LeakIX - Host 52.20.10.164

Host 52.20.10.164

United States

AMAZON-AES

Amazon

Software information

Apache Apache 2.4.59

tcp/443 tcp/80

OpenSSL OpenSSL 1.0.2k-fips

tcp/443 tcp/80

PHP PHP 5.6.40

tcp/443 tcp/80

Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 52.20.10.164
Domain: hood.iset.io
Port: 80
URL: http://hood.iset.io/_profiler/empty/search/results

First seen 2022-09-03 02:49
Last seen 2024-09-16 16:37
Open for 744 days
- Fingerprint: 407cf4363b0e62fafca67e07826964bb826964bb826964bb826964bb826964bb
```
Symfony profiler enabled:
http://hood.iset.io/_profiler/empty/search/results
```
  Found on 2024-09-16 16:37
Create report
Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 52.20.10.164
Domain: hood.iset.io
Port: 443
URL: https://hood.iset.io/_profiler/empty/search/results

First seen 2021-09-25 10:58
Last seen 2024-09-16 11:52
Open for 1087 days
- Fingerprint: 407cf4363b0e62fafca67e077c37c8027c37c8027c37c8027c37c8027c37c802
```
Symfony profiler enabled:
https://hood.iset.io/_profiler/empty/search/results
```
  Found on 2024-09-16 11:52
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 52.20.10.164
Domain: hood-interface.iset.io
Port: 443
URL: https://hood-interface.iset.io/.git/config

First seen 2021-09-14 20:47
Last seen 2024-09-16 08:59
Open for 1097 days
- Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652204a5959c
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:isetbr/hood-interface.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2024-09-16 08:59
  
  265 Bytes
Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 52.20.10.164
Port: 443
URL: https://52.20.10.164

First seen 2021-07-04 07:38
Last seen 2024-09-15 21:39
Open for 1169 days

Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652204a5959c

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:isetbr/hood-interface.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2024-09-15 21:39

265 Bytes

Severity: medium
Fingerprint: 2580fa947e78dd08e645819d5f19ae3d26bc9077763edacbc6259a57c510f146

HTTP/1.1 200 OK
Date: Sat, 06 May 2023 12:12:26 GMT
Server: Apache/2.4.52 (Amazon) OpenSSL/1.0.2k-fips PHP/5.6.40
Last-Modified: Fri, 01 Sep 2017 15:23:23 GMT
ETag: "482e-55822577d029a"
Accept-Ranges: bytes
Content-Length: 18478
Connection: close
Content-Type: text/html; charset=UTF-8
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:isetbr/hood-interface.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2023-05-06 12:12

265 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 52.20.10.164
Domain: hood-interface.iset.io
Port: 80
URL: http://hood-interface.iset.io

First seen 2022-07-02 02:48
Last seen 2024-09-14 17:18
Open for 805 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652204a5959c
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:isetbr/hood-interface.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2024-09-14 17:18
  
  265 Bytes
Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 52.20.10.164
Port: 80
URL: http://52.20.10.164

First seen 2021-06-03 02:36
Last seen 2024-09-11 21:23
Open for 1196 days

Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652204a5959c

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:isetbr/hood-interface.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2024-09-11 21:23

265 Bytes

Severity: medium
Fingerprint: 2580fa947e78dd08e645819d5f19ae3d26bc9077763edacbc6259a57c510f146

HTTP/1.1 200 OK
Date: Sun, 07 May 2023 12:32:18 GMT
Server: Apache/2.4.52 (Amazon) OpenSSL/1.0.2k-fips PHP/5.6.40
Last-Modified: Fri, 01 Sep 2017 15:23:23 GMT
ETag: "482e-55822577d029a"
Accept-Ranges: bytes
Content-Length: 18478
Connection: close
Content-Type: text/html; charset=UTF-8
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:isetbr/hood-interface.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2023-05-07 12:32

265 Bytes

Create report

Found php information file

PHPinfo page has been found in this directory. The PHPinfo page outputs a large amount of information about the current state of PHP.

This includes information about PHP compilation options and extensions, the PHP version, server information and environment (if compiled as a module), the PHP environment, OS version information, paths, master and local values of configuration options, HTTP headers, and the PHP License.

Environment variables may contain credentials.

https://www.acunetix.com/vulnerabilities/web/phpinfo-page/

IP: 52.20.10.164
Domain: hood.iset.io
Port: 443
URL: https://hood.iset.io/info.php

