new file: combined-report.txt
new file: parse-autorecon-results.sh new file: results/auth.lan.ddnsgeek.com/report/local.txt new file: results/auth.lan.ddnsgeek.com/report/notes.txt new file: results/auth.lan.ddnsgeek.com/report/proof.txt new file: results/auth.lan.ddnsgeek.com/report/report.md/auth.lan.ddnsgeek.com/Commands.md new file: results/auth.lan.ddnsgeek.com/report/report.md/auth.lan.ddnsgeek.com/Manual Commands.md new file: results/auth.lan.ddnsgeek.com/report/report.md/auth.lan.ddnsgeek.com/Patterns.md new file: results/auth.lan.ddnsgeek.com/report/report.md/auth.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md new file: results/auth.lan.ddnsgeek.com/report/report.md/auth.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md new file: results/auth.lan.ddnsgeek.com/report/report.md/auth.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md new file: results/auth.lan.ddnsgeek.com/report/report.md/auth.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md new file: results/auth.lan.ddnsgeek.com/report/report.md/auth.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md new file: results/auth.lan.ddnsgeek.com/report/report.md/auth.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md new file: results/auth.lan.ddnsgeek.com/report/report.md/auth.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md new file: results/auth.lan.ddnsgeek.com/report/report.md/auth.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md new file: results/auth.lan.ddnsgeek.com/report/report.md/auth.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md new file: results/auth.lan.ddnsgeek.com/report/report.md/auth.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md new file: results/auth.lan.ddnsgeek.com/report/report.md/auth.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md new file: results/auth.lan.ddnsgeek.com/report/report.md/auth.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md new file: results/auth.lan.ddnsgeek.com/report/report.md/auth.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md new file: results/auth.lan.ddnsgeek.com/report/report.md/auth.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md new file: results/auth.lan.ddnsgeek.com/report/report.md/auth.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md new file: results/auth.lan.ddnsgeek.com/report/report.md/auth.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md new file: results/auth.lan.ddnsgeek.com/report/report.md/auth.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md new file: results/auth.lan.ddnsgeek.com/report/report.md/auth.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md new file: results/auth.lan.ddnsgeek.com/report/report.md/auth.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md new file: results/auth.lan.ddnsgeek.com/report/report.md/auth.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md new file: results/auth.lan.ddnsgeek.com/scans/_commands.log new file: results/auth.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt new file: results/auth.lan.ddnsgeek.com/scans/_manual_commands.txt new file: results/auth.lan.ddnsgeek.com/scans/_patterns.log new file: results/auth.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt new file: results/auth.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt new file: results/auth.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_auth.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt new file: results/auth.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl-robots.txt new file: results/auth.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl.html new file: results/auth.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt new file: results/auth.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt new file: results/auth.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt new file: results/auth.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt new file: results/auth.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html new file: results/auth.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml new file: results/auth.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_auth.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt new file: results/auth.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl-robots.txt new file: results/auth.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl.html new file: results/auth.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt new file: results/auth.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_known-security.txt new file: results/auth.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt new file: results/auth.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt new file: results/auth.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_whatweb.txt new file: results/auth.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml new file: results/auth.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml new file: results/auth.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml new file: results/auth.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml new file: results/edge.lan.ddnsgeek.com/report/local.txt new file: results/edge.lan.ddnsgeek.com/report/notes.txt new file: results/edge.lan.ddnsgeek.com/report/proof.txt new file: results/edge.lan.ddnsgeek.com/report/report.md/edge.lan.ddnsgeek.com/Commands.md new file: results/edge.lan.ddnsgeek.com/report/report.md/edge.lan.ddnsgeek.com/Manual Commands.md new file: results/edge.lan.ddnsgeek.com/report/report.md/edge.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md new file: results/edge.lan.ddnsgeek.com/report/report.md/edge.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md new file: results/edge.lan.ddnsgeek.com/report/report.md/edge.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md new file: results/edge.lan.ddnsgeek.com/report/report.md/edge.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md new file: results/edge.lan.ddnsgeek.com/report/report.md/edge.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md new file: results/edge.lan.ddnsgeek.com/report/report.md/edge.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md new file: results/edge.lan.ddnsgeek.com/report/report.md/edge.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md new file: results/edge.lan.ddnsgeek.com/report/report.md/edge.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md new file: results/edge.lan.ddnsgeek.com/report/report.md/edge.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md new file: results/edge.lan.ddnsgeek.com/report/report.md/edge.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md new file: results/edge.lan.ddnsgeek.com/report/report.md/edge.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md new file: results/edge.lan.ddnsgeek.com/report/report.md/edge.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md new file: results/edge.lan.ddnsgeek.com/report/report.md/edge.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md new file: results/edge.lan.ddnsgeek.com/report/report.md/edge.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md new file: results/edge.lan.ddnsgeek.com/report/report.md/edge.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md new file: results/edge.lan.ddnsgeek.com/report/report.md/edge.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md new file: results/edge.lan.ddnsgeek.com/report/report.md/edge.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md new file: results/edge.lan.ddnsgeek.com/report/report.md/edge.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md new file: results/edge.lan.ddnsgeek.com/report/report.md/edge.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md new file: results/edge.lan.ddnsgeek.com/report/report.md/edge.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md new file: results/edge.lan.ddnsgeek.com/scans/_commands.log new file: results/edge.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt new file: results/edge.lan.ddnsgeek.com/scans/_manual_commands.txt new file: results/edge.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt new file: results/edge.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt new file: results/edge.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl.html new file: results/edge.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_edge.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt new file: results/edge.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt new file: results/edge.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt new file: results/edge.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt new file: results/edge.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt new file: results/edge.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html new file: results/edge.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml new file: results/edge.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl-robots.txt new file: results/edge.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl.html new file: results/edge.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_edge.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt new file: results/edge.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt new file: results/edge.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_known-security.txt new file: results/edge.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt new file: results/edge.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt new file: results/edge.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_whatweb.txt new file: results/edge.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml new file: results/edge.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml new file: results/edge.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml new file: results/edge.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml new file: results/familytree.lan.ddnsgeek.com/report/local.txt new file: results/familytree.lan.ddnsgeek.com/report/notes.txt new file: results/familytree.lan.ddnsgeek.com/report/proof.txt new file: results/familytree.lan.ddnsgeek.com/report/report.md/familytree.lan.ddnsgeek.com/Commands.md new file: results/familytree.lan.ddnsgeek.com/report/report.md/familytree.lan.ddnsgeek.com/Manual Commands.md new file: results/familytree.lan.ddnsgeek.com/report/report.md/familytree.lan.ddnsgeek.com/Patterns.md new file: results/familytree.lan.ddnsgeek.com/report/report.md/familytree.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md new file: results/familytree.lan.ddnsgeek.com/report/report.md/familytree.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md new file: results/familytree.lan.ddnsgeek.com/report/report.md/familytree.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md new file: results/familytree.lan.ddnsgeek.com/report/report.md/familytree.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md new file: results/familytree.lan.ddnsgeek.com/report/report.md/familytree.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md new file: results/familytree.lan.ddnsgeek.com/report/report.md/familytree.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md new file: results/familytree.lan.ddnsgeek.com/report/report.md/familytree.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md new file: results/familytree.lan.ddnsgeek.com/report/report.md/familytree.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md new file: results/familytree.lan.ddnsgeek.com/report/report.md/familytree.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md new file: results/familytree.lan.ddnsgeek.com/report/report.md/familytree.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md new file: results/familytree.lan.ddnsgeek.com/report/report.md/familytree.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md new file: results/familytree.lan.ddnsgeek.com/report/report.md/familytree.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md new file: results/familytree.lan.ddnsgeek.com/report/report.md/familytree.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md new file: results/familytree.lan.ddnsgeek.com/report/report.md/familytree.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md new file: results/familytree.lan.ddnsgeek.com/report/report.md/familytree.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md new file: results/familytree.lan.ddnsgeek.com/report/report.md/familytree.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md new file: results/familytree.lan.ddnsgeek.com/report/report.md/familytree.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md new file: results/familytree.lan.ddnsgeek.com/report/report.md/familytree.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md new file: results/familytree.lan.ddnsgeek.com/report/report.md/familytree.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md new file: results/familytree.lan.ddnsgeek.com/report/report.md/familytree.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md new file: results/familytree.lan.ddnsgeek.com/scans/_commands.log new file: results/familytree.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt new file: results/familytree.lan.ddnsgeek.com/scans/_manual_commands.txt new file: results/familytree.lan.ddnsgeek.com/scans/_patterns.log new file: results/familytree.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt new file: results/familytree.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt new file: results/familytree.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl-robots.txt new file: results/familytree.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl.html new file: results/familytree.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_familytree.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt new file: results/familytree.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt new file: results/familytree.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_known-security.txt new file: results/familytree.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt new file: results/familytree.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt new file: results/familytree.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt new file: results/familytree.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html new file: results/familytree.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml new file: results/familytree.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl-robots.txt new file: results/familytree.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl.html new file: results/familytree.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_familytree.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt new file: results/familytree.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt new file: results/familytree.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_known-security.txt new file: results/familytree.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt new file: results/familytree.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt new file: results/familytree.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_whatweb.txt new file: results/familytree.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml new file: results/familytree.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml new file: results/familytree.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml new file: results/familytree.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml new file: results/gitea.lan.ddnsgeek.com/report/local.txt new file: results/gitea.lan.ddnsgeek.com/report/notes.txt new file: results/gitea.lan.ddnsgeek.com/report/proof.txt new file: results/gitea.lan.ddnsgeek.com/report/report.md/gitea.lan.ddnsgeek.com/Commands.md new file: results/gitea.lan.ddnsgeek.com/report/report.md/gitea.lan.ddnsgeek.com/Manual Commands.md new file: results/gitea.lan.ddnsgeek.com/report/report.md/gitea.lan.ddnsgeek.com/Patterns.md new file: results/gitea.lan.ddnsgeek.com/report/report.md/gitea.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md new file: results/gitea.lan.ddnsgeek.com/report/report.md/gitea.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md new file: results/gitea.lan.ddnsgeek.com/report/report.md/gitea.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md new file: results/gitea.lan.ddnsgeek.com/report/report.md/gitea.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md new file: results/gitea.lan.ddnsgeek.com/report/report.md/gitea.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md new file: results/gitea.lan.ddnsgeek.com/report/report.md/gitea.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md new file: results/gitea.lan.ddnsgeek.com/report/report.md/gitea.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md new file: results/gitea.lan.ddnsgeek.com/report/report.md/gitea.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md new file: results/gitea.lan.ddnsgeek.com/report/report.md/gitea.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md new file: results/gitea.lan.ddnsgeek.com/report/report.md/gitea.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md new file: results/gitea.lan.ddnsgeek.com/report/report.md/gitea.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md new file: results/gitea.lan.ddnsgeek.com/report/report.md/gitea.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md new file: results/gitea.lan.ddnsgeek.com/report/report.md/gitea.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md new file: results/gitea.lan.ddnsgeek.com/report/report.md/gitea.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md new file: results/gitea.lan.ddnsgeek.com/report/report.md/gitea.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md new file: results/gitea.lan.ddnsgeek.com/report/report.md/gitea.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md new file: results/gitea.lan.ddnsgeek.com/report/report.md/gitea.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md new file: results/gitea.lan.ddnsgeek.com/report/report.md/gitea.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md new file: results/gitea.lan.ddnsgeek.com/report/report.md/gitea.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md new file: results/gitea.lan.ddnsgeek.com/report/report.md/gitea.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md new file: results/gitea.lan.ddnsgeek.com/scans/_commands.log new file: results/gitea.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt new file: results/gitea.lan.ddnsgeek.com/scans/_manual_commands.txt new file: results/gitea.lan.ddnsgeek.com/scans/_patterns.log new file: results/gitea.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt new file: results/gitea.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt new file: results/gitea.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl.html new file: results/gitea.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt new file: results/gitea.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_gitea.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt new file: results/gitea.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_known-security.txt new file: results/gitea.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt new file: results/gitea.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt new file: results/gitea.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt new file: results/gitea.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html new file: results/gitea.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml new file: results/gitea.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl-robots.txt new file: results/gitea.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl.html new file: results/gitea.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt new file: results/gitea.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_gitea.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt new file: results/gitea.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_known-security.txt new file: results/gitea.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt new file: results/gitea.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt new file: results/gitea.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_whatweb.txt new file: results/gitea.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml new file: results/gitea.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml new file: results/gitea.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml new file: results/gitea.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml new file: results/gotify.lan.ddnsgeek.com/report/local.txt new file: results/gotify.lan.ddnsgeek.com/report/notes.txt new file: results/gotify.lan.ddnsgeek.com/report/proof.txt new file: results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Commands.md new file: results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Manual Commands.md new file: results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md new file: results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md new file: results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md new file: results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md new file: results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md new file: results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md new file: results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md new file: results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md new file: results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md new file: results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md new file: results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md new file: results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md new file: results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md new file: results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md new file: results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md new file: results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md new file: results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md new file: results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md new file: results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md new file: results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md new file: results/gotify.lan.ddnsgeek.com/scans/_commands.log new file: results/gotify.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt new file: results/gotify.lan.ddnsgeek.com/scans/_manual_commands.txt new file: results/gotify.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt new file: results/gotify.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt new file: results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl.html new file: results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt new file: results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_gotify.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt new file: results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt new file: results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt new file: results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt new file: results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html new file: results/gotify.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml new file: results/gotify.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl-robots.txt new file: results/gotify.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl.html new file: results/gotify.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt new file: results/gotify.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_gotify.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt new file: results/gotify.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_known-security.txt new file: results/gotify.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt new file: results/gotify.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt new file: results/gotify.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_whatweb.txt new file: results/gotify.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml new file: results/gotify.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml new file: results/gotify.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml new file: results/gotify.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml new file: results/grafana.lan.ddnsgeek.com/report/local.txt new file: results/grafana.lan.ddnsgeek.com/report/notes.txt new file: results/grafana.lan.ddnsgeek.com/report/proof.txt new file: results/grafana.lan.ddnsgeek.com/report/report.md/grafana.lan.ddnsgeek.com/Commands.md new file: results/grafana.lan.ddnsgeek.com/report/report.md/grafana.lan.ddnsgeek.com/Manual Commands.md new file: results/grafana.lan.ddnsgeek.com/report/report.md/grafana.lan.ddnsgeek.com/Patterns.md new file: results/grafana.lan.ddnsgeek.com/report/report.md/grafana.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md new file: results/grafana.lan.ddnsgeek.com/report/report.md/grafana.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md new file: results/grafana.lan.ddnsgeek.com/report/report.md/grafana.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md new file: results/grafana.lan.ddnsgeek.com/report/report.md/grafana.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md new file: results/grafana.lan.ddnsgeek.com/report/report.md/grafana.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md new file: results/grafana.lan.ddnsgeek.com/report/report.md/grafana.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md new file: results/grafana.lan.ddnsgeek.com/report/report.md/grafana.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md new file: results/grafana.lan.ddnsgeek.com/report/report.md/grafana.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md new file: results/grafana.lan.ddnsgeek.com/report/report.md/grafana.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md new file: results/grafana.lan.ddnsgeek.com/report/report.md/grafana.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md new file: results/grafana.lan.ddnsgeek.com/report/report.md/grafana.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md new file: results/grafana.lan.ddnsgeek.com/report/report.md/grafana.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md new file: results/grafana.lan.ddnsgeek.com/report/report.md/grafana.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md new file: results/grafana.lan.ddnsgeek.com/report/report.md/grafana.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md new file: results/grafana.lan.ddnsgeek.com/report/report.md/grafana.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md new file: results/grafana.lan.ddnsgeek.com/report/report.md/grafana.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md new file: results/grafana.lan.ddnsgeek.com/report/report.md/grafana.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md new file: results/grafana.lan.ddnsgeek.com/report/report.md/grafana.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md new file: results/grafana.lan.ddnsgeek.com/report/report.md/grafana.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md new file: results/grafana.lan.ddnsgeek.com/report/report.md/grafana.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md new file: results/grafana.lan.ddnsgeek.com/scans/_commands.log new file: results/grafana.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt new file: results/grafana.lan.ddnsgeek.com/scans/_manual_commands.txt new file: results/grafana.lan.ddnsgeek.com/scans/_patterns.log new file: results/grafana.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt new file: results/grafana.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt new file: results/grafana.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl-robots.txt new file: results/grafana.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl.html new file: results/grafana.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt new file: results/grafana.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_grafana.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt new file: results/grafana.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_known-security.txt new file: results/grafana.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt new file: results/grafana.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt new file: results/grafana.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt new file: results/grafana.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html new file: results/grafana.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml new file: results/grafana.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl-robots.txt new file: results/grafana.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl.html new file: results/grafana.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt new file: results/grafana.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_grafana.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt new file: results/grafana.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_known-security.txt new file: results/grafana.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt new file: results/grafana.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt new file: results/grafana.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_whatweb.txt new file: results/grafana.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml new file: results/grafana.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml new file: results/grafana.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml new file: results/grafana.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml new file: results/influxdb.lan.ddnsgeek.com/report/local.txt new file: results/influxdb.lan.ddnsgeek.com/report/notes.txt new file: results/influxdb.lan.ddnsgeek.com/report/proof.txt new file: results/influxdb.lan.ddnsgeek.com/report/report.md/influxdb.lan.ddnsgeek.com/Commands.md new file: results/influxdb.lan.ddnsgeek.com/report/report.md/influxdb.lan.ddnsgeek.com/Manual Commands.md new file: results/influxdb.lan.ddnsgeek.com/report/report.md/influxdb.lan.ddnsgeek.com/Patterns.md new file: results/influxdb.lan.ddnsgeek.com/report/report.md/influxdb.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md new file: results/influxdb.lan.ddnsgeek.com/report/report.md/influxdb.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md new file: results/influxdb.lan.ddnsgeek.com/report/report.md/influxdb.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md new file: results/influxdb.lan.ddnsgeek.com/report/report.md/influxdb.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md new file: results/influxdb.lan.ddnsgeek.com/report/report.md/influxdb.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md new file: results/influxdb.lan.ddnsgeek.com/report/report.md/influxdb.