LeakIX - Host 185.221.182.112

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 185.221.182.112
Domain: app.atable.cg
Port: 443
URL: https://app.atable.cg

First seen 2025-05-16 19:27
Last seen 2025-06-08 18:13
Open for 22 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b73f74c96adb1fa5e698994b2213b58ebf

Found 128 files trough .DS_Store spidering:

/.htaccess
/assets
/assets/css
/assets/icons
/assets/images
/assets/js
/assets/vendor
/Back-End Restaurant symfony
/Back-End Restaurant symfony/accordion.html
/Back-End Restaurant symfony/alert.html
/Back-End Restaurant symfony/app_calender.html
/Back-End Restaurant symfony/app_profile.html
/Back-End Restaurant symfony/badge.html
/Back-End Restaurant symfony/bill.html
/Back-End Restaurant symfony/button.html
/Back-End Restaurant symfony/button_group.html
/Back-End Restaurant symfony/card.html
/Back-End Restaurant symfony/carousel.html
/Back-End Restaurant symfony/chartist.html
/Back-End Restaurant symfony/chartjs.html
/Back-End Restaurant symfony/checkout_page.html
/Back-End Restaurant symfony/customer_reviews.html
/Back-End Restaurant symfony/dashboard.html
/Back-End Restaurant symfony/deliver_main.html
/Back-End Restaurant symfony/deliver_order.html
/Back-End Restaurant symfony/dropdown.html
/Back-End Restaurant symfony/e.html
/Back-End Restaurant symfony/ecom_checkout.html
/Back-End Restaurant symfony/ecom_customers.html
/Back-End Restaurant symfony/ecom_invoice.html
/Back-End Restaurant symfony/ecom_product_details.html
/Back-End Restaurant symfony/ecom_product_grid.html
/Back-End Restaurant symfony/ecom_product_list.html
/Back-End Restaurant symfony/ecom_product_order.html
/Back-End Restaurant symfony/Edge
/Back-End Restaurant symfony/Edge.html
/Back-End Restaurant symfony/edit_profile.html
/Back-End Restaurant symfony/email_compose.html
/Back-End Restaurant symfony/email_inbox.html
/Back-End Restaurant symfony/email_read.html
/Back-End Restaurant symfony/favourite_menu.html
/Back-End Restaurant symfony/feedback.html
/Back-End Restaurant symfony/flot.html
/Back-End Restaurant symfony/food_order.html
/Back-End Restaurant symfony/form_ckeditor.html
/Back-End Restaurant symfony/form_element.html
/Back-End Restaurant symfony/form_pickers.html
/Back-End Restaurant symfony/form_validation_jquery.html
/Back-End Restaurant symfony/form_wizard.html
/Back-End Restaurant symfony/grid.html
/Back-End Restaurant symfony/index.html
/Back-End Restaurant symfony/index_2.html
/Back-End Restaurant symfony/indexecff.html
/Back-End Restaurant symfony/javascript;void(0);.html
/Back-End Restaurant symfony/lightgallery.html
/Back-End Restaurant symfony/list_group.html
/Back-End Restaurant symfony/map_jqvmap.html
/Back-End Restaurant symfony/menu.html
/Back-End Restaurant symfony/message.html
/Back-End Restaurant symfony/modal.html
/Back-End Restaurant symfony/morris.html
/Back-End Restaurant symfony/nestable.html
/Back-End Restaurant symfony/notification.html
/Back-End Restaurant symfony/noui_slider.html
/Back-End Restaurant symfony/order_history.html
/Back-End Restaurant symfony/orders.html
/Back-End Restaurant symfony/page-forgot-password.html
/Back-End Restaurant symfony/page_empty.html
/Back-End Restaurant symfony/page_error_400.html
/Back-End Restaurant symfony/page_error_403.html
/Back-End Restaurant symfony/page_error_404.html
/Back-End Restaurant symfony/page_error_500.html
/Back-End Restaurant symfony/page_error_503.html
/Back-End Restaurant symfony/page_lock_screen.html
/Back-End Restaurant symfony/page_login.html
/Back-End Restaurant symfony/page_register.html
/Back-End Restaurant symfony/pagination.html
/Back-End Restaurant symfony/peity.html
/Back-End Restaurant symfony/picker.html
/Back-End Restaurant symfony/popover.html
/Back-End Restaurant symfony/post_details.html
/Back-End Restaurant symfony/progressbar.html
/Back-End Restaurant symfony/public
/Back-End Restaurant symfony/restro_setting.html
/Back-End Restaurant symfony/select2.html
/Back-End Restaurant symfony/setting.html
/Back-End Restaurant symfony/sparkline.html
/Back-End Restaurant symfony/sweetalert.html
/Back-End Restaurant symfony/tab.html
/Back-End Restaurant symfony/table_bootstrap.html
/Back-End Restaurant symfony/table_datatable.html
/Back-End Restaurant symfony/toastr.html
/Back-End Restaurant symfony/Trident
/Back-End Restaurant symfony/Trident.html
/Back-End Restaurant symfony/typography.html
/Back-End Restaurant symfony/widget_basic.html
/Back-End Restaurant symfony/withdraw.html
/images
/index.php
/Restaurant
/Restaurant/2020
/Restaurant/2021
/Restaurant/about-me
/Restaurant/about-us
/Restaurant/À TABLE - Livrables Logo
/Restaurant/blog
/Restaurant/cart
/Restaurant/category
/Restaurant/checkout
/Restaurant/chefs
/Restaurant/comments
/Restaurant/contact
/Restaurant/CSS
/Restaurant/emma-newman
/Restaurant/faq
/Restaurant/features
/Restaurant/feed
/Restaurant/gallery
/Restaurant/history
/Restaurant/home-image
/Restaurant/home-video
/Restaurant/index.html
/Restaurant/index12e9.html
/Restaurant/index1913.html
/Restaurant/index2167.html
/Restaurant/index264a.html
/Restaurant/index2b79.html
/Restaurant/index2d8c.html