First seen 2021-09-25 10:58
Last seen 2021-09-26 11:47
Open for 1 days

Fingerprint: 2c44e2a6278fb0134173d6fa1c1eb2b3c362660451d5df3b4ffe65db18b3c595

Found PHP info page:
_SERVER["ENVIRONMENT"] = prod
_SERVER["HTTPS"] = on
_SERVER["HTTP_HOST"] = hood.iset.io
_SERVER["HTTP_USER_AGENT"] = l9explore/1.3.0
_SERVER["HTTP_ACCEPT_ENCODING"] = gzip
_SERVER["HTTP_CONNECTION"] = close
_SERVER["PATH"] = /sbin:/usr/sbin:/bin:/usr/bin
_SERVER["SERVER_SIGNATURE"] = no value
_SERVER["SERVER_SOFTWARE"] = Apache/2.4.39 (Amazon) OpenSSL/1.0.2k-fips PHP/5.6.40
_SERVER["SERVER_NAME"] = hood.iset.io
_SERVER["SERVER_ADDR"] = 172.31.38.240
_SERVER["SERVER_PORT"] = 443
_SERVER["REMOTE_ADDR"] = 167.71.13.196
_SERVER["DOCUMENT_ROOT"] = /home/iset/hood/web
_SERVER["REQUEST_SCHEME"] = https
_SERVER["CONTEXT_PREFIX"] = no value
_SERVER["CONTEXT_DOCUMENT_ROOT"] = /home/iset/hood/web
_SERVER["SERVER_ADMIN"] = devops@iset.com.br
_SERVER["SCRIPT_FILENAME"] = /home/iset/hood/web/info.php
_SERVER["REMOTE_PORT"] = 51176
_SERVER["GATEWAY_INTERFACE"] = CGI/1.1
_SERVER["SERVER_PROTOCOL"] = HTTP/1.1
_SERVER["REQUEST_METHOD"] = GET
_SERVER["QUERY_STRING"] = no value
_SERVER["REQUEST_URI"] = /info.php
_SERVER["SCRIPT_NAME"] = /info.php
_SERVER["PHP_SELF"] = /info.php
_SERVER["REQUEST_TIME_FLOAT"] = 1632656835.869
_SERVER["REQUEST_TIME"] = 1632656835

Found on 2021-09-26 11:47

Fingerprint: 2c44e2a6278fb0134173d6fa1c1eb2b3c362660451d5df3b4ffe65dbddb0c290

Found PHP info page:
_SERVER["ENVIRONMENT"] = prod
_SERVER["HTTPS"] = on
_SERVER["HTTP_HOST"] = hood.iset.io
_SERVER["HTTP_USER_AGENT"] = l9explore/1.3.0
_SERVER["HTTP_ACCEPT_ENCODING"] = gzip
_SERVER["HTTP_CONNECTION"] = close
_SERVER["PATH"] = /sbin:/usr/sbin:/bin:/usr/bin
_SERVER["SERVER_SIGNATURE"] = no value
_SERVER["SERVER_SOFTWARE"] = Apache/2.4.39 (Amazon) OpenSSL/1.0.2k-fips PHP/5.6.40
_SERVER["SERVER_NAME"] = hood.iset.io
_SERVER["SERVER_ADDR"] = 172.31.38.240
_SERVER["SERVER_PORT"] = 443
_SERVER["REMOTE_ADDR"] = 167.71.13.196
_SERVER["DOCUMENT_ROOT"] = /home/iset/hood/web
_SERVER["REQUEST_SCHEME"] = https
_SERVER["CONTEXT_PREFIX"] = no value
_SERVER["CONTEXT_DOCUMENT_ROOT"] = /home/iset/hood/web
_SERVER["SERVER_ADMIN"] = devops@iset.com.br
_SERVER["SCRIPT_FILENAME"] = /home/iset/hood/web/info.php
_SERVER["REMOTE_PORT"] = 40134
_SERVER["GATEWAY_INTERFACE"] = CGI/1.1
_SERVER["SERVER_PROTOCOL"] = HTTP/1.1
_SERVER["REQUEST_METHOD"] = GET
_SERVER["QUERY_STRING"] = no value
_SERVER["REQUEST_URI"] = /info.php
_SERVER["SCRIPT_NAME"] = /info.php
_SERVER["PHP_SELF"] = /info.php
_SERVER["REQUEST_TIME_FLOAT"] = 1632656823.675
_SERVER["REQUEST_TIME"] = 1632656823

Found on 2021-09-26 11:47

Fingerprint: 2c44e2a6278fb0134173d6fa1c1eb2b3c362660451d5df3b4ffe65db6c81dcb1

Found PHP info page:
_SERVER["ENVIRONMENT"] = prod
_SERVER["HTTPS"] = on
_SERVER["HTTP_HOST"] = hood.iset.io
_SERVER["HTTP_USER_AGENT"] = l9explore/1.3.0
_SERVER["HTTP_ACCEPT_ENCODING"] = gzip
_SERVER["HTTP_CONNECTION"] = close
_SERVER["PATH"] = /sbin:/usr/sbin:/bin:/usr/bin
_SERVER["SERVER_SIGNATURE"] = no value
_SERVER["SERVER_SOFTWARE"] = Apache/2.4.39 (Amazon) OpenSSL/1.0.2k-fips PHP/5.6.40
_SERVER["SERVER_NAME"] = hood.iset.io
_SERVER["SERVER_ADDR"] = 172.31.38.240
_SERVER["SERVER_PORT"] = 443
_SERVER["REMOTE_ADDR"] = 167.71.13.196
_SERVER["DOCUMENT_ROOT"] = /home/iset/hood/web
_SERVER["REQUEST_SCHEME"] = https
_SERVER["CONTEXT_PREFIX"] = no value
_SERVER["CONTEXT_DOCUMENT_ROOT"] = /home/iset/hood/web
_SERVER["SERVER_ADMIN"] = devops@iset.com.br
_SERVER["SCRIPT_FILENAME"] = /home/iset/hood/web/info.php
_SERVER["REMOTE_PORT"] = 18614
_SERVER["GATEWAY_INTERFACE"] = CGI/1.1
_SERVER["SERVER_PROTOCOL"] = HTTP/1.1
_SERVER["REQUEST_METHOD"] = GET
_SERVER["QUERY_STRING"] = no value
_SERVER["REQUEST_URI"] = /info.php
_SERVER["SCRIPT_NAME"] = /info.php
_SERVER["PHP_SELF"] = /info.php
_SERVER["REQUEST_TIME_FLOAT"] = 1632567533.713
_SERVER["REQUEST_TIME"] = 1632567533