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md new file: results/influxdb.lan.ddnsgeek.com/report/report.md/influxdb.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md new file: results/influxdb.lan.ddnsgeek.com/report/report.md/influxdb.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md new file: results/influxdb.lan.ddnsgeek.com/report/report.md/influxdb.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md new file: results/influxdb.lan.ddnsgeek.com/report/report.md/influxdb.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md new file: results/influxdb.lan.ddnsgeek.com/report/report.md/influxdb.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md new file: results/influxdb.lan.ddnsgeek.com/report/report.md/influxdb.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md new file: results/influxdb.lan.ddnsgeek.com/report/report.md/influxdb.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md new file: results/influxdb.lan.ddnsgeek.com/report/report.md/influxdb.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md new file: results/influxdb.lan.ddnsgeek.com/report/report.md/influxdb.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md new file: results/influxdb.lan.ddnsgeek.com/report/report.md/influxdb.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md new file: results/influxdb.lan.ddnsgeek.com/report/report.md/influxdb.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md new file: results/influxdb.lan.ddnsgeek.com/report/report.md/influxdb.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md new file: results/influxdb.lan.ddnsgeek.com/report/report.md/influxdb.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md new file: results/influxdb.lan.ddnsgeek.com/report/report.md/influxdb.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md new file: results/influxdb.lan.ddnsgeek.com/scans/_commands.log new file: results/influxdb.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt new file: results/influxdb.lan.ddnsgeek.com/scans/_manual_commands.txt new file: results/influxdb.lan.ddnsgeek.com/scans/_patterns.log new file: results/influxdb.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt new file: results/influxdb.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt new file: results/influxdb.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl-robots.txt new file: results/influxdb.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl.html new file: results/influxdb.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt new file: results/influxdb.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_influxdb.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt new file: results/influxdb.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_known-security.txt new file: results/influxdb.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt new file: results/influxdb.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt new file: results/influxdb.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt new file: results/influxdb.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html new file: results/influxdb.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml new file: results/influxdb.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl-robots.txt new file: results/influxdb.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl.html new file: results/influxdb.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt new file: results/influxdb.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_influxdb.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt new file: results/influxdb.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_known-security.txt new file: results/influxdb.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt new file: results/influxdb.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt new file: results/influxdb.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_whatweb.txt new file: results/influxdb.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml new file: results/influxdb.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml new file: results/influxdb.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml new file: results/influxdb.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml new file: results/kuma.lan.ddnsgeek.com/report/local.txt new file: results/kuma.lan.ddnsgeek.com/report/notes.txt new file: results/kuma.lan.ddnsgeek.com/report/proof.txt new file: results/kuma.lan.ddnsgeek.com/report/report.md/kuma.lan.ddnsgeek.com/Commands.md new file: results/kuma.lan.ddnsgeek.com/report/report.md/kuma.lan.ddnsgeek.com/Manual Commands.md new file: results/kuma.lan.ddnsgeek.com/report/report.md/kuma.lan.ddnsgeek.com/Patterns.md new file: results/kuma.lan.ddnsgeek.com/report/report.md/kuma.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md new file: results/kuma.lan.ddnsgeek.com/report/report.md/kuma.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md new file: results/kuma.lan.ddnsgeek.com/report/report.md/kuma.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md new file: results/kuma.lan.ddnsgeek.com/report/report.md/kuma.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md new file: results/kuma.lan.ddnsgeek.com/report/report.md/kuma.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md new file: results/kuma.lan.ddnsgeek.com/report/report.md/kuma.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md new file: results/kuma.lan.ddnsgeek.com/report/report.md/kuma.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md new file: results/kuma.lan.ddnsgeek.com/report/report.md/kuma.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md new file: results/kuma.lan.ddnsgeek.com/report/report.md/kuma.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md new file: results/kuma.lan.ddnsgeek.com/report/report.md/kuma.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md new file: results/kuma.lan.ddnsgeek.com/report/report.md/kuma.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md new file: results/kuma.lan.ddnsgeek.com/report/report.md/kuma.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md new file: results/kuma.lan.ddnsgeek.com/report/report.md/kuma.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md new file: results/kuma.lan.ddnsgeek.com/report/report.md/kuma.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md new file: results/kuma.lan.ddnsgeek.com/report/report.md/kuma.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md new file: results/kuma.lan.ddnsgeek.com/report/report.md/kuma.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md new file: results/kuma.lan.ddnsgeek.com/report/report.md/kuma.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md new file: results/kuma.lan.ddnsgeek.com/report/report.md/kuma.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md new file: results/kuma.lan.ddnsgeek.com/report/report.md/kuma.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md new file: results/kuma.lan.ddnsgeek.com/report/report.md/kuma.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md new file: results/kuma.lan.ddnsgeek.com/scans/_commands.log new file: results/kuma.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt new file: results/kuma.lan.ddnsgeek.com/scans/_manual_commands.txt new file: results/kuma.lan.ddnsgeek.com/scans/_patterns.log new file: results/kuma.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt new file: results/kuma.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt new file: results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl-robots.txt new file: results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl.html new file: results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt new file: results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_known-security.txt new file: results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_kuma.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt new file: results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt new file: results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt new file: results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt new file: results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html new file: results/kuma.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml new file: results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl-robots.txt new file: results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl.html new file: results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt new file: results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_known-security.txt new file: results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_kuma.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt new file: results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt new file: results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt new file: results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_whatweb.txt new file: results/kuma.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml new file: results/kuma.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml new file: results/kuma.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml new file: results/kuma.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml new file: results/monitor-kuma.lan.ddnsgeek.com/report/local.txt new file: results/monitor-kuma.lan.ddnsgeek.com/report/notes.txt new file: results/monitor-kuma.lan.ddnsgeek.com/report/proof.txt new file: results/monitor-kuma.lan.ddnsgeek.com/report/report.md/monitor-kuma.lan.ddnsgeek.com/Commands.md new file: results/monitor-kuma.lan.ddnsgeek.com/report/report.md/monitor-kuma.lan.ddnsgeek.com/Manual Commands.md new file: results/monitor-kuma.lan.ddnsgeek.com/report/report.md/monitor-kuma.lan.ddnsgeek.com/Patterns.md new file: results/monitor-kuma.lan.ddnsgeek.com/report/report.md/monitor-kuma.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md new file: results/monitor-kuma.lan.ddnsgeek.com/report/report.md/monitor-kuma.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md new file: results/monitor-kuma.lan.ddnsgeek.com/report/report.md/monitor-kuma.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md new file: results/monitor-kuma.lan.ddnsgeek.com/report/report.md/monitor-kuma.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md new file: results/monitor-kuma.lan.ddnsgeek.com/report/report.md/monitor-kuma.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md new file: results/monitor-kuma.lan.ddnsgeek.com/report/report.md/monitor-kuma.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md new file: results/monitor-kuma.lan.ddnsgeek.com/report/report.md/monitor-kuma.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md new file: results/monitor-kuma.lan.ddnsgeek.com/report/report.md/monitor-kuma.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md new file: results/monitor-kuma.lan.ddnsgeek.com/report/report.md/monitor-kuma.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md new file: results/monitor-kuma.lan.ddnsgeek.com/report/report.md/monitor-kuma.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md new file: results/monitor-kuma.lan.ddnsgeek.com/report/report.md/monitor-kuma.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md new file: results/monitor-kuma.lan.ddnsgeek.com/report/report.md/monitor-kuma.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md new file: results/monitor-kuma.lan.ddnsgeek.com/report/report.md/monitor-kuma.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md new file: results/monitor-kuma.lan.ddnsgeek.com/report/report.md/monitor-kuma.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md new file: results/monitor-kuma.lan.ddnsgeek.com/report/report.md/monitor-kuma.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md new file: results/monitor-kuma.lan.ddnsgeek.com/report/report.md/monitor-kuma.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md new file: results/monitor-kuma.lan.ddnsgeek.com/report/report.md/monitor-kuma.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md new file: results/monitor-kuma.lan.ddnsgeek.com/report/report.md/monitor-kuma.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md new file: results/monitor-kuma.lan.ddnsgeek.com/report/report.md/monitor-kuma.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md new file: results/monitor-kuma.lan.ddnsgeek.com/report/report.md/monitor-kuma.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md new file: results/monitor-kuma.lan.ddnsgeek.com/scans/_commands.log new file: results/monitor-kuma.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt new file: results/monitor-kuma.lan.ddnsgeek.com/scans/_manual_commands.txt new file: results/monitor-kuma.lan.ddnsgeek.com/scans/_patterns.log new file: results/monitor-kuma.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt new file: results/monitor-kuma.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt new file: results/monitor-kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl-robots.txt new file: results/monitor-kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl.html new file: results/monitor-kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt new file: results/monitor-kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_known-security.txt new file: results/monitor-kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_monitor-kuma.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt new file: results/monitor-kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt new file: results/monitor-kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt new file: results/monitor-kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt new file: results/monitor-kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html new file: results/monitor-kuma.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml new file: results/monitor-kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl-robots.txt new file: results/monitor-kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl.html new file: results/monitor-kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt new file: results/monitor-kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_known-security.txt new file: results/monitor-kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_monitor-kuma.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt new file: results/monitor-kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt new file: results/monitor-kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt new file: results/monitor-kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_whatweb.txt new file: results/monitor-kuma.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml new file: results/monitor-kuma.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml new file: results/monitor-kuma.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml new file: results/monitor-kuma.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml new file: results/nextcloud.lan.ddnsgeek.com/report/local.txt new file: results/nextcloud.lan.ddnsgeek.com/report/notes.txt new file: results/nextcloud.lan.ddnsgeek.com/report/proof.txt new file: results/nextcloud.lan.ddnsgeek.com/report/report.md/nextcloud.lan.ddnsgeek.com/Commands.md new file: results/nextcloud.lan.ddnsgeek.com/report/report.md/nextcloud.lan.ddnsgeek.com/Manual Commands.md new file: results/nextcloud.lan.ddnsgeek.com/report/report.md/nextcloud.lan.ddnsgeek.com/Patterns.md new file: results/nextcloud.lan.ddnsgeek.com/report/report.md/nextcloud.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md new file: results/nextcloud.lan.ddnsgeek.com/report/report.md/nextcloud.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md new file: results/nextcloud.lan.ddnsgeek.com/report/report.md/nextcloud.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md new file: results/nextcloud.lan.ddnsgeek.com/report/report.md/nextcloud.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md new file: results/nextcloud.lan.ddnsgeek.com/report/report.md/nextcloud.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md new file: results/nextcloud.lan.ddnsgeek.com/report/report.md/nextcloud.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md new file: results/nextcloud.lan.ddnsgeek.com/report/report.md/nextcloud.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md new file: results/nextcloud.lan.ddnsgeek.com/report/report.md/nextcloud.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md new file: results/nextcloud.lan.ddnsgeek.com/report/report.md/nextcloud.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md new file: results/nextcloud.lan.ddnsgeek.com/report/report.md/nextcloud.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md new file: results/nextcloud.lan.ddnsgeek.com/report/report.md/nextcloud.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md new file: results/nextcloud.lan.ddnsgeek.com/report/report.md/nextcloud.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md new file: results/nextcloud.lan.ddnsgeek.com/report/report.md/nextcloud.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md new file: results/nextcloud.lan.ddnsgeek.com/report/report.md/nextcloud.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md new file: results/nextcloud.lan.ddnsgeek.com/report/report.md/nextcloud.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md new file: results/nextcloud.lan.ddnsgeek.com/report/report.md/nextcloud.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md new file: results/nextcloud.lan.ddnsgeek.com/report/report.md/nextcloud.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md new file: results/nextcloud.lan.ddnsgeek.com/report/report.md/nextcloud.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md new file: results/nextcloud.lan.ddnsgeek.com/report/report.md/nextcloud.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md new file: results/nextcloud.lan.ddnsgeek.com/report/report.md/nextcloud.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md new file: results/nextcloud.lan.ddnsgeek.com/scans/_commands.log new file: results/nextcloud.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt new file: results/nextcloud.lan.ddnsgeek.com/scans/_manual_commands.txt new file: results/nextcloud.lan.ddnsgeek.com/scans/_patterns.log new file: results/nextcloud.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt new file: results/nextcloud.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt new file: results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl-robots.txt new file: results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl.html new file: results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt new file: results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_known-security.txt new file: results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nextcloud.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt new file: results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt new file: results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt new file: results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt new file: results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html new file: results/nextcloud.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml new file: results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl-robots.txt new file: results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl.html new file: results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt new file: results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_known-security.txt new file: results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nextcloud.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt new file: results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt new file: results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt new file: results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_whatweb.txt new file: results/nextcloud.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml new file: results/nextcloud.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml new file: results/nextcloud.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml new file: results/nextcloud.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml new file: results/node-red.lan.ddnsgeek.com/report/local.txt new file: results/node-red.lan.ddnsgeek.com/report/notes.txt new file: results/node-red.lan.ddnsgeek.com/report/proof.txt new file: results/node-red.lan.ddnsgeek.com/report/report.md/node-red.lan.ddnsgeek.com/Commands.md new file: results/node-red.lan.ddnsgeek.com/report/report.md/node-red.lan.ddnsgeek.com/Manual Commands.md new file: results/node-red.lan.ddnsgeek.com/report/report.md/node-red.lan.ddnsgeek.com/Patterns.md new file: results/node-red.lan.ddnsgeek.com/report/report.md/node-red.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md new file: results/node-red.lan.ddnsgeek.com/report/report.md/node-red.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md new file: results/node-red.lan.ddnsgeek.com/report/report.md/node-red.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md new file: results/node-red.lan.ddnsgeek.com/report/report.md/node-red.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md new file: results/node-red.lan.ddnsgeek.com/report/report.md/node-red.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md new file: results/node-red.lan.ddnsgeek.com/report/report.md/node-red.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md new file: results/node-red.lan.ddnsgeek.com/report/report.md/node-red.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md new file: results/node-red.lan.ddnsgeek.com/report/report.md/node-red.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md new file: results/node-red.lan.ddnsgeek.com/report/report.md/node-red.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md new file: results/node-red.lan.ddnsgeek.com/report/report.md/node-red.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md new file: results/node-red.lan.ddnsgeek.com/report/report.md/node-red.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md new file: results/node-red.lan.ddnsgeek.com/report/report.md/node-red.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md new file: results/node-red.lan.ddnsgeek.com/report/report.md/node-red.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md new file: results/node-red.lan.ddnsgeek.com/report/report.md/node-red.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md new file: results/node-red.lan.ddnsgeek.com/report/report.md/node-red.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md new file: results/node-red.lan.ddnsgeek.com/report/report.md/node-red.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md new file: results/node-red.lan.ddnsgeek.com/report/report.md/node-red.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md new file: results/node-red.lan.ddnsgeek.com/report/report.md/node-red.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md new file: results/node-red.lan.ddnsgeek.com/report/report.md/node-red.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md new file: results/node-red.lan.ddnsgeek.com/report/report.md/node-red.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md new file: results/node-red.lan.ddnsgeek.com/scans/_commands.log new file: results/node-red.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt new file: results/node-red.lan.ddnsgeek.com/scans/_manual_commands.txt new file: results/node-red.lan.ddnsgeek.com/scans/_patterns.log new file: results/node-red.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt new file: results/node-red.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt new file: results/node-red.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl-robots.txt new file: results/node-red.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl.html new file: results/node-red.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt new file: results/node-red.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_known-security.txt new file: results/node-red.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt new file: results/node-red.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt new file: results/node-red.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_node-red.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt new file: results/node-red.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt new file: results/node-red.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html new file: results/node-red.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml new file: results/node-red.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl-robots.txt new file: results/node-red.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl.html new file: results/node-red.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt new file: results/node-red.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_known-security.txt new file: results/node-red.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt new file: results/node-red.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt new file: results/node-red.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_node-red.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt new file: results/node-red.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_whatweb.txt new file: results/node-red.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml new file: results/node-red.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml new file: results/node-red.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml new file: results/node-red.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml new file: results/passbolt.lan.ddnsgeek.com/report/local.txt new file: results/passbolt.lan.ddnsgeek.com/report/notes.txt new file: results/passbolt.lan.ddnsgeek.com/report/proof.txt new file: results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Commands.md new file: results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Manual Commands.md new file: results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Patterns.md new file: results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md new file: results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md new file: results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md new file: results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md new file: results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md new file: results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md new file: results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md new file: results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md new file: results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md new file: results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md new file: results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md new file: results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md new file: results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md new file: results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md new file: results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md new file: results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md new file: results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md new file: results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md new file: results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md new file: results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md new file: results/passbolt.lan.ddnsgeek.com/scans/_commands.log new file: results/passbolt.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt new file: results/passbolt.lan.ddnsgeek.com/scans/_manual_commands.txt new file: results/passbolt.lan.ddnsgeek.com/scans/_patterns.log new file: results/passbolt.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt new file: results/passbolt.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt new file: results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl.html new file: results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt new file: results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt new file: results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt new file: results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_passbolt.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt new file: results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt new file: results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html new file: results/passbolt.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml new file: results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl-robots.txt new file: results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl.html new file: results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt new file: results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_known-security.txt new file: results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt new file: results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt new file: results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_passbolt.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt new file: results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_whatweb.txt new file: results/passbolt.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml new file: results/passbolt.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml new file: results/passbolt.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml new file: results/passbolt.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml new file: results/portainer.lan.ddnsgeek.com/report/local.txt new file: results/portainer.lan.ddnsgeek.com/report/notes.txt new file: results/portainer.lan.ddnsgeek.com/report/proof.txt new file: results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Commands.md new file: results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Manual Commands.md new file: results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md new file: results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md new file: results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md new file: results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md new file: results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md new file: results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md new file: results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md new file: results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md new file: results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md new file: results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md new file: results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md new file: results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md new file: results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md new file: results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md new file: results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md new file: results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md new file: results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md new file: results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md new file: results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md new file: results/portainer.lan.ddnsgeek.com/report/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md new file: results/portainer.lan.ddnsgeek.com/scans/_commands.log new file: results/portainer.