Found on 2025-06-08 18:13

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 185.221.182.112
Domain: admin.ubg-guinee.com
Port: 443
URL: https://admin.ubg-guinee.com

First seen 2023-12-04 19:25
Last seen 2025-06-08 13:22
Open for 551 days

Severity: low
Fingerprint: 5f32cf5d6962f09cc169dbbec169dbbe626f729b199cedc25a69c8e32dac1f10

Found 15 files trough .DS_Store spidering:

/.git
/.vscode
/config
/controllers
/fonctions
/migrations
/models
/node_modules
/public
/public/assets
/public/assets/images
/public/assets/images/logos
/routes
/seeders
/services

Found on 2025-06-08 13:22

Severity: low
Fingerprint: 5f32cf5d6962f09c11d3744d11d3744d9930cc46c0a50fa3b6adb7a47a022a08

Found 12 files trough .DS_Store spidering:

/.git
/.vscode
/config
/controllers
/fonctions
/migrations
/models
/node_modules
/public
/routes
/seeders
/services

Found on 2025-05-28 11:20

Severity: low
Fingerprint: 5f32cf5d6962f09cccdd54a0ccdd54a0904d808d014ac6c4f62483e995d32229

Found 13 files trough .DS_Store spidering:

/.git
/.vscode
/config
/controllers
/fonctions
/migrations
/models
/node_modules
/public
/public/assets
/routes
/seeders
/services

Found on 2025-05-16 14:35

Severity: low
Fingerprint: 5f32cf5d6962f09c39aac35b39aac35b9dd4fa7c636ced599fffa7ae81bb11ef

Found 14 files trough .DS_Store spidering:

/.git
/.vscode
/config
/controllers
/fonctions
/migrations
/models
/node_modules
/public
/public/assets
/public/assets/images
/routes
/seeders
/services

Found on 2024-06-25 23:35

Severity: low
Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0ff409caf1d7ce3958a8eebe70a8eebe70
```
Found 3 files trough .DS_Store spidering:

/assets
/assets/images
/assets/images/logos
```
Found on 2024-03-21 12:45

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.

IP: 185.221.182.112
Domain: admin.ubg-guinee.com
Port: 443
URL: https://admin.ubg-guinee.com

First seen 2024-04-06 08:42
Last seen 2025-06-08 13:22
Open for 428 days

Severity: critical
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522e9a63a5d

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://ghislain777: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@github.com/ghislain777/ubg.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main

Found on 2025-06-08 13:22

312 Bytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 185.221.182.112
Domain: www.app.atable.cg
Port: 443
URL: https://www.app.atable.cg

First seen 2025-05-16 19:27
Last seen 2025-05-30 20:45
Open for 14 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b73f74c96adb1fa5e698994b2213b58ebf

Found 128 files trough .DS_Store spidering:

