fresh autorecon run
This commit is contained in:
@@ -19,8 +19,14 @@ ffuf -u http://traefik.lan.ddnsgeek.com:80/ -t 10 -w /usr/share/seclists/Discove
|
||||
|
||||
whatweb --color=never --no-errors -a 3 -v http://traefik.lan.ddnsgeek.com:80 2>&1
|
||||
|
||||
nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN "/root/results/traefik.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt" -oX "/root/results/traefik.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml" traefik.lan.ddnsgeek.com
|
||||
|
||||
feroxbuster -u https://traefik.lan.ddnsgeek.com:443/ -t 10 -w /root/.local/share/AutoRecon/wordlists/dirbuster.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -q -e -r -o "/root/results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt"
|
||||
|
||||
whatweb --color=never --no-errors -a 3 -v https://traefik.lan.ddnsgeek.com:443 2>&1
|
||||
|
||||
sslscan --show-certificate --no-colour traefik.lan.ddnsgeek.com:443 2>&1
|
||||
|
||||
curl -sSikf https://traefik.lan.ddnsgeek.com:443/.well-known/security.txt
|
||||
|
||||
curl -sSikf https://traefik.lan.ddnsgeek.com:443/robots.txt
|
||||
@@ -31,13 +37,5 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host https://traefik.lan.ddnsge
|
||||
|
||||
nmap -vv --reason -Pn -T4 -sV -p 443 --script="banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN "/root/results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt" -oX "/root/results/traefik.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml" traefik.lan.ddnsgeek.com
|
||||
|
||||
sslscan --show-certificate --no-colour traefik.lan.ddnsgeek.com:443 2>&1
|
||||
|
||||
ffuf -u https://traefik.lan.ddnsgeek.com:443/ -t 10 -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -H "Host: FUZZ.traefik.lan.ddnsgeek.com" -mc all -fs 19 -r -noninteractive -s | tee "/root/results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_traefik.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt"
|
||||
|
||||
whatweb --color=never --no-errors -a 3 -v https://traefik.lan.ddnsgeek.com:443 2>&1
|
||||
|
||||
nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN "/root/results/traefik.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt" -oX "/root/results/traefik.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml" traefik.lan.ddnsgeek.com
|
||||
|
||||
|
||||
```
|
||||
@@ -19,7 +19,7 @@
|
||||
|
||||
wpscan --url http://traefik.lan.ddnsgeek.com:80/ --no-update -e vp,vt,tt,cb,dbe,u,m --plugins-detection aggressive --plugins-version-detection aggressive -f cli-no-color 2>&1 | tee "/root/results/traefik.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_wpscan.txt"
|
||||
|
||||
[*] http on tcp/443
|
||||
[*] https on tcp/443
|
||||
|
||||
[-] (feroxbuster) Multi-threaded recursive directory/file enumeration for web servers using various wordlists:
|
||||
|
||||
|
||||
@@ -1,6 +0,0 @@
|
||||
Matched Pattern: Unauthorized
|
||||
|
||||
Matched Pattern: Unauthorized
|
||||
|
||||
Matched Pattern: Unauthorized
|
||||
|
||||
+181
-136
@@ -5,176 +5,221 @@ nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN "/root
|
||||
[/root/results/traefik.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt](file:///root/results/traefik.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt):
|
||||
|
||||
```
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 10:38:19 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /root/results/traefik.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/traefik.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml traefik.lan.ddnsgeek.com
|
||||
Increasing send delay for 167.179.167.166 from 0 to 5 due to 11 out of 23 dropped probes since last increase.
|
||||
adjust_timeouts2: packet supposedly had rtt of -753748 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -753748 microseconds. Ignoring time.
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 04:28:41 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /root/results/traefik.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/traefik.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml traefik.lan.ddnsgeek.com
|
||||
adjust_timeouts2: packet supposedly had rtt of -594319 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -594319 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -617872 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -617872 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -180799 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -180799 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -561498 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -561498 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -616389 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -616389 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -202893 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -202893 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -459499 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -459499 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -156571 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -156571 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -125065 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -125065 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -520123 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -520123 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -292416 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -292416 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -583354 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -583354 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -2275003 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -2275003 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -7993309 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -7993309 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -533533 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -533533 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -423120 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -423120 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -397935 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -397935 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -836029 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -836029 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -234887 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -234887 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -541180 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -541180 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -106602 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -106602 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -807997 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -807997 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -118772 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -118772 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -228650 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -228650 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -441749 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -441749 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -682577 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -682577 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -702849 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -702849 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -66788 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -66788 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -402007 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -402007 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -753956 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -753956 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -185162 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -185162 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -791235 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -791235 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -830557 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -830557 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -418522 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -418522 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -62647 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -62647 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -158415 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -158415 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -78396 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -78396 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -352699 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -352699 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -128365 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -128365 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -186914 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -186914 microseconds. Ignoring time.
|
||||
Nmap scan report for traefik.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set (0.019s latency).
|
||||
Host is up, received user-set (0.014s latency).
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 10:38:27 UTC for 8498s
|
||||
Scanned at 2026-04-14 04:28:49 UTC for 2048s
|
||||
Not shown: 65531 filtered tcp ports (no-response)
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-title: Did not follow redirect to https://traefik.lan.ddnsgeek.com/