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt new file: results/portainer.lan.ddnsgeek.com/scans/_manual_commands.txt new file: results/portainer.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt new file: results/portainer.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt new file: results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl.html new file: results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt new file: results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt new file: results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt new file: results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_portainer.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt new file: results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt new file: results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html new file: results/portainer.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml new file: results/portainer.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl-robots.txt new file: results/portainer.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl.html new file: results/portainer.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt new file: results/portainer.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_known-security.txt new file: results/portainer.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt new file: results/portainer.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt new file: results/portainer.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_portainer.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt new file: results/portainer.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_whatweb.txt new file: results/portainer.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml new file: results/portainer.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml new file: results/portainer.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml new file: results/portainer.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml new file: results/prometheus.lan.ddnsgeek.com/report/local.txt new file: results/prometheus.lan.ddnsgeek.com/report/notes.txt new file: results/prometheus.lan.ddnsgeek.com/report/proof.txt new file: results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Commands.md new file: results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Manual Commands.md new file: results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Patterns.md new file: results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md new file: results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md new file: results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md new file: results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md new file: results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md new file: results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md new file: results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md new file: results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md new file: results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md new file: results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md new file: results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md new file: results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md new file: results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md new file: results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md new file: results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md new file: results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md new file: results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md new file: results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-80-http/SSL Scan.md new file: results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md new file: results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md new file: results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md new file: results/prometheus.lan.ddnsgeek.com/scans/_commands.log new file: results/prometheus.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt new file: results/prometheus.lan.ddnsgeek.com/scans/_manual_commands.txt new file: results/prometheus.lan.ddnsgeek.com/scans/_patterns.log new file: results/prometheus.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt new file: results/prometheus.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt new file: results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl-robots.txt new file: results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl.html new file: results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt new file: results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_known-security.txt new file: results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt new file: results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt new file: results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_prometheus.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt new file: results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt new file: results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html new file: results/prometheus.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml new file: results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl-robots.txt new file: results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl.html new file: results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt new file: results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_known-security.txt new file: results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt new file: results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt new file: results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_prometheus.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt new file: results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_whatweb.txt new file: results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_https_feroxbuster_dirbuster.txt new file: results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_sslscan.html new file: results/prometheus.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml new file: results/prometheus.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml new file: results/prometheus.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml new file: results/prometheus.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml new file: results/report.md/auth.lan.ddnsgeek.com/Commands.md new file: results/report.md/auth.lan.ddnsgeek.com/Manual Commands.md new file: results/report.md/auth.lan.ddnsgeek.com/Patterns.md new file: results/report.md/auth.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md new file: results/report.md/auth.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md new file: results/report.md/auth.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md new file: results/report.md/auth.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md new file: results/report.md/auth.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md new file: results/report.md/auth.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md new file: results/report.md/auth.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md new file: results/report.md/auth.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md new file: results/report.md/auth.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md new file: results/report.md/auth.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md new file: results/report.md/auth.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md new file: results/report.md/auth.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md new file: results/report.md/auth.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md new file: results/report.md/auth.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md new file: results/report.md/auth.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md new file: results/report.md/auth.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md new file: results/report.md/auth.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md new file: results/report.md/auth.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md new file: results/report.md/auth.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md new file: results/report.md/auth.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md new file: results/report.md/edge.lan.ddnsgeek.com/Commands.md new file: results/report.md/edge.lan.ddnsgeek.com/Manual Commands.md new file: results/report.md/edge.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md new file: results/report.md/edge.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md new file: results/report.md/edge.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md new file: results/report.md/edge.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md new file: results/report.md/edge.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md new file: results/report.md/edge.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md new file: results/report.md/edge.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md new file: results/report.md/edge.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md new file: results/report.md/edge.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md new file: results/report.md/edge.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md new file: results/report.md/edge.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md new file: results/report.md/edge.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md new file: results/report.md/edge.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md new file: results/report.md/edge.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md new file: results/report.md/edge.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md new file: results/report.md/edge.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md new file: results/report.md/edge.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md new file: results/report.md/edge.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md new file: results/report.md/edge.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md new file: results/report.md/edge.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md new file: results/report.md/familytree.lan.ddnsgeek.com/Commands.md new file: results/report.md/familytree.lan.ddnsgeek.com/Manual Commands.md new file: results/report.md/familytree.lan.ddnsgeek.com/Patterns.md new file: results/report.md/familytree.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md new file: results/report.md/familytree.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md new file: results/report.md/familytree.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md new file: results/report.md/familytree.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md new file: results/report.md/familytree.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md new file: results/report.md/familytree.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md new file: results/report.md/familytree.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md new file: results/report.md/familytree.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md new file: results/report.md/familytree.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md new file: results/report.md/familytree.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md new file: results/report.md/familytree.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md new file: results/report.md/familytree.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md new file: results/report.md/familytree.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md new file: results/report.md/familytree.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md new file: results/report.md/familytree.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md new file: results/report.md/familytree.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md new file: results/report.md/familytree.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md new file: results/report.md/familytree.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md new file: results/report.md/familytree.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md new file: results/report.md/familytree.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md new file: results/report.md/gitea.lan.ddnsgeek.com/Commands.md new file: results/report.md/gitea.lan.ddnsgeek.com/Manual Commands.md new file: results/report.md/gitea.lan.ddnsgeek.com/Patterns.md new file: results/report.md/gitea.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md new file: results/report.md/gitea.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md new file: results/report.md/gitea.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md new file: results/report.md/gitea.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md new file: results/report.md/gitea.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md new file: results/report.md/gitea.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md new file: results/report.md/gitea.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md new file: results/report.md/gitea.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md new file: results/report.md/gitea.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md new file: results/report.md/gitea.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md new file: results/report.md/gitea.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md new file: results/report.md/gitea.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md new file: results/report.md/gitea.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md new file: results/report.md/gitea.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md new file: results/report.md/gitea.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md new file: results/report.md/gitea.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md new file: results/report.md/gitea.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md new file: results/report.md/gitea.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md new file: results/report.md/gitea.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md new file: results/report.md/gitea.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md new file: results/report.md/gotify.lan.ddnsgeek.com/Commands.md new file: results/report.md/gotify.lan.ddnsgeek.com/Manual Commands.md new file: results/report.md/gotify.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md new file: results/report.md/gotify.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md new file: results/report.md/gotify.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md new file: results/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md new file: results/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md new file: results/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md new file: results/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md new file: results/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md new file: results/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md new file: results/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md new file: results/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md new file: results/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md new file: results/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md new file: results/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md new file: results/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md new file: results/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md new file: results/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md new file: results/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md new file: results/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md new file: results/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md new file: results/report.md/grafana.lan.ddnsgeek.com/Commands.md new file: results/report.md/grafana.lan.ddnsgeek.com/Manual Commands.md new file: results/report.md/grafana.lan.ddnsgeek.com/Patterns.md new file: results/report.md/grafana.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md new file: results/report.md/grafana.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md new file: results/report.md/grafana.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md new file: results/report.md/grafana.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md new file: results/report.md/grafana.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md new file: results/report.md/grafana.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md new file: results/report.md/grafana.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md new file: results/report.md/grafana.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md new file: results/report.md/grafana.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md new file: results/report.md/grafana.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md new file: results/report.md/grafana.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md new file: results/report.md/grafana.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md new file: results/report.md/grafana.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md new file: results/report.md/grafana.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md new file: results/report.md/grafana.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md new file: results/report.md/grafana.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md new file: results/report.md/grafana.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md new file: results/report.md/grafana.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md new file: results/report.md/grafana.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md new file: results/report.md/grafana.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md new file: results/report.md/influxdb.lan.ddnsgeek.com/Commands.md new file: results/report.md/influxdb.lan.ddnsgeek.com/Manual Commands.md new file: results/report.md/influxdb.lan.ddnsgeek.com/Patterns.md new file: results/report.md/influxdb.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md new file: results/report.md/influxdb.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md new file: results/report.md/influxdb.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md new file: results/report.md/influxdb.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md new file: results/report.md/influxdb.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md new file: results/report.md/influxdb.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md new file: results/report.md/influxdb.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md new file: results/report.md/influxdb.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md new file: results/report.md/influxdb.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md new file: results/report.md/influxdb.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md new file: results/report.md/influxdb.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md new file: results/report.md/influxdb.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md new file: results/report.md/influxdb.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md new file: results/report.md/influxdb.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md new file: results/report.md/influxdb.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md new file: results/report.md/influxdb.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md new file: results/report.md/influxdb.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md new file: results/report.md/influxdb.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md new file: results/report.md/influxdb.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md new file: results/report.md/influxdb.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md new file: results/report.md/kuma.lan.ddnsgeek.com/Commands.md new file: results/report.md/kuma.lan.ddnsgeek.com/Manual Commands.md new file: results/report.md/kuma.lan.ddnsgeek.com/Patterns.md new file: results/report.md/kuma.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md new file: results/report.md/kuma.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md new file: results/report.md/kuma.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md new file: results/report.md/kuma.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md new file: results/report.md/kuma.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md new file: results/report.md/kuma.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md new file: results/report.md/kuma.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md new file: results/report.md/kuma.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md new file: results/report.md/kuma.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md new file: results/report.md/kuma.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md new file: results/report.md/kuma.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md new file: results/report.md/kuma.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md new file: results/report.md/kuma.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md new file: results/report.md/kuma.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md new file: results/report.md/kuma.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md new file: results/report.md/kuma.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md new file: results/report.md/kuma.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md new file: results/report.md/kuma.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md new file: results/report.md/kuma.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md new file: results/report.md/kuma.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md new file: results/report.md/monitor-kuma.lan.ddnsgeek.com/Commands.md new file: results/report.md/monitor-kuma.lan.ddnsgeek.com/Manual Commands.md new file: results/report.md/monitor-kuma.lan.ddnsgeek.com/Patterns.md new file: results/report.md/monitor-kuma.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md new file: results/report.md/monitor-kuma.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md new file: results/report.md/monitor-kuma.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md new file: results/report.md/monitor-kuma.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md new file: results/report.md/monitor-kuma.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md new file: results/report.md/monitor-kuma.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md new file: results/report.md/monitor-kuma.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md new file: results/report.md/monitor-kuma.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md new file: results/report.md/monitor-kuma.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md new file: results/report.md/monitor-kuma.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md new file: results/report.md/monitor-kuma.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md new file: results/report.md/monitor-kuma.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md new file: results/report.md/monitor-kuma.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md new file: results/report.md/monitor-kuma.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md new file: results/report.md/monitor-kuma.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md new file: results/report.md/monitor-kuma.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md new file: results/report.md/monitor-kuma.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md new file: results/report.md/monitor-kuma.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md new file: results/report.md/monitor-kuma.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md new file: results/report.md/monitor-kuma.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md new file: results/report.md/nextcloud.lan.ddnsgeek.com/Commands.md new file: results/report.md/nextcloud.lan.ddnsgeek.com/Manual Commands.md new file: results/report.md/nextcloud.lan.ddnsgeek.com/Patterns.md new file: results/report.md/nextcloud.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md new file: results/report.md/nextcloud.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md new file: results/report.md/nextcloud.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md new file: results/report.md/nextcloud.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md new file: results/report.md/nextcloud.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md new file: results/report.md/nextcloud.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md new file: results/report.md/nextcloud.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md new file: results/report.md/nextcloud.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md new file: results/report.md/nextcloud.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md new file: results/report.md/nextcloud.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md new file: results/report.md/nextcloud.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md new file: results/report.md/nextcloud.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md new file: results/report.md/nextcloud.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md new file: results/report.md/nextcloud.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md new file: results/report.md/nextcloud.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md new file: results/report.md/nextcloud.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md new file: results/report.md/nextcloud.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md new file: results/report.md/nextcloud.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md new file: results/report.md/nextcloud.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md new file: results/report.md/nextcloud.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md new file: results/report.md/node-red.lan.ddnsgeek.com/Commands.md new file: results/report.md/node-red.lan.ddnsgeek.com/Manual Commands.md new file: results/report.md/node-red.lan.ddnsgeek.com/Patterns.md new file: results/report.md/node-red.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md new file: results/report.md/node-red.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md new file: results/report.md/node-red.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md new file: results/report.md/node-red.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md new file: results/report.md/node-red.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md new file: results/report.md/node-red.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md new file: results/report.md/node-red.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md new file: results/report.md/node-red.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md new file: results/report.md/node-red.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md new file: results/report.md/node-red.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md new file: results/report.md/node-red.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md new file: results/report.md/node-red.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md new file: results/report.md/node-red.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md new file: results/report.md/node-red.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md new file: results/report.md/node-red.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md new file: results/report.md/node-red.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md new file: results/report.md/node-red.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md new file: results/report.md/node-red.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md new file: results/report.md/node-red.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md new file: results/report.md/node-red.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md new file: results/report.md/passbolt.lan.ddnsgeek.com/Commands.md new file: results/report.md/passbolt.lan.ddnsgeek.com/Manual Commands.md new file: results/report.md/passbolt.lan.ddnsgeek.com/Patterns.md new file: results/report.md/passbolt.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md new file: results/report.md/passbolt.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md new file: results/report.md/passbolt.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md new file: results/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md new file: results/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md new file: results/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md new file: results/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md new file: results/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md new file: results/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md new file: results/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md new file: results/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md new file: results/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md new file: results/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md new file: results/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md new file: results/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md new file: results/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md new file: results/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md new file: results/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md new file: results/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md new file: results/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md new file: results/report.md/portainer.lan.ddnsgeek.com/Commands.md new file: results/report.md/portainer.lan.ddnsgeek.com/Manual Commands.md new file: results/report.md/portainer.