openresty
tcp/443
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c3af247253af247259b6c8633607b323d7dc4c3ba3c9a965a
Found 9 files trough .DS_Store spidering: /assets /assets/css /bootstrap /bootstrap/album /bootstrap/starter-template /bootstrap/sticky-footer /images /libs /test_db.php
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522fc37141d
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = git@gitlab.lrz.de:di29baf/Wachplan_Design.git fetch = +refs/heads/erweiterung-lohhof:refs/remotes/origin/erweiterung-lohhof [branch "erweiterung-lohhof"] remote = origin merge = refs/heads/erweiterung-lohhof
Open service 91.216.248.19:443 · sungalaxy.de
2026-01-05 09:39
HTTP/1.1 200 OK Server: openresty Date: Mon, 05 Jan 2026 09:39:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Lima-Id: ga6AeFipbXris2cMWb Set-Cookie: _lcp=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly x-powered-by: PHP/8.4.11 x-frame-options: SAMEORIGIN content-security-policy: frame-ancestors 'self'; link: <https://sungalaxy.de/wp-json/>; rel="https://api.w.org/", <https://sungalaxy.de/wp-json/wp/v2/pages/9>; rel="alternate"; title="JSON"; type="application/json", <https://sungalaxy.de/>; rel=shortlink vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains; preload