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
| http-auth:
|
||||
| HTTP/1.1 401 Unauthorized\x0D
|
||||
|_ Server returned status 401 but no WWW-Authenticate header.
|
||||
443/tcp open ssl/https syn-ack ttl 55
|
||||
|_http-title: Site doesn't have a title (text/plain; charset=utf-8).
|
||||
| ssl-cert: Subject: commonName=traefik.lan.ddnsgeek.com
|
||||
| Subject Alternative Name: DNS:traefik.lan.ddnsgeek.com
|
||||
| Issuer: commonName=R12/organizationName=Let's Encrypt/countryName=US
|
||||
| Public Key type: rsa
|
||||
| Public Key bits: 4096
|
||||
| Signature Algorithm: sha256WithRSAEncryption
|
||||
| Not valid before: 2026-02-24T17:15:56
|
||||
| Not valid after: 2026-05-25T17:15:55
|
||||
| MD5: 3965 6ae5 1fd5 d639 ae11 ae62 386a bbc6
|
||||
| SHA-1: 0012 a7f2 538a fe0c f6c5 4b87 b043 be41 0ba2 d9ca
|
||||
| SHA-256: 30c1 f43f 2e91 984f 63bc 7601 5db8 2cf9 9fae 4dab 3de8 4ec3 ab1f aebd dbcc b740
|
||||
| -----BEGIN CERTIFICATE-----
|
||||
| MIIGCzCCBPOgAwIBAgISBS2doeeMRnZ7rS8hQrl4D4mJMA0GCSqGSIb3DQEBCwUA
|
||||
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
|
||||
| EwNSMTIwHhcNMjYwMjI0MTcxNTU2WhcNMjYwNTI1MTcxNTU1WjAjMSEwHwYDVQQD
|
||||
| Exh0cmFlZmlrLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4IC
|
||||
| DwAwggIKAoICAQDPV80efBCHNEUZ3FWDhW0Zs1QZYXkN9XoeXMuPbWU+LhfvXtUz
|
||||
| 8RoGL0FPNt99LeVQOAOvKO0ZTbSgo594o+RrnBrckl9tDAtfJAFNJNkvrLZtZsD7
|
||||
| kN7zljaGSgcHCKyX+C9TG0+KwV9qmVijc/9CaUJ2p8H21DVktVwJyHscc0UiMIak
|
||||
| 5UqMAtfQrjIcNp+5pYiDpEHhBJ9LXDk4pFBOnJWF3tzuiAoNa5jgwSEV+6MpTQ4K
|
||||
| 7m5G/J5v642WCIjsfAmjAFEVqO54rrEaP++0BiWPSyeXNJ6+sB7uk6jbMwFNzCIC
|
||||
| aRe1llv9afnz17qWAfdEaXclyBbM/fyto/QMQa5hntBNHDByPXqkGE23+TeIlRKF
|
||||
| mw3161Uzc2ycRAm49DYMM0W7MVINOZE2syssqMt/F33n3Mqx/exGZE9u8d2lqoPr
|
||||
| i+KJSSb2MsFHPJGIL9FfH/2tYfpJQI6KexbYZxOsRj2YzgX5b8DocWNFCw/diCz2
|
||||
| GHrBFAcn+IqYAjjnC/5NqNc3xBi+zBWdo4gjmrSHrX/eeaHq1dNaBRIKKN4Z/0Eh
|
||||
| Y9eMkQUZby6rDqf+l2D7Mae4QcdYMKW/IeMgQXFAMuwTyXHXVdiLCOcnOlsf2HLa
|
||||
| wy48HR9jI56jSH6q3vIRqWFVMfDN/58wgqbqTUEQtybbRaNqISG3TmAcFQIDAQAB
|
||||
| o4ICJzCCAiMwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwG
|
||||
| A1UdEwEB/wQCMAAwHQYDVR0OBBYEFLhm3925P+ID7gXZ8jbNGN5ad3ArMB8GA1Ud
|
||||
| IwQYMBaAFAC1KfItjm8x6JtMrXg++tzpDNHSMDMGCCsGAQUFBwEBBCcwJTAjBggr
|
||||
| BgEFBQcwAoYXaHR0cDovL3IxMi5pLmxlbmNyLm9yZy8wIwYDVR0RBBwwGoIYdHJh
|
||||
| ZWZpay5sYW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMC4GA1Ud
|
||||
| HwQnMCUwI6AhoB+GHWh0dHA6Ly9yMTIuYy5sZW5jci5vcmcvMTAuY3JsMIIBDQYK
|
||||
| KwYBBAHWeQIEAgSB/gSB+wD5AH4AcX6V88I4im2x44RJPTHhWqliCHYtQgDgBQzQ
|
||||
| Z7WmYeIAAAGckNwO+AAIAAAFAApBBmMEAwBHMEUCIQD2eX809wAYVzKDAs0Xk8gD
|
||||
| QYeXJJjHkP4JVkNQnxATvQIgK0tOHxZl0BuqNLfnMHZxKXTL3MBXlK6BUc8IRNJC
|
||||
| U+sAdwAWgy2r8KklDw/wOqVF/8i/yCPQh0v2BCkn+OcfMxP1+gAAAZyQ3BZhAAAE
|
||||
| AwBIMEYCIQDZXBfbpozxVgDyGgDIcK2XJUYLohKnZlieElRQWHzwCgIhAOMPKNgE
|
||||
| QAvRA4h69si49WrT7jxmZofyPF0Wnr6YYkZAMA0GCSqGSIb3DQEBCwUAA4IBAQDG
|
||||
| NoVBNA/6pAHXZ96vPay1KL05TUYb1FjDSeqyjULEbkoabaIXrD95ocx3K+mElsa9
|
||||
| M/pYYcNirGKmwcWTnIbsfCbGhlw6ipN+Nh+SdGj104BGYqxwaxgUML7i3s7dMXXT
|
||||
| /oebN7CpDskRQYBIzB1DFDBxBHJBV8mYpe1U0zNpkpHyHGKK4IcSXn58r2e23uNn
|
||||
| bAnG4a0dbmSfKaP5T+BCK5ANUiAowQlQhfYy4Ez/Ht9tLtzeOSanAE1A7+kV0PkZ
|
||||
| kNt6WRsWU8xqbDEDTXflZHEqAIuBZ7oZdKsuvOMUPmIExtyY6KZLDSzAssBn2G76
|
||||
| HejYTdxMZZXS7/veLh/0
|
||||
|_-----END CERTIFICATE-----
|
||||
20001/tcp closed microsan reset ttl 57
|
||||
51413/tcp open unknown syn-ack ttl 56
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
20001/tcp closed microsan reset ttl 57
|
||||
51413/tcp open unknown syn-ack ttl 56
|
||||
| fingerprint-strings:
|
||||
| Kerberos:
|
||||
| <%1Uhm
|
||||
| ~gJR
|
||||
| }EI:
|
||||
| dw#|
|
||||
| 0Snh
|
||||
| -+"y
|
||||
| SMBProgNeg:
|
||||
| "?r@&
|
||||
| ^_[8
|
||||
| ui0/
|
||||
| A6s1
|
||||
| b\xea
|
||||
| 7l|,
|
||||
| F[K^jc
|
||||
| Hii/!2
|
||||
| \xa9*w
|
||||
| SSLv23SessionReq:
|
||||
| X\x84
|
||||
| q~^L
|
||||
| p#7/
|
||||
| \x0c
|
||||
| ld_M/
|
||||
| ^f7_
|
||||
| PAFj
|
||||
| Cc\xbf
|
||||
| TLSSessionReq:
|
||||
| |ani
|
||||
|_ >AcO
|
||||
| r~{|LKN<
|
||||
| u&'<1
|
||||
| ?@6kq
|
||||
|_ R!bw
|
||||
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
|
||||
SF-Port51413-TCP:V=7.98%I=9%D=4/5%Time=69D25AF5%P=x86_64-pc-linux-gnu%r(TL
|
||||
SF:SSessionReq,9A,"\xe0\xa0\xb4\x81\xa3\xd1\x01\xb1W\xd9T\x11\x15\xa6\x1dg
|
||||
SF:\xf3\x04'h\"\xb0\xc17\xbd\xa7\x90\xaa=\x07AY\x88\xb5\xf5\xa5\.\xb4\xec\
|
||||
SF:xdb\x85\xb3\x96S\x82\xfbd\x9b\]\x87\)\xe7m\xf0-\xdc\xcc\xdc\x0bz\xb05T\
|
||||
SF:x9a\x12\x82VC\xdb8\xa0\xabpn=\xf0\x8d\x03\xc4t\x8c\xfe\x8b\x16w\xc3-\x8
|
||||
SF:8\x7fQ{\xe1'\x14!\]\x1a\xd1\xa7t\xbd\xae\x8e\xbe\0l\xda\|ani\xf3\x91\x9
|
||||
SF:b\x9c\xf4\[\x86\xb0\xa2\xf0\xa2\xa5\t\xfe\x96\xcb\xb3\xf9N\xf9\xa7\xdb\
|
||||
SF:xa3\xcc\xb4F\xed\xcc3\x9aC\x93>AcO\xb2O\x20\xe7\xdfO\xe7")%r(SSLv23Sess
|
||||
SF:ionReq,164,";I\xe2&\x01\x8cF\xdfC\xbe\x95\x06\xca\x9a\xaa\xd5\x898\x13\
|
||||
SF:xa4pX\x84\xaaX\\\x84\xbdyA\xf2\x8dk\xa4\x9d\x90<\x83\xd2\xd8\x20\xbf\x0
|
||||
SF:3~5\xe6\xf7\xc8\xfe\xf4\xea\x80\xa9\xfb\+\xdd\xc2\xa8\x97Z\xf1%\x10\xdb
|
||||
SF:\x99\xb97R\xd2y\xa3\xda\x07M\xf4S\x9cV\xe9{G\xea\x08\t\x01/\xb5f\x8a\x1
|
||||
SF:9\xd3V\xc2\xbd\x9eo\xb5\+\(\x18E\x84\xf9\xa6\x9av\x93q~\^L\xbe\xd0&\xce
|
||||
SF:}\x8d\xb3\xb3@\xfdL\x89#\xe3c\xbc1l>\xf2\xbf\x80\xdfO>\xd2I\x19\xddl\xa
|
||||
SF:c\x0e\x11b\xf0\xd4\x95`\x0b\$\xa7\xd6\xdd\x84\xc1\xad\xec{\xa8\xb1\x0fE
|
||||
SF:\xbe\xbc>\x07\x02\xbf}\t\xd9s\x01\xb1\x8cY\x10\xbf\*\x8b\xf8ov\xf9\x10\
|
||||
SF:xad\xca\xc1\xf7\x20\xc8w\xdd\x13D\xea\x03\x03\xe5\x80\xb0p#7/\x03\xa4\x
|
||||
SF:a6N\xdb\x9a\[\|p\xce\xbc\xe2\xcao\x85kKS\xc4\x88\xa9mH\x1e\xdah\]\x8a\x
|
||||
SF:86\xa5\xd3\xc6@\xc7\xee\x8b\x8f\xe8\xa0TB\x97-\x8a\x95\x86\xee\xda\xc4\
|
||||
SF:x1f\xa1\xe4gm\x0ef\xbf@\x99\xaf\x884\x8f\xb8,r\xa2\(\xe6\xf5\tG\xb2\x82
|
||||
SF:\xe9\xa5\xe5\n\xd7\x9b\x9d\x0c\]\xa8\x06\x01\\\x0c\xf7\x95~Q\x1b\x8b\xd
|
||||
SF:cb\x9f\x96ld_M/\n\xe4\x92'\xf2l'\xe9\x0b\x0bC\xee\x12A\xc5\x9d\xcf/\xaa
|
||||
SF:\x97\x20\x02\x82~\x14\[\x16\xba\xb8\x87\tV&\xd8\xdb~\x96:\xa3\x90\x18\x
|
||||
SF:0e\xdf\x05\x1e\x92\0")%r(Kerberos,1C3,"\x85\]\xdf4\x0c\xdf\xb0=\]\x9d\x
|
||||
SF:1dyD\x998\xad\x94\x98\x16\xb3\x0c\xd8\x95\xcb\x17\xb2\xdd\x9a\]qh\x97\x
|
||||
SF:f7\xd9\xb2\xc8\x13\xd4\xbc`\xa9\xdcLpX\xeb\x8c\xf0\xaa\x9bT\rM\xd9V\x0b
|
||||
SF:H\x7f\xbe\xeee\xbc\xa2\x19\(\xb7\xce\x01\x1e\xcc\xf7\xab\x113\xca\xd39P
|
||||
SF:\xac\x18\x01\x1d2G\x0fl\x20\[\xf1\x99\xcf\x12\x87\?\x05\]5>\xf0\xbc\x8a
|
||||
SF:0\xb6\xd0\x8c\xd13K\x88\x88\xecY\xe6\xe0\xf9\x90\x96dQ\xe7D\xbe5\xd4Z\x
|
||||
SF:c1w\x93p\x1e,\xb97{\xb0\xfd\xd5\xf8\xe9\x95\xdcBvi\xa7\x1bjU\x89HEG\xeb
|
||||
SF:@\xb5I1\xd7\xac\xb3\?\xd2\xd8a\xd2H\xa2'\xe7Z0\xa3\x20\xee\+z\xa4iq\xbb
|
||||
SF:M\x07U\xe4\x1d\xb1\xef\xee\x08\x92\xde\x9c3U\x8a\x87\x8f\xd9I\xe0\xba\x
|
||||
SF:89\+\x83\xb7w>\x83uO\xabV\xe8\xee'\xbeA\r8\xffZU\xd8\xbf\xae\xf5\xc0<%1
|
||||
SF:Uhm\x02\xfa,\xb0\x82\xa1\xe6\x19\xfb\xce\xe1\x93\xad\xb0\x90\x81\xe1~gJ
|
||||
SF:R\x10\xdbj\x95\xd3Q\xba\x96}EI:\xc4\n>Ec\x04j\x14&VT\x15\xe6Q\xc8\xefy\
|
||||
SF:xcc\x99\xf2\xec\xbf_5\xb66\x1d\xfa\x85\xfcL\xe0\.\xee\x1c\xa4\x06xJ\x01
|
||||
SF:\0/\.\x18,\xac\x1a\xbd\xd9A\x1b\xd8\x9bL;\xdes5\x9d\[,\x1dmu\xb0\x18\xe
|
||||
SF:8\xe4\xcfE\xc5\xed\xa0\x01\xe2\x9f#\xd8f\x13\x05\xb9\xce\xd6m\t9\xb0\x0
|
||||
SF:7\x08\xb0`\x82\xfcvW\xe8\x19\x7f\x14\xe0\xe1Ugr\xb1F_\x0c\xcb\xba=\xab\
|
||||
SF:x902\xe5\xc5\x87\xa9\xb5/\x807\xae\x8cZ\x10\x058H\xbadw#\|\x8f\xa4\xde\
|
||||
SF:xf2\xcabK\xc8\x8b\x01\xc2E\xeb\x95\xce\xb9\|%\xf58\x80\xde\x97-R\(\xe7\
|
||||
SF:x0e2\x1a\xdeg\x13v\"\xd1\xeaMa\xce\xfb\xd2\x82\xc6\xf7\x10G\xed\xd3\xea
|
||||
SF:");
|
||||
Device type: general purpose|router
|
||||
Running (JUST GUESSING): Linux 5.X|4.X|2.6.X|3.X (90%), MikroTik RouterOS 7.X (90%)
|
||||
OS CPE: cpe:/o:linux:linux_kernel:5 cpe:/o:mikrotik:routeros:7 cpe:/o:linux:linux_kernel:5.6.3 cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:2.6.18 cpe:/o:linux:linux_kernel:3
|
||||
SF-Port51413-TCP:V=7.99%I=9%D=4/14%Time=69DDC809%P=x86_64-pc-linux-gnu%r(T
|
||||
SF:LSSessionReq,EF,"\x81\x83\xfe\xf2R\xf6\xac\xb1\x838\xd0\x94l\x91OCC\x92
|
||||
SF:j\xaa\xe5\xe1Z\xbc\x8f<j~\xb7\|p\x10\^\xeer~{\|LKN<\xd4l\xc2\xd5z\xde\x
|
||||
SF:f5\x17\xef\xc5\x9c\xcbF\xb7\x94\xe4\xfai\x07\x13\x8d!\xd4\x14h\x159\x83
|
||||
SF:\xc6\xe6\xf7us\xcd\.\xf6=s\xda9\x9e\x01\*\xa3\xde\xa4\xcfd%\n_\xb6\x19p
|
||||
SF:\x9b\x19\t\xe8\xcc\x11\x13\x91Z\x17\xd3\xf9\x1f\xf1\xad\xd7w\xb2\xcau&'
|
||||
SF:<1\xa4\x03\xf1k\x17%\rl\x17\xa5\x12\x02\x83\xe8!\xa0:\xc2\xf3\xe4h\xd6W
|
||||
SF:P\xa7\xc4Pl\]\x13\x14\xbe\xa3\?@6kq\x13Z\x1b\xe9\xb8n\x15\xd5\?\x8a_n\x
|
||||
SF:e3\x019jX\xa0\xf8\xdf\xc5&\xbf6\xc0\xb8\xcc\x8a\xb7\x93q\x91\x1c\x02_\x
|
||||
SF:84a\x83_\xef\r\xfd{\x99B\xe6\xa38\)\x1c\$\tn\x05R!bw\xe3\x97k\x98\xab\x
|
||||
SF:bd,>\x11\xae\xeb\x06\x9d\xea\x92\x98\xe5R\xc4\xc5L\x94\x0c")%r(SSLv23Se
|
||||
SF:ssionReq,E4,"-\x87\xe8W\n\xb4M\xd6F\x16\xf0\x8d\xab\x1b\"\x95\^f7_\xc0#
|
||||
SF:\x84Iq@\xfc\x9c\xa1D\|\xa5;\xd5\xef\x80q\xb7\x13BK\x03\x04\xb7r\0\xd5\x
|
||||
SF:d26\x8e\xdaV\"S\xb7\+Ma\xf8\xf4\xefPAFj\xaf\x85\xfb\x156\xd7\t\xdc%Q\xf
|
||||
SF:a\xd0'J\xaa\x99\$\x06\xd0\xd0\xd1\x9c\.\x16\xb1\x08ci\xc1@\x19\x0c\xe9\
|
||||
SF:x83\x98\x7fC\xff\xab\x1e\xde\xc2\x10\xe3fS\x83\x19'o\xb5\x91i\x9d\0uGZ\
|
||||
SF:xa4>L\xc0\x9e9\x91R\xc7\xa4d\xeav\x81\x8f\x82\xbd\xac\x08\x8e\xb0\xdd`\
|
||||
SF:xa7\xf1nhc\x92/\xfe-\x1c\xe1\x01\xeb\xdd\x7fsa-\xc4\xe3\x9a\x90\xf3\x8a
|
||||