/.htaccess
/assets
/assets/css
/assets/icons
/assets/images
/assets/js
/assets/vendor
/Back-End Restaurant symfony
/Back-End Restaurant symfony/accordion.html
/Back-End Restaurant symfony/alert.html
/Back-End Restaurant symfony/app_calender.html
/Back-End Restaurant symfony/app_profile.html
/Back-End Restaurant symfony/badge.html
/Back-End Restaurant symfony/bill.html
/Back-End Restaurant symfony/button.html
/Back-End Restaurant symfony/button_group.html
/Back-End Restaurant symfony/card.html
/Back-End Restaurant symfony/carousel.html
/Back-End Restaurant symfony/chartist.html
/Back-End Restaurant symfony/chartjs.html
/Back-End Restaurant symfony/checkout_page.html
/Back-End Restaurant symfony/customer_reviews.html
/Back-End Restaurant symfony/dashboard.html
/Back-End Restaurant symfony/deliver_main.html
/Back-End Restaurant symfony/deliver_order.html
/Back-End Restaurant symfony/dropdown.html
/Back-End Restaurant symfony/e.html
/Back-End Restaurant symfony/ecom_checkout.html
/Back-End Restaurant symfony/ecom_customers.html
/Back-End Restaurant symfony/ecom_invoice.html
/Back-End Restaurant symfony/ecom_product_details.html
/Back-End Restaurant symfony/ecom_product_grid.html
/Back-End Restaurant symfony/ecom_product_list.html
/Back-End Restaurant symfony/ecom_product_order.html
/Back-End Restaurant symfony/Edge
/Back-End Restaurant symfony/Edge.html
/Back-End Restaurant symfony/edit_profile.html
/Back-End Restaurant symfony/email_compose.html
/Back-End Restaurant symfony/email_inbox.html
/Back-End Restaurant symfony/email_read.html
/Back-End Restaurant symfony/favourite_menu.html
/Back-End Restaurant symfony/feedback.html
/Back-End Restaurant symfony/flot.html
/Back-End Restaurant symfony/food_order.html
/Back-End Restaurant symfony/form_ckeditor.html
/Back-End Restaurant symfony/form_element.html
/Back-End Restaurant symfony/form_pickers.html
/Back-End Restaurant symfony/form_validation_jquery.html
/Back-End Restaurant symfony/form_wizard.html
/Back-End Restaurant symfony/grid.html
/Back-End Restaurant symfony/index.html
/Back-End Restaurant symfony/index_2.html
/Back-End Restaurant symfony/indexecff.html
/Back-End Restaurant symfony/javascript;void(0);.html
/Back-End Restaurant symfony/lightgallery.html
/Back-End Restaurant symfony/list_group.html
/Back-End Restaurant symfony/map_jqvmap.html
/Back-End Restaurant symfony/menu.html
/Back-End Restaurant symfony/message.html
/Back-End Restaurant symfony/modal.html
/Back-End Restaurant symfony/morris.html
/Back-End Restaurant symfony/nestable.html
/Back-End Restaurant symfony/notification.html
/Back-End Restaurant symfony/noui_slider.html
/Back-End Restaurant symfony/order_history.html
/Back-End Restaurant symfony/orders.html
/Back-End Restaurant symfony/page-forgot-password.html
/Back-End Restaurant symfony/page_empty.html
/Back-End Restaurant symfony/page_error_400.html
/Back-End Restaurant symfony/page_error_403.html
/Back-End Restaurant symfony/page_error_404.html
/Back-End Restaurant symfony/page_error_500.html
/Back-End Restaurant symfony/page_error_503.html
/Back-End Restaurant symfony/page_lock_screen.html
/Back-End Restaurant symfony/page_login.html
/Back-End Restaurant symfony/page_register.html
/Back-End Restaurant symfony/pagination.html
/Back-End Restaurant symfony/peity.html
/Back-End Restaurant symfony/picker.html
/Back-End Restaurant symfony/popover.html
/Back-End Restaurant symfony/post_details.html
/Back-End Restaurant symfony/progressbar.html
/Back-End Restaurant symfony/public
/Back-End Restaurant symfony/restro_setting.html
/Back-End Restaurant symfony/select2.html
/Back-End Restaurant symfony/setting.html
/Back-End Restaurant symfony/sparkline.html
/Back-End Restaurant symfony/sweetalert.html
/Back-End Restaurant symfony/tab.html
/Back-End Restaurant symfony/table_bootstrap.html
/Back-End Restaurant symfony/table_datatable.html
/Back-End Restaurant symfony/toastr.html
/Back-End Restaurant symfony/Trident
/Back-End Restaurant symfony/Trident.html
/Back-End Restaurant symfony/typography.html
/Back-End Restaurant symfony/widget_basic.html
/Back-End Restaurant symfony/withdraw.html
/images
/index.php
/Restaurant
/Restaurant/2020
/Restaurant/2021
/Restaurant/about-me
/Restaurant/about-us
/Restaurant/À TABLE - Livrables Logo
/Restaurant/blog
/Restaurant/cart
/Restaurant/category
/Restaurant/checkout
/Restaurant/chefs
/Restaurant/comments
/Restaurant/contact
/Restaurant/CSS
/Restaurant/emma-newman
/Restaurant/faq
/Restaurant/features
/Restaurant/feed
/Restaurant/gallery
/Restaurant/history
/Restaurant/home-image
/Restaurant/home-video
/Restaurant/index.html
/Restaurant/index12e9.html
/Restaurant/index1913.html
/Restaurant/index2167.html
/Restaurant/index264a.html
/Restaurant/index2b79.html
/Restaurant/index2d8c.html