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md new file: results/report.md/portainer.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md new file: results/report.md/portainer.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md new file: results/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md new file: results/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md new file: results/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md new file: results/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md new file: results/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md new file: results/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md new file: results/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md new file: results/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md new file: results/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md new file: results/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md new file: results/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md new file: results/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md new file: results/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md new file: results/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md new file: results/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md new file: results/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md new file: results/report.md/portainer.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md new file: results/report.md/prometheus.lan.ddnsgeek.com/Commands.md new file: results/report.md/prometheus.lan.ddnsgeek.com/Manual Commands.md new file: results/report.md/prometheus.lan.ddnsgeek.com/Patterns.md new file: results/report.md/prometheus.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md new file: results/report.md/prometheus.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md new file: results/report.md/prometheus.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md new file: results/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md new file: results/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md new file: results/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md new file: results/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md new file: results/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md new file: results/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md new file: results/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md new file: results/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md new file: results/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md new file: results/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md new file: results/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md new file: results/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md new file: results/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md new file: results/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md new file: results/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-80-http/SSL Scan.md new file: results/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md new file: results/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md new file: results/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md new file: results/report.md/searxng.lan.ddnsgeek.com/Commands.md new file: results/report.md/searxng.lan.ddnsgeek.com/Manual Commands.md new file: results/report.md/searxng.lan.ddnsgeek.com/Patterns.md new file: results/report.md/searxng.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md new file: results/report.md/searxng.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md new file: results/report.md/searxng.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md new file: results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md new file: results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md new file: results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md new file: results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md new file: results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md new file: results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md new file: results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md new file: results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md new file: results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md new file: results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md new file: results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md new file: results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md new file: results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md new file: results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md new file: results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md new file: results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md new file: results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md new file: results/report.md/shifts.lan.ddnsgeek.com/Commands.md new file: results/report.md/shifts.lan.ddnsgeek.com/Manual Commands.md new file: results/report.md/shifts.lan.ddnsgeek.com/Patterns.md new file: results/report.md/shifts.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md new file: results/report.md/shifts.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md new file: results/report.md/shifts.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md new file: results/report.md/shifts.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md new file: results/report.md/shifts.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md new file: results/report.md/shifts.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md new file: results/report.md/shifts.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md new file: results/report.md/shifts.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md new file: results/report.md/shifts.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md new file: results/report.md/shifts.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md new file: results/report.md/shifts.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md new file: results/report.md/shifts.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md new file: results/report.md/shifts.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md new file: results/report.md/shifts.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md new file: results/report.md/shifts.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md new file: results/report.md/shifts.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md new file: results/report.md/shifts.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md new file: results/report.md/shifts.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md new file: results/report.md/shifts.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md new file: results/report.md/shifts.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md new file: results/report.md/stockfill.lan.ddnsgeek.com/Commands.md new file: results/report.md/stockfill.lan.ddnsgeek.com/Manual Commands.md new file: results/report.md/stockfill.lan.ddnsgeek.com/Patterns.md new file: results/report.md/stockfill.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md new file: results/report.md/stockfill.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md new file: results/report.md/stockfill.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md new file: results/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md new file: results/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md new file: results/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md new file: results/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md new file: results/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md new file: results/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md new file: results/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md new file: results/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md new file: results/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md new file: results/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md new file: results/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md new file: results/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md new file: results/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md new file: results/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md new file: results/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md new file: results/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md new file: results/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md new file: results/report.md/traefik.lan.ddnsgeek.com/Commands.md new file: results/report.md/traefik.lan.ddnsgeek.com/Manual Commands.md new file: results/report.md/traefik.lan.ddnsgeek.com/Patterns.md new file: results/report.md/traefik.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md new file: results/report.md/traefik.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md new file: results/report.md/traefik.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md new file: results/report.md/traefik.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md new file: results/report.md/traefik.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md new file: results/report.md/traefik.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md new file: results/report.md/traefik.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md new file: results/report.md/traefik.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md new file: results/report.md/traefik.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md new file: results/report.md/traefik.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md new file: results/report.md/traefik.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md new file: results/report.md/traefik.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md new file: results/report.md/traefik.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md new file: results/report.md/traefik.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md new file: results/report.md/traefik.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md new file: results/report.md/traefik.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md new file: results/report.md/traefik.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md new file: results/report.md/traefik.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md new file: results/report.md/traefik.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md new file: results/report.md/traefik.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md new file: results/searxng.lan.ddnsgeek.com/report/local.txt new file: results/searxng.lan.ddnsgeek.com/report/notes.txt new file: results/searxng.lan.ddnsgeek.com/report/proof.txt new file: results/searxng.lan.ddnsgeek.com/report/report.md/searxng.lan.ddnsgeek.com/Commands.md new file: results/searxng.lan.ddnsgeek.com/report/report.md/searxng.lan.ddnsgeek.com/Manual Commands.md new file: results/searxng.lan.ddnsgeek.com/report/report.md/searxng.lan.ddnsgeek.com/Patterns.md new file: results/searxng.lan.ddnsgeek.com/report/report.md/searxng.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md new file: results/searxng.lan.ddnsgeek.com/report/report.md/searxng.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md new file: results/searxng.lan.ddnsgeek.com/report/report.md/searxng.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md new file: results/searxng.lan.ddnsgeek.com/report/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md new file: results/searxng.lan.ddnsgeek.com/report/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md new file: results/searxng.lan.ddnsgeek.com/report/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md new file: results/searxng.lan.ddnsgeek.com/report/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md new file: results/searxng.lan.ddnsgeek.com/report/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md new file: results/searxng.lan.ddnsgeek.com/report/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md new file: results/searxng.lan.ddnsgeek.com/report/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md new file: results/searxng.lan.ddnsgeek.com/report/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md new file: results/searxng.lan.ddnsgeek.com/report/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md new file: results/searxng.lan.ddnsgeek.com/report/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md new file: results/searxng.lan.ddnsgeek.com/report/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md new file: results/searxng.lan.ddnsgeek.com/report/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md new file: results/searxng.lan.ddnsgeek.com/report/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md new file: results/searxng.lan.ddnsgeek.com/report/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md new file: results/searxng.lan.ddnsgeek.com/report/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md new file: results/searxng.lan.ddnsgeek.com/report/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md new file: results/searxng.lan.ddnsgeek.com/report/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md new file: results/searxng.lan.ddnsgeek.com/scans/_commands.log new file: results/searxng.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt new file: results/searxng.lan.ddnsgeek.com/scans/_manual_commands.txt new file: results/searxng.lan.ddnsgeek.com/scans/_patterns.log new file: results/searxng.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt new file: results/searxng.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt new file: results/searxng.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl-robots.txt new file: results/searxng.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl.html new file: results/searxng.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt new file: results/searxng.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt new file: results/searxng.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt new file: results/searxng.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_searxng.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt new file: results/searxng.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt new file: results/searxng.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html new file: results/searxng.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml new file: results/searxng.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl-robots.txt new file: results/searxng.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl.html new file: results/searxng.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt new file: results/searxng.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_known-security.txt new file: results/searxng.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt new file: results/searxng.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt new file: results/searxng.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_searxng.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt new file: results/searxng.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_whatweb.txt new file: results/searxng.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml new file: results/searxng.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml new file: results/searxng.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml new file: results/searxng.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml new file: results/shifts.lan.ddnsgeek.com/report/local.txt new file: results/shifts.lan.ddnsgeek.com/report/notes.txt new file: results/shifts.lan.ddnsgeek.com/report/proof.txt new file: results/shifts.lan.ddnsgeek.com/report/report.md/shifts.lan.ddnsgeek.com/Commands.md new file: results/shifts.lan.ddnsgeek.com/report/report.md/shifts.lan.ddnsgeek.com/Manual Commands.md new file: results/shifts.lan.ddnsgeek.com/report/report.md/shifts.lan.ddnsgeek.com/Patterns.md new file: results/shifts.lan.ddnsgeek.com/report/report.md/shifts.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md new file: results/shifts.lan.ddnsgeek.com/report/report.md/shifts.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md new file: results/shifts.lan.ddnsgeek.com/report/report.md/shifts.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md new file: results/shifts.lan.ddnsgeek.com/report/report.md/shifts.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md new file: results/shifts.lan.ddnsgeek.com/report/report.md/shifts.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md new file: results/shifts.lan.ddnsgeek.com/report/report.md/shifts.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md new file: results/shifts.lan.ddnsgeek.com/report/report.md/shifts.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md new file: results/shifts.lan.ddnsgeek.com/report/report.md/shifts.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md new file: results/shifts.lan.ddnsgeek.com/report/report.md/shifts.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md new file: results/shifts.lan.ddnsgeek.com/report/report.md/shifts.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md new file: results/shifts.lan.ddnsgeek.com/report/report.md/shifts.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md new file: results/shifts.lan.ddnsgeek.com/report/report.md/shifts.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md new file: results/shifts.lan.ddnsgeek.com/report/report.md/shifts.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md new file: results/shifts.lan.ddnsgeek.com/report/report.md/shifts.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md new file: results/shifts.lan.ddnsgeek.com/report/report.md/shifts.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md new file: results/shifts.lan.ddnsgeek.com/report/report.md/shifts.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md new file: results/shifts.lan.ddnsgeek.com/report/report.md/shifts.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md new file: results/shifts.lan.ddnsgeek.com/report/report.md/shifts.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md new file: results/shifts.lan.ddnsgeek.com/report/report.md/shifts.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md new file: results/shifts.lan.ddnsgeek.com/report/report.md/shifts.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md new file: results/shifts.lan.ddnsgeek.com/scans/_commands.log new file: results/shifts.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt new file: results/shifts.lan.ddnsgeek.com/scans/_manual_commands.txt new file: results/shifts.lan.ddnsgeek.com/scans/_patterns.log new file: results/shifts.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt new file: results/shifts.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt new file: results/shifts.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl-robots.txt new file: results/shifts.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl.html new file: results/shifts.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt new file: results/shifts.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_known-security.txt new file: results/shifts.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt new file: results/shifts.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt new file: results/shifts.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_shifts.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt new file: results/shifts.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt new file: results/shifts.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html new file: results/shifts.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml new file: results/shifts.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl-robots.txt new file: results/shifts.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl.html new file: results/shifts.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt new file: results/shifts.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_known-security.txt new file: results/shifts.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt new file: results/shifts.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt new file: results/shifts.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_shifts.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt new file: results/shifts.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_whatweb.txt new file: results/shifts.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml new file: results/shifts.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml new file: results/shifts.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml new file: results/shifts.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml new file: results/stockfill.lan.ddnsgeek.com/report/local.txt new file: results/stockfill.lan.ddnsgeek.com/report/notes.txt new file: results/stockfill.lan.ddnsgeek.com/report/proof.txt new file: results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Commands.md new file: results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Manual Commands.md new file: results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Patterns.md new file: results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md new file: results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md new file: results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md new file: results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md new file: results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md new file: results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md new file: results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md new file: results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md new file: results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md new file: results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md new file: results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md new file: results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md new file: results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md new file: results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md new file: results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md new file: results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md new file: results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md new file: results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md new file: results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md new file: results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md new file: results/stockfill.lan.ddnsgeek.com/scans/_commands.log new file: results/stockfill.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt new file: results/stockfill.lan.ddnsgeek.com/scans/_manual_commands.txt new file: results/stockfill.lan.ddnsgeek.com/scans/_patterns.log new file: results/stockfill.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt new file: results/stockfill.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt new file: results/stockfill.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl-robots.txt new file: results/stockfill.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl.html new file: results/stockfill.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt new file: results/stockfill.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_known-security.txt new file: results/stockfill.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt new file: results/stockfill.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt new file: results/stockfill.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_stockfill.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt new file: results/stockfill.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt new file: results/stockfill.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html new file: results/stockfill.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml new file: results/stockfill.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl-robots.txt new file: results/stockfill.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl.html new file: results/stockfill.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt new file: results/stockfill.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_known-security.txt new file: results/stockfill.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt new file: results/stockfill.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt new file: results/stockfill.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_stockfill.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt new file: results/stockfill.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_whatweb.txt new file: results/stockfill.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml new file: results/stockfill.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml new file: results/stockfill.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml new file: results/stockfill.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml new file: results/targets.txt new file: results/traefik.lan.ddnsgeek.com/report/local.txt new file: results/traefik.lan.ddnsgeek.com/report/notes.txt new file: results/traefik.lan.ddnsgeek.com/report/proof.txt new file: results/traefik.lan.ddnsgeek.com/report/report.md/traefik.lan.ddnsgeek.com/Commands.md new file: results/traefik.lan.ddnsgeek.com/report/report.md/traefik.lan.ddnsgeek.com/Manual Commands.md new file: results/traefik.lan.ddnsgeek.com/report/report.md/traefik.lan.ddnsgeek.com/Patterns.md new file: results/traefik.lan.ddnsgeek.com/report/report.md/traefik.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md new file: results/traefik.lan.ddnsgeek.com/report/report.md/traefik.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md new file: results/traefik.lan.ddnsgeek.com/report/report.md/traefik.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md new file: results/traefik.lan.ddnsgeek.com/report/report.md/traefik.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md new file: results/traefik.lan.ddnsgeek.com/report/report.md/traefik.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md new file: results/traefik.lan.ddnsgeek.com/report/report.md/traefik.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md new file: results/traefik.lan.ddnsgeek.com/report/report.md/traefik.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md new file: results/traefik.lan.ddnsgeek.com/report/report.md/traefik.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md new file: results/traefik.lan.ddnsgeek.com/report/report.md/traefik.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md new file: results/traefik.lan.ddnsgeek.com/report/report.md/traefik.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md new file: results/traefik.lan.ddnsgeek.com/report/report.md/traefik.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md new file: results/traefik.lan.ddnsgeek.com/report/report.md/traefik.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md new file: results/traefik.lan.ddnsgeek.com/report/report.md/traefik.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md new file: results/traefik.lan.ddnsgeek.com/report/report.md/traefik.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md new file: results/traefik.lan.ddnsgeek.com/report/report.md/traefik.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md new file: results/traefik.lan.ddnsgeek.com/report/report.md/traefik.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md new file: results/traefik.lan.ddnsgeek.com/report/report.md/traefik.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md new file: results/traefik.lan.ddnsgeek.com/report/report.md/traefik.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md new file: results/traefik.lan.ddnsgeek.com/report/report.md/traefik.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md new file: results/traefik.lan.ddnsgeek.com/report/report.md/traefik.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md new file: results/traefik.lan.ddnsgeek.com/scans/_commands.log new file: results/traefik.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt new file: results/traefik.lan.ddnsgeek.com/scans/_manual_commands.txt new file: results/traefik.lan.ddnsgeek.com/scans/_patterns.log new file: results/traefik.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt new file: results/traefik.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt new file: results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl-robots.txt new file: results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl.html new file: results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt new file: results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_known-security.txt new file: results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt new file: results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt new file: results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_traefik.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt new file: results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt new file: results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html new file: results/traefik.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml new file: results/traefik.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl-robots.txt new file: results/traefik.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl.html new file: results/traefik.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt new file: results/traefik.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_known-security.txt new file: results/traefik.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt new file: results/traefik.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt new file: results/traefik.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_traefik.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt new file: results/traefik.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_whatweb.txt new file: results/traefik.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml new file: results/traefik.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml new file: results/traefik.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml new file: results/traefik.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml
This commit is contained in:
@@ -0,0 +1,12 @@
|
||||
[*] http found on tcp/80.