SF:yk\xfa\xccH\xe9\)4@\xda\x0e\xd0W\x07P\xce\xdd\xff\x85E\x9f\x98\xda\x997
|
||||
SF:\xbc\xcdcl\x80\xd2\xc7Cc\\\xbf\xa7r\xe8{T\[\xa5\xb8U\x18\xbf\0\x89\x0f\
|
||||
SF:xf7B\x0c\xc2\x14\xb2\xcf\x81")%r(Kerberos,B5,"\x0bH\xee\x98J\x82\x10\xe
|
||||
SF:6\x01-\xd0CT\xa5&\x8b\x9a\xce\x13\xd9&\x1b\x84\x06K3\xab\x0f\xdb\x0c\x8
|
||||
SF:2\xb1\xc8\xeb\x14\x8c\xdb\x97\x8b\xd4p\xcf\xa0\x95\x97\xd3m\xd4\xa3\xba
|
||||
SF:\x033\xfb\xe8y\x1e\xe1;\xb7@\x9f\x94\xfe\0O\x94\xe2N~\xeb\xf4\xf6A\x8b\
|
||||
SF:x9eO\x8c&~\xc0\xceW\xf2\xee\xe2\x13>\x99\xa0b\xccI\x18\xbbu5\x9d\xc5q\x
|
||||
SF:9b0Snh\xbf\xf2O\xb5!\x07\\&\x9d\xdb\xc5\xc2\xca\]\x1f\xd4-\+\"y\xb6V\x8
|
||||
SF:8\xff\xa9\xba\xf4\xa7\xe4\xfb'\x97\?{\x0f\x83\xc31\xb4\xefm\x9d\(\x905\
|
||||
SF:xec\x993\x0b\+r\x97{\x80\x99\xc1\xb2\xdb\x91\[\x8b\xc0\x94\xbd\x8dk\xff
|
||||
SF:\xffDi\x05\x88#S\x19\xdb3")%r(SMBProgNeg,253,"\xf8jZ\xde\x1e\xc1\t\xaa\
|
||||
SF:xa3/3\xda\x07\xd53\xf48\x99\xc1\x07\xc1V\xc4\x96}\.\xea\x07\x86\xdc7\\t
|
||||
SF:\xff\xa0\x1f\x89\"\?r@&\xc7\xdb\xdcP\x19/\xd1ZT\x9dS\xca\x8c\xc8\x92\x1
|
||||
SF:9\x9f<\x1f\xba!\xc66z\xf9\x92\xcb\xcb\xf6qR7\x9aX\x80\xc6U\x8f\xc6\x0e\
|
||||
SF:x7f\^\x88Y\[\xd0\x16\xd1C\xacYN\x84:\x0c\xb5\x8b\xf4\xed\xab\x7f\x15\xb
|
||||
SF:f\xdd\x9a\xb7\xe7\x16L\xefj\x80\xc0!\x1a\xdd\x89F\xbb\xcc\x1cf\x93c\xa7
|
||||
SF:/\"x\x04J\xe6\xcc\x91<\xd3p\x83\xe0w\xf7\$lu\xb5\(\x08\x80\xf9\x18S\xf3
|
||||
SF:\xc3vGg\xec,\.\x20\x85\x8c\^_\[8\xfe\|\xf9\xd4\x98\x1a\x82\tQ\x90\xc4G=
|
||||
SF:\x1c\xce\x0e!\xb6\xd4ui0/\xe8\?\x8d\x11\xba\x8b\xa0\xaa\.\xb6\x9e\xcaL\
|
||||
SF:x1e\xb3\xbcF{\x06\xed\x01>\xfc\xe8\xa4\xafw\xa2\^\xd7\x9e\xb0\x8e\x0fw\
|
||||
SF:x17\xda\xbe\xcf\xd15\xdd\xd7S\x1ch\x8d\xe6\xbea\x9f\xc3\xb2:\xfb/\?\xcf
|
||||
SF:K\xe1\xb5\xaf\xaa\x8d\xe9=gU\xde\xf87\xf0E\x89\xc1\xb5\xaa\xfaC\xe3\xf0
|
||||
SF:\xce}\"\xf5\xc1\xf1\x7fA6s1\xc9I\x8f\xf8N\x91_7\xdc\x9d\xc2\xb5\xc3;\xb
|
||||
SF:e\xa8q\x1d!\xb5&4\xean\xbfg\x14\x1dl\xcd\xa3=\xf5\xd8\x9d\x92\xe4\xe0X\
|
||||
SF:xd9\\K\x9a\x8f\xb4\xb0F\x96P&\x03\x11\xad\[\xb48\xe7\x98u\x03\x1c>\xce\
|
||||
SF:x02\xbcb\xe9\xa4\x9dr\|\xba\xbc\x8fAs\xc8\x80\x0b\xf4\xbf\xd0\x0e\xfa\x
|
||||
SF:9b\xbc\x10\xc7\xa28\xe6\xfef\)\x9f\xe2\xa6\x14\xa8\x18\x1b\xc9\xdc\xabS
|
||||
SF:\x9f\xfcO\x86;r\x03\x83\xbc\xef\x20\xe2b\xf4\xdb\^\xce\xb4\x01\xb3\xa0N
|
||||
SF:>\xb5\xd1\x01\$Q\xee9i\xf8\x10b\\\xea\xf4'\xb9\x07o\xaaV\xad\xcf\xb6\xe
|
||||
SF:c\(d\x81\x167l\|,\x88d\xd9\x1a\xf0;\x7f\xe5\x91\+=z\xfaR\xd5G\xda\x81\x
|
||||
SF:e0\xba\xaf\x0fJk\xc6\x0c\xd9\xf8\xf2\x85\xd8F\[K\^jc\xf8\xb0\xbf\x0f!n\
|
||||
SF:x04\x19Hii/!2\xc8v\x9bY\xf7\x9c\x8cf\xf7Yy\xf5\xbd}\xba\xc8\x93\x98\n\|
|
||||
SF:\x1f\xd9=\xd5\xfe\xdb\xa4Qz\xd2G\xdc\xf1\xf2\xbe\x7f\xdf\xb7I\xc9\x964@
|
||||
SF:\xa4_#V\xae\xd2>\xcc\x7f\xcb\x8f\x15o\xb9\x96\x0c\x9b\xf2\x04\xf7c\xf4-
|
||||
SF:\xc6\x9d\xe6\xe32p\xd3\x8c\xd6\xb3\xaf\xa5\xdb\|\n1\xfa\xc6b\xd1\xc5\x0
|
||||
SF:c\x11d\xa5_\xccQ\xfe\xd7\x9b\\\xa9\*w\xbc");
|
||||
Device type: general purpose
|
||||
Running (JUST GUESSING): Linux 5.X (86%)
|
||||
OS CPE: cpe:/o:linux:linux_kernel:5.4
|
||||
OS fingerprint not ideal because: Didn't receive UDP response. Please try again with -sSU
|
||||
Aggressive OS guesses: Linux 5.0 - 5.14 (90%), MikroTik RouterOS 7.2 - 7.5 (Linux 5.6.3) (90%), Linux 4.19 - 5.15 (89%), Linux 4.15 - 5.19 (86%), Linux 4.19 (86%), OpenWrt 21.02 (Linux 5.4) (86%), Linux 2.6.18 (85%), Linux 2.6.32 - 3.13 (85%), Linux 3.10 (85%), Linux 3.10 - 4.11 (85%)
|
||||
Aggressive OS guesses: Linux 5.4 (86%)
|
||||
No exact OS matches for host (test conditions non-ideal).
|
||||
TCP/IP fingerprint:
|
||||
SCAN(V=7.98%E=4%D=4/5%OT=80%CT=20001%CU=%PV=N%DS=8%DC=T%G=N%TM=69D25CD5%P=x86_64-pc-linux-gnu)
|
||||
SEQ(SP=104%GCD=1%ISR=107%TI=Z%TS=A)
|
||||
SEQ(SP=105%GCD=1%ISR=105%TI=Z%TS=A)
|
||||
SCAN(V=7.99%E=4%D=4/14%OT=80%CT=20001%CU=%PV=N%DS=8%DC=T%G=N%TM=69DDCA81%P=x86_64-pc-linux-gnu)
|
||||
SEQ(SP=105%GCD=1%ISR=109%TI=Z%TS=A)
|
||||
SEQ(SP=F9%GCD=1%ISR=107%TI=Z%TS=A)
|
||||
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
|
||||
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
|
||||
ECN(R=Y%DF=Y%TG=40%W=FAF0%O=M5B4NNSNW7%CC=Y%Q=)
|
||||
ECN(R=N)
|
||||
T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
|
||||
T2(R=N)
|
||||
T3(R=N)
|
||||
T4(R=N)
|
||||
T4(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
|
||||
T5(R=N)
|
||||
T5(R=Y%DF=Y%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
|
||||
T6(R=N)
|
||||
T7(R=N)
|
||||
U1(R=N)
|
||||
IE(R=N)
|
||||
|
||||
Uptime guess: 17.140 days (since Thu Mar 19 09:37:52 2026)
|
||||
Uptime guess: 0.016 days (since Tue Apr 14 04:40:07 2026)
|
||||
Network Distance: 8 hops
|
||||
TCP Sequence Prediction: Difficulty=261 (Good luck!)
|
||||
TCP Sequence Prediction: Difficulty=249 (Good luck!)
|
||||
IP ID Sequence Generation: All zeros
|
||||
|
||||
TRACEROUTE (using port 20001/tcp)
|
||||
HOP RTT ADDRESS
|
||||
1 0.11 ms 10.216.0.161
|
||||
2 0.27 ms 10.216.35.11
|
||||
3 0.87 ms 10.216.32.2
|
||||
4 0.38 ms lo0-0.gw2.syd1.au.linode.com (172.105.160.102)
|
||||
5 2.85 ms as4764.syd.edgeix.net.au (202.77.88.3)
|
||||
6 11.62 ms 10.241.1.187
|
||||
7 12.63 ms 10.241.2.71
|
||||
8 15.00 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
|
||||
1 0.12 ms 10.216.0.161
|
||||
2 0.23 ms 10.216.35.12
|
||||
3 3.60 ms 10.216.32.2
|
||||
4 0.26 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
|
||||
5 1.89 ms 4764.syd.equinix.com (45.127.173.7)
|
||||
6 11.71 ms 10.241.1.187
|
||||
7 12.65 ms 10.241.2.71
|
||||
8 14.12 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 13:00:05 2026 -- 1 IP address (1 host up) scanned in 8509.28 seconds
|
||||
# Nmap done at Tue Apr 14 05:02:57 2026 -- 1 IP address (1 host up) scanned in 2059.27 seconds
|
||||
|
||||
```
|
||||
|
||||
+16
-14
@@ -5,34 +5,36 @@ nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN "/root/results/traefik.lan.
|
||||
[/root/results/traefik.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt](file:///root/results/traefik.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt):
|
||||
|
||||
```
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 11:14:24 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN /root/results/traefik.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/traefik.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml traefik.lan.ddnsgeek.com
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 04:31:39 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN /root/results/traefik.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/traefik.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml traefik.lan.ddnsgeek.com
|
||||
Nmap scan report for traefik.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set.
|
||||
Host is up, received user-set (0.51s latency).
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 11:14:30 UTC for 1154s
|
||||
Scanned at 2026-04-14 04:31:54 UTC for 1650s
|
||||
All 100 scanned ports on traefik.lan.ddnsgeek.com (167.179.167.166) are in ignored states.
|
||||
Not shown: 100 open|filtered udp ports (no-response)
|
||||
Too many fingerprints match this host to give specific OS details
|
||||
TCP/IP fingerprint:
|
||||
SCAN(V=7.98%E=4%D=4/5%OT=%CT=%CU=%PV=N%G=N%TM=69D24899%P=x86_64-pc-linux-gnu)
|
||||
SCAN(V=7.99%E=4%D=4/14%OT=%CT=%CU=%PV=N%DS=14%DC=T%G=N%TM=69DDC9AC%P=x86_64-pc-linux-gnu)
|
||||
SEQ()
|
||||
U1(R=N)
|
||||
IE(R=N)
|
||||
|
||||
Network Distance: 14 hops
|
||||
|
||||
TRACEROUTE (using proto 1/icmp)
|
||||
HOP RTT ADDRESS
|
||||
1 0.06 ms 10.216.0.161
|
||||
2 0.26 ms 10.216.35.11
|
||||
3 0.79 ms 10.216.32.2
|
||||
4 0.41 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
|
||||
5 2.29 ms as4764.syd.edgeix.net.au (202.77.88.3)
|
||||
6 11.67 ms 10.241.1.187
|
||||
7 12.30 ms 10.241.2.71
|
||||
8 ... 30
|
||||
HOP RTT ADDRESS
|
||||
1 0.06 ms 10.216.0.161
|
||||
2 0.29 ms 10.216.35.12
|
||||
3 0.86 ms 10.216.32.2
|
||||
4 0.29 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
|
||||
5 4.61 ms as4764.syd.edgeix.net.au (202.77.88.3)
|
||||
6 11.64 ms 10.241.1.185
|
||||
7 14.45 ms 10.241.2.26
|
||||
8 ... 13
|
||||
14 508.83 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 11:33:45 2026 -- 1 IP address (1 host up) scanned in 1163.84 seconds
|
||||
# Nmap done at Tue Apr 14 04:59:24 2026 -- 1 IP address (1 host up) scanned in 1671.04 seconds
|
||||
|
||||
```
|
||||
|
||||
@@ -5,19 +5,20 @@ nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN "/root/res
|
||||
[/root/results/traefik.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt](file:///root/results/traefik.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt):
|
||||
|
||||
```
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 10:37:30 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /root/results/traefik.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/traefik.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml traefik.lan.ddnsgeek.com
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 04:23:37 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /root/results/traefik.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/traefik.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml traefik.lan.ddnsgeek.com
|
||||
Increasing send delay for 167.179.167.166 from 0 to 5 due to 11 out of 26 dropped probes since last increase.
|
||||
adjust_timeouts2: packet supposedly had rtt of -4973209 microseconds. Ignoring time.
|
||||
Nmap scan report for traefik.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set (0.015s latency).