Found on 2025-05-30 20:45

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 185.221.182.112
Domain: www.uptime.yannick-mougin.com
Port: 80
URL: http://www.uptime.yannick-mougin.com

First seen 2025-05-23 19:43
Last seen 2025-05-30 09:47
Open for 6 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522588fe13a

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/louislam/uptime-kuma.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2025-05-30 09:47

268 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 185.221.182.112
Domain: uptime.yannick-mougin.com
Port: 443
URL: https://uptime.yannick-mougin.com

First seen 2025-01-21 21:41
Last seen 2025-05-30 05:51
Open for 128 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522588fe13a

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/louislam/uptime-kuma.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2025-05-30 05:51

268 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 185.221.182.112
Domain: uptime.yannick-mougin.com
Port: 80
URL: http://uptime.yannick-mougin.com

First seen 2025-01-21 21:42
Last seen 2025-05-30 04:13
Open for 128 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522588fe13a

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/louislam/uptime-kuma.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2025-05-30 04:13

268 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 185.221.182.112
Domain: api-zeta.yannick-mougin.com
Port: 443
URL: https://api-zeta.yannick-mougin.com

First seen 2023-07-07 05:43
Last seen 2025-05-28 11:48
Open for 691 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652204adfb13

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/dpnick/zeta-api.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main

Found on 2025-05-28 11:48

259 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 185.221.182.112
Domain: www.uptime.yannick-mougin.com
Port: 443
URL: https://www.uptime.yannick-mougin.com

First seen 2025-05-23 19:43
Last seen 2025-05-28 04:37
Open for 4 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522588fe13a

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/louislam/uptime-kuma.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2025-05-28 04:37

268 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 185.221.182.112
Domain: grenaillagepeintureclaisse.com
Port: 443
URL: https://grenaillagepeintureclaisse.com

First seen 2024-02-17 11:25
Last seen 2024-11-01 01:17
Open for 257 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb57ef9853

[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	symlinks = false
	ignorecase = true
[remote "origin"]
	url = https://gitlab.com/Nairda17/siteweb-csv-gpc.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2024-11-01 01:17

310 Bytes

Create report

Symfony developement panel enabled

The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration
Request log, including POST request with credentials and/or api keys

IP: 185.221.182.112
Domain: www.comnstay.fr
Port: 443
URL: https://www.comnstay.fr/_profiler/empty/search/results

First seen 2023-12-19 06:24
Last seen 2024-09-02 12:34
Open for 258 days

Fingerprint: 407cf4363b0e62fafca67e07731fd100731fd100731fd100731fd100731fd100
```
Symfony profiler enabled:
https://www.comnstay.fr/_profiler/empty/search/results
```
Found on 2024-09-02 12:34

Create report

Symfony developement panel enabled

The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration
Request log, including POST request with credentials and/or api keys

IP: 185.221.182.112
Domain: www.comnstay.fr
Port: 80
URL: http://www.comnstay.fr/_profiler/empty/search/results

First seen 2023-12-19 06:24
Last seen 2024-08-30 19:54
Open for 255 days

Fingerprint: 407cf4363b0e62fafca67e078733afc78733afc78733afc78733afc78733afc7
```
Symfony profiler enabled:
http://www.comnstay.fr/_profiler/empty/search/results
```
Found on 2024-08-30 19:54

