Apache
tcp/443 tcp/80
The following URL (usually /.git/config
) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522aa68a3e5
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = git@bitbucket.org:equitel01/sce.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522e0cfa38e
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://abarbosa0117@bitbucket.org/equitel01/sce.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [pull] rebase = true
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652290169175
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://abarbosa0117@bitbucket.org/equitel01/sce.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master
Open service 190.24.131.213:443
2024-06-20 11:35
HTTP/1.1 200 OK Date: Thu, 20 Jun 2024 11:35:47 GMT Server: Apache Set-Cookie: PHPSESSID=m21i4etstt5uus23psd875k5rq; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Content-Length: 3728 Connection: close Content-Type: text/html; charset=UTF-8 Page title: Inicio <html lang="en"> <head> <link rel="shortcut icon" href="favicon.jpg"> <link rel="stylesheet" href="css/inicio.css"> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device?width, initial?scale=1.0"/> <meta name="description" content=""> <meta name="author" content=""> <script> function submit(){ document.getElementById("touch").value='1'; document.getElementById("form1").submit(); } </script> <title>Inicio</title> <div align="center" class="container" id="container"> <br/><br/><br/><br/> <div class="col-md-3 col-sm-6 hero-feature" id="cont2"> <div align="center" class="thumbnail"> <div class="caption"> <div align=center> <input name="logo" type="image" src="img/equitel.png" width="100"></div> <h3>Inicio de Sesión</h3> <p>Bienvenido al sistema de gestión de<br/> La Organización Equitel</p><br/> <form action="login.php" method="POST" id="form1"> <label class="alinear">Usuario: </label><input type="text" name="usuario" id="usuario" required=""autofocus > <br/><br/> <label class="alinear">Contraseña: </label><input type="password" name="password" id="password" required="" > <br/><br/> <input type="hidden" value="" name="url"> <input type="hidden" value="" name="id"> <input type="hidden" value="0" name="touch" id="touch"> <input type="submit" value="Ingresar" id="normal_boton" class="boton" title="Ingresar al Sistema" /> <!--<a id="touch_boton" class="boton" href="javascript:submit();" title="Ingresar al Sistema" >Ingresar</a>--> </form> <a href="forgotPassword.php" class="forgotPass">Olvidé mi contraseña</a> </div> </div> </div> </div> <br> <div align="center" class="container" id="container2"> <!--<a href="https://script.google.com/a/equitel.com.co/macros/s/AKfycbwWeMPwDSAo3RGdWzIuBiDgEqyaVRMQSc51juyUVUOg5Rp6fso/exec" class="class="btn btn-default">Creación de usuario en Labroides</a>--> <input type="button" onclick="location.href='https://script.google.com/a/equitel.com.co/macros/s/AKfycbwTuW5wwMgAP2h8Vqx9FRbJCQNl8iRoRGoEPmyGseU/dev';" value="Dar Click aquí Para solicitar Creación de usuario en Labroides" class="boton" style="width:40%" /> <!--<button class="boton" onclick="location.href='https://script.google.com/a/equitel.com.co/macros/s/AKfycbwWeMPwDSAo3RGdWzIuBiDgEqyaVRMQSc51juyUVUOg5Rp6fso/exec';">Dar Click aqui Para solicitar Creación de usuario en Labroides</button>--> </div> <br> <div align="center" class="container" id="container2"> <input type="button" onclick="location.href='https://script.google.com/a/equitel.com.co/macros/s/AKfycbxg3E701eJ1fmp5bngQ1xVxkoEzo6hF6P_fDa2_D7I/dev';" value="Dar Click aquí Para solicitar Creación de usuario en Siesa" class="boton" style="width:40%" /> </div> </head> </html>
Open service 190.24.131.213:80
2024-06-15 13:29
HTTP/1.1 301 Moved Permanently Date: Sat, 15 Jun 2024 13:29:14 GMT Server: Apache Location: https://190.24.131.213/ Content-Length: 231 Connection: close Content-Type: text/html; charset=iso-8859-1 Page title: 301 Moved Permanently <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>301 Moved Permanently</title> </head><body> <h1>Moved Permanently</h1> <p>The document has moved <a href="https://190.24.131.213/">here</a>.</p> </body></html>