xlsx
/files/Catering_LEJ_Mar17.xlsx
/files/Catering_LEJ_Mar19.xlsx
/files/Catering_LEJ_Mar20.xlsx
/files/Catering_LEJ_Mar21.xlsx
/files/exports
/files/tmp
/fmg_task.php
/fmglog.txt
/fonts
/grep
/home.php
/images
/index.php
/index_inline.php
/info.php
/js
/kernel
/kernel/datatable
/kernel/db
/kernel/dbsession
/kernel/format
/kernel/fpdf
/kernel/lib.inc.php
/kernel/PHPExcel-1.8
/kernel/qrcode
/kernel/session
/kernel/tango_cgs
/kernel/tpl
/kernel/validation
/mobile.php
/mobile_dev.php
/mobile_old.php
/order.php
/query.php
/register.php
/reports_save.txt
/requesttest.txt
/restart.php
/signature.html
/sorttest.php
/static
/tangotest.php
/testrequest.php
/touch-icon-iphone-uds.png
/touch-icon-iphone.png
/tpls
/uds_rotation.php
/webuds.php
/webuds_inline.php
/xlstest.php
/Zend

Found on 2022-08-29 08:28

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Domain: matlogapp.asco.re
Port: 443
URL: https://matlogapp.asco.re

First seen 2022-06-27 06:30
Last seen 2022-11-07 08:34
Open for 133 days
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522516af53d
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://DIAMANT-D365@dev.azure.com/DIAMANT-D365/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store
```
  Found on 2022-06-27 06:30
  
  322 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Domain: tickets.asco.re
Port: 443
URL: https://tickets.asco.re

First seen 2022-06-27 06:30
Last seen 2022-11-07 08:34
Open for 133 days
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522516af53d
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://DIAMANT-D365@dev.azure.com/DIAMANT-D365/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store
```
  Found on 2022-06-27 06:30
  
  322 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Domain: newsletter.asco.re
Port: 443
URL: https://newsletter.asco.re

First seen 2022-06-27 06:30
Last seen 2022-11-07 08:34
Open for 133 days
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522516af53d
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://DIAMANT-D365@dev.azure.com/DIAMANT-D365/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store
```
  Found on 2022-06-27 06:30
  
  322 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Domain: dev.xdata2.asco.re
Port: 443
URL: https://dev.xdata2.asco.re

First seen 2022-06-27 06:30
Last seen 2022-11-07 08:34
Open for 133 days
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522516af53d
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://DIAMANT-D365@dev.azure.com/DIAMANT-D365/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store
```
  Found on 2022-06-27 06:30
  
  322 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Domain: swagger.asco.re
Port: 443
URL: https://swagger.asco.re

First seen 2022-06-27 06:30
Last seen 2022-11-07 08:34
Open for 133 days
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522516af53d
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://DIAMANT-D365@dev.azure.com/DIAMANT-D365/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store
```
  Found on 2022-06-27 06:30
  
  322 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Domain: reporting.asco.re
Port: 443
URL: https://reporting.asco.re

First seen 2022-06-27 06:30
Last seen 2022-11-07 08:34
Open for 133 days
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522516af53d
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://DIAMANT-D365@dev.azure.com/DIAMANT-D365/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store
```
  Found on 2022-06-27 06:30
  
  322 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Domain: test.xdata2.asco.re
Port: 443
URL: https://test.xdata2.asco.re

First seen 2022-06-27 06:30
Last seen 2022-11-07 08:34
Open for 133 days
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522516af53d
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://DIAMANT-D365@dev.azure.com/DIAMANT-D365/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store
```
  Found on 2022-06-27 06:30
  
  322 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Domain: sendcloud.asco.re
Port: 443
URL: https://sendcloud.asco.re

First seen 2022-06-27 06:30
Last seen 2022-11-07 08:34
Open for 133 days
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522516af53d
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://DIAMANT-D365@dev.azure.com/DIAMANT-D365/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store
```
  Found on 2022-06-27 06:30
  
  322 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Domain: api.matlog.asco.re
Port: 443
URL: https://api.matlog.asco.re