Create report

Symfony developement panel enabled

The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration
Request log, including POST request with credentials and/or api keys

IP: 185.221.182.112
Domain: comnstay.fr
Port: 443
URL: https://comnstay.fr/_profiler/empty/search/results

First seen 2023-12-19 06:24
Last seen 2024-08-30 05:55
Open for 254 days

Fingerprint: 407cf4363b0e62fafca67e07be054c9dbe054c9dbe054c9dbe054c9dbe054c9d
```
Symfony profiler enabled:
https://comnstay.fr/_profiler/empty/search/results
```
Found on 2024-08-30 05:55

Create report

Symfony developement panel enabled

The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration
Request log, including POST request with credentials and/or api keys

IP: 185.221.182.112
Domain: comnstay.fr
Port: 80
URL: http://comnstay.fr/_profiler/empty/search/results

First seen 2023-12-19 06:24
Last seen 2024-08-28 15:14
Open for 253 days

Fingerprint: 407cf4363b0e62fafca67e07371b60ea371b60ea371b60ea371b60ea371b60ea
```
Symfony profiler enabled:
http://comnstay.fr/_profiler/empty/search/results
```
Found on 2024-08-28 15:14

Create report

Symfony developement panel enabled

The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration
Request log, including POST request with credentials and/or api keys

IP: 185.221.182.112
Domain: flash-carte-grise-en-ligne.com
Port: 443
URL: https://flash-carte-grise-en-ligne.com/_profiler/empty/search/results

First seen 2023-03-29 13:32
Last seen 2024-07-20 01:00
Open for 478 days

Fingerprint: 407cf4363b0e62fafca67e07c3b449f5c3b449f5c3b449f5c3b449f5c3b449f5
```
Symfony profiler enabled:
https://flash-carte-grise-en-ligne.com/_profiler/empty/search/results
```
Found on 2024-07-20 01:00

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.

IP: 185.221.182.112
Domain: www.admin.ubg-guinee.com
Port: 443
URL: https://www.admin.ubg-guinee.com

First seen 2024-04-06 08:42
Last seen 2024-07-16 01:55
Open for 100 days

Severity: critical
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522e9a63a5d

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://ghislain777: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@github.com/ghislain777/ubg.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main

Found on 2024-07-16 01:55

312 Bytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 185.221.182.112
Domain: www.admin.ubg-guinee.com
Port: 443
URL: https://www.admin.ubg-guinee.com

First seen 2024-04-06 08:42
Last seen 2024-07-16 01:55
Open for 100 days

Severity: low
Fingerprint: 5f32cf5d6962f09cc169dbbec169dbbe626f729b199cedc25a69c8e32dac1f10

Found 15 files trough .DS_Store spidering:

/.git
/.vscode
/config
/controllers
/fonctions
/migrations
/models
/node_modules
/public
/public/assets
/public/assets/images
/public/assets/images/logos
/routes
/seeders
/services

Found on 2024-07-16 01:55

Severity: low
Fingerprint: 5f32cf5d6962f09cccdd54a0ccdd54a0904d808d014ac6c4f62483e995d32229

Found 13 files trough .DS_Store spidering:

/.git
/.vscode
/config
/controllers
/fonctions
/migrations
/models
/node_modules
/public
/public/assets
/routes
/seeders
/services

Found on 2024-06-10 07:57

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 185.221.182.112
Domain: gc-transfert.fr
Port: 443
URL: https://gc-transfert.fr

First seen 2023-07-04 06:00
Last seen 2024-07-02 13:05
Open for 364 days

Severity: low
Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d63a747c263a747c263a747c263a747c2
```
Found 1 files trough .DS_Store spidering:

/application
```
Found on 2024-07-02 13:05

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 185.221.182.112
Domain: www.admin.ubg-guinee.com
Port: 80
URL: http://www.admin.ubg-guinee.com

First seen 2024-04-06 08:42
Last seen 2024-06-22 02:16
Open for 76 days

Severity: low
Fingerprint: 5f32cf5d6962f09cc169dbbec169dbbe626f729b199cedc25a69c8e32dac1f10

Found 15 files trough .DS_Store spidering:

/.git
/.vscode
/config
/controllers
/fonctions
/migrations
/models
/node_modules
/public
/public/assets
/public/assets/images
/public/assets/images/logos
/routes
/seeders
/services

Found on 2024-06-22 02:16

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.