|
||||
|
||||
|
||||
|
||||
[*] http found on tcp/443.
|
||||
|
||||
|
||||
|
||||
[*] tcpwrapped found on tcp/51413.
|
||||
|
||||
|
||||
|
||||
+43
@@ -0,0 +1,43 @@
|
||||
```bash
|
||||
nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN "/root/results/nextcloud.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt" -oX "/root/results/nextcloud.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml" nextcloud.lan.ddnsgeek.com
|
||||
|
||||
nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN "/root/results/nextcloud.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt" -oX "/root/results/nextcloud.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml" nextcloud.lan.ddnsgeek.com
|
||||
|
||||
nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN "/root/results/nextcloud.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt" -oX "/root/results/nextcloud.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml" nextcloud.lan.ddnsgeek.com
|
||||
|
||||
feroxbuster -u http://nextcloud.lan.ddnsgeek.com:80/ -t 10 -w /root/.local/share/AutoRecon/wordlists/dirbuster.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -q -e -r -o "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt"
|
||||
|
||||
curl -sSikf http://nextcloud.lan.ddnsgeek.com:80/.well-known/security.txt
|
||||
|
||||
curl -sSikf http://nextcloud.lan.ddnsgeek.com:80/robots.txt
|
||||
|
||||
curl -sSik http://nextcloud.lan.ddnsgeek.com:80/
|
||||
|
||||
nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://nextcloud.lan.ddnsgeek.com:80 2>&1 | tee "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt"
|
||||
|
||||
nmap -vv --reason -Pn -T4 -sV -p 80 --script="banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt" -oX "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml" nextcloud.lan.ddnsgeek.com
|
||||
|
||||
ffuf -u http://nextcloud.lan.ddnsgeek.com:80/ -t 10 -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -H "Host: FUZZ.nextcloud.lan.ddnsgeek.com" -mc all -fs 17 -r -noninteractive -s | tee "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nextcloud.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt"
|
||||
|
||||
whatweb --color=never --no-errors -a 3 -v http://nextcloud.lan.ddnsgeek.com:80 2>&1
|
||||
|
||||
feroxbuster -u https://nextcloud.lan.ddnsgeek.com:443/ -t 10 -w /root/.local/share/AutoRecon/wordlists/dirbuster.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -q -e -r -o "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt"
|
||||
|
||||
curl -sSikf https://nextcloud.lan.ddnsgeek.com:443/.well-known/security.txt
|
||||
|
||||
curl -sSikf https://nextcloud.lan.ddnsgeek.com:443/robots.txt
|
||||
|
||||
curl -sSik https://nextcloud.lan.ddnsgeek.com:443/
|
||||
|
||||
nikto -ask=no -Tuning=x4567890ac -nointeractive -host https://nextcloud.lan.ddnsgeek.com:443 2>&1 | tee "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt"
|
||||
|
||||
nmap -vv --reason -Pn -T4 -sV -p 443 --script="banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt" -oX "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml" nextcloud.lan.ddnsgeek.com
|
||||
|
||||
sslscan --show-certificate --no-colour nextcloud.lan.ddnsgeek.com:443 2>&1
|
||||
|
||||
ffuf -u https://nextcloud.lan.ddnsgeek.com:443/ -t 10 -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -H "Host: FUZZ.nextcloud.lan.ddnsgeek.com" -mc all -fs 19 -r -noninteractive -s | tee "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nextcloud.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt"
|
||||
|
||||
whatweb --color=never --no-errors -a 3 -v https://nextcloud.lan.ddnsgeek.com:443 2>&1
|
||||
|
||||
|
||||
```
|
||||
+43
@@ -0,0 +1,43 @@
|
||||
```bash
|
||||
[*] http on tcp/80
|
||||
|
||||
[-] (feroxbuster) Multi-threaded recursive directory/file enumeration for web servers using various wordlists:
|
||||
|
||||
feroxbuster -u http://nextcloud.lan.ddnsgeek.com:80 -t 10 -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -e -r -o /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt
|
||||
|
||||
[-] Credential bruteforcing commands (don't run these without modifying them):
|
||||
|
||||
hydra -L "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e nsr -s 80 -o "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_auth_hydra.txt" http-get://nextcloud.lan.ddnsgeek.com/path/to/auth/area
|
||||
|
||||
medusa -U "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e ns -n 80 -O "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_auth_medusa.txt" -M http -h nextcloud.lan.ddnsgeek.com -m DIR:/path/to/auth/area
|
||||
|
||||
hydra -L "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e nsr -s 80 -o "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_form_hydra.txt" http-post-form://nextcloud.lan.ddnsgeek.com/path/to/login.php:"username=^USER^&password=^PASS^":"invalid-login-message"
|
||||
|
||||
medusa -U "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e ns -n 80 -O "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_form_medusa.txt" -M web-form -h nextcloud.lan.ddnsgeek.com -m FORM:/path/to/login.php -m FORM-DATA:"post?username=&password=" -m DENY-SIGNAL:"invalid login message"
|
||||
|
||||
[-] (wpscan) WordPress Security Scanner (useful if WordPress is found):
|
||||
|
||||
wpscan --url http://nextcloud.lan.ddnsgeek.com:80/ --no-update -e vp,vt,tt,cb,dbe,u,m --plugins-detection aggressive --plugins-version-detection aggressive -f cli-no-color 2>&1 | tee "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_wpscan.txt"
|
||||
|
||||
[*] http on tcp/443
|
||||
|
||||
[-] (feroxbuster) Multi-threaded recursive directory/file enumeration for web servers using various wordlists:
|
||||
|
||||
feroxbuster -u https://nextcloud.lan.ddnsgeek.com:443 -t 10 -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -e -r -o /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt
|
||||
|
||||
[-] Credential bruteforcing commands (don't run these without modifying them):
|
||||
|
||||
hydra -L "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e nsr -s 443 -o "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_auth_hydra.txt" https-get://nextcloud.lan.ddnsgeek.com/path/to/auth/area
|
||||
|
||||
medusa -U "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e ns -n 443 -O "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_auth_medusa.txt" -M http -h nextcloud.lan.ddnsgeek.com -m DIR:/path/to/auth/area
|
||||
|
||||
hydra -L "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e nsr -s 443 -o "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_form_hydra.txt" https-post-form://nextcloud.lan.ddnsgeek.com/path/to/login.php:"username=^USER^&password=^PASS^":"invalid-login-message"
|
||||
|
||||
medusa -U "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e ns -n 443 -O "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_form_medusa.txt" -M web-form -h nextcloud.lan.ddnsgeek.com -m FORM:/path/to/login.php -m FORM-DATA:"post?username=&password=" -m DENY-SIGNAL:"invalid login message"
|
||||
|
||||
[-] (wpscan) WordPress Security Scanner (useful if WordPress is found):
|
||||
|
||||
wpscan --url https://nextcloud.lan.ddnsgeek.com:443/ --no-update -e vp,vt,tt,cb,dbe,u,m --plugins-detection aggressive --plugins-version-detection aggressive -f cli-no-color 2>&1 | tee "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_wpscan.txt"
|
||||
|
||||
|
||||
```
|
||||
+6
@@ -0,0 +1,6 @@
|
||||
Matched Pattern: powered-by: PHP/8.3.30
|
||||
|
||||
CVE Identified: CVE-2003-1418
|
||||
|
||||
Identified HTTP Server: Apache/2.4.66 (Debian)
|
||||
|
||||
+121
@@ -0,0 +1,121 @@
|
||||
```bash
|
||||
nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN "/root/results/nextcloud.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt" -oX "/root/results/nextcloud.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml" nextcloud.lan.ddnsgeek.com
|
||||
```
|
||||
|
||||
[/root/results/nextcloud.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt](file:///root/results/nextcloud.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt):
|
||||
|
||||
```
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 08:11:07 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml nextcloud.lan.ddnsgeek.com
|
||||
Increasing send delay for 167.179.167.166 from 0 to 5 due to 11 out of 22 dropped probes since last increase.
|
||||
Nmap scan report for nextcloud.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set (0.020s latency).
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 08:11:21 UTC for 16892s
|
||||
Not shown: 65531 filtered tcp ports (no-response)
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-title: Did not follow redirect to https://nextcloud.lan.ddnsgeek.com/
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-server-header: Apache/2.4.66 (Debian)
|
||||
| ssl-cert: Subject: commonName=nextcloud.lan.ddnsgeek.com
|
||||
| Subject Alternative Name: DNS:nextcloud.lan.ddnsgeek.com
|
||||
| Issuer: commonName=R12/organizationName=Let's Encrypt/countryName=US
|
||||
| Public Key type: rsa
|
||||
| Public Key bits: 4096
|
||||
| Signature Algorithm: sha256WithRSAEncryption
|
||||
| Not valid before: 2026-02-09T19:02:37
|
||||
| Not valid after: 2026-05-10T19:02:36
|
||||
| MD5: 1238 93af a1bb d72b 58cc 04da ce8f 39a3
|
||||
| SHA-1: 0a0a 3103 f4a5 94ce bd08 4e19 38a0 3ee8 3bea 02d5
|
||||
| SHA-256: af41 2c3f b7bf 6ee9 68ff 4449 2627 0604 6d6c 04c9 069f 11d9 8366 47fe 7a22 d02d
|
||||
| -----BEGIN CERTIFICATE-----
|
||||
| MIIGGDCCBQCgAwIBAgISBs84fOBMHD0zq0Oj2DfRjS1QMA0GCSqGSIb3DQEBCwUA
|
||||
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
|
||||
| EwNSMTIwHhcNMjYwMjA5MTkwMjM3WhcNMjYwNTEwMTkwMjM2WjAlMSMwIQYDVQQD
|
||||
| ExpuZXh0Y2xvdWQubGFuLmRkbnNnZWVrLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQAD
|
||||
| ggIPADCCAgoCggIBAMfZPcsjUERAyRB3mvCx+kUJE/5gKelvulMMV3uCdil8yiop
|
||||
| 3CgXHNN1E/9hsK8/gueXU1AbcpNUrHP1clNlrMku+GuwAQF4+eulJdycXM8UBOB4
|
||||
| HkWO/CljSna1EZQlPx4FhDLMSki2uLP9mgNOM1/lBQ1qPG3B3EXLKOqGlEQ/zOjg
|
||||
| /gyPEBxjWA3bYZZN4oiaFHnA32ontFN7CQ7COeCJCnRpr2zAUvpRO5U5uH2cfApt
|
||||
| 4gha9FQSgAj6lAqFGDrRDLqUl1oGY4HM5DWDhYiYnJ/n34hDRoWOt1D02PpCjNQf
|
||||
| O4CDs+6udQN7zBNQBZiSBEtpGnQn73EFeElRvoGqZMrQFJa6/VEle+oJxdQL5JIv
|
||||
| yeqILlfJqlMgAiM4rItUKl9hTtWOfTuPCGbtPx7qDG6gdD2CDxdgPfPBseiKU6DV
|
||||
| sbHAs6aAv17982O0FIf4LE7vSmkVSpzafYRXdx/F5I6Zi+t7SlsC+l7cZiYMAyfU
|
||||
| DP6kmO7mCGRRQmxu1Ui6hZjIWEa2VJ6epueY7GtrEmsVulna+uq+jz2vI/uk99EF
|
||||
| H2NZuc/65i67UAjUllYA/58dTcC6kX6/WO5CTRsCzkhY0cCY2xGrs2i6bok50TzQ
|
||||
| 90IlIpa4IK19uDunxb6i7BFY/m56lmpKkYcyNflBCOrPtBSkVpUe45skVVdRAgMB
|
||||
| AAGjggIyMIICLjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
|
||||
| CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFC+nSeC+N1jWPCU+PH6S
|
||||
| tjduDIpsMB8GA1UdIwQYMBaAFAC1KfItjm8x6JtMrXg++tzpDNHSMDMGCCsGAQUF
|
||||
| BwEBBCcwJTAjBggrBgEFBQcwAoYXaHR0cDovL3IxMi5pLmxlbmNyLm9yZy8wJQYD
|
||||
| VR0RBB4wHIIabmV4dGNsb3VkLmxhbi5kZG5zZ2Vlay5jb20wEwYDVR0gBAwwCjAI
|
||||
| BgZngQwBAgEwLgYDVR0fBCcwJTAjoCGgH4YdaHR0cDovL3IxMi5jLmxlbmNyLm9y
|
||||
| Zy84MS5jcmwwggEMBgorBgEEAdZ5AgQCBIH9BIH6APgAfgDjI43yjaKI4KrgrPD6
|
||||
| kMmF8La/9dKlJ7AB/BxEWMS26AAAAZxD/lXDAAgAAAUAMg4sIQQDAEcwRQIgIrCy
|
||||
| dkG2OA3k+ot4xDhxRpcnzkBKHTNZylHElvVz0J8CIQDfJueLeCcVjYrFxFfiBC7H
|
||||
| /0xdjUSIP0UwZKmWxao/TwB2ABaDLavwqSUPD/A6pUX/yL/II9CHS/YEKSf45x8z
|
||||
| E/X6AAABnEP+XTYAAAQDAEcwRQIhAPkHxBF88NswLBzx2jqn1RenJotA4rFrNQM9
|
||||
| 1Eof/yZ7AiAHL5k+cqEy/GJ/5eSrDYLr7HCgFBZBE5FHYlXfQ/l32DANBgkqhkiG
|
||||
| 9w0BAQsFAAOCAQEAlW2wfkaVWzbyhttsFH2ZuSqGY2PMi4UzJWCkokkB2fPG16Ky
|
||||
| +EvvTkkkj+U39fkyDqc44jCWJ1cvM5KP6YNyit2w+dhzicllKsO5OJeOQF49EZuC
|
||||
| jBxyK2AHJzOVUOpTSeaeWjRH6eVgq8ebnwxrN1APCKRhb99SRgfF5SttfVl9CHt+
|
||||
| qlimvDKxX7/PeXz+PW3KAI/DOTBF7mjZUUvIRZLr2Tv7AXtl27fbfpEtXhlBVsdy
|
||||
| 2JtMrKu0qbfxfWeOr1uD69WWsPkgWZ8HHP+7VibHwyXUuc7FmHuxDQCtWFNkj9rm
|
||||
| lZr6d0LRlE/gU6T/SDixaqBbYR7VEOEMYhL0SA==
|
||||
|_-----END CERTIFICATE-----
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
| http-title: Login \xE2\x80\x93 Nextcloud
|
||||
|_Requested resource was https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
| http-robots.txt: 1 disallowed entry
|
||||
|_/
|
||||
20001/tcp closed microsan reset ttl 57
|
||||
51413/tcp open tcpwrapped syn-ack ttl 56
|
||||
Device type: general purpose
|
||||
Running (JUST GUESSING): Linux 4.X (88%)
|
||||
OS CPE: cpe:/o:linux:linux_kernel:4
|
||||
OS fingerprint not ideal because: Didn't receive UDP response. Please try again with -sSU
|
||||
Aggressive OS guesses: Linux 4.19 - 5.15 (88%)
|
||||
No exact OS matches for host (test conditions non-ideal).