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 10:37:33 UTC for 42s
|
||||
Scanned at 2026-04-14 04:23:51 UTC for 284s
|
||||
Not shown: 998 filtered tcp ports (no-response)
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-title: Did not follow redirect to https://traefik.lan.ddnsgeek.com/
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
|_http-title: Did not follow redirect to https://traefik.lan.ddnsgeek.com/
|
||||
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-title: Site doesn't have a title (text/plain; charset=utf-8).
|
||||
443/tcp open ssl/https syn-ack ttl 55
|
||||
| ssl-cert: Subject: commonName=traefik.lan.ddnsgeek.com
|
||||
| Subject Alternative Name: DNS:traefik.lan.ddnsgeek.com
|
||||
| Issuer: commonName=R12/organizationName=Let's Encrypt/countryName=US
|
||||
@@ -64,47 +65,48 @@ PORT STATE SERVICE REASON VERSION
|
||||
| kNt6WRsWU8xqbDEDTXflZHEqAIuBZ7oZdKsuvOMUPmIExtyY6KZLDSzAssBn2G76
|
||||
| HejYTdxMZZXS7/veLh/0
|
||||
|_-----END CERTIFICATE-----
|
||||
|_http-title: Site doesn't have a title (text/plain; charset=utf-8).
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
| http-auth:
|
||||
| HTTP/1.1 401 Unauthorized\x0D
|
||||
|_ Server returned status 401 but no WWW-Authenticate header.
|
||||
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
|
||||
Device type: general purpose
|
||||
Running (JUST GUESSING): Linux 5.X (87%)
|
||||
Running (JUST GUESSING): Linux 5.X (91%)
|
||||
OS CPE: cpe:/o:linux:linux_kernel:5.4
|
||||
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
|
||||
Aggressive OS guesses: Linux 5.4 (87%)
|
||||
Aggressive OS guesses: Linux 5.4 (91%)
|
||||
No exact OS matches for host (test conditions non-ideal).
|
||||
TCP/IP fingerprint:
|
||||
SCAN(V=7.98%E=4%D=4/5%OT=80%CT=%CU=%PV=N%DS=8%DC=T%G=N%TM=69D23B97%P=x86_64-pc-linux-gnu)
|
||||
SCAN(V=7.99%E=4%D=4/14%OT=80%CT=%CU=%PV=N%DS=9%DC=T%G=N%TM=69DDC273%P=x86_64-pc-linux-gnu)
|
||||
SEQ()
|
||||
SEQ(SP=FF%GCD=1%ISR=104%TI=Z%TS=A)
|
||||
SEQ(SP=105%GCD=1%ISR=10A%TI=Z%TS=A)
|
||||
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
|
||||
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
|
||||
ECN(R=N)
|
||||
T1(R=N)
|
||||
T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
|
||||
T2(R=N)
|
||||
T2(R=Y%DF=Y%TG=40%W=1FA%S=O%A=O%F=A%O=NNT11%RD=0%Q=)
|
||||
T3(R=N)
|
||||
T4(R=N)
|
||||
T5(R=Y%DF=Y%TG=40%W=1F9%S=O%A=O%F=A%O=NNT11%RD=0%Q=)
|
||||
U1(R=N)
|
||||
IE(R=N)
|
||||
|
||||
Network Distance: 8 hops
|
||||
Network Distance: 9 hops
|
||||
|
||||
TRACEROUTE (using port 443/tcp)
|
||||
HOP RTT ADDRESS
|
||||
1 0.08 ms 10.216.0.161
|
||||
2 0.26 ms 10.216.35.12
|
||||
3 0.85 ms 10.216.32.2
|
||||
4 0.52 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
|
||||
5 4.18 ms as4764.syd.edgeix.net.au (202.77.88.3)
|
||||
6 11.68 ms 10.241.1.187
|
||||
7 14.86 ms 10.241.2.26
|
||||
8 14.26 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
|
||||
HOP RTT ADDRESS
|
||||
1 -- 10.216.0.161
|
||||
2 -- 10.216.35.11
|
||||
3 -- 10.216.32.2
|
||||
4 -- lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
|
||||
5 -- as4764.syd.edgeix.net.au (202.77.88.3)
|
||||
6 -- 10.241.1.185
|
||||
7 -- 10.241.2.26
|
||||
8 ...
|
||||
9 -- 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 10:38:15 2026 -- 1 IP address (1 host up) scanned in 47.53 seconds
|
||||
# Nmap done at Tue Apr 14 04:28:35 2026 -- 1 IP address (1 host up) scanned in 307.66 seconds
|
||||
|
||||
```
|
||||
|
||||
-23
@@ -1,23 +0,0 @@
|
||||
```bash
|
||||
curl -sSikf https://traefik.lan.ddnsgeek.com:443/robots.txt
|
||||
```
|
||||
|
||||
[/root/results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl-robots.txt](file:///root/results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl-robots.txt):
|
||||
|
||||
```
|
||||
HTTP/2 302
|
||||
content-type: text/html; charset=utf-8
|
||||
date: Sun, 05 Apr 2026 10:50:46 GMT
|
||||
location: https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Ftraefik.lan.ddnsgeek.com%2Frobots.txt&rm=GET
|
||||
permissions-policy: accelerometer=(), autoplay=(), camera=(), display-capture=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), screen-wake-lock=(), sync-xhr=(), xr-spatial-tracking=(), interest-cohort=()
|
||||
referrer-policy: strict-origin-when-cross-origin
|
||||
set-cookie: authelia_session=Cl#vzzWN7^QGCs1OaLHBQH*uuwMFVoSL; expires=Sun, 05 Apr 2026 11:50:47 GMT; domain=lan.ddnsgeek.com; path=/; HttpOnly; secure; SameSite=Lax
|
||||
strict-transport-security: max-age=15552000; includeSubDomains; preload
|
||||
x-content-type-options: nosniff
|
||||
x-dns-prefetch-control: off
|
||||
x-frame-options: SAMEORIGIN
|
||||
x-xss-protection: 1; mode=block
|
||||
content-length: 120
|
||||
|
||||
<a href="https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Ftraefik.lan.ddnsgeek.com%2Frobots.txt&rm=GET">302 Found</a>
|
||||
```
|
||||
@@ -1,24 +0,0 @@
|
||||
```bash
|
||||
curl -sSik https://traefik.lan.ddnsgeek.com:443/
|
||||
```
|
||||
|
||||
[/root/results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl.html](file:///root/results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl.html):
|
||||
|
||||
```
|
||||
HTTP/2 302
|
||||
content-type: text/html; charset=utf-8
|
||||
date: Sun, 05 Apr 2026 10:50:48 GMT
|
||||
location: https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Ftraefik.lan.ddnsgeek.com%2F&rm=GET
|
||||
permissions-policy: accelerometer=(), autoplay=(), camera=(), display-capture=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), screen-wake-lock=(), sync-xhr=(), xr-spatial-tracking=(), interest-cohort=()
|
||||
referrer-policy: strict-origin-when-cross-origin
|
||||
set-cookie: authelia_session=RKJapJnTebLWd2pBV55OQBlwW_wlbEsM; expires=Sun, 05 Apr 2026 11:50:49 GMT; domain=lan.ddnsgeek.com; path=/; HttpOnly; secure; SameSite=Lax
|
||||
strict-transport-security: max-age=15552000; includeSubDomains; preload
|
||||
x-content-type-options: nosniff
|
||||
x-dns-prefetch-control: off
|
||||
x-frame-options: SAMEORIGIN
|
||||
x-xss-protection: 1; mode=block
|
||||
content-length: 110
|
||||
|
||||
<a href="https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Ftraefik.lan.ddnsgeek.com%2F&rm=GET">302 Found</a>
|
||||
|
||||
```
|
||||
-302
@@ -1,302 +0,0 @@
|
||||
```bash
|
||||
feroxbuster -u https://traefik.lan.ddnsgeek.com:443/ -t 10 -w /root/.local/share/AutoRecon/wordlists/dirbuster.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -q -e -r -o "/root/results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt"
|
||||
```
|
||||
|
||||
[/root/results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt](file:///root/results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt):
|
||||
|
||||
```
|
||||
Configuration {
|
||||
kind: "configuration",
|
||||
wordlist: "/root/.local/share/AutoRecon/wordlists/dirbuster.txt",
|
||||
config: "/etc/feroxbuster/ferox-config.toml",
|
||||
proxy: "",
|
||||
replay_proxy: "",
|
||||
server_certs: [],
|
||||
client_cert: "",
|
||||
client_key: "",
|
||||
target_url: "https://traefik.lan.ddnsgeek.com/",
|
||||
status_codes: [
|
||||
100,
|
||||
101,
|
||||
102,
|
||||
200,
|
||||
201,
|
||||
202,
|
||||
203,
|
||||
204,
|
||||
205,
|
||||
206,
|
||||
207,
|
||||
208,
|
||||
226,
|
||||
300,
|
||||
301,
|
||||
302,
|
||||
303,
|
||||
304,
|
||||
305,
|
||||
307,
|
||||
308,
|
||||
400,
|
||||
401,
|
||||
402,
|
||||
403,
|
||||
404,
|
||||
405,
|
||||
406,
|
||||
407,
|
||||
408,
|
||||
409,
|
||||
410,
|
||||
411,
|
||||
412,
|
||||
413,
|
||||
414,
|
||||
415,
|
||||
416,
|
||||
417,
|
||||
418,
|
||||
421,
|
||||
422,
|
||||
423,
|
||||
424,
|
||||
426,
|
||||
428,
|
||||
429,
|
||||
431,
|
||||
451,
|
||||
500,
|
||||
501,
|
||||
502,
|
||||
503,
|
||||
504,
|
||||
505,
|
||||
506,
|
||||
507,
|
||||
508,
|
||||
510,
|
||||
511,
|
||||
103,
|
||||
425,
|
||||
],
|
||||
replay_codes: [
|
||||
100,
|
||||
101,
|
||||
102,
|
||||
200,
|
||||
201,
|
||||
202,
|
||||
203,
|
||||
204,
|
||||
205,
|
||||
206,
|
||||
207,
|
||||
208,
|
||||
226,
|
||||
300,
|
||||
301,
|
||||
302,
|
||||
303,
|
||||
304,
|
||||
305,
|
||||
307,
|
||||
308,
|
||||
400,
|
||||
401,
|
||||
402,
|
||||
403,
|
||||
404,
|
||||
405,
|
||||
406,
|
||||
407,
|
||||
408,
|
||||
409,
|
||||
410,
|
||||
411,
|
||||
412,
|
||||
413,
|
||||
414,
|
||||
415,
|
||||
416,
|
||||
417,
|
||||
418,
|
||||
421,
|
||||
422,
|
||||
423,
|
||||
424,
|
||||
426,
|
||||
428,
|
||||
429,
|
||||
431,
|
||||
451,
|
||||
500,
|
||||
501,
|
||||
502,
|
||||
503,
|
||||
504,
|
||||
505,
|
||||
506,
|
||||
507,
|
||||
508,
|
||||
510,
|
||||
511,
|
||||
103,
|
||||
425,
|
||||
],
|
||||
filter_status: [],
|
||||
client: Client {
|
||||
accepts: Accepts,
|
||||
proxies: [
|
||||
Matcher,
|
||||
],
|
||||
redirect_policy: "Policy(Custom)",
|
||||
referer: true,
|
||||
default_headers: {
|
||||
"accept": "*/*",
|
||||
"user-agent": "feroxbuster/2.13.1",
|
||||
},
|
||||
reqwest::config::RequestTimeout: 7s,
|
||||
},
|
||||
replay_client: None,
|
||||
threads: 10,
|
||||
timeout: 7,
|
||||
verbosity: 1,
|
||||
silent: false,
|
||||
quiet: true,
|
||||
output_level: Quiet,
|
||||
auto_bail: false,
|
||||
auto_tune: false,
|
||||
requester_policy: Default,
|
||||
json: false,
|
||||
output: "/root/results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt",
|
||||
debug_log: "",