IP: 185.221.182.112
Domain: www.admin.ubg-guinee.com
Port: 80
URL: http://www.admin.ubg-guinee.com

First seen 2024-04-06 08:42
Last seen 2024-06-22 02:16
Open for 76 days

Severity: critical
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522e9a63a5d

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://ghislain777: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@github.com/ghislain777/ubg.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main

Found on 2024-06-22 02:16

312 Bytes

Create report

Symfony developement panel enabled

The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration
Request log, including POST request with credentials and/or api keys

IP: 185.221.182.112
Domain: www.guetrj.n0c.world
Port: 443
URL: https://www.guetrj.n0c.world/_profiler/empty/search/results

First seen 2023-05-30 06:41
Last seen 2024-06-20 03:07
Open for 386 days

Fingerprint: 407cf4363b0e62fafca67e070a144d7e0a144d7e0a144d7e0a144d7e0a144d7e
```
Symfony profiler enabled:
https://www.guetrj.n0c.world/_profiler/empty/search/results
```
Found on 2024-06-20 03:07

Create report

Symfony developement panel enabled

The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration
Request log, including POST request with credentials and/or api keys

IP: 185.221.182.112
Domain: admin.flash-carte-grise-en-ligne.com
Port: 443
URL: https://admin.flash-carte-grise-en-ligne.com/_profiler/empty/search/results

First seen 2023-07-29 12:40
Last seen 2024-06-16 01:24
Open for 322 days

Fingerprint: 407cf4363b0e62fafca67e076d7f4bc66d7f4bc66d7f4bc66d7f4bc66d7f4bc6

Symfony profiler enabled:
https://admin.flash-carte-grise-en-ligne.com/_profiler/empty/search/results

Found on 2024-06-16 01:24

Create report

Symfony developement panel enabled

The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration
Request log, including POST request with credentials and/or api keys

IP: 185.221.182.112
Domain: guetrj.n0c.world
Port: 443
URL: https://guetrj.n0c.world/_profiler/empty/search/results

First seen 2023-05-30 06:41
Last seen 2024-05-22 23:40
Open for 358 days

Fingerprint: 407cf4363b0e62fafca67e07171e38e5171e38e5171e38e5171e38e5171e38e5
```
Symfony profiler enabled:
https://guetrj.n0c.world/_profiler/empty/search/results
```
Found on 2024-05-22 23:40

Create report

Symfony developement panel enabled

The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration
Request log, including POST request with credentials and/or api keys

IP: 185.221.182.112
Domain: guetrj.n0c.world
Port: 80
URL: http://guetrj.n0c.world/_profiler/empty/search/results

First seen 2023-11-28 05:32
Last seen 2024-05-12 21:57
Open for 166 days

Fingerprint: 407cf4363b0e62fafca67e075b9b66485b9b66485b9b66485b9b66485b9b6648
```
Symfony profiler enabled:
http://guetrj.n0c.world/_profiler/empty/search/results
```
Found on 2024-05-12 21:57

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 185.221.182.112
Domain: rgsport-boutique.com
Port: 443
URL: https://rgsport-boutique.com

First seen 2023-07-29 01:07
Last seen 2024-03-21 13:26
Open for 236 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c8f03d7bd8f03d7bd3af6423202fc8fb916923ff738cb792b

Found 38 files trough .DS_Store spidering:

/.docker
/.docker/logs
/.docker/php
/.eslintrc.json
/.gitignore
/.gnupg
/.htaccess
/.well-known
/admin334we06sj
/app
/bin
/cache
/classes
/composer.lock
/config
/controllers
/Dockerfile
/download
/error500.html
/images.inc.php
/img
/index.php
/init.php
/js
/LICENSES
/localization
/mails
/modules
/override
/pdf
/robots.txt
/src
/themes
/tools
/translations
/upload
/vendor
/webservice

Found on 2024-03-21 13:26

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 185.221.182.112
Domain: comnstay.fr
Port: 80
URL: http://comnstay.fr

First seen 2024-01-05 13:42
Last seen 2024-02-02 21:16
Open for 28 days

Severity: low
Fingerprint: 5f32cf5d6962f09cec7f8772ec7f877272a0bbaec4b067da6796b5bae0e7ac10

Found 11 files trough .DS_Store spidering:

/assets
/assets/css
/assets/css/admin
/assets/css/front
/assets/css/libraries
/assets/img
/assets/img/ico
/assets/js
/assets/js/admin
/assets/js/front
/assets/js/libraries

