LeakIX - Host 49.232.109.66

Host 49.232.109.66

China

Shenzhen Tencent Computer Systems Company Limited

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 49.232.109.66
Port: 443
URL: https://49.232.109.66

First seen 2023-03-17 06:09
Last seen 2023-11-16 17:11
Open for 244 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c248e4f81248e4f81cb3a648f866d48075ab2ff1828e84f37

Found 41 files trough .DS_Store spidering:

/assets
/css
/css/mobile
/dist
/dist/js
/fonts
/images
/images/admin
/images/award
/images/bot
/images/collectword
/images/corp
/images/corpClinetRed
/images/corpTask
/images/cutprice
/images/define
/images/defineposter
/images/desc
/images/distribution
/images/emoji
/images/goodscode
/images/groupPurchase
/images/hypermarket
/images/icon
/images/livefission
/images/liveturn
/images/login
/images/markPersonal
/images/mobile
/images/mobileCenter
/images/official
/images/proxy
/images/share
/images/test
/images/thirdPart
/images/vrheader
/images/yzmpic
/js
/lib
/svg
/vendor

Found on 2023-11-16 17:11

Severity: low
Fingerprint: 5f32cf5d6962f09cec7f8772ec7f877272a0bbae9752f4b6fa843b4b9976b809

Found 11 files trough .DS_Store spidering:

/assets
/css
/css/mobile
/dist
/dist/js
/fonts
/images
/js
/lib
/svg
/vendor

Found on 2023-11-16 16:17

Severity: medium
Fingerprint: 5f32cf5d6962f09c778888b4778888b41780d2642da5f15472c288c955c721fb

Found 40 files trough .DS_Store spidering:

/assets
/css
/css/mobile
/dist
/fonts
/images
/images/admin
/images/award
/images/bot
/images/collectword
/images/corp
/images/corpClinetRed
/images/corpTask
/images/cutprice
/images/define
/images/defineposter
/images/desc
/images/distribution
/images/emoji
/images/goodscode
/images/groupPurchase
/images/hypermarket
/images/icon
/images/livefission
/images/liveturn
/images/login
/images/markPersonal
/images/mobile
/images/mobileCenter
/images/official
/images/proxy
/images/share
/images/test
/images/thirdPart
/images/vrheader
/images/yzmpic
/js
/lib
/svg
/vendor

Found on 2023-10-03 14:15

Severity: low
Fingerprint: 5f32cf5d6962f09c684e525d684e525dcca2f42b547ac94b615547c351388a1e

Found 27 files trough .DS_Store spidering:

/assets
/css
/css/admin
/css/batch
/css/channel
/css/corpTask
/css/crop
/css/distribution
/css/fan
/css/fonts
/css/groupPurchase
/css/lib
/css/mobile
/css/offline
/css/qrcord
/css/review
/css/scan
/css/subgift
/css/superreply
/css/task
/dist
/fonts
/images
/js
/lib
/svg
/vendor

Found on 2023-06-10 03:28

Severity: low
Fingerprint: 5f32cf5d6962f09c11d3744d11d3744d336cbabb8fe0009b75006054ad7259c7

Found 12 files trough .DS_Store spidering:

/assets
/css
/css/mobile
/dist
/dist/js
/fonts
/images
/js
/js/mobile
/lib
/svg
/vendor

Found on 2023-05-06 23:48

Severity: low
Fingerprint: 5f32cf5d6962f09c11d3744d11d3744d336cbabb8fe0009b75006054cd31fd75

Found 12 files trough .DS_Store spidering:

/assets
/css
/css/mobile
/dist
/dist/css
/dist/js
/fonts
/images
/js
/lib
/svg
/vendor

Found on 2023-04-11 10:44

Severity: low
Fingerprint: 5f32cf5d6962f09c3af247253af247259b6c8633f00cb043a175e1827b38d4d4
```
Found 9 files trough .DS_Store spidering:

/assets
/css
/dist
/fonts
/images
/js
/lib
/svg
/vendor
```
Found on 2023-03-17 06:09

Create report

Laravel development panel enabled
The application has Laravel development panel enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 49.232.109.66
Port: 443
URL: https://49.232.109.66

First seen 2023-03-17 06:09
Last seen 2023-11-16 17:11
Open for 244 days
- Fingerprint: 3ae8115d762f12d0ef5ad18eef5ad18eef5ad18eef5ad18eef5ad18eef5ad18e
```
Laravel Telescope enabled at https://49.232.109.66
```
  Found on 2023-11-16 17:11
Create report
Laravel development panel enabled
The application has Laravel development panel enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 49.232.109.66
Domain: hd.yqsm.ltd
Port: 80
URL: http://hd.yqsm.ltd

First seen 2023-03-15 12:30
- Fingerprint: 3ae8115d762f12d0ca86a44fca86a44fca86a44fca86a44fca86a44fca86a44f
```
Laravel Telescope enabled at http://hd.yqsm.ltd
```
  Found on 2023-03-15 12:30
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 49.232.109.66
Domain: hd.yqsm.ltd
Port: 80
URL: http://hd.yqsm.ltd

First seen 2023-03-15 12:30
- Severity: low
  Fingerprint: 5f32cf5d6962f09cec7f8772ec7f877272a0bbae9752f4b6e8602d9dfcbb26ef
```
Found 11 files trough .DS_Store spidering:

/assets
/css
/dist
/dist/js
/fonts
/images
/js
/js/dist
/lib
/svg
/vendor
```
  Found on 2023-03-15 12:30
Create report

Domain summary

hd.yqsm.ltd 2

1 recorded

Host 49.232.109.66

China

MacOS file listing through .DS_Store file

Laravel development panel enabled

Laravel development panel enabled

MacOS file listing through .DS_Store file

Domain summary