|
||||
user_agent: "feroxbuster/2.13.1",
|
||||
random_agent: false,
|
||||
redirects: true,
|
||||
insecure: true,
|
||||
extensions: [
|
||||
"txt",
|
||||
"html",
|
||||
"php",
|
||||
"asp",
|
||||
"aspx",
|
||||
"jsp",
|
||||
],
|
||||
methods: [
|
||||
"GET",
|
||||
],
|
||||
data: [],
|
||||
headers: {},
|
||||
queries: [],
|
||||
no_recursion: true,
|
||||
extract_links: true,
|
||||
add_slash: false,
|
||||
stdin: false,
|
||||
cached_stdin: [],
|
||||
depth: 4,
|
||||
scan_limit: 0,
|
||||
parallel: 0,
|
||||
rate_limit: 0,
|
||||
filter_size: [],
|
||||
filter_line_count: [],
|
||||
filter_word_count: [],
|
||||
filter_regex: [],
|
||||
dont_filter: false,
|
||||
resumed: false,
|
||||
resume_from: "",
|
||||
save_state: true,
|
||||
time_limit: "",
|
||||
filter_similar: [],
|
||||
url_denylist: [],
|
||||
regex_denylist: [],
|
||||
scope: [
|
||||
Url {
|
||||
scheme: "https",
|
||||
cannot_be_a_base: false,
|
||||
username: "",
|
||||
password: None,
|
||||
host: Some(
|
||||
Domain(
|
||||
"traefik.lan.ddnsgeek.com",
|
||||
),
|
||||
),
|
||||
port: None,
|
||||
path: "/",
|
||||
query: None,
|
||||
fragment: None,
|
||||
},
|
||||
],
|
||||
collect_extensions: false,
|
||||
dont_collect: [
|
||||
"woff2",
|
||||
"woff",
|
||||
"ttf",
|
||||
"otf",
|
||||
"eot",
|
||||
"tif",
|
||||
"tiff",
|
||||
"ico",
|
||||
"cur",
|
||||
"bmp",
|
||||
"webp",
|
||||
"svg",
|
||||
"png",
|
||||
"jpg",
|
||||
"jpeg",
|
||||
"jfif",
|
||||
"gif",
|
||||
"avif",
|
||||
"apng",
|
||||
"pjpeg",
|
||||
"pjp",
|
||||
"mov",
|
||||
"wav",
|
||||
"mpg",
|
||||
"mpeg",
|
||||
"mp3",
|
||||
"mp4",
|
||||
"m4a",
|
||||
"m4p",
|
||||
"m4v",
|
||||
"ogg",
|
||||
"webm",
|
||||
"ogv",
|
||||
"oga",
|
||||
"flac",
|
||||
"aac",
|
||||
"3gp",
|
||||
"css",
|
||||
"zip",
|
||||
"xls",
|
||||
"xml",
|
||||
"gz",
|
||||
"tgz",
|
||||
],
|
||||
collect_backups: false,
|
||||
backup_extensions: [
|
||||
"~",
|
||||
".bak",
|
||||
".bak2",
|
||||
".old",
|
||||
".1",
|
||||
],
|
||||
collect_words: false,
|
||||
force_recursion: false,
|
||||
update_app: false,
|
||||
scan_dir_listings: false,
|
||||
request_file: "",
|
||||
protocol: "https",
|
||||
limit_bars: 0,
|
||||
unique: false,
|
||||
response_size_limit: 4194304,
|
||||
}
|
||||
404 GET 2l 12w 64c https://traefik.lan.ddnsgeek.com/metrics
|
||||
404 GET 2l 12w 64c https://traefik.lan.ddnsgeek.com/metrics.txt
|
||||
404 GET 2l 12w 64c https://traefik.lan.ddnsgeek.com/metrics.html
|
||||
404 GET 2l 12w 64c https://traefik.lan.ddnsgeek.com/metrics.php
|
||||
404 GET 2l 12w 64c https://traefik.lan.ddnsgeek.com/metrics.asp
|
||||
404 GET 2l 12w 64c https://traefik.lan.ddnsgeek.com/metrics.aspx
|
||||
404 GET 2l 12w 64c https://traefik.lan.ddnsgeek.com/metrics.jsp
|
||||
302 GET 0l 0w 117c https://traefik.lan.ddnsgeek.com/rgo.asp => https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Ftraefik.lan.ddnsgeek.com%2Frgo.asp&rm=GET
|
||||
|
||||
```
|
||||
-23
@@ -1,23 +0,0 @@
|
||||
```bash
|
||||
curl -sSikf https://traefik.lan.ddnsgeek.com:443/.well-known/security.txt
|
||||
```
|
||||
|
||||
[/root/results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_known-security.txt](file:///root/results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_known-security.txt):
|
||||
|
||||
```
|
||||
HTTP/2 302
|
||||
content-type: text/html; charset=utf-8
|
||||
date: Sun, 05 Apr 2026 10:50:45 GMT
|
||||
location: https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Ftraefik.lan.ddnsgeek.com%2F.well-known%2Fsecurity.txt&rm=GET
|
||||
permissions-policy: accelerometer=(), autoplay=(), camera=(), display-capture=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), screen-wake-lock=(), sync-xhr=(), xr-spatial-tracking=(), interest-cohort=()
|
||||
referrer-policy: strict-origin-when-cross-origin
|
||||
set-cookie: authelia_session=7H#z5Mouk0%rDjaIRxB-iLlvjHAS$^dm; expires=Sun, 05 Apr 2026 11:50:46 GMT; domain=lan.ddnsgeek.com; path=/; HttpOnly; secure; SameSite=Lax
|
||||
strict-transport-security: max-age=15552000; includeSubDomains; preload
|
||||
x-content-type-options: nosniff
|
||||
x-dns-prefetch-control: off
|
||||
x-frame-options: SAMEORIGIN
|
||||
x-xss-protection: 1; mode=block
|
||||
content-length: 136
|
||||
|
||||
<a href="https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Ftraefik.lan.ddnsgeek.com%2F.well-known%2Fsecurity.txt&rm=GET">302 Found</a>
|
||||
```
|
||||
-102
@@ -1,102 +0,0 @@
|
||||
```bash
|
||||
nmap -vv --reason -Pn -T4 -sV -p 443 --script="banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN "/root/results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt" -oX "/root/results/traefik.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml" traefik.lan.ddnsgeek.com
|
||||
```
|
||||
|
||||
[/root/results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt](file:///root/results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt):
|
||||
|
||||
```
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 10:53:10 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/traefik.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml traefik.lan.ddnsgeek.com
|
||||
Nmap scan report for traefik.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set (0.017s latency).
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 10:53:15 UTC for 545s
|
||||
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
| http-auth:
|
||||
| HTTP/1.1 401 Unauthorized\x0D
|
||||
|_ Server returned status 401 but no WWW-Authenticate header.
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
| http-security-headers:
|
||||
| Strict_Transport_Security:
|
||||
| Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
| X_Frame_Options:
|
||||
| Header: X-Frame-Options: SAMEORIGIN
|
||||
| Description: The browser must not display this content in any frame from a page of different origin than the content itself.
|
||||
| X_XSS_Protection:
|
||||
| Header: X-XSS-Protection: 1; mode=block
|
||||
| Description: The browser will prevent the rendering of the page when XSS is detected.
|
||||
| X_Content_Type_Options:
|
||||
| Header: X-Content-Type-Options: nosniff
|
||||
|_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
|_http-chrono: Request times for /; avg: 577.30ms; min: 452.32ms; max: 654.90ms
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
|_ssl-ccs-injection: No reply from server (TIMEOUT)
|
||||
| http-headers:
|
||||
| Content-Type: text/plain; charset=utf-8
|
||||
| X-Content-Type-Options: nosniff
|
||||
| Date: Sun, 05 Apr 2026 10:53:55 GMT
|
||||
| Content-Length: 19
|
||||
| Connection: close
|
||||
|
|
||||
|_ (Request type: GET)
|
||||
|_http-title: Site doesn't have a title (text/plain; charset=utf-8).
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
| http-errors:
|
||||
| Spidering limited to: maxpagecount=40; withinhost=traefik.lan.ddnsgeek.com
|
||||
| Found the following error pages:
|
||||
|
|
||||
| Error Code: 404
|
||||
|_ https://traefik.lan.ddnsgeek.com:443/
|
||||
| http-useragent-tester:
|
||||
| Status for browser useragent: 401
|
||||
| Allowed User Agents:
|
||||
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
|
||||
| libwww
|
||||
| lwp-trivial
|
||||
| libcurl-agent/1.0
|
||||
| PHP/
|
||||
| Python-urllib/2.5
|
||||
| GT::WWW
|
||||
| Snoopy
|
||||
| MFC_Tear_Sample
|
||||
| HTTP::Lite
|
||||
| PHPCrawl
|
||||
| URI::Fetch
|
||||
| Zend_Http_Client
|
||||
| http client
|
||||
| PECL::HTTP
|
||||
| Wget/1.13.4 (linux-gnu)
|
||||
|_ WWW-Mechanize/1.34
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| Longest directory structure:
|
||||
| Depth: 0
|
||||
| Dir: /
|
||||
| Total files found (by extension):
|
||||
|_
|
||||
|_http-iis-webdav-vuln: Could not determine vulnerability, since root folder is password protected
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
| http-vhosts:
|
||||
| 127 names had status 404
|
||||
|_auth.lan.ddnsgeek.com : 200
|
||||
|_http-date: Sun, 05 Apr 2026 10:53:55 GMT; -1s from local time.
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
| http-waf-detect: IDS/IPS/WAF detected:
|
||||
|_traefik.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 11:02:20 2026 -- 1 IP address (1 host up) scanned in 551.09 seconds
|
||||
|
||||
```
|
||||
-201
@@ -1,201 +0,0 @@
|
||||
```bash
|
||||
sslscan --show-certificate --no-colour traefik.lan.ddnsgeek.com:443 2>&1
|
||||
```
|
||||
|
||||
[/root/results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html](file:///root/results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html):
|
||||
|
||||
```
|
||||
Version: 2.1.5
|
||||
OpenSSL 3.5.3 16 Sep 2025
|
||||
|
||||
Connected to 167.179.167.166
|
||||
|
||||
Testing SSL server traefik.lan.ddnsgeek.com on port 443 using SNI name traefik.lan.ddnsgeek.com
|
||||
|
||||
SSL/TLS Protocols:
|
||||
SSLv2 disabled
|
||||
SSLv3 disabled
|
||||
TLSv1.0 disabled
|
||||
TLSv1.1 disabled
|
||||
TLSv1.2 enabled
|
||||
TLSv1.3 enabled
|
||||
|
||||
TLS Fallback SCSV:
|
||||
Server supports TLS Fallback SCSV
|
||||
|
||||
TLS renegotiation:
|
||||
Session renegotiation not supported
|
||||
|
||||
TLS Compression:
|
||||
Compression disabled
|
||||
|
||||
Heartbleed:
|
||||
TLSv1.3 not vulnerable to heartbleed
|
||||
TLSv1.2 not vulnerable to heartbleed
|
||||
|
||||
Supported Server Cipher(s):
|
||||
