.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: medium
Fingerprint: 5f32cf5d6962f09ca728a86fa728a86fd8714868716bcad796502d32032c82f7
Found 76 files trough .DS_Store spidering: /.git /.gitignore /.npmrc /.sass-cache /About.html /azure /azure-pipelines.yml /Careers.html /configurations /dist /dist/assets /dist/js /Dockerfile.azure /GitVersion.yml /gruntfile.js /images /images/apps /images/CT-logo-english_png /images/english_png /images/icons /images/infographics /images/IntroBackground.jpg /images/IntroBackground_TAN_large.jpg /images/IntroBackground_TAN_medium.jpg /images/IntroBackground_TAN_small.jpg /images/LetterC.svg /images/LetterM.svg /images/LetterS.svg /images/logo.svg /images/logoDirect-2.svg /images/logoDirect.svg /images/logos /images/logos/alhurra_logo.svg /images/logos/android_tv_logo.svg /images/logos/app_store_icon.svg /images/logos/apple_tv_logo.svg /images/logos/award-logo-aib.png /images/logos/award-logo-global.png /images/logos/award-logo-Lovie.png /images/logos/award-logo-webby.png /images/logos/currenttime_logo.svg /images/logos/elsaha_logo.svg /images/logos/facebook.svg /images/logos/faktograph_logo.svg /images/logos/google_play_icon.svg /images/logos/irfaasawtak_logo.svg /images/logos/maghrebvoices_logo.svg /images/logos/marti_logo.svg /images/logos/ocb_logo.svg /images/logos/polygraph_logo.svg /images/logos/rferl_logo.svg /images/logos/sawa_logo.svg /images/logos/sizdan-telegram_logo.svg /images/logos/smart_tv_logo.svg /images/logos/twitter.svg /images/logos/voa_logo.svg /images/map-pin.svg /images/mobile_apps_bg.png /images/pangea_logo.png /images/photogallery /images/photogallery/old /images/portraits /images/RFE-building /images/rferl_logo.svg /images/svg /images/team /images/websites /index.html /Jenkinsfile-K8s /package-lock.json /package.json /Portfolio.html /scripts /src /src/js /src/sass
Severity: medium
Fingerprint: 5f32cf5d6962f09cfb7dc6fdfb7dc6fdf47154365fab983d011421c09818edb8
Found 74 files trough .DS_Store spidering: /.git /.gitignore /.npmrc /.sass-cache /About.html /azure /azure-pipelines.yml /Careers.html /configurations /dist /dist/assets /dist/js /Dockerfile.azure /GitVersion.yml /gruntfile.js /images /images/apps /images/CT-logo-english_png /images/english_png /images/icons /images/infographics /images/IntroBackground.jpg /images/IntroBackground_TAN_large.jpg /images/IntroBackground_TAN_medium.jpg /images/IntroBackground_TAN_small.jpg /images/LetterC.svg /images/LetterM.svg /images/LetterS.svg /images/logo.svg /images/logoDirect-2.svg /images/logoDirect.svg /images/logos /images/logos/alhurra_logo.svg /images/logos/android_tv_logo.svg /images/logos/app_store_icon.svg /images/logos/apple_tv_logo.svg /images/logos/award-logo-aib.png /images/logos/award-logo-global.png /images/logos/award-logo-Lovie.png /images/logos/award-logo-webby.png /images/logos/currenttime_logo.svg /images/logos/elsaha_logo.svg /images/logos/facebook.svg /images/logos/faktograph_logo.svg /images/logos/google_play_icon.svg /images/logos/irfaasawtak_logo.svg /images/logos/maghrebvoices_logo.svg /images/logos/marti_logo.svg /images/logos/ocb_logo.svg /images/logos/polygraph_logo.svg /images/logos/rferl_logo.svg /images/logos/sawa_logo.svg /images/logos/sizdan-telegram_logo.svg /images/logos/smart_tv_logo.svg /images/logos/twitter.svg /images/logos/voa_logo.svg /images/map-pin.svg /images/mobile_apps_bg.png /images/pangea_logo.png /images/photogallery /images/photogallery/old /images/portraits /images/RFE-building /images/rferl_logo.svg /images/svg /images/team /images/websites /index.html /Jenkinsfile-K8s /package-lock.json /package.json /Portfolio.html /scripts /src