|
||||
TCP/IP fingerprint:
|
||||
SCAN(V=7.98%E=4%D=4/5%OT=80%CT=20001%CU=%PV=N%DS=8%DC=T%G=N%TM=69D25B25%P=x86_64-pc-linux-gnu)
|
||||
SEQ(SP=101%GCD=1%ISR=10F%TI=Z%TS=A)
|
||||
SEQ(SP=FF%GCD=1%ISR=105%TI=Z%TS=A)
|
||||
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
|
||||
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
|
||||
ECN(R=Y%DF=Y%TG=40%W=FAF0%O=M5B4NNSNW7%CC=Y%Q=)
|
||||
T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
|
||||
T2(R=N)
|
||||
T3(R=N)
|
||||
T4(R=N)
|
||||
T5(R=N)
|
||||
T6(R=N)
|
||||
T7(R=N)
|
||||
T7(R=Y%DF=Y%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
|
||||
U1(R=N)
|
||||
IE(R=N)
|
||||
|
||||
Uptime guess: 17.135 days (since Thu Mar 19 09:37:52 2026)
|
||||
Network Distance: 8 hops
|
||||
TCP Sequence Prediction: Difficulty=255 (Good luck!)
|
||||
IP ID Sequence Generation: All zeros
|
||||
|
||||
TRACEROUTE (using port 20001/tcp)
|
||||
HOP RTT ADDRESS
|
||||
1 0.06 ms 10.216.0.161
|
||||
2 0.43 ms 10.216.35.12
|
||||
3 0.87 ms 10.216.32.1
|
||||
4 0.46 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
|
||||
5 4.04 ms as4764.syd.edgeix.net.au (202.77.88.3)
|
||||
6 11.67 ms 10.241.1.187
|
||||
7 12.61 ms 10.241.2.71
|
||||
8 15.61 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 12:52:53 2026 -- 1 IP address (1 host up) scanned in 16914.51 seconds
|
||||
|
||||
```
|
||||
+38
@@ -0,0 +1,38 @@
|
||||
```bash
|
||||
nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN "/root/results/nextcloud.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt" -oX "/root/results/nextcloud.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml" nextcloud.lan.ddnsgeek.com
|
||||
```
|
||||
|
||||
[/root/results/nextcloud.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt](file:///root/results/nextcloud.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt):
|
||||
|
||||
```
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 08:11:26 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml nextcloud.lan.ddnsgeek.com
|
||||
Nmap scan report for nextcloud.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set.
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 08:11:43 UTC for 1412s
|
||||
All 100 scanned ports on nextcloud.lan.ddnsgeek.com (167.179.167.166) are in ignored states.
|
||||
Not shown: 100 open|filtered udp ports (no-response)
|
||||
Too many fingerprints match this host to give specific OS details
|
||||
TCP/IP fingerprint:
|
||||
SCAN(V=7.98%E=4%D=4/5%OT=%CT=%CU=%PV=N%G=N%TM=69D21EC4%P=x86_64-pc-linux-gnu)
|
||||
SEQ()
|
||||
U1(R=N)
|
||||
IE(R=N)
|
||||
|
||||
|
||||
TRACEROUTE (using proto 1/icmp)
|
||||
HOP RTT ADDRESS
|
||||
1 0.06 ms 10.216.0.161
|
||||
2 0.22 ms 10.216.35.11
|
||||
3 2.48 ms 10.216.32.2
|
||||
4 0.28 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
|
||||
5 4.58 ms as4764.syd.edgeix.net.au (202.77.88.3)
|
||||
6 11.64 ms 10.241.1.187
|
||||
7 12.71 ms 10.241.2.71
|
||||
8 ... 30
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 08:35:17 2026 -- 1 IP address (1 host up) scanned in 1438.42 seconds
|
||||
|
||||
```
|
||||
+71
@@ -0,0 +1,71 @@
|
||||
```bash
|
||||
nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN "/root/results/nextcloud.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt" -oX "/root/results/nextcloud.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml" nextcloud.lan.ddnsgeek.com
|
||||
```
|
||||
|
||||
[/root/results/nextcloud.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt](file:///root/results/nextcloud.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt):
|
||||
|
||||
```
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 08:08:23 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml nextcloud.lan.ddnsgeek.com
|
||||
Increasing send delay for 167.179.167.166 from 0 to 5 due to 11 out of 25 dropped probes since last increase.
|
||||
Nmap scan report for nextcloud.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set (0.019s latency).
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 08:10:26 UTC for 270s
|
||||
Not shown: 998 filtered tcp ports (no-response)
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
|_http-title: Did not follow redirect to https://nextcloud.lan.ddnsgeek.com/
|
||||
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
| http-robots.txt: 1 disallowed entry
|
||||
|_/
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
|_http-server-header: Apache/2.4.66 (Debian)
|
||||
| http-title: Login \xE2\x80\x93 Nextcloud
|
||||
|_Requested resource was https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
|
||||
Device type: general purpose
|
||||
Running (JUST GUESSING): Linux 5.X (89%)
|
||||
OS CPE: cpe:/o:linux:linux_kernel:5.4
|
||||
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
|
||||
Aggressive OS guesses: Linux 5.4 (89%)
|
||||
No exact OS matches for host (test conditions non-ideal).
|
||||
TCP/IP fingerprint:
|
||||
SCAN(V=7.98%E=4%D=4/5%OT=80%CT=%CU=%PV=N%DS=8%DC=T%G=N%TM=69D21A01%P=x86_64-pc-linux-gnu)
|
||||
SEQ(SP=101%GCD=1%ISR=10C%TI=Z%TS=A)
|
||||
SEQ(SP=103%GCD=1%ISR=10C%TI=Z%TS=A)
|
||||
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=NNT11%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
|
||||
WIN(W1=FE88%W2=FE88%W3=9AE%W4=FE88%W5=FE88%W6=FE88)
|
||||
ECN(R=N)
|
||||
T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
|
||||
T2(R=N)
|
||||
T3(R=N)
|
||||
T4(R=N)
|
||||
T6(R=Y%DF=Y%TG=40%W=FE88%S=O%A=O%F=AS%O=M5B4ST11NW7%RD=0%Q=)
|
||||
U1(R=N)
|
||||
IE(R=N)
|
||||
|
||||
Uptime guess: 16.942 days (since Thu Mar 19 09:37:52 2026)
|
||||
Network Distance: 8 hops
|
||||
TCP Sequence Prediction: Difficulty=259 (Good luck!)
|
||||
IP ID Sequence Generation: All zeros
|
||||
|
||||
TRACEROUTE (using port 80/tcp)
|
||||
HOP RTT ADDRESS
|
||||
1 0.34 ms 10.216.0.161
|
||||
2 0.42 ms 10.216.35.11
|
||||
3 4.77 ms 10.216.32.1
|
||||
4 0.37 ms lo0-0.gw2.syd1.au.linode.com (172.105.160.102)
|
||||
5 3.72 ms as4764.syd.edgeix.net.au (202.77.88.3)
|
||||
6 11.80 ms 10.241.1.187
|
||||
7 12.53 ms 10.241.2.71
|
||||
8 14.18 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 08:14:57 2026 -- 1 IP address (1 host up) scanned in 402.48 seconds
|
||||
|
||||
```
|
||||
+27
@@ -0,0 +1,27 @@
|
||||
```bash
|
||||
curl -sSikf https://nextcloud.lan.ddnsgeek.com:443/robots.txt
|
||||
```
|
||||
|
||||
[/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl-robots.txt](file:///root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl-robots.txt):
|
||||
|
||||
```
|
||||
HTTP/2 200
|
||||
accept-ranges: bytes
|
||||
content-type: text/plain; charset=utf-8
|
||||
date: Sun, 05 Apr 2026 08:15:05 GMT
|
||||
etag: "1a-64e41fd0d5664"
|
||||
last-modified: Mon, 30 Mar 2026 18:26:25 GMT
|
||||
referrer-policy: no-referrer
|
||||
server: Apache/2.4.66 (Debian)
|
||||
strict-transport-security: max-age=15552000; includeSubDomains; preload
|
||||
x-content-type-options: nosniff
|
||||
x-frame-options: SAMEORIGIN
|
||||
x-permitted-cross-domain-policies: none
|
||||
x-robots-tag: noindex, nofollow
|
||||
x-xss-protection: 1; mode=block
|
||||
content-length: 26
|
||||
|
||||
User-agent: *
|
||||
Disallow: /
|
||||
|
||||
```
|
||||
+32
@@ -0,0 +1,32 @@
|
||||
```bash
|
||||
curl -sSik https://nextcloud.lan.ddnsgeek.com:443/
|
||||
```
|
||||
|
||||
[/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl.html](file:///root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl.html):
|
||||
|
||||
```
|
||||
HTTP/2 302
|
||||
content-security-policy: default-src 'self'; script-src 'self' 'nonce-0UjAoEIy1Rabnj72oZ1MOexz4/Jo1zf+kWHhit5OsFg='; style-src 'self' 'unsafe-inline'; frame-src *; img-src * data: blob:; font-src 'self' data:; media-src *; connect-src *; object-src 'none'; base-uri 'self';
|
||||
content-type: text/html; charset=UTF-8
|
||||
date: Sun, 05 Apr 2026 08:15:07 GMT
|
||||
location: https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
referrer-policy: no-referrer
|
||||
server: Apache/2.4.66 (Debian)
|
||||
set-cookie: ocexfs76yoe2=e967eb027dcffbc8de5b9970ea4f1d49; path=/; secure; HttpOnly; SameSite=Lax
|
||||
set-cookie: oc_sessionPassphrase=Qe9VfIvKEADVVKypzMAh9bod76L%2BO9pllh2SFfHSV9qilitYJE4V6f0E2h8mXiocS%2F9WjZgYB5qZJFhGfKXnNlbkJ7UL9%2FPeJVKhCuXEOVCJ4nhjMBP3igQmb%2BAiBYKm; path=/; secure; HttpOnly; SameSite=Lax
|
||||
set-cookie: ocexfs76yoe2=e967eb027dcffbc8de5b9970ea4f1d49; path=/; secure; HttpOnly; SameSite=Lax
|
||||
set-cookie: __Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
|
||||
set-cookie: __Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
|
||||
set-cookie: ocexfs76yoe2=e967eb027dcffbc8de5b9970ea4f1d49; path=/; secure; HttpOnly; SameSite=Lax
|
||||
strict-transport-security: max-age=15552000; includeSubDomains; preload
|
||||
x-content-type-options: nosniff
|
||||
x-frame-options: SAMEORIGIN
|
||||
x-permitted-cross-domain-policies: none
|
||||
x-powered-by: PHP/8.3.30
|
||||
x-robots-tag: noindex, nofollow
|
||||
x-xss-protection: 1; mode=block
|
||||
content-length: 0
|
||||
|
||||
|
||||
|
||||
```
|
||||
+324
@@ -0,0 +1,324 @@
|
||||
```bash
|
||||
feroxbuster -u https://nextcloud.lan.ddnsgeek.com:443/ -t 10 -w /root/.local/share/AutoRecon/wordlists/dirbuster.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -q -e -r -o "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt"
|
||||
```
|
||||
|
||||
[/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt](file:///root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt):
|
||||
|
||||
```
|
||||
Configuration {
|
||||
kind: "configuration",
|
||||
wordlist: "/root/.local/share/AutoRecon/wordlists/dirbuster.txt",
|
||||
config: "/etc/feroxbuster/ferox-config.toml",
|
||||
proxy: "",
|
||||
replay_proxy: "",
|
||||
server_certs: [],
|
||||
client_cert: "",
|
||||
client_key: "",
|
||||
target_url: "https://nextcloud.lan.ddnsgeek.com/",
|
||||
status_codes: [
|
||||
100,
|
||||
101,
|
||||
102,
|
||||
200,
|
||||
201,
|
||||
202,
|
||||
203,
|
||||
204,
|
||||
205,
|
||||
206,
|
||||
207,
|
||||
208,
|
||||
226,
|
||||
300,
|
||||
301,
|
||||
302,
|
||||
303,
|
||||
304,
|
||||
305,
|
||||
307,
|
||||
308,
|
||||
400,
|
||||
401,
|
||||
402,
|
||||
403,
|
||||
404,
|
||||
405,
|
||||
406,
|
||||
407,
|
||||
408,
|
||||
409,
|
||||
410,
|
||||
411,
|
||||
412,
|
||||
413,
|
||||
414,
|
||||
415,
|
||||
416,
|
||||
417,
|
||||
418,
|
||||
421,
|
||||
422,
|
||||
423,
|
||||
424,
|
||||
426,
|
||||
428,
|
||||
429,
|
||||
431,
|
||||
451,
|
||||
500,
|
||||
501,
|
||||
502,
|
||||
503,
|
||||
504,
|
||||
505,
|
||||
506,
|
||||
507,
|
||||
508,
|
||||
510,
|
||||
511,
|
||||
103,
|
||||
425,
|
||||
],
|
||||
replay_codes: [
|
||||
100,
|
||||
101,
|
||||
102,
|
||||
200,
|
||||
201,
|
||||
202,
|
||||
203,
|
||||
204,
|
||||
205,
|
||||
206,
|
||||
207,
|
||||
208,
|
||||
226,
|
||||
300,
|
||||
301,
|
||||
302,
|
||||
303,
|
||||
304,
|
||||
305,
|
||||
307,
|
||||
308,
|
||||
400,
|
||||
401,
|
||||
402,
|
||||
403,
|
||||
404,
|
||||
405,
|
||||
406,
|
||||
407,
|
||||
408,
|
||||
409,
|
||||
410,
|
||||
411,
|
||||
412,
|
||||
413,
|
||||
414,
|
||||
415,
|
||||
416,
|
||||
417,
|
||||
418,
|
||||
421,
|
||||
422,
|
||||
423,
|
||||
424,
|
||||
426,
|
||||
428,
|
||||
429,
|
||||
431,
|
||||
451,
|
||||
500,
|
||||
501,
|
||||
502,
|
||||
503,
|
||||
504,
|
||||
505,
|
||||
506,
|
||||
507,
|
||||
508,
|
||||
510,
|
||||
511,
|
||||
103,
|
||||
425,
|
||||
],
|
||||
filter_status: [],
|
||||
client: Client {
|
||||
accepts: Accepts,
|
||||
proxies: [
|
||||
Matcher,
|
||||
],
|
||||
redirect_policy: "Policy(Custom)",
|
||||
referer: true,
|
||||
default_headers: {
|
||||