Preferred TLSv1.3 128 bits TLS_AES_128_GCM_SHA256
|
||||
Accepted TLSv1.3 256 bits TLS_AES_256_GCM_SHA384
|
||||
Accepted TLSv1.3 256 bits TLS_CHACHA20_POLY1305_SHA256
|
||||
Preferred TLSv1.2 128 bits ECDHE-RSA-AES128-GCM-SHA256 Curve 25519 DHE 253
|
||||
Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-GCM-SHA384 Curve 25519 DHE 253
|
||||
Accepted TLSv1.2 256 bits ECDHE-RSA-CHACHA20-POLY1305 Curve 25519 DHE 253
|
||||
Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA Curve 25519 DHE 253
|
||||
Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA Curve 25519 DHE 253
|
||||
|
||||
Server Key Exchange Group(s):
|
||||
TLSv1.3 128 bits secp256r1 (NIST P-256)
|
||||
TLSv1.3 192 bits secp384r1 (NIST P-384)
|
||||
TLSv1.3 260 bits secp521r1 (NIST P-521)
|
||||
TLSv1.3 128 bits x25519
|
||||
TLSv1.2 128 bits secp256r1 (NIST P-256)
|
||||
TLSv1.2 192 bits secp384r1 (NIST P-384)
|
||||
TLSv1.2 260 bits secp521r1 (NIST P-521)
|
||||
TLSv1.2 128 bits x25519
|
||||
|
||||
SSL Certificate:
|
||||
Certificate blob:
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIGCzCCBPOgAwIBAgISBS2doeeMRnZ7rS8hQrl4D4mJMA0GCSqGSIb3DQEBCwUA
|
||||
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
|
||||
EwNSMTIwHhcNMjYwMjI0MTcxNTU2WhcNMjYwNTI1MTcxNTU1WjAjMSEwHwYDVQQD
|
||||
Exh0cmFlZmlrLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4IC
|
||||
DwAwggIKAoICAQDPV80efBCHNEUZ3FWDhW0Zs1QZYXkN9XoeXMuPbWU+LhfvXtUz
|
||||
8RoGL0FPNt99LeVQOAOvKO0ZTbSgo594o+RrnBrckl9tDAtfJAFNJNkvrLZtZsD7
|
||||
kN7zljaGSgcHCKyX+C9TG0+KwV9qmVijc/9CaUJ2p8H21DVktVwJyHscc0UiMIak
|
||||
5UqMAtfQrjIcNp+5pYiDpEHhBJ9LXDk4pFBOnJWF3tzuiAoNa5jgwSEV+6MpTQ4K
|
||||
7m5G/J5v642WCIjsfAmjAFEVqO54rrEaP++0BiWPSyeXNJ6+sB7uk6jbMwFNzCIC
|
||||
aRe1llv9afnz17qWAfdEaXclyBbM/fyto/QMQa5hntBNHDByPXqkGE23+TeIlRKF
|
||||
mw3161Uzc2ycRAm49DYMM0W7MVINOZE2syssqMt/F33n3Mqx/exGZE9u8d2lqoPr
|
||||
i+KJSSb2MsFHPJGIL9FfH/2tYfpJQI6KexbYZxOsRj2YzgX5b8DocWNFCw/diCz2
|
||||
GHrBFAcn+IqYAjjnC/5NqNc3xBi+zBWdo4gjmrSHrX/eeaHq1dNaBRIKKN4Z/0Eh
|
||||
Y9eMkQUZby6rDqf+l2D7Mae4QcdYMKW/IeMgQXFAMuwTyXHXVdiLCOcnOlsf2HLa
|
||||
wy48HR9jI56jSH6q3vIRqWFVMfDN/58wgqbqTUEQtybbRaNqISG3TmAcFQIDAQAB
|
||||
o4ICJzCCAiMwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwG
|
||||
A1UdEwEB/wQCMAAwHQYDVR0OBBYEFLhm3925P+ID7gXZ8jbNGN5ad3ArMB8GA1Ud
|
||||
IwQYMBaAFAC1KfItjm8x6JtMrXg++tzpDNHSMDMGCCsGAQUFBwEBBCcwJTAjBggr
|
||||
BgEFBQcwAoYXaHR0cDovL3IxMi5pLmxlbmNyLm9yZy8wIwYDVR0RBBwwGoIYdHJh
|
||||
ZWZpay5sYW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMC4GA1Ud
|
||||
HwQnMCUwI6AhoB+GHWh0dHA6Ly9yMTIuYy5sZW5jci5vcmcvMTAuY3JsMIIBDQYK
|
||||
KwYBBAHWeQIEAgSB/gSB+wD5AH4AcX6V88I4im2x44RJPTHhWqliCHYtQgDgBQzQ
|
||||
Z7WmYeIAAAGckNwO+AAIAAAFAApBBmMEAwBHMEUCIQD2eX809wAYVzKDAs0Xk8gD
|
||||
QYeXJJjHkP4JVkNQnxATvQIgK0tOHxZl0BuqNLfnMHZxKXTL3MBXlK6BUc8IRNJC
|
||||
U+sAdwAWgy2r8KklDw/wOqVF/8i/yCPQh0v2BCkn+OcfMxP1+gAAAZyQ3BZhAAAE
|
||||
AwBIMEYCIQDZXBfbpozxVgDyGgDIcK2XJUYLohKnZlieElRQWHzwCgIhAOMPKNgE
|
||||
QAvRA4h69si49WrT7jxmZofyPF0Wnr6YYkZAMA0GCSqGSIb3DQEBCwUAA4IBAQDG
|
||||
NoVBNA/6pAHXZ96vPay1KL05TUYb1FjDSeqyjULEbkoabaIXrD95ocx3K+mElsa9
|
||||
M/pYYcNirGKmwcWTnIbsfCbGhlw6ipN+Nh+SdGj104BGYqxwaxgUML7i3s7dMXXT
|
||||
/oebN7CpDskRQYBIzB1DFDBxBHJBV8mYpe1U0zNpkpHyHGKK4IcSXn58r2e23uNn
|
||||
bAnG4a0dbmSfKaP5T+BCK5ANUiAowQlQhfYy4Ez/Ht9tLtzeOSanAE1A7+kV0PkZ
|
||||
kNt6WRsWU8xqbDEDTXflZHEqAIuBZ7oZdKsuvOMUPmIExtyY6KZLDSzAssBn2G76
|
||||
HejYTdxMZZXS7/veLh/0
|
||||
-----END CERTIFICATE-----
|
||||
Version: 2
|
||||
Serial Number: 05:2d:9d:a1:e7:8c:46:76:7b:ad:2f:21:42:b9:78:0f:89:89
|
||||
Signature Algorithm: sha256WithRSAEncryption
|
||||
Issuer: /C=US/O=Let's Encrypt/CN=R12
|
||||
Not valid before: Feb 24 17:15:56 2026 GMT
|
||||
Not valid after: May 25 17:15:55 2026 GMT
|
||||
Subject: /CN=traefik.lan.ddnsgeek.com
|
||||
Public Key Algorithm: NULL
|
||||
RSA Public Key: (4096 bit)
|
||||
RSA Public-Key: (4096 bit)
|
||||
Modulus:
|
||||
00:cf:57:cd:1e:7c:10:87:34:45:19:dc:55:83:85:
|
||||
6d:19:b3:54:19:61:79:0d:f5:7a:1e:5c:cb:8f:6d:
|
||||
65:3e:2e:17:ef:5e:d5:33:f1:1a:06:2f:41:4f:36:
|
||||
df:7d:2d:e5:50:38:03:af:28:ed:19:4d:b4:a0:a3:
|
||||
9f:78:a3:e4:6b:9c:1a:dc:92:5f:6d:0c:0b:5f:24:
|
||||
01:4d:24:d9:2f:ac:b6:6d:66:c0:fb:90:de:f3:96:
|
||||
36:86:4a:07:07:08:ac:97:f8:2f:53:1b:4f:8a:c1:
|
||||
5f:6a:99:58:a3:73:ff:42:69:42:76:a7:c1:f6:d4:
|
||||
35:64:b5:5c:09:c8:7b:1c:73:45:22:30:86:a4:e5:
|
||||
4a:8c:02:d7:d0:ae:32:1c:36:9f:b9:a5:88:83:a4:
|
||||
41:e1:04:9f:4b:5c:39:38:a4:50:4e:9c:95:85:de:
|
||||
dc:ee:88:0a:0d:6b:98:e0:c1:21:15:fb:a3:29:4d:
|
||||
0e:0a:ee:6e:46:fc:9e:6f:eb:8d:96:08:88:ec:7c:
|
||||
09:a3:00:51:15:a8:ee:78:ae:b1:1a:3f:ef:b4:06:
|
||||
25:8f:4b:27:97:34:9e:be:b0:1e:ee:93:a8:db:33:
|
||||
01:4d:cc:22:02:69:17:b5:96:5b:fd:69:f9:f3:d7:
|
||||
ba:96:01:f7:44:69:77:25:c8:16:cc:fd:fc:ad:a3:
|
||||
f4:0c:41:ae:61:9e:d0:4d:1c:30:72:3d:7a:a4:18:
|
||||
4d:b7:f9:37:88:95:12:85:9b:0d:f5:eb:55:33:73:
|
||||
6c:9c:44:09:b8:f4:36:0c:33:45:bb:31:52:0d:39:
|
||||
91:36:b3:2b:2c:a8:cb:7f:17:7d:e7:dc:ca:b1:fd:
|
||||
ec:46:64:4f:6e:f1:dd:a5:aa:83:eb:8b:e2:89:49:
|
||||
26:f6:32:c1:47:3c:91:88:2f:d1:5f:1f:fd:ad:61:
|
||||
fa:49:40:8e:8a:7b:16:d8:67:13:ac:46:3d:98:ce:
|
||||
05:f9:6f:c0:e8:71:63:45:0b:0f:dd:88:2c:f6:18:
|
||||
7a:c1:14:07:27:f8:8a:98:02:38:e7:0b:fe:4d:a8:
|
||||
d7:37:c4:18:be:cc:15:9d:a3:88:23:9a:b4:87:ad:
|
||||
7f:de:79:a1:ea:d5:d3:5a:05:12:0a:28:de:19:ff:
|
||||
41:21:63:d7:8c:91:05:19:6f:2e:ab:0e:a7:fe:97:
|
||||
60:fb:31:a7:b8:41:c7:58:30:a5:bf:21:e3:20:41:
|
||||
71:40:32:ec:13:c9:71:d7:55:d8:8b:08:e7:27:3a:
|
||||
5b:1f:d8:72:da:c3:2e:3c:1d:1f:63:23:9e:a3:48:
|
||||
7e:aa:de:f2:11:a9:61:55:31:f0:cd:ff:9f:30:82:
|
||||
a6:ea:4d:41:10:b7:26:db:45:a3:6a:21:21:b7:4e:
|
||||
60:1c:15
|
||||
Exponent: 65537 (0x10001)
|
||||
X509v3 Extensions:
|
||||
X509v3 Key Usage: critical
|
||||
Digital Signature, Key Encipherment
|
||||
X509v3 Extended Key Usage:
|
||||
TLS Web Server Authentication
|
||||
X509v3 Basic Constraints: critical
|
||||
CA:FALSE
|
||||
X509v3 Subject Key Identifier:
|
||||
B8:66:DF:DD:B9:3F:E2:03:EE:05:D9:F2:36:CD:18:DE:5A:77:70:2B
|
||||
X509v3 Authority Key Identifier:
|
||||
00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2
|
||||
Authority Information Access:
|
||||
CA Issuers - URI:http://r12.i.lencr.org/
|
||||
X509v3 Subject Alternative Name:
|
||||
DNS:traefik.lan.ddnsgeek.com
|
||||
X509v3 Certificate Policies:
|
||||
Policy: 2.23.140.1.2.1
|
||||
X509v3 CRL Distribution Points:
|
||||
Full Name:
|
||||
URI:http://r12.c.lencr.org/10.crl
|
||||
|
||||
CT Precertificate SCTs:
|
||||
Signed Certificate Timestamp:
|
||||
Version : v1 (0x0)
|
||||
Log ID : 71:7E:95:F3:C2:38:8A:6D:B1:E3:84:49:3D:31:E1:5A:
|
||||
A9:62:08:76:2D:42:00:E0:05:0C:D0:67:B5:A6:61:E2
|
||||
Timestamp : Feb 24 18:14:26.808 2026 GMT
|
||||
Extensions: 00:00:05:00:0A:41:06:63
|
||||
Signature : ecdsa-with-SHA256
|
||||
30:45:02:21:00:F6:79:7F:34:F7:00:18:57:32:83:02:
|
||||
CD:17:93:C8:03:41:87:97:24:98:C7:90:FE:09:56:43:
|
||||
50:9F:10:13:BD:02:20:2B:4B:4E:1F:16:65:D0:1B:AA:
|
||||
34:B7:E7:30:76:71:29:74:CB:DC:C0:57:94:AE:81:51:
|
||||
CF:08:44:D2:42:53:EB
|
||||
Signed Certificate Timestamp:
|
||||
Version : v1 (0x0)
|
||||
Log ID : 16:83:2D:AB:F0:A9:25:0F:0F:F0:3A:A5:45:FF:C8:BF:
|
||||
C8:23:D0:87:4B:F6:04:29:27:F8:E7:1F:33:13:F5:FA
|
||||
Timestamp : Feb 24 18:14:28.705 2026 GMT
|
||||
Extensions: none
|
||||
Signature : ecdsa-with-SHA256
|
||||
30:46:02:21:00:D9:5C:17:DB:A6:8C:F1:56:00:F2:1A:
|
||||
00:C8:70:AD:97:25:46:0B:A2:12:A7:66:58:9E:12:54:
|
||||
50:58:7C:F0:0A:02:21:00:E3:0F:28:D8:04:40:0B:D1:
|
||||
03:88:7A:F6:C8:B8:F5:6A:D3:EE:3C:66:66:87:F2:3C:
|
||||
5D:16:9E:BE:98:62:46:40
|
||||
Verify m:
|
||||
unable to get local issuer certificate
|
||||
|
||||
SSL Certificate:
|
||||
Signature Algorithm: sha256WithRSAEncryption
|
||||
RSA Key Strength: 4096
|
||||
|
||||
Subject: traefik.lan.ddnsgeek.com
|
||||
Altnames: DNS:traefik.lan.ddnsgeek.com
|
||||
Issuer: R12
|
||||
|
||||
Not valid before: Feb 24 17:15:56 2026 GMT
|
||||
Not valid after: May 25 17:15:55 2026 GMT
|
||||
|
||||
|
||||
```
|
||||
-9
@@ -1,9 +0,0 @@
|
||||
```bash
|
||||
ffuf -u https://traefik.lan.ddnsgeek.com:443/ -t 10 -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -H "Host: FUZZ.traefik.lan.ddnsgeek.com" -mc all -fs 19 -r -noninteractive -s | tee "/root/results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_traefik.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt"
|
||||
```
|
||||
|
||||
[/root/results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_traefik.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt](file:///root/results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_traefik.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt):
|
||||
|
||||
```
|
||||
|
||||
```
|
||||
@@ -1,29 +0,0 @@
|
||||
```bash
|
||||
nikto -ask=no -Tuning=x4567890ac -nointeractive -host https://traefik.lan.ddnsgeek.com:443 2>&1 | tee "/root/results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt"
|
||||
```
|
||||
|
||||
[/root/results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt](file:///root/results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt):
|
||||
|
||||
```
|
||||
- Nikto v2.6.0
|
||||
---------------------------------------------------------------------------
|
||||
+ Your Nikto installation is out of date.