Found on 2024-02-02 21:16

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 185.221.182.112
Domain: comnstay.fr
Port: 443
URL: https://comnstay.fr

First seen 2021-08-04 14:18
Last seen 2024-02-02 14:25
Open for 912 days

Severity: low
Fingerprint: 5f32cf5d6962f09cec7f8772ec7f877272a0bbaec4b067da6796b5bae0e7ac10

Found 11 files trough .DS_Store spidering:

/assets
/assets/css
/assets/css/admin
/assets/css/front
/assets/css/libraries
/assets/img
/assets/img/ico
/assets/js
/assets/js/admin
/assets/js/front
/assets/js/libraries

Found on 2024-02-02 14:25

Severity: low
Fingerprint: 5f32cf5d6962f09c8329733f8329733f6285220000baea033cae5833103b5394

Found 10 files trough .DS_Store spidering:

/config
/ecrire
/IMG
/local
/plugins
/plugins-dist
/prive
/squelettes
/squelettes-dist
/tmp

Found on 2021-08-04 14:18

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 185.221.182.112
Domain: www.comnstay.fr
Port: 443
URL: https://www.comnstay.fr

First seen 2024-01-05 20:39
Last seen 2024-02-02 14:25
Open for 27 days

Severity: low
Fingerprint: 5f32cf5d6962f09cec7f8772ec7f877272a0bbaec4b067da6796b5bae0e7ac10

Found 11 files trough .DS_Store spidering:

/assets
/assets/css
/assets/css/admin
/assets/css/front
/assets/css/libraries
/assets/img
/assets/img/ico
/assets/js
/assets/js/admin
/assets/js/front
/assets/js/libraries

Found on 2024-02-02 14:25

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 185.221.182.112
Domain: www.comnstay.fr
Port: 80
URL: http://www.comnstay.fr

First seen 2024-01-05 21:06
Last seen 2024-02-02 10:41
Open for 27 days

Severity: low
Fingerprint: 5f32cf5d6962f09cec7f8772ec7f877272a0bbaec4b067da6796b5bae0e7ac10

Found 11 files trough .DS_Store spidering:

/assets
/assets/css
/assets/css/admin
/assets/css/front
/assets/css/libraries
/assets/img
/assets/img/ico
/assets/js
/assets/js/admin
/assets/js/front
/assets/js/libraries

Found on 2024-02-02 10:41

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 185.221.182.112
Domain: grenaillagepeintureclaisse.com
Port: 80
URL: http://grenaillagepeintureclaisse.com

First seen 2023-12-18 06:26
Last seen 2023-12-24 05:04
Open for 5 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb57ef9853

[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	symlinks = false
	ignorecase = true
[remote "origin"]
	url = https://gitlab.com/Nairda17/siteweb-csv-gpc.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2023-12-24 05:04

310 Bytes

Create report

Symfony developement panel enabled

The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration
Request log, including POST request with credentials and/or api keys

IP: 185.221.182.112
Domain: admin.flash-carte-grise-en-ligne.com
Port: 80
URL: http://admin.flash-carte-grise-en-ligne.com/_profiler/empty/search/results

First seen 2023-11-28 05:33

Fingerprint: 407cf4363b0e62fafca67e07b6709d3bb6709d3bb6709d3bb6709d3bb6709d3b
```
Symfony profiler enabled:
http://admin.flash-carte-grise-en-ligne.com/_profiler/empty/search/results
```
Found on 2023-11-28 05:33

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 185.221.182.112
Domain: www.rgsport-boutique.com
Port: 80
URL: http://www.rgsport-boutique.com

First seen 2023-11-27 06:04

Severity: medium
Fingerprint: 5f32cf5d6962f09c8f03d7bd8f03d7bd3af6423202fc8fb916923ff738cb792b

Found 38 files trough .DS_Store spidering:

/.docker
/.docker/logs
/.docker/php
/.eslintrc.json
/.gitignore
/.gnupg
/.htaccess
/.well-known
/admin334we06sj
/app
/bin
/cache
/classes
/composer.lock
/config
/controllers
/Dockerfile
/download
/error500.html
/images.inc.php
/img
/index.php
/init.php
/js
/LICENSES
/localization
/mails
/modules
/override
/pdf
/robots.txt
/src
/themes
/tools
/translations
/upload
/vendor
/webservice

Found on 2023-11-27 06:04

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 185.221.182.112
Domain: rgsport-boutique.com
Port: 80
URL: http://rgsport-boutique.com