Found on 2021-09-25 10:58

Create report

Open service 52.20.10.164:443 · hood-interface.iset.io

2024-09-16 08:59

HTTP/1.1 200 OK
Date: Mon, 16 Sep 2024 08:59:03 GMT
Server: Apache/2.4.59 (Amazon) OpenSSL/1.0.2k-fips PHP/5.6.40
Last-Modified: Fri, 01 Sep 2017 15:23:23 GMT
ETag: "482e-55822577d029a"
Accept-Ranges: bytes
Content-Length: 18478
Connection: close
Content-Type: text/html; charset=UTF-8


<!DOCTYPE html>
<html>

<head>
    <!--Import Google Icon Font-->
    <link href="//fonts.googleapis.com/icon?family=Material+Icons" rel="stylesheet">
    <!--Import materialize.css-->
    <link type="text/css" rel="stylesheet" href="css/materialize.min.css" media="screen,projection" />
    <link type="text/css" rel="stylesheet" href="css/styles.css" media="screen,projection" />
    <link type="text/css" rel="stylesheet" href="css/jquery.minicolors.css" media="screen,projection" />

    <!--Let browser know website is optimized for mobile-->
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta charset="utf-8" />
</head>

<body class="grey lighten-5">

    <main>

        <div class="tab-wrapper">
            <ul class="tabs tabs-fixed-width z-depth-1">
                <li class="tab layouts">
                    <a class="active" href="#layouts"><i class="material-icons tab-icon">view_carousel</i>Templates</a>
                </li>
                <li class="tab mylayouts">
                    <a href="#myLayouts"><i class="material-icons tab-icon">folder_special</i>Meus templates</a>
                </li>
            </ul>
        </div>

        <div class="row pt7 action-buttons">
            <div class="col s12">

                <div class="left btn-save">
                    <a href="#saveModal" class="btn-floating btn-large waves-effect waves-light green"><i class="material-icons">save</i></a>
                </div>

                <div class="control left">
                    <div class="btn-material indigo lighten-1"></div>
                    <i class="material-icons icon-material-search">search</i>
                </div>

            </div>
        </div>

        <div class="tab-content-wrapper">

            <div id="layouts" class="col s12">
                <div class="section"></div>
            </div>

            <div id="myLayouts" class="col s12">

                <ul class="collapsible" data-collapsible="expandable">
                    <li>
                        <div class="collapsible-header active">
                            <h4>Salvos<span class="saved-count"></span></h4>
                        </div>
                        <div class="collapsible-body section saved-layouts"></div>
                    </li>
                    <li>
                        <div class="collapsible-header active">
                            <h4>Adquiridos<span class="ordered-count"></span></h4>
                        </div>
                        <div class="collapsible-body section purchased-layouts"></div>
                    </li>
                </ul>

            </div>

        </div>

    </main>

    <!-- full screen form controls -->
    <i class="icon-close material-icons">close</i>
    <div class="search-input">
        <input class="input-search" placeholder="Digite sua pesquisa" type="text">
    </div>

    <div id="apply-modal" class="modal modal-fixed-footer">
        <div class="modal-content">
            <h4>Deseja aplicar este layout em sua loja ?</h4>
            <p>Todas as informações não salvas de seu layout atual serão perdidas!!</p>

            <b>Cores: </b>

            <div class="advanced-options">
                <input type="checkbox" name="advanced_options" id="advanced_options" value="1">
                <label for="advanced_options">Visualizar opções avançadas</label>
            </div>

            <form id="layout-colors">

                <div class="row valign-wrapper advanced">
                    <div class="col s12 m4 l4">
                        <div class="input-field col s12">
                            <input type="text" name="TEMPLATE_CUSTOM_ADDON1_COLOR" class="minicolors-input" size="7" value="">
                        </div>
                    </div>
                    <div class="col s12 m8 l8 hide-on-small-only">
                        <br>
                        <small>Cor adicional que pode ser usada opcionalmente em outros elementos da loja virtual.<br>
                          <b>Variável: --custom-addo

Found 11 hours ago by HttpPlugin

Host 52.20.10.164

United States

Software information

Symfony developement panel enabled

Symfony developement panel enabled

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Found php information file

hood-interface.iset.iohood.iset.io

Domain summary