"accept": "*/*",
|
||||
"user-agent": "feroxbuster/2.13.1",
|
||||
},
|
||||
reqwest::config::RequestTimeout: 7s,
|
||||
},
|
||||
replay_client: None,
|
||||
threads: 10,
|
||||
timeout: 7,
|
||||
verbosity: 1,
|
||||
silent: false,
|
||||
quiet: true,
|
||||
output_level: Quiet,
|
||||
auto_bail: false,
|
||||
auto_tune: false,
|
||||
requester_policy: Default,
|
||||
json: false,
|
||||
output: "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt",
|
||||
debug_log: "",
|
||||
user_agent: "feroxbuster/2.13.1",
|
||||
random_agent: false,
|
||||
redirects: true,
|
||||
insecure: true,
|
||||
extensions: [
|
||||
"txt",
|
||||
"html",
|
||||
"php",
|
||||
"asp",
|
||||
"aspx",
|
||||
"jsp",
|
||||
],
|
||||
methods: [
|
||||
"GET",
|
||||
],
|
||||
data: [],
|
||||
headers: {},
|
||||
queries: [],
|
||||
no_recursion: true,
|
||||
extract_links: true,
|
||||
add_slash: false,
|
||||
stdin: false,
|
||||
cached_stdin: [],
|
||||
depth: 4,
|
||||
scan_limit: 0,
|
||||
parallel: 0,
|
||||
rate_limit: 0,
|
||||
filter_size: [],
|
||||
filter_line_count: [],
|
||||
filter_word_count: [],
|
||||
filter_regex: [],
|
||||
dont_filter: false,
|
||||
resumed: false,
|
||||
resume_from: "",
|
||||
save_state: true,
|
||||
time_limit: "",
|
||||
filter_similar: [],
|
||||
url_denylist: [],
|
||||
regex_denylist: [],
|
||||
scope: [
|
||||
Url {
|
||||
scheme: "https",
|
||||
cannot_be_a_base: false,
|
||||
username: "",
|
||||
password: None,
|
||||
host: Some(
|
||||
Domain(
|
||||
"nextcloud.lan.ddnsgeek.com",
|
||||
),
|
||||
),
|
||||
port: None,
|
||||
path: "/",
|
||||
query: None,
|
||||
fragment: None,
|
||||
},
|
||||
],
|
||||
collect_extensions: false,
|
||||
dont_collect: [
|
||||
"woff2",
|
||||
"woff",
|
||||
"ttf",
|
||||
"otf",
|
||||
"eot",
|
||||
"tif",
|
||||
"tiff",
|
||||
"ico",
|
||||
"cur",
|
||||
"bmp",
|
||||
"webp",
|
||||
"svg",
|
||||
"png",
|
||||
"jpg",
|
||||
"jpeg",
|
||||
"jfif",
|
||||
"gif",
|
||||
"avif",
|
||||
"apng",
|
||||
"pjpeg",
|
||||
"pjp",
|
||||
"mov",
|
||||
"wav",
|
||||
"mpg",
|
||||
"mpeg",
|
||||
"mp3",
|
||||
"mp4",
|
||||
"m4a",
|
||||
"m4p",
|
||||
"m4v",
|
||||
"ogg",
|
||||
"webm",
|
||||
"ogv",
|
||||
"oga",
|
||||
"flac",
|
||||
"aac",
|
||||
"3gp",
|
||||
"css",
|
||||
"zip",
|
||||
"xls",
|
||||
"xml",
|
||||
"gz",
|
||||
"tgz",
|
||||
],
|
||||
collect_backups: false,
|
||||
backup_extensions: [
|
||||
"~",
|
||||
".bak",
|
||||
".bak2",
|
||||
".old",
|
||||
".1",
|
||||
],
|
||||
collect_words: false,
|
||||
force_recursion: false,
|
||||
update_app: false,
|
||||
scan_dir_listings: false,
|
||||
request_file: "",
|
||||
protocol: "https",
|
||||
limit_bars: 0,
|
||||
unique: false,
|
||||
response_size_limit: 4194304,
|
||||
}
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/apps/dashboard
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/apps/logreader
|
||||
200 GET 494l 1557w 31067c https://nextcloud.lan.ddnsgeek.com/index.php/apps/files_pdfviewer
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/apps/activity
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/apps/files
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/apps/photos
|
||||
200 GET 93l 341w 16047c https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/settings/user/security
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.txt
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.txt
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.html
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.html
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.php
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.php
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.asp
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.asp
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.aspx
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.aspx
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.jsp
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.jsp
|
||||
200 GET 6l 12w 281c https://nextcloud.lan.ddnsgeek.com/.well-known/security.txt
|
||||
200 GET 1l 5w 77c https://nextcloud.lan.ddnsgeek.com/cron.php
|
||||
200 GET 12l 31w 331c https://nextcloud.lan.ddnsgeek.com/index.html
|
||||
500 GET 2l 11w 72c https://nextcloud.lan.ddnsgeek.com/public.php
|
||||
200 GET 2l 4w 26c https://nextcloud.lan.ddnsgeek.com/robots.txt
|
||||
200 GET 1l 1w 170c https://nextcloud.lan.ddnsgeek.com/status.php
|
||||
200 GET 0l 0w 0c https://nextcloud.lan.ddnsgeek.com/version.php
|
||||
200 GET 661l 5535w 34520c https://nextcloud.lan.ddnsgeek.com/COPYING
|
||||
|
||||
```
|
||||
+40
@@ -0,0 +1,40 @@
|
||||
```bash
|
||||
curl -sSikf https://nextcloud.lan.ddnsgeek.com:443/.well-known/security.txt
|
||||
```
|
||||
|
||||
[/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_known-security.txt](file:///root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_known-security.txt):
|
||||
|
||||
```
|
||||
HTTP/2 200
|
||||
cache-control: no-cache, no-store, must-revalidate
|
||||
content-security-policy: default-src 'none';base-uri 'none';manifest-src 'self';frame-ancestors 'none'
|
||||
content-type: text/plain;charset=UTF-8
|
||||
date: Sun, 05 Apr 2026 08:15:04 GMT
|
||||
feature-policy: autoplay 'none';camera 'none';fullscreen 'none';geolocation 'none';microphone 'none';payment 'none'
|
||||
referrer-policy: no-referrer
|
||||
server: Apache/2.4.66 (Debian)
|
||||
set-cookie: ocexfs76yoe2=0e51bcf9950c6c3c1daa59f041984726; path=/; secure; HttpOnly; SameSite=Lax
|
||||
set-cookie: oc_sessionPassphrase=wMD2r4bjh3qzFmpNL0NjJILFcgpYM7BaIp9xoMpv24WNwSUdpi3tOs5%2FTjqdmUplkJf6bjitdDnd3ItEf4g2yfB7kyCENUGFDsaqdH23YmQe7xumvAbfzZt5w0IdtZc4; path=/; secure; HttpOnly; SameSite=Lax
|
||||
set-cookie: ocexfs76yoe2=0e51bcf9950c6c3c1daa59f041984726; path=/; secure; HttpOnly; SameSite=Lax
|
||||
set-cookie: __Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
|
||||
set-cookie: __Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
|
||||
set-cookie: ocexfs76yoe2=0e51bcf9950c6c3c1daa59f041984726; path=/; secure; HttpOnly; SameSite=Lax
|
||||
strict-transport-security: max-age=15552000; includeSubDomains; preload
|
||||
vary: Accept-Encoding
|
||||
x-content-type-options: nosniff
|
||||
x-frame-options: SAMEORIGIN
|
||||
x-nextcloud-well-known: 1
|
||||
x-permitted-cross-domain-policies: none
|
||||
x-powered-by: PHP/8.3.30
|
||||
x-request-id: lt7eKRvu1nrKBoKkjBte
|
||||
x-robots-tag: noindex, nofollow
|
||||
x-xss-protection: 1; mode=block
|
||||
|
||||
Contact: https://hackerone.com/nextcloud
|
||||
Expires: 2026-08-31T23:00:00.000Z
|
||||
Acknowledgments: https://hackerone.com/nextcloud/thanks
|
||||
Acknowledgments: https://github.com/nextcloud/security-advisories/security/advisories
|
||||
Policy: https://hackerone.com/nextcloud
|
||||
Preferred-Languages: en
|
||||
|
||||
```
|
||||
+186
@@ -0,0 +1,186 @@
|
||||
```bash
|
||||
nmap -vv --reason -Pn -T4 -sV -p 443 --script="banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt" -oX "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml" nextcloud.lan.ddnsgeek.com
|
||||
```
|
||||
|
||||
[/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt](file:///root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt):
|
||||
|
||||
```
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 08:16:04 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml nextcloud.lan.ddnsgeek.com
|
||||
Nmap scan report for nextcloud.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set (0.026s latency).
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 08:16:23 UTC for 705s
|
||||
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
|_http-server-header: Apache/2.4.66 (Debian)
|
||||
| http-headers:
|
||||
| Cache-Control: no-cache, no-store, must-revalidate
|
||||
| Content-Length: 16047
|
||||
| Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';script-src-elem 'strict-dynamic' 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'
|
||||
| Content-Type: text/html; charset=UTF-8
|
||||
| Date: Sun, 05 Apr 2026 08:19:52 GMT
|
||||
| Feature-Policy: autoplay 'self';camera 'none';fullscreen 'self';geolocation 'none';microphone 'none';payment 'none'
|
||||
| Referrer-Policy: same-origin
|
||||
| Server: Apache/2.4.66 (Debian)
|
||||
| Set-Cookie: ocexfs76yoe2=ec8e4644674a95fc3c6b23b49c28df1f; path=/; secure; HttpOnly; SameSite=Lax
|
||||
| Set-Cookie: oc_sessionPassphrase=vaA75gLRczK4PR19LRVIdeCUbAH2eyCr84lwC0J%2FRs%2FAJzlQYpiLdt%2BxMWrssNRkSjTrifW2r%2Fg0sWzn7Cact8Zw3rXzotR6z4WBk4sSNdwp4UgXFlUAwNHKCMEVwmfq; path=/; secure; HttpOnly; SameSite=Lax
|
||||
| Set-Cookie: ocexfs76yoe2=ec8e4644674a95fc3c6b23b49c28df1f; path=/; secure; HttpOnly; SameSite=Lax
|
||||
| Set-Cookie: __Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
|
||||
| Set-Cookie: __Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
|
||||
| Set-Cookie: ocexfs76yoe2=ec8e4644674a95fc3c6b23b49c28df1f; path=/; secure; HttpOnly; SameSite=Lax
|
||||
| Set-Cookie: ocexfs76yoe2=ec8e4644674a95fc3c6b23b49c28df1f; path=/; secure; HttpOnly; SameSite=Lax
|
||||
| Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
| X-Content-Type-Options: nosniff
|
||||
| X-Frame-Options: SAMEORIGIN
|
||||
| X-Permitted-Cross-Domain-Policies: none
|
||||
| X-Powered-By: PHP/8.3.30
|
||||
| X-Request-Id: 8l0zCl9BZ2uwysWABFY8
|
||||
| X-Robots-Tag: noindex, nofollow
|
||||
| X-Xss-Protection: 1; mode=block
|
||||
| Connection: close
|
||||
|
|
||||
|_ (Request type: HEAD)
|
||||
| http-title: Login \xE2\x80\x93 Nextcloud
|
||||
|_Requested resource was https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
| http-vhosts:
|
||||
| 127 names had status 404
|
||||
|_auth.lan.ddnsgeek.com : 200
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
| ssl-enum-ciphers:
|
||||
| TLSv1.2:
|
||||
| ciphers:
|
||||
| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A
|
||||
| TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A
|
||||
| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A
|
||||
| TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
|
||||
| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
|
||||
| compressors:
|
||||
| NULL
|
||||
| cipher preference: client
|
||||
| warnings:
|
||||
| Key exchange (secp256r1) of lower strength than certificate key
|
||||
| TLSv1.3:
|
||||
| ciphers:
|
||||
| TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A
|
||||
| TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A
|
||||
| TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
|
||||
| cipher preference: server
|
||||
|_ least strength: A
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
| http-errors:
|
||||
| Spidering limited to: maxpagecount=40; withinhost=nextcloud.lan.ddnsgeek.com
|
||||
| Found the following error pages:
|
||||
|
|
||||
| Error Code: 404
|
||||
|_ http://nextcloud.lan.ddnsgeek.com:443/
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| /index.php/
|
||||
| Other: 1
|
||||
| Longest directory structure:
|
||||
| Depth: 1
|
||||
| Dir: /index.php/
|
||||
| Total files found (by extension):
|
||||
|_ Other: 1
|
||||
|_http-date: Sun, 05 Apr 2026 08:20:00 GMT; -6s from local time.
|
||||
| http-waf-detect: IDS/IPS/WAF detected:
|
||||
|_nextcloud.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>
|
||||
| http-security-headers:
|
||||
| Strict_Transport_Security:
|
||||
| Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
| X_Frame_Options:
|
||||
| Header: X-Frame-Options: SAMEORIGIN
|
||||
| Description: The browser must not display this content in any frame from a page of different origin than the content itself.