First seen 2022-06-27 06:30
Last seen 2022-11-07 08:34
Open for 133 days
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522516af53d
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://DIAMANT-D365@dev.azure.com/DIAMANT-D365/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store
```
  Found on 2022-06-27 06:30
  
  322 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Domain: issues.asco.re
Port: 443
URL: https://issues.asco.re

First seen 2022-06-27 06:30
Last seen 2022-11-07 08:34
Open for 133 days
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522516af53d
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://DIAMANT-D365@dev.azure.com/DIAMANT-D365/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store
```
  Found on 2022-06-27 06:30
  
  322 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Port: 9000
URL: https://138.201.125.166:9000/.git/config

First seen 2021-09-14 04:34
Last seen 2022-07-28 19:23
Open for 317 days
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522516af53d
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://DIAMANT-D365@dev.azure.com/DIAMANT-D365/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store
```
  Found on 2021-09-14 04:34
  
  322 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 138.201.125.166
Domain: mx.schwiizerduets.ch
Port: 9000
URL: https://mx.schwiizerduets.ch:9000/.git/config

First seen 2021-09-14 04:36
Last seen 2021-09-17 12:05
Open for 3 days
- Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522516af53d
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://DIAMANT-D365@dev.azure.com/DIAMANT-D365/Aviation/_git/ascore
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[credential]
	helper = store
```
  Found on 2021-09-14 04:36
  
  322 Bytes
Create report

Open service 138.201.125.166:443 · projects.asco.re

2024-06-20 03:20

HTTP/1.1 200 OK
Date: Thu, 20 Jun 2024 03:20:14 GMT
Server: Apache/2.4.18 (Ubuntu)
Vary: Accept-Encoding
Content-Length: 2786
Content-Type: text/html; charset=utf-8
Connection: close

Page title: Projects - Login

<!DOCTYPE html>
<html lang="en">
  <head>
    <title>Projects - Login</title>
    <meta charset="utf-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <meta name="description" content="">
    <meta name="author" content="">
    <link rel="shortcut icon" type="image/ico" href="/images/as_quadrate.ico" />
    <link href="/static/n/bootstrap/css/bootstrap.min.css" rel="stylesheet">
    <link href="/static/n/bootstrap/css/bootstrap_spec_guests.css" rel="stylesheet">
        <style type="text/css">
          body {
            padding-top: 40px;
            padding-bottom: 40px;
            background-color: #f5f5f5;
          }

          .messagebox {
              width: 358px;
              margin: 0 auto 20px;
          }
          
          .form-signin {
            max-width: 300px;
            padding: 19px 29px 29px;
            margin: 0 auto 20px;
            background-color: #fff;
            border: 1px solid #e5e5e5;
            -webkit-border-radius: 5px;
               -moz-border-radius: 5px;
                    border-radius: 5px;
            -webkit-box-shadow: 0 1px 2px rgba(0,0,0,.05);
               -moz-box-shadow: 0 1px 2px rgba(0,0,0,.05);
                    box-shadow: 0 1px 2px rgba(0,0,0,.05);
          }
          .form-signin .form-signin-heading,
          .form-signin .checkbox {
            margin-bottom: 10px;
          }
          .form-signin input[type="text"],
          .form-signin input[type="password"] {
            font-size: 16px;
            height: auto;
            margin-bottom: 15px;
            padding: 7px 9px;
          }
  </style>
  </head>
  <body>
    <div class="container">
      <form class="form-signin" action="home.php" method="post">
                <center>
              <img src="/images/MELO_AviationServices_RGB.jpg" style="width:200px;"/>
              <h2 class="form-signin-heading" style="margin-top:0;"></h2>
          </center>

     
        
        <input type="text" name="USERNAME" class="form-control" placeholder="Username" required autofocus>
        <input type="password" name="PASSWORD" class="form-control" placeholder="Password" required>
        <input type="hidden" name="SIGNING" value="true" />
        <button class="btn btn-lg btn-primary btn-block" type="submit">Login</button>
                
      </form>
    </div> 
           <div class="navbar navbar-default navbar-fixed-bottom" role="navigation"  style="background-color: white; height: 22px;">
            <div class="navbar-footer" style="background-color: white; margin-top: 13px; ">
                <p>&nbsp;<img style="height: 20px" src="images/camso.jpg" />
            </div>
        </div>
    
  </body>
</html>

Found 9 hours ago by HttpPlugin