First seen 2023-09-27 09:10
Last seen 2023-11-27 06:04
Open for 60 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c8f03d7bd8f03d7bd3af6423202fc8fb916923ff738cb792b

Found 38 files trough .DS_Store spidering:

/.docker
/.docker/logs
/.docker/php
/.eslintrc.json
/.gitignore
/.gnupg
/.htaccess
/.well-known
/admin334we06sj
/app
/bin
/cache
/classes
/composer.lock
/config
/controllers
/Dockerfile
/download
/error500.html
/images.inc.php
/img
/index.php
/init.php
/js
/LICENSES
/localization
/mails
/modules
/override
/pdf
/robots.txt
/src
/themes
/tools
/translations
/upload
/vendor
/webservice

Found on 2023-11-27 06:04

Create report

Symfony developement panel enabled

The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration
Request log, including POST request with credentials and/or api keys

IP: 185.221.182.112
Domain: www.admin.flash-carte-grise-en-ligne.com
Port: 443
URL: https://www.admin.flash-carte-grise-en-ligne.com/_profiler/empty/search/results

First seen 2023-07-29 12:40
Last seen 2023-10-11 01:13
Open for 73 days

Fingerprint: 407cf4363b0e62fafca67e0716fd1a1516fd1a1516fd1a1516fd1a1516fd1a15

Symfony profiler enabled:
https://www.admin.flash-carte-grise-en-ligne.com/_profiler/empty/search/results

Found on 2023-10-11 01:13

Create report

Symfony developement panel enabled

The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration
Request log, including POST request with credentials and/or api keys

IP: 185.221.182.112
Domain: www.admin.flash-carte-grise-en-ligne.com
Port: 80
URL: http://www.admin.flash-carte-grise-en-ligne.com/_profiler/empty/search/results

First seen 2023-07-29 12:40

Fingerprint: 407cf4363b0e62fafca67e07aa413ee4aa413ee4aa413ee4aa413ee4aa413ee4

Symfony profiler enabled:
http://www.admin.flash-carte-grise-en-ligne.com/_profiler/empty/search/results

Found on 2023-07-29 12:40

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 185.221.182.112
Domain: www.rgsport-boutique.com
Port: 443
URL: https://www.rgsport-boutique.com

First seen 2023-07-29 01:07

Severity: medium
Fingerprint: 5f32cf5d6962f09c8f03d7bd8f03d7bd3af6423202fc8fb916923ff738cb792b

Found 38 files trough .DS_Store spidering:

/.docker
/.docker/logs
/.docker/php
/.eslintrc.json
/.gitignore
/.gnupg
/.htaccess
/.well-known
/admin334we06sj
/app
/bin
/cache
/classes
/composer.lock
/config
/controllers
/Dockerfile
/download
/error500.html
/images.inc.php
/img
/index.php
/init.php
/js
/LICENSES
/localization
/mails
/modules
/override
/pdf
/robots.txt
/src
/themes
/tools
/translations
/upload
/vendor
/webservice

Found on 2023-07-29 01:07

Create report

Symfony developement panel enabled

The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration
Request log, including POST request with credentials and/or api keys

IP: 185.221.182.112
Domain: www.guetrj.n0c.world
Port: 80
URL: http://www.guetrj.n0c.world/_profiler/empty/search/results

First seen 2022-11-30 06:32
Last seen 2023-05-30 06:41
Open for 181 days

Fingerprint: 407cf4363b0e62fafca67e07bf90d0e7bf90d0e7bf90d0e7bf90d0e7bf90d0e7
```
Symfony profiler enabled:
http://www.guetrj.n0c.world/_profiler/empty/search/results
```
Found on 2022-11-30 06:32

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 185.221.182.112
Domain: www.api-zeta.yannick-mougin.com
Port: 80
URL: http://www.api-zeta.yannick-mougin.com

First seen 2023-03-08 07:38

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652204adfb13

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/dpnick/zeta-api.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main

Found on 2023-03-08 07:38

259 Bytes

Create report

Host 185.221.182.112

France

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Git configuration and history exposed

MacOS file listing through .DS_Store file

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Git configuration and history exposed

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Git configuration and history exposed

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

Symfony developement panel enabled

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Git configuration and history exposed

Symfony developement panel enabled

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Symfony developement panel enabled

Symfony developement panel enabled

MacOS file listing through .DS_Store file

Symfony developement panel enabled

Git configuration and history exposed

Domain summary