|
||||
| X_XSS_Protection:
|
||||
| Header: X-XSS-Protection: 1; mode=block
|
||||
| Description: The browser will prevent the rendering of the page when XSS is detected.
|
||||
| X_Content_Type_Options:
|
||||
| Header: X-Content-Type-Options: nosniff
|
||||
| Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
|
||||
| Content_Security_Policy:
|
||||
| Header: Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';script-src-elem 'strict-dynamic' 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'
|
||||
| Description: Define the base uri for relative uri.
|
||||
| Description: Define loading policy for all resources type in case of a resource type dedicated directive is not defined (fallback).
|
||||
| Description: Define which scripts the protected resource can execute.
|
||||
| Description: Define which styles (CSS) the user applies to the protected resource.
|
||||
| Description: Define from where the protected resource can load images.
|
||||
| Description: Define from where the protected resource can load video and audio.
|
||||
| Description: Deprecated and replaced by child-src. Define from where the protected resource can embed frames.
|
||||
| Description: Define from where the protected resource can be embedded in frames.
|
||||
| Description: Define from where the protected resource can load fonts.
|
||||
| Description: Define which URIs the protected resource can load using script interfaces.
|
||||
| Description: Define which URIs can be used as the action of HTML form elements.
|
||||
| X_Permitted_Cross_Domain_Policies:
|
||||
| Header: X-Permitted-Cross-Domain-Policies: none
|
||||
| Description: No policy files are allowed anywhere on the target server, including this master policy file.
|
||||
| Cookie:
|
||||
| Cookies are secured with Secure Flag in HTTPS Connection
|
||||
| Cache_Control:
|
||||
|_ Header: Cache-Control: no-cache, no-store, must-revalidate
|
||||
| http-useragent-tester:
|
||||
| Status for browser useragent: 200
|
||||
| Redirected To: https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
| Allowed User Agents:
|
||||
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
|
||||
| libwww
|
||||
| lwp-trivial
|
||||
| libcurl-agent/1.0
|
||||
| PHP/
|
||||
| Python-urllib/2.5
|
||||
| GT::WWW
|
||||
| Snoopy
|
||||
| MFC_Tear_Sample
|
||||
| HTTP::Lite
|
||||
| PHPCrawl
|
||||
| URI::Fetch
|
||||
| Zend_Http_Client
|
||||
| http client
|
||||
| PECL::HTTP
|
||||
| Wget/1.13.4 (linux-gnu)
|
||||
|_ WWW-Mechanize/1.34
|
||||
|_http-chrono: Request times for /index.php/login; avg: 3919.89ms; min: 1656.25ms; max: 10499.33ms
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_http-php-version: Logo query returned unknown hash e473773cc5b8b9dc08c846c0dc434c15
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
| http-traceroute:
|
||||
| Status Code
|
||||
| Hop #1: 404
|
||||
| Hop #2: 302
|
||||
| Hop #3: 302
|
||||
| server
|
||||
| Hop #1
|
||||
| Hop #2: Apache/2.4.66 (Debian)
|
||||
| Hop #3: Apache/2.4.66 (Debian)
|
||||
| content-type
|
||||
| Hop #1: text/plain; charset=utf-8
|
||||
| Hop #2: text/html; charset=UTF-8
|
||||
| Hop #3: text/html; charset=UTF-8
|
||||
| content-length
|
||||
| Hop #1: 19
|
||||
| Hop #2: 0
|
||||
| Hop #3: 0
|
||||
| location
|
||||
| Hop #1
|
||||
| Hop #2: https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
|_ Hop #3: https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 08:28:09 2026 -- 1 IP address (1 host up) scanned in 727.15 seconds
|
||||
|
||||
```
|
||||
+201
@@ -0,0 +1,201 @@
|
||||
```bash
|
||||
sslscan --show-certificate --no-colour nextcloud.lan.ddnsgeek.com:443 2>&1
|
||||
```
|
||||
|
||||
[/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html](file:///root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html):
|
||||
|
||||
```
|
||||
Version: 2.1.5
|
||||
OpenSSL 3.5.3 16 Sep 2025
|
||||
|
||||
Connected to 167.179.167.166
|
||||
|
||||
Testing SSL server nextcloud.lan.ddnsgeek.com on port 443 using SNI name nextcloud.lan.ddnsgeek.com
|
||||
|
||||
SSL/TLS Protocols:
|
||||
SSLv2 disabled
|
||||
SSLv3 disabled
|
||||
TLSv1.0 disabled
|
||||
TLSv1.1 disabled
|
||||
TLSv1.2 enabled
|
||||
TLSv1.3 enabled
|
||||
|
||||
TLS Fallback SCSV:
|
||||
Server supports TLS Fallback SCSV
|
||||
|
||||
TLS renegotiation:
|
||||
Session renegotiation not supported
|
||||
|
||||
TLS Compression:
|
||||
Compression disabled
|
||||
|
||||
Heartbleed:
|
||||
TLSv1.3 not vulnerable to heartbleed
|
||||
TLSv1.2 not vulnerable to heartbleed
|
||||
|
||||
Supported Server Cipher(s):
|
||||
Preferred TLSv1.3 128 bits TLS_AES_128_GCM_SHA256
|
||||
Accepted TLSv1.3 256 bits TLS_AES_256_GCM_SHA384
|
||||
Accepted TLSv1.3 256 bits TLS_CHACHA20_POLY1305_SHA256
|
||||
Preferred TLSv1.2 128 bits ECDHE-RSA-AES128-GCM-SHA256 Curve 25519 DHE 253
|
||||
Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-GCM-SHA384 Curve 25519 DHE 253
|
||||
Accepted TLSv1.2 256 bits ECDHE-RSA-CHACHA20-POLY1305 Curve 25519 DHE 253
|
||||
Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA Curve 25519 DHE 253
|
||||
Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA Curve 25519 DHE 253
|
||||
|
||||
Server Key Exchange Group(s):
|
||||
TLSv1.3 128 bits secp256r1 (NIST P-256)
|
||||
TLSv1.3 192 bits secp384r1 (NIST P-384)
|
||||
TLSv1.3 260 bits secp521r1 (NIST P-521)
|
||||
TLSv1.3 128 bits x25519
|
||||
TLSv1.2 128 bits secp256r1 (NIST P-256)
|
||||
TLSv1.2 192 bits secp384r1 (NIST P-384)
|
||||
TLSv1.2 260 bits secp521r1 (NIST P-521)
|
||||
TLSv1.2 128 bits x25519
|
||||
|
||||
SSL Certificate:
|
||||
Certificate blob:
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIGGDCCBQCgAwIBAgISBs84fOBMHD0zq0Oj2DfRjS1QMA0GCSqGSIb3DQEBCwUA
|
||||
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
|
||||
EwNSMTIwHhcNMjYwMjA5MTkwMjM3WhcNMjYwNTEwMTkwMjM2WjAlMSMwIQYDVQQD
|
||||
ExpuZXh0Y2xvdWQubGFuLmRkbnNnZWVrLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQAD
|
||||
ggIPADCCAgoCggIBAMfZPcsjUERAyRB3mvCx+kUJE/5gKelvulMMV3uCdil8yiop
|
||||
3CgXHNN1E/9hsK8/gueXU1AbcpNUrHP1clNlrMku+GuwAQF4+eulJdycXM8UBOB4
|
||||
HkWO/CljSna1EZQlPx4FhDLMSki2uLP9mgNOM1/lBQ1qPG3B3EXLKOqGlEQ/zOjg
|
||||
/gyPEBxjWA3bYZZN4oiaFHnA32ontFN7CQ7COeCJCnRpr2zAUvpRO5U5uH2cfApt
|
||||
4gha9FQSgAj6lAqFGDrRDLqUl1oGY4HM5DWDhYiYnJ/n34hDRoWOt1D02PpCjNQf
|
||||
O4CDs+6udQN7zBNQBZiSBEtpGnQn73EFeElRvoGqZMrQFJa6/VEle+oJxdQL5JIv
|
||||
yeqILlfJqlMgAiM4rItUKl9hTtWOfTuPCGbtPx7qDG6gdD2CDxdgPfPBseiKU6DV
|
||||
sbHAs6aAv17982O0FIf4LE7vSmkVSpzafYRXdx/F5I6Zi+t7SlsC+l7cZiYMAyfU
|
||||
DP6kmO7mCGRRQmxu1Ui6hZjIWEa2VJ6epueY7GtrEmsVulna+uq+jz2vI/uk99EF
|
||||
H2NZuc/65i67UAjUllYA/58dTcC6kX6/WO5CTRsCzkhY0cCY2xGrs2i6bok50TzQ
|
||||
90IlIpa4IK19uDunxb6i7BFY/m56lmpKkYcyNflBCOrPtBSkVpUe45skVVdRAgMB
|
||||
AAGjggIyMIICLjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
|
||||
CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFC+nSeC+N1jWPCU+PH6S
|
||||
tjduDIpsMB8GA1UdIwQYMBaAFAC1KfItjm8x6JtMrXg++tzpDNHSMDMGCCsGAQUF
|
||||
BwEBBCcwJTAjBggrBgEFBQcwAoYXaHR0cDovL3IxMi5pLmxlbmNyLm9yZy8wJQYD
|
||||
VR0RBB4wHIIabmV4dGNsb3VkLmxhbi5kZG5zZ2Vlay5jb20wEwYDVR0gBAwwCjAI
|
||||
BgZngQwBAgEwLgYDVR0fBCcwJTAjoCGgH4YdaHR0cDovL3IxMi5jLmxlbmNyLm9y
|
||||
Zy84MS5jcmwwggEMBgorBgEEAdZ5AgQCBIH9BIH6APgAfgDjI43yjaKI4KrgrPD6
|
||||
kMmF8La/9dKlJ7AB/BxEWMS26AAAAZxD/lXDAAgAAAUAMg4sIQQDAEcwRQIgIrCy
|
||||
dkG2OA3k+ot4xDhxRpcnzkBKHTNZylHElvVz0J8CIQDfJueLeCcVjYrFxFfiBC7H
|
||||
/0xdjUSIP0UwZKmWxao/TwB2ABaDLavwqSUPD/A6pUX/yL/II9CHS/YEKSf45x8z
|
||||
E/X6AAABnEP+XTYAAAQDAEcwRQIhAPkHxBF88NswLBzx2jqn1RenJotA4rFrNQM9
|
||||
1Eof/yZ7AiAHL5k+cqEy/GJ/5eSrDYLr7HCgFBZBE5FHYlXfQ/l32DANBgkqhkiG
|
||||
9w0BAQsFAAOCAQEAlW2wfkaVWzbyhttsFH2ZuSqGY2PMi4UzJWCkokkB2fPG16Ky
|
||||
+EvvTkkkj+U39fkyDqc44jCWJ1cvM5KP6YNyit2w+dhzicllKsO5OJeOQF49EZuC
|
||||
jBxyK2AHJzOVUOpTSeaeWjRH6eVgq8ebnwxrN1APCKRhb99SRgfF5SttfVl9CHt+
|
||||
qlimvDKxX7/PeXz+PW3KAI/DOTBF7mjZUUvIRZLr2Tv7AXtl27fbfpEtXhlBVsdy
|
||||
2JtMrKu0qbfxfWeOr1uD69WWsPkgWZ8HHP+7VibHwyXUuc7FmHuxDQCtWFNkj9rm
|
||||
lZr6d0LRlE/gU6T/SDixaqBbYR7VEOEMYhL0SA==
|
||||
-----END CERTIFICATE-----
|
||||
Version: 2
|
||||
Serial Number: 06:cf:38:7c:e0:4c:1c:3d:33:ab:43:a3:d8:37:d1:8d:2d:50
|
||||
Signature Algorithm: sha256WithRSAEncryption
|
||||
Issuer: /C=US/O=Let's Encrypt/CN=R12
|
||||
Not valid before: Feb 9 19:02:37 2026 GMT
|
||||
Not valid after: May 10 19:02:36 2026 GMT
|
||||
Subject: /CN=nextcloud.lan.ddnsgeek.com
|
||||
Public Key Algorithm: NULL
|
||||
RSA Public Key: (4096 bit)
|
||||
RSA Public-Key: (4096 bit)
|
||||
Modulus:
|
||||
00:c7:d9:3d:cb:23:50:44:40:c9:10:77:9a:f0:b1:
|
||||
fa:45:09:13:fe:60:29:e9:6f:ba:53:0c:57:7b:82:
|
||||
76:29:7c:ca:2a:29:dc:28:17:1c:d3:75:13:ff:61:
|
||||
b0:af:3f:82:e7:97:53:50:1b:72:93:54:ac:73:f5:
|
||||
72:53:65:ac:c9:2e:f8:6b:b0:01:01:78:f9:eb:a5:
|
||||
25:dc:9c:5c:cf:14:04:e0:78:1e:45:8e:fc:29:63:
|
||||
4a:76:b5:11:94:25:3f:1e:05:84:32:cc:4a:48:b6:
|
||||
b8:b3:fd:9a:03:4e:33:5f:e5:05:0d:6a:3c:6d:c1:
|
||||
dc:45:cb:28:ea:86:94:44:3f:cc:e8:e0:fe:0c:8f:
|
||||
10:1c:63:58:0d:db:61:96:4d:e2:88:9a:14:79:c0:
|
||||
df:6a:27:b4:53:7b:09:0e:c2:39:e0:89:0a:74:69:
|
||||
af:6c:c0:52:fa:51:3b:95:39:b8:7d:9c:7c:0a:6d:
|
||||
e2:08:5a:f4:54:12:80:08:fa:94:0a:85:18:3a:d1:
|
||||
0c:ba:94:97:5a:06:63:81:cc:e4:35:83:85:88:98:
|
||||
9c:9f:e7:df:88:43:46:85:8e:b7:50:f4:d8:fa:42:
|
||||
8c:d4:1f:3b:80:83:b3:ee:ae:75:03:7b:cc:13:50:
|
||||
05:98:92:04:4b:69:1a:74:27:ef:71:05:78:49:51:
|
||||
be:81:aa:64:ca:d0:14:96:ba:fd:51:25:7b:ea:09:
|
||||
c5:d4:0b:e4:92:2f:c9:ea:88:2e:57:c9:aa:53:20:
|
||||
02:23:38:ac:8b:54:2a:5f:61:4e:d5:8e:7d:3b:8f:
|
||||
08:66:ed:3f:1e:ea:0c:6e:a0:74:3d:82:0f:17:60:
|
||||
3d:f3:c1:b1:e8:8a:53:a0:d5:b1:b1:c0:b3:a6:80:
|
||||
bf:5e:fd:f3:63:b4:14:87:f8:2c:4e:ef:4a:69:15:
|
||||
4a:9c:da:7d:84:57:77:1f:c5:e4:8e:99:8b:eb:7b:
|
||||
4a:5b:02:fa:5e:dc:66:26:0c:03:27:d4:0c:fe:a4:
|
||||
98:ee:e6:08:64:51:42:6c:6e:d5:48:ba:85:98:c8:
|
||||
58:46:b6:54:9e:9e:a6:e7:98:ec:6b:6b:12:6b:15:
|
||||
ba:59:da:fa:ea:be:8f:3d:af:23:fb:a4:f7:d1:05:
|
||||
1f:63:59:b9:cf:fa:e6:2e:bb:50:08:d4:96:