Severity: medium
Fingerprint: 5f32cf5d6962f09ccbc000d9cbc000d97b36f2ea09c3688909b6098433c5d222
Found 49 files trough .DS_Store spidering: /.git /.gitignore /.npmrc /.sass-cache /About.html /azure /azure-pipelines.yml /Careers.html /configurations /dist /dist/assets /dist/js /Dockerfile.azure /GitVersion.yml /gruntfile.js /images /images/apps /images/CT-logo-english_png /images/english_png /images/icons /images/infographics /images/IntroBackground.jpg /images/IntroBackground_TAN_large.jpg /images/IntroBackground_TAN_medium.jpg /images/IntroBackground_TAN_small.jpg /images/LetterC.svg /images/LetterM.svg /images/LetterS.svg /images/logo.svg /images/logoDirect-2.svg /images/logoDirect.svg /images/logos /images/map-pin.svg /images/mobile_apps_bg.png /images/pangea_logo.png /images/photogallery /images/portraits /images/RFE-building /images/rferl_logo.svg /images/svg /images/team /images/websites /index.html /Jenkinsfile-K8s /package-lock.json /package.json /Portfolio.html /scripts /src
Severity: medium
Fingerprint: 5f32cf5d6962f09c3078a2ae3078a2ae29a9fd8be768f042aead5579b627584b
Found 73 files trough .DS_Store spidering: /.git /.gitignore /.npmrc /.sass-cache /About.html /azure /azure-pipelines.yml /Careers.html /configurations /dist /dist/assets /dist/js /Dockerfile.azure /GitVersion.yml /gruntfile.js /images /images/apps /images/CT-logo-english_png /images/english_png /images/icons /images/infographics /images/IntroBackground.jpg /images/IntroBackground_TAN_large.jpg /images/IntroBackground_TAN_medium.jpg /images/IntroBackground_TAN_small.jpg /images/LetterC.svg /images/LetterM.svg /images/LetterS.svg /images/logo.svg /images/logoDirect-2.svg /images/logoDirect.svg /images/logos /images/logos/alhurra_logo.svg /images/logos/android_tv_logo.svg /images/logos/app_store_icon.svg /images/logos/apple_tv_logo.svg /images/logos/award-logo-aib.png /images/logos/award-logo-global.png /images/logos/award-logo-Lovie.png /images/logos/award-logo-webby.png /images/logos/currenttime_logo.svg /images/logos/elsaha_logo.svg /images/logos/facebook.svg /images/logos/faktograph_logo.svg /images/logos/google_play_icon.svg /images/logos/irfaasawtak_logo.svg /images/logos/maghrebvoices_logo.svg /images/logos/marti_logo.svg /images/logos/ocb_logo.svg /images/logos/polygraph_logo.svg /images/logos/rferl_logo.svg /images/logos/sawa_logo.svg /images/logos/sizdan-telegram_logo.svg /images/logos/smart_tv_logo.svg /images/logos/twitter.svg /images/logos/voa_logo.svg /images/map-pin.svg /images/mobile_apps_bg.png /images/pangea_logo.png /images/photogallery /images/portraits /images/RFE-building /images/rferl_logo.svg /images/svg /images/team /images/websites /index.html /Jenkinsfile-K8s /package-lock.json /package.json /Portfolio.html /scripts /src
Severity: medium
Fingerprint: 5f32cf5d6962f09c2f9cf9902f9cf9906659e47d0252cc3c3619ed73305cf785
