.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c8329733f8329733ff2c540c7a8ad6651e09b69808cf8042e
Found 10 files trough .DS_Store spidering: /admin /admin/assets /admin/assets/images /assets /assets/css /assets/fonts /assets/images /assets/js /assets/libs /tablet
Severity: low
Fingerprint: 5f32cf5d6962f09c3af247253af247251e0762cddf86fea3467ee7c66b42ef49
Found 9 files trough .DS_Store spidering: /admin /admin/assets /admin/assets/images /assets /assets/css /assets/fonts /assets/images /assets/js /assets/libs
Severity: low
Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e9a30a57510ada7fa7d4f0198263d5d80b
Found 5 files trough .DS_Store spidering: /admin /admin/assets /admin/assets/images /admin/invoices /assets
Severity: low
Fingerprint: 5f32cf5d6962f09c8329733f8329733ff2c540c7a8ad6651e09b6980875878de
Found 10 files trough .DS_Store spidering: /admin /admin/assets /admin/assets/images /admin/invoices /assets /assets/css /assets/fonts /assets/images /assets/js /assets/libs
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c7cf176427cf176423f3e94def21f8cdbf21f8cdbf21f8cdb
Found 2 files trough .DS_Store spidering: /assets /assets/images
Severity: low
Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d325beceb325beceb325beceb325beceb
Found 1 files trough .DS_Store spidering: /assets
The application has Symfony profiling enabled.
It enables an attacker to access the following sensitive content :
Fingerprint: 407cf4363b0e62fafca67e07776646aa776646aa776646aa776646aa776646aa
Symfony profiler enabled: https://staging.delsap.be/_profiler/empty/search/results
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b6cc1277
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = git@github.com:Wecodx/server-404.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b6cc1277
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = git@github.com:Wecodx/server-404.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master
Severity: medium
Fingerprint: 2580fa947e78dd08e645819d1e4633dc866880ac078c493a30e7125cd296eaba
HTTP/1.1 200 OK
Date: Sun, 07 May 2023 09:34:30 GMT
Server: Apache/2.4.29 (Ubuntu)
Vary: Accept-Encoding
Content-Length: 3070
Connection: close
Content-Type: text/html; charset=UTF-8
Page title: Wecodx
<!doctype html>
<html lang="en">
<head>
<!-- Required meta tags -->
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
<title>Wecodx</title>
<!-- Favicon -->
<link rel="shortcut icon" href="images/favicon.ico" />
<!-- Bootstrap CSS -->
<link rel="stylesheet" href="css/bootstrap.min.css">
<!-- Typography CSS -->
<link rel="stylesheet" href="css/typography.css">
<!-- Style CSS -->
<link rel='stylesheet' href='css/qloud-style.css' />
<!-- Responsive CSS -->
<link rel="stylesheet" href="css/responsive.css">
<link rel="icon" href="logo.ico">
</head>
<body>
<!-- Blog Start -->
<section class="iq-blog-section">
<div class="container">
<div class="row">
<div class="col-sm-12 text-center">
<div class="fourzero-image mb-5">
<img src="404.png" class="img-fluid" alt="404" />
</div>
<h4> 404 Error</h4>
<p class="mb-5">
Oops! This Page is Not Found. </p>
-
<div class="d-block">
<a class="iq-button" href="https://status.wecodx.com/">Monitor my status history</a>
</div>
</div>
</div>
</div>
</section>
<!-- jQuery first, then Popper.js, then Bootstrap JS -->
<script src="js/jquery-3.4.1.js"></script>
<!-- jQuery for scroll me js -->
<script src='js/jquery-min.js'></script>
<!-- popper -->
<script src="js/popper.min.js"></script>
<!-- bootstrap -->
<script src="js/bootstrap.min.js"></script>
<!-- Appear JavaScript -->
<script src="js/appear.js"></script>
<!-- Jquery-migrate JavaScript -->
<script src='js/jquery-migrate.min.js'></script>
<!-- Scripts JavaScript -->
<script src='js/scripts.js'></script>
<!-- countdownTimer JavaScript -->
<script src='js/jQuery.countdownTimer.min.js'></script>
<!-- Tox-progress JavaScript -->
<script src='js/tox-progress.min.js'></script>
<!-- Timeline JavaScript -->
<script src='js/timeline.js'></script>
<!-- Timeline min JavaScript -->
<script src='js/timeline.min.js'></script>
<!-- Slick JavaScript -->
<script src='js/slick.min.js'></script>
<!-- Popper JavaScript -->
<script src='js/popper.min.js'></script>
<!-- Owl.carousel JavaScript -->
<script src='js/owl.carousel.min.js'></script>
<!-- Countdown JavaScript -->
<script src='js/countdown.js'></script>
<!-- Jquery.countTo JavaScript -->
<script src='js/jquery.countTo.js'></script>
<!-- Magnific-popup JavaScript -->
<script src='js/jquery.magnific-popup.min.js'></script>
<!-- Isotope.pkgd.min JavaScript -->
<script src='js/isotope.pkgd.min.js'></script>
<!-- Wow JavaScript -->
<script src='js/wow.min.js'></script>
<!-- Custom JavaScript -->
<script src="js/custom.js"></script>
</body>
</html>[core]
repositoryformatversion = 0
filemode = true
bare = false
logallrefupdates = true
[remote "origin"]
url = git@github.com:Wecodx/server-404.git
fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
remote = origin
merge = refs/heads/master
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c3af247253af247251e0762cddf86fea3467ee7c66b42ef49
Found 9 files trough .DS_Store spidering: /admin /admin/assets /admin/assets/images /assets /assets/css /assets/fonts /assets/images /assets/js /assets/libs
Severity: low
Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e9a30a57510ada7fa7d4f0198263d5d80b
Found 5 files trough .DS_Store spidering: /admin /admin/assets /admin/assets/images /admin/invoices /assets
Severity: low
Fingerprint: 5f32cf5d6962f09c8329733f8329733ff2c540c7a8ad6651e09b6980875878de
Found 10 files trough .DS_Store spidering: /admin /admin/assets /admin/assets/images /admin/invoices /assets /assets/css /assets/fonts /assets/images /assets/js /assets/libs