LeakIX - Host 43.155.118.104

Host 43.155.118.104

Hong Kong

Tencent Building, Kejizhongyi Avenue

Ubuntu

Software information

Apache Apache 2.4.41

tcp/8765

nginx nginx

tcp/443 tcp/80

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 43.155.118.104
Port: 8765
URL: http://43.155.118.104:8765

First seen 2024-01-18 00:37
Last seen 2024-05-27 23:31
Open for 130 days

Severity: low
Fingerprint: 5f32cf5d6962f09c81c345f781c345f7f860bff9df08159ad3cd527a0e094084

Found 32 files trough .DS_Store spidering:

/assets
/Dockerfile
/footer.php
/header.php
/inc
/index.php
/install.php
/LICENSE
/pkxss
/README.md
/test
/test/phpinfo.txt
/test/ser.php
/test/test.php
/test/yijuhua.txt
/vul
/vul/burteforce
/vul/csrf
/vul/dir
/vul/fileinclude
/vul/infoleak
/vul/overpermission
/vul/rce
/vul/sqli
/vul/ssrf
/vul/unsafedownload
/vul/unsafeupload
/vul/unserilization
/vul/urlredirect
/vul/xss
/vul/xxe
/wiki

Found on 2024-05-27 23:31

Severity: medium
Fingerprint: 5f32cf5d6962f09c2acf29aa2acf29aa3eaf00a630863e6b0e3c85a9638b60a6

Found 33 files trough .DS_Store spidering:

/assets
/Dockerfile
/footer.php
/header.php
/inc
/index.php
/install.php
/LICENSE
/pkxss
/README.md
/test
/test/phpinfo.txt
/test/ser.php
/test/test.php
/test/yijuhua.txt
/vul
/vul/burteforce
/vul/csrf
/vul/dir
/vul/fileinclude
/vul/infoleak
/vul/overpermission
/vul/rce
/vul/sqli
/vul/ssrf
/vul/unsafedownload
/vul/unsafeupload
/vul/unserilization
/vul/urlredirect
/vul/xss
/vul/xxe
/wiki
/wiki/image

Found on 2024-05-22 21:39

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 43.155.118.104
Port: 8765
URL: http://43.155.118.104:8765

First seen 2024-01-18 00:37
Last seen 2024-05-27 23:31
Open for 130 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65225c03ae9d
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	ignorecase = true
[remote "origin"]
	url = git@github.com:8023/pikachu.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2024-05-27 23:31
  
  275 Bytes
Create report

Open service 43.155.118.104:8765

2024-05-27 23:31

HTTP/1.1 200 OK
Date: Mon, 27 May 2024 23:31:45 GMT
Server: Apache/2.4.41 (Ubuntu)
Set-Cookie: PHPSESSID=99pb9thhqqnlgrc0reabq4blt1; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html;charset=utf-8

Found 19 hours ago by HttpPlugin

Create report

Open service 43.155.118.104:8765

2024-05-27 23:06

HTTP/1.1 200 OK
Date: Mon, 27 May 2024 23:06:49 GMT
Server: Apache/2.4.41 (Ubuntu)
Set-Cookie: PHPSESSID=5c1gd5utpiq59luqcf7r21leim; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html;charset=utf-8

Found 20 hours ago by HttpPlugin

Create report

Open service 43.155.118.104:8765

2024-05-26 23:57

HTTP/1.1 200 OK
Date: Sun, 26 May 2024 23:57:54 GMT
Server: Apache/2.4.41 (Ubuntu)
Set-Cookie: PHPSESSID=b17jhgdadtdk6a08i0st6hj32b; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html;charset=utf-8

Found 2 days ago by HttpPlugin

Create report

Open service 43.155.118.104:8765

2024-05-26 23:37

HTTP/1.1 200 OK
Date: Sun, 26 May 2024 23:37:56 GMT
Server: Apache/2.4.41 (Ubuntu)
Set-Cookie: PHPSESSID=7affjnfct4pionackpi6jiehml; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html;charset=utf-8

Found 2 days ago by HttpPlugin

Create report

Open service 43.155.118.104:8765

2024-05-25 23:28

HTTP/1.1 200 OK
Date: Sat, 25 May 2024 23:28:04 GMT
Server: Apache/2.4.41 (Ubuntu)
Set-Cookie: PHPSESSID=ja65bf0i80l06j6oe1k38739cb; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html;charset=utf-8

Found 3 days ago by HttpPlugin

Create report

Open service 43.155.118.104:8765

2024-05-25 23:07

HTTP/1.1 200 OK
Date: Sat, 25 May 2024 23:07:30 GMT
Server: Apache/2.4.41 (Ubuntu)
Set-Cookie: PHPSESSID=a4q1304m9i1u7toeo5hsitirun; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html;charset=utf-8

Found 3 days ago by HttpPlugin