Found 75 files trough .DS_Store spidering: /.git /.gitignore /.npmrc /About.html /azure /azure-pipelines.yml /Careers.html /configurations /dist /dist/assets /dist/js /Dockerfile.azure /GitVersion.yml /gruntfile.js /images /images/apps /images/CT-logo-english_png /images/english_png /images/icons /images/infographics /images/IntroBackground.jpg /images/IntroBackground_TAN_large.jpg /images/IntroBackground_TAN_medium.jpg /images/IntroBackground_TAN_small.jpg /images/LetterC.svg /images/LetterM.svg /images/LetterS.svg /images/logo.svg /images/logoDirect-2.svg /images/logoDirect.svg /images/logos /images/logos/alhurra_logo.svg /images/logos/android_tv_logo.svg /images/logos/app_store_icon.svg /images/logos/apple_tv_logo.svg /images/logos/award-logo-aib.png /images/logos/award-logo-global.png /images/logos/award-logo-Lovie.png /images/logos/award-logo-webby.png /images/logos/currenttime_logo.svg /images/logos/elsaha_logo.svg /images/logos/facebook.svg /images/logos/faktograph_logo.svg /images/logos/google_play_icon.svg /images/logos/irfaasawtak_logo.svg /images/logos/maghrebvoices_logo.svg /images/logos/marti_logo.svg /images/logos/ocb_logo.svg /images/logos/polygraph_logo.svg /images/logos/rferl_logo.svg /images/logos/sawa_logo.svg /images/logos/sizdan-telegram_logo.svg /images/logos/smart_tv_logo.svg /images/logos/twitter.svg /images/logos/voa_logo.svg /images/map-pin.svg /images/mobile_apps_bg.png /images/pangea_logo.png /images/photogallery /images/photogallery/old /images/portraits /images/RFE-building /images/rferl_logo.svg /images/svg /images/team /images/websites /index.html /Jenkinsfile-K8s /node_modules /package-lock.json /package.json /scripts /src /src/js /src/sass
Severity: medium
Fingerprint: 5f32cf5d6962f09c3e8b9cac3e8b9cac0b6b466106e81c28abf5e1774b5b451a
Found 48 files trough .DS_Store spidering: /.git /.gitignore /.npmrc /About.html /azure /azure-pipelines.yml /Careers.html /configurations /dist /dist/assets /dist/js /Dockerfile.azure /GitVersion.yml /gruntfile.js /images /images/apps /images/CT-logo-english_png /images/english_png /images/icons /images/infographics /images/IntroBackground.jpg /images/IntroBackground_TAN_large.jpg /images/IntroBackground_TAN_medium.jpg /images/IntroBackground_TAN_small.jpg /images/LetterC.svg /images/LetterM.svg /images/LetterS.svg /images/logo.svg /images/logoDirect-2.svg /images/logoDirect.svg /images/logos /images/map-pin.svg /images/mobile_apps_bg.png /images/pangea_logo.png /images/photogallery /images/portraits /images/RFE-building /images/rferl_logo.svg /images/svg /images/team /images/websites /index.html /Jenkinsfile-K8s /node_modules /package-lock.json /package.json /scripts /src
Severity: medium
Fingerprint: 5f32cf5d6962f09c3078a2ae3078a2ae29a9fd8be768f042aead557931543f62
Found 73 files trough .DS_Store spidering: /.git /.gitignore /.npmrc /About.html /azure /azure-pipelines.yml /Careers.html /configurations /dist /dist/assets /dist/js /Dockerfile.azure /GitVersion.yml /gruntfile.js /images /images/apps /images/CT-logo-english_png /images/english_png /images/icons /images/infographics /images/IntroBackground.jpg /images/IntroBackground_TAN_large.jpg /images/IntroBackground_TAN_medium.jpg /images/IntroBackground_TAN_small.jpg /images/LetterC.svg /images/LetterM.svg /images/LetterS.svg /images/logo.svg /images/logoDirect-2.svg /images/logoDirect.svg /images/logos /images/logos/alhurra_logo.svg /images/logos/android_tv_logo.svg /images/logos/app_store_icon.svg /images/logos/apple_tv_logo.svg /images/logos/award-logo-aib.png /images/logos/award-logo-global.png /images/logos/award-logo-Lovie.png /images/logos/award-logo-webby.png /images/logos/currenttime_logo.svg /images/logos/elsaha_logo.svg /images/logos/facebook.svg /images/logos/faktograph_logo.svg /images/logos/google_play_icon.svg /images/logos/irfaasawtak_logo.svg /images/logos/maghrebvoices_logo.svg /images/logos/marti_logo.svg /images/logos/ocb_logo.svg /images/logos/polygraph_logo.svg /images/logos/rferl_logo.svg /images/logos/sawa_logo.svg /images/logos/sizdan-telegram_logo.svg /images/logos/smart_tv_logo.svg /images/logos/twitter.svg /images/logos/voa_logo.svg /images/map-pin.svg /images/mobile_apps_bg.png /images/pangea_logo.png /images/photogallery /images/photogallery/old /images/portraits /images/RFE-building /images/rferl_logo.svg /images/svg /images/team /images/websites /index.html /Jenkinsfile-K8s /node_modules /package-lock.json /package.json /scripts /src