|
||||
+ Target IP: 167.179.167.166
|
||||
+ Target Hostname: traefik.lan.ddnsgeek.com
|
||||
+ Target Port: 443
|
||||
---------------------------------------------------------------------------
|
||||
+ SSL Info: Subject: /CN=traefik.lan.ddnsgeek.com
|
||||
CN: traefik.lan.ddnsgeek.com
|
||||
SAN: traefik.lan.ddnsgeek.com
|
||||
Ciphers: TLS_AES_128_GCM_SHA256
|
||||
Issuer: /C=US/O=Let's Encrypt/CN=R12
|
||||
+ Platform: Unknown
|
||||
+ Start Time: 2026-04-05 10:53:13 (GMT0)
|
||||
---------------------------------------------------------------------------
|
||||
+ Server: No banner retrieved
|
||||
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
|
||||
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
|
||||
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
|
||||
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
|
||||
|
||||
```
|
||||
-153
@@ -1,153 +0,0 @@
|
||||
```bash
|
||||
whatweb --color=never --no-errors -a 3 -v https://traefik.lan.ddnsgeek.com:443 2>&1
|
||||
```
|
||||
|
||||
[/root/results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt](file:///root/results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt):
|
||||
|
||||
```
|
||||
WhatWeb report for https://traefik.lan.ddnsgeek.com:443
|
||||
Status : 302 Found
|
||||
Title : <None>
|
||||
IP : 167.179.167.166
|
||||
Country : NEW ZEALAND, NZ
|
||||
|
||||
Summary : Cookies[authelia_session], HttpOnly[authelia_session], RedirectLocation[https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Ftraefik.lan.ddnsgeek.com%2F&rm=GET], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[permissions-policy,referrer-policy,x-content-type-options,x-dns-prefetch-control], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
|
||||
|
||||
Detected Plugins:
|
||||
[ Cookies ]
|
||||
Display the names of cookies in the HTTP headers. The
|
||||
values are not returned to save on space.
|
||||
|
||||
String : authelia_session
|
||||
|
||||
[ HttpOnly ]
|
||||
If the HttpOnly flag is included in the HTTP set-cookie
|
||||
response header and the browser supports it then the cookie
|
||||
cannot be accessed through client side script - More Info:
|
||||
http://en.wikipedia.org/wiki/HTTP_cookie
|
||||
|
||||
String : authelia_session
|
||||
|
||||
[ RedirectLocation ]
|
||||
HTTP Server string location. used with http-status 301 and
|
||||
302
|
||||
|
||||
String : https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Ftraefik.lan.ddnsgeek.com%2F&rm=GET (from location)
|
||||
|
||||
[ Strict-Transport-Security ]
|
||||
Strict-Transport-Security is an HTTP header that restricts
|
||||
a web browser from accessing a website without the security
|
||||
of the HTTPS protocol.
|
||||
|
||||
String : max-age=15552000; includeSubDomains; preload
|
||||
|
||||
[ UncommonHeaders ]
|
||||
Uncommon HTTP server headers. The blacklist includes all
|
||||
the standard headers and many non standard but common ones.
|
||||
Interesting but fairly common headers should have their own
|
||||
plugins, eg. x-powered-by, server and x-aspnet-version.
|
||||
Info about headers can be found at www.http-stats.com
|
||||
|
||||
String : permissions-policy,referrer-policy,x-content-type-options,x-dns-prefetch-control (from headers)
|
||||
|
||||
[ X-Frame-Options ]
|
||||
This plugin retrieves the X-Frame-Options value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : SAMEORIGIN
|
||||
|
||||
[ X-XSS-Protection ]
|
||||
This plugin retrieves the X-XSS-Protection value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : 1; mode=block
|
||||
|
||||
HTTP Headers:
|
||||
HTTP/1.1 302 Found
|
||||
Content-Length: 110
|
||||
Content-Type: text/html; charset=utf-8
|
||||
Date: Sun, 05 Apr 2026 11:00:07 GMT
|
||||
Location: https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Ftraefik.lan.ddnsgeek.com%2F&rm=GET
|
||||
Permissions-Policy: accelerometer=(), autoplay=(), camera=(), display-capture=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), screen-wake-lock=(), sync-xhr=(), xr-spatial-tracking=(), interest-cohort=()
|
||||
Referrer-Policy: strict-origin-when-cross-origin
|
||||
Set-Cookie: authelia_session=PqJBSGYImDEc8A6BDrhX1zglOcf2LmYw; expires=Sun, 05 Apr 2026 12:00:08 GMT; domain=lan.ddnsgeek.com; path=/; HttpOnly; secure; SameSite=Lax
|
||||
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
X-Content-Type-Options: nosniff
|
||||
X-Dns-Prefetch-Control: off
|
||||
X-Frame-Options: SAMEORIGIN
|
||||
X-Xss-Protection: 1; mode=block
|
||||
Connection: close
|
||||
|
||||
WhatWeb report for https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Ftraefik.lan.ddnsgeek.com%2F&rm=GET
|
||||
Status : 200 OK
|
||||
Title : <None>
|
||||
IP : 167.179.167.166
|
||||
Country : NEW ZEALAND, NZ
|
||||
|
||||
Summary : HTML5, Script[module], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[content-security-policy,permissions-policy,referrer-policy,x-content-type-options,x-dns-prefetch-control], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
|
||||
|
||||
Detected Plugins:
|
||||
[ HTML5 ]
|
||||
HTML version 5, detected by the doctype declaration
|
||||
|
||||
|
||||
[ Script ]
|
||||
This plugin detects instances of script HTML elements and
|
||||
returns the script language/type.
|
||||
|
||||
String : module
|
||||
|
||||
[ Strict-Transport-Security ]
|
||||
Strict-Transport-Security is an HTTP header that restricts
|
||||
a web browser from accessing a website without the security
|
||||
of the HTTPS protocol.
|
||||
|
||||
String : max-age=15552000; includeSubDomains; preload
|
||||
|
||||
[ UncommonHeaders ]
|
||||
Uncommon HTTP server headers. The blacklist includes all
|
||||
the standard headers and many non standard but common ones.
|
||||
Interesting but fairly common headers should have their own
|
||||
plugins, eg. x-powered-by, server and x-aspnet-version.
|
||||
Info about headers can be found at www.http-stats.com
|
||||
|
||||
String : content-security-policy,permissions-policy,referrer-policy,x-content-type-options,x-dns-prefetch-control (from headers)
|
||||
|
||||
[ X-Frame-Options ]
|
||||
This plugin retrieves the X-Frame-Options value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : SAMEORIGIN
|
||||
|
||||
[ X-XSS-Protection ]
|
||||
This plugin retrieves the X-XSS-Protection value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : 1; mode=block
|
||||
|
||||
HTTP Headers:
|
||||
HTTP/1.1 200 OK
|
||||
Content-Length: 2675
|
||||
Content-Security-Policy: default-src 'self'; base-uri 'self'; connect-src 'self'; frame-ancestors 'none'; frame-src 'none'; object-src 'none'; script-src 'self'; style-src 'self' 'nonce-4SVdMNrcuMIwrLwLMYSUVWMa5r99kiIF' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='
|
||||
Content-Type: text/html; charset=utf-8
|
||||
Date: Sun, 05 Apr 2026 11:00:14 GMT
|
||||
Permissions-Policy: accelerometer=(), autoplay=(), camera=(), display-capture=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), screen-wake-lock=(), sync-xhr=(), xr-spatial-tracking=(), interest-cohort=()
|
||||
Referrer-Policy: strict-origin-when-cross-origin
|
||||
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
X-Content-Type-Options: nosniff
|
||||
X-Dns-Prefetch-Control: off
|
||||
X-Frame-Options: SAMEORIGIN
|
||||
X-Xss-Protection: 1; mode=block
|
||||
Connection: close
|
||||
|
||||
|
||||
|
||||
```
|
||||
+1
-1
@@ -7,7 +7,7 @@ curl -sSikf http://traefik.lan.ddnsgeek.com:80/robots.txt
|
||||
```
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://traefik.lan.ddnsgeek.com/robots.txt
|
||||
Date: Sun, 05 Apr 2026 10:38:16 GMT
|
||||
Date: Tue, 14 Apr 2026 04:29:53 GMT
|
||||
Content-Length: 17
|
||||
|
||||
Moved Permanently
|
||||
|
||||
@@ -7,7 +7,7 @@ curl -sSik http://traefik.lan.ddnsgeek.com:80/
|
||||
```
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://traefik.lan.ddnsgeek.com/
|
||||
Date: Sun, 05 Apr 2026 10:38:17 GMT
|
||||
Date: Tue, 14 Apr 2026 04:29:55 GMT
|
||||
Content-Length: 17
|
||||
|
||||
Moved Permanently
|
||||
|
||||
-36
@@ -290,41 +290,5 @@ Configuration {
|
||||
unique: false,
|
||||
response_size_limit: 4194304,
|
||||
}
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/[ => https://traefik.lan.ddnsgeek.com/[
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/[.txt => https://traefik.lan.ddnsgeek.com/[.txt
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/[.html => https://traefik.lan.ddnsgeek.com/[.html
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/] => https://traefik.lan.ddnsgeek.com/]
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/[.php => https://traefik.lan.ddnsgeek.com/[.php
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/].txt => https://traefik.lan.ddnsgeek.com/].txt
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/[.asp => https://traefik.lan.ddnsgeek.com/[.asp
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/].html => https://traefik.lan.ddnsgeek.com/].html
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/[.aspx => https://traefik.lan.ddnsgeek.com/[.aspx
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/].php => https://traefik.lan.ddnsgeek.com/].php
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/[.jsp => https://traefik.lan.ddnsgeek.com/[.jsp
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/].asp => https://traefik.lan.ddnsgeek.com/].asp
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/].aspx => https://traefik.lan.ddnsgeek.com/].aspx
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/].jsp => https://traefik.lan.ddnsgeek.com/].jsp
|
||||
404 GET 2l 12w 64c https://traefik.lan.ddnsgeek.com/metrics
|
||||
404 GET 2l 12w 64c https://traefik.lan.ddnsgeek.com/metrics.txt
|
||||
404 GET 2l 12w 64c https://traefik.lan.ddnsgeek.com/metrics.html
|
||||
404 GET 2l 12w 64c https://traefik.lan.ddnsgeek.com/metrics.php
|
||||
404 GET 2l 12w 64c https://traefik.lan.ddnsgeek.com/metrics.asp
|
||||
404 GET 2l 12w 64c https://traefik.lan.ddnsgeek.com/metrics.aspx
|
||||
404 GET 2l 12w 64c https://traefik.lan.ddnsgeek.com/metrics.jsp
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/plain] => https://traefik.lan.ddnsgeek.com/plain]
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/plain].txt => https://traefik.lan.ddnsgeek.com/plain].txt
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/plain].html => https://traefik.lan.ddnsgeek.com/plain].html
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/plain].php => https://traefik.lan.ddnsgeek.com/plain].php
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/plain].asp => https://traefik.lan.ddnsgeek.com/plain].asp
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/plain].aspx => https://traefik.lan.ddnsgeek.com/plain].aspx
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/plain].jsp => https://traefik.lan.ddnsgeek.com/plain].jsp
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/quote] => https://traefik.lan.ddnsgeek.com/quote]
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/quote].txt => https://traefik.lan.ddnsgeek.com/quote].txt
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/quote].html => https://traefik.lan.ddnsgeek.com/quote].html
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/quote].php => https://traefik.lan.ddnsgeek.com/quote].php
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/quote].asp => https://traefik.lan.ddnsgeek.com/quote].asp
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/quote].aspx => https://traefik.lan.ddnsgeek.com/quote].aspx
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/quote].jsp => https://traefik.lan.ddnsgeek.com/quote].jsp
|
||||
302 GET 0l 0w 122c https://traefik.lan.ddnsgeek.com/advertorials => https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Ftraefik.lan.ddnsgeek.com%2Fadvertorials&rm=GET
|
||||
|
||||
```
|
||||
|
||||
+1
-1
@@ -7,7 +7,7 @@ curl -sSikf http://traefik.lan.ddnsgeek.com:80/.well-known/security.txt
|
||||
```
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://traefik.lan.ddnsgeek.com/.well-known/security.txt
|
||||
Date: Sun, 05 Apr 2026 10:38:16 GMT
|
||||
Date: Tue, 14 Apr 2026 04:29:50 GMT
|
||||
Content-Length: 17
|
||||
|
||||
Moved Permanently
|
||||
|
||||
+37
-39
@@ -5,43 +5,17 @@ nmap -vv --reason -Pn -T4 -sV -p 80 --script="banner,(http* or ssl*) and not (br
|
||||
[/root/results/traefik.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt](file:///root/results/traefik.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt):
|
||||
|
||||
```
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 10:38:17 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/traefik.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/traefik.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml traefik.lan.ddnsgeek.com
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 04:29:59 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/traefik.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/traefik.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml traefik.lan.ddnsgeek.com
|
||||
Nmap scan report for traefik.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set (0.014s latency).
|
||||
Host is up, received user-set (0.015s latency).