Severity: medium
Fingerprint: 5f32cf5d6962f09cee671e0bee671e0b8a2ee52c0b8d2623c3c83d769c74fd53
Found 72 files trough .DS_Store spidering: /.git /.gitignore /.npmrc /About.html /azure /azure-pipelines.yml /Careers.html /configurations /dist /dist/assets /dist/js /Dockerfile.azure /GitVersion.yml /gruntfile.js /images /images/apps /images/CT-logo-english_png /images/english_png /images/icons /images/infographics /images/IntroBackground.jpg /images/IntroBackground_TAN_large.jpg /images/IntroBackground_TAN_medium.jpg /images/IntroBackground_TAN_small.jpg /images/LetterC.svg /images/LetterM.svg /images/LetterS.svg /images/logo.svg /images/logoDirect-2.svg /images/logoDirect.svg /images/logos /images/logos/alhurra_logo.svg /images/logos/android_tv_logo.svg /images/logos/app_store_icon.svg /images/logos/apple_tv_logo.svg /images/logos/award-logo-aib.png /images/logos/award-logo-global.png /images/logos/award-logo-Lovie.png /images/logos/award-logo-webby.png /images/logos/currenttime_logo.svg /images/logos/elsaha_logo.svg /images/logos/facebook.svg /images/logos/faktograph_logo.svg /images/logos/google_play_icon.svg /images/logos/irfaasawtak_logo.svg /images/logos/maghrebvoices_logo.svg /images/logos/marti_logo.svg /images/logos/ocb_logo.svg /images/logos/polygraph_logo.svg /images/logos/rferl_logo.svg /images/logos/sawa_logo.svg /images/logos/sizdan-telegram_logo.svg /images/logos/smart_tv_logo.svg /images/logos/twitter.svg /images/logos/voa_logo.svg /images/map-pin.svg /images/mobile_apps_bg.png /images/pangea_logo.png /images/photogallery /images/portraits /images/RFE-building /images/rferl_logo.svg /images/svg /images/team /images/websites /index.html /Jenkinsfile-K8s /node_modules /package-lock.json /package.json /scripts /src
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65224edcc0c7
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true longpaths = true [remote "origin"] url = https://pangeadigital@dev.azure.com/pangeadigital/Microsites/_git/pangea-cms.com fetch = +refs/heads/*:refs/remotes/origin/* [gc] auto = 0 [http] version = HTTP/1.1 [branch "develop"] remote = origin merge = refs/heads/develop [branch "main"] remote = origin merge = refs/heads/main
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652214903b26
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true longpaths = true [remote "origin"] url = https://pangeadigital@dev.azure.com/pangeadigital/Microsites/_git/pangea-cms.com fetch = +refs/heads/*:refs/remotes/origin/* [gc] auto = 0 [http] version = HTTP/1.1 [branch "develop"] remote = origin merge = refs/heads/develop
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522c0098ec7
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://pangeadigital@dev.azure.com/pangeadigital/Microsites/_git/pangea-cms.com fetch = +refs/heads/*:refs/remotes/origin/* [gc] auto = 0 [http] version = HTTP/1.1 [branch "develop"] remote = origin merge = refs/heads/develop [branch "main"] remote = origin merge = refs/heads/main