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 10:38:24 UTC for 1272s
|
||||
Scanned at 2026-04-14 04:30:14 UTC for 582s
|
||||
|
||||
Bug in http-security-headers: no string output.
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
|_http-errors: Couldn't find any error pages.
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| Longest directory structure:
|
||||
| Depth: 0
|
||||
| Dir: /
|
||||
| Total files found (by extension):
|
||||
|_
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
| http-waf-detect: IDS/IPS/WAF detected:
|
||||
|_traefik.lan.ddnsgeek.com:80/?p4yl04d3=<script>alert(document.cookie)</script>
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
| http-headers:
|
||||
| Location: https://traefik.lan.ddnsgeek.com/
|
||||
| Date: Sun, 05 Apr 2026 10:47:39 GMT
|
||||
| Content-Length: 17
|
||||
| Connection: close
|
||||
|
|
||||
|_ (Request type: GET)
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
| http-useragent-tester:
|
||||
| Status for browser useragent: 401
|
||||
| Status for browser useragent: false
|
||||
| Redirected To: https://traefik.lan.ddnsgeek.com/
|
||||
| Allowed User Agents:
|
||||
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
|
||||
@@ -61,22 +35,46 @@ PORT STATE SERVICE REASON VERSION
|
||||
| PECL::HTTP
|
||||
| Wget/1.13.4 (linux-gnu)
|
||||
|_ WWW-Mechanize/1.34
|
||||
|_http-chrono: Request times for /; avg: 558.23ms; min: 429.82ms; max: 772.34ms
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
|_http-date: Sun, 05 Apr 2026 10:47:24 GMT; -1s from local time.
|
||||
|_http-title: Did not follow redirect to https://traefik.lan.ddnsgeek.com/
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
|_http-date: Tue, 14 Apr 2026 04:30:42 GMT; -2s from local time.
|
||||
| http-vhosts:
|
||||
|_128 names had status 308
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| Longest directory structure:
|
||||
| Depth: 0
|
||||
| Dir: /
|
||||
| Total files found (by extension):
|
||||
|_
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-chrono: Request times for /; avg: 470.74ms; min: 157.63ms; max: 709.00ms
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
|_http-errors: Couldn't find any error pages.
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
| http-headers:
|
||||
| Location: https://traefik.lan.ddnsgeek.com/
|
||||
| Date: Tue, 14 Apr 2026 04:30:50 GMT
|
||||
| Content-Length: 17
|
||||
| Connection: close
|
||||
|
|
||||
|_ (Request type: GET)
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 10:59:36 2026 -- 1 IP address (1 host up) scanned in 1280.49 seconds
|
||||
# Nmap done at Tue Apr 14 04:39:57 2026 -- 1 IP address (1 host up) scanned in 600.46 seconds
|
||||
|
||||
```
|
||||
|
||||
+59629
-59476
File diff suppressed because it is too large
Load Diff
@@ -5,6 +5,25 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://traefik.lan.ddnsgee
|
||||
[/root/results/traefik.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt](file:///root/results/traefik.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt):
|
||||
|
||||
```
|
||||
perl: warning: Setting locale failed.
|
||||
perl: warning: Please check that your locale settings:
|
||||
LANGUAGE = (unset),
|
||||
LC_ALL = (unset),
|
||||
LC_CTYPE = (unset),
|
||||
LC_NUMERIC = "en_AU.UTF-8",
|
||||
LC_COLLATE = (unset),
|
||||
LC_TIME = "en_AU.UTF-8",
|
||||
LC_MESSAGES = (unset),
|
||||
LC_MONETARY = "en_AU.UTF-8",
|
||||
LC_ADDRESS = "en_AU.UTF-8",
|
||||
LC_IDENTIFICATION = "en_AU.UTF-8",
|
||||
LC_MEASUREMENT = "en_AU.UTF-8",
|
||||
LC_PAPER = "en_AU.UTF-8",
|
||||
LC_TELEPHONE = "en_AU.UTF-8",
|
||||
LC_NAME = "en_AU.UTF-8",
|
||||
LANG = "en_US.UTF-8"
|
||||
are supported and installed on your system.
|
||||
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
|
||||
- Nikto v2.6.0
|
||||
---------------------------------------------------------------------------
|
||||
+ Your Nikto installation is out of date.
|
||||
@@ -12,21 +31,20 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://traefik.lan.ddnsgee
|
||||
+ Target Hostname: traefik.lan.ddnsgeek.com
|
||||
+ Target Port: 80
|
||||
+ Platform: Unknown
|
||||
+ Start Time: 2026-04-05 10:47:24 (GMT0)
|
||||
+ Start Time: 2026-04-14 04:30:27 (GMT0)
|
||||
---------------------------------------------------------------------------
|
||||
+ Server: No banner retrieved
|
||||
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
|
||||
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
|
||||
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
|
||||
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
|
||||
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
|
||||
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: error reading HTTP response. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 7002 requests: currently in plugin 'Nikto Tests'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ Scan terminated: 20 errors and 5 items reported on the remote host
|
||||
+ End Time: 2026-04-05 11:14:58 (GMT0) (1654 seconds)
|
||||
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
|
||||
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
|
||||
+ [999979] http://100.100.100.200/latest/meta-data/: IP address found in the 'location' header. The IP is "100.100.100.200". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed
|
||||
+ [007342] /: X-Frame-Options header is deprecated and was replaced with the Content-Security-Policy HTTP header with the frame-ancestors directive. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options
|
||||
+ [007352] /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/
|
||||
+ 7901 requests: 16 errors and 8 items reported on the remote host
|
||||
+ End Time: 2026-04-14 04:51:43 (GMT0) (1276 seconds)
|
||||
---------------------------------------------------------------------------
|
||||
+ 1 host(s) tested
|
||||
|
||||
|
||||
+1
-144
@@ -23,153 +23,10 @@ Detected Plugins:
|
||||
HTTP Headers:
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://traefik.lan.ddnsgeek.com/
|
||||
Date: Sun, 05 Apr 2026 10:47:36 GMT
|
||||
Date: Tue, 14 Apr 2026 04:32:05 GMT
|
||||
Content-Length: 17
|
||||
Connection: close
|
||||
|
||||
WhatWeb report for https://traefik.lan.ddnsgeek.com/
|
||||
Status : 302 Found
|
||||
Title : <None>
|
||||
IP : 167.179.167.166
|
||||
Country : NEW ZEALAND, NZ
|
||||
|
||||
Summary : Cookies[authelia_session], HttpOnly[authelia_session], RedirectLocation[https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Ftraefik.lan.ddnsgeek.com%2F&rm=GET], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[permissions-policy,referrer-policy,x-content-type-options,x-dns-prefetch-control], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
|
||||
|
||||
Detected Plugins:
|
||||
[ Cookies ]
|
||||
Display the names of cookies in the HTTP headers. The
|
||||
values are not returned to save on space.
|
||||
|
||||
String : authelia_session
|
||||
|
||||
[ HttpOnly ]
|
||||
If the HttpOnly flag is included in the HTTP set-cookie
|
||||
response header and the browser supports it then the cookie
|
||||
cannot be accessed through client side script - More Info:
|
||||
http://en.wikipedia.org/wiki/HTTP_cookie
|
||||
|
||||
String : authelia_session
|
||||
|
||||
[ RedirectLocation ]
|
||||
HTTP Server string location. used with http-status 301 and
|
||||
302
|
||||
|
||||
String : https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Ftraefik.lan.ddnsgeek.com%2F&rm=GET (from location)
|
||||
|
||||
[ Strict-Transport-Security ]
|
||||
Strict-Transport-Security is an HTTP header that restricts
|
||||
a web browser from accessing a website without the security
|
||||
of the HTTPS protocol.
|
||||
|
||||
String : max-age=15552000; includeSubDomains; preload
|
||||
|
||||
[ UncommonHeaders ]
|
||||
Uncommon HTTP server headers. The blacklist includes all
|
||||
the standard headers and many non standard but common ones.
|
||||
Interesting but fairly common headers should have their own
|
||||
plugins, eg. x-powered-by, server and x-aspnet-version.
|
||||
Info about headers can be found at www.http-stats.com
|
||||
|
||||
String : permissions-policy,referrer-policy,x-content-type-options,x-dns-prefetch-control (from headers)
|
||||
|
||||
[ X-Frame-Options ]
|
||||
This plugin retrieves the X-Frame-Options value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : SAMEORIGIN
|
||||
|
||||
[ X-XSS-Protection ]
|
||||
This plugin retrieves the X-XSS-Protection value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : 1; mode=block
|
||||
|
||||
HTTP Headers:
|
||||
HTTP/1.1 302 Found
|
||||
Content-Length: 110
|
||||
Content-Type: text/html; charset=utf-8
|
||||
Date: Sun, 05 Apr 2026 10:47:42 GMT
|
||||
Location: https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Ftraefik.lan.ddnsgeek.com%2F&rm=GET
|
||||
Permissions-Policy: accelerometer=(), autoplay=(), camera=(), display-capture=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), screen-wake-lock=(), sync-xhr=(), xr-spatial-tracking=(), interest-cohort=()
|
||||
Referrer-Policy: strict-origin-when-cross-origin
|
||||
Set-Cookie: authelia_session=WW-u0jR6Q2CNUU5uigYGQjXqNXy!XB*L; expires=Sun, 05 Apr 2026 11:47:43 GMT; domain=lan.ddnsgeek.com; path=/; HttpOnly; secure; SameSite=Lax
|
||||
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
X-Content-Type-Options: nosniff
|
||||
X-Dns-Prefetch-Control: off
|
||||
X-Frame-Options: SAMEORIGIN
|
||||
X-Xss-Protection: 1; mode=block
|
||||
Connection: close
|
||||
|
||||
WhatWeb report for https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Ftraefik.lan.ddnsgeek.com%2F&rm=GET
|
||||
Status : 200 OK
|
||||
Title : <None>
|
||||
IP : 167.179.167.166
|
||||
Country : NEW ZEALAND, NZ
|
||||
|
||||
Summary : HTML5, Script[module], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[content-security-policy,permissions-policy,referrer-policy,x-content-type-options,x-dns-prefetch-control], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
|
||||
|
||||
Detected Plugins:
|
||||
[ HTML5 ]
|
||||
HTML version 5, detected by the doctype declaration
|
||||
|
||||
|
||||
[ Script ]
|
||||
This plugin detects instances of script HTML elements and
|
||||
returns the script language/type.
|
||||
|
||||
String : module
|
||||
|
||||
[ Strict-Transport-Security ]
|
||||
Strict-Transport-Security is an HTTP header that restricts
|
||||
a web browser from accessing a website without the security
|
||||
of the HTTPS protocol.
|
||||
|
||||
String : max-age=15552000; includeSubDomains; preload
|
||||
|
||||
[ UncommonHeaders ]
|
||||
Uncommon HTTP server headers. The blacklist includes all
|
||||
the standard headers and many non standard but common ones.
|
||||
Interesting but fairly common headers should have their own
|
||||
plugins, eg. x-powered-by, server and x-aspnet-version.
|
||||
Info about headers can be found at www.http-stats.com
|
||||
|
||||
String : content-security-policy,permissions-policy,referrer-policy,x-content-type-options,x-dns-prefetch-control (from headers)
|
||||
|
||||
[ X-Frame-Options ]
|
||||
This plugin retrieves the X-Frame-Options value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : SAMEORIGIN
|
||||
|
||||
[ X-XSS-Protection ]
|
||||
This plugin retrieves the X-XSS-Protection value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : 1; mode=block
|
||||
|
||||
HTTP Headers:
|
||||
HTTP/1.1 200 OK
|
||||
Content-Length: 2675
|
||||
Content-Security-Policy: default-src 'self'; base-uri 'self'; connect-src 'self'; frame-ancestors 'none'; frame-src 'none'; object-src 'none'; script-src 'self'; style-src 'self' 'nonce-3bjhmHahIXcEjYvijrpCrOOzQbRKnM68' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='
|
||||
Content-Type: text/html; charset=utf-8
|
||||
Date: Sun, 05 Apr 2026 10:47:51 GMT
|
||||
Permissions-Policy: accelerometer=(), autoplay=(), camera=(), display-capture=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), screen-wake-lock=(), sync-xhr=(), xr-spatial-tracking=(), interest-cohort=()
|
||||
Referrer-Policy: strict-origin-when-cross-origin
|
||||
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
X-Content-Type-Options: nosniff
|
||||
X-Dns-Prefetch-Control: off
|
||||
X-Frame-Options: SAMEORIGIN
|
||||
X-Xss-Protection: 1; mode=block
|
||||
Connection: close
|
||||
|
||||
|
||||
|
||||
```
|
||||
|
||||
Reference in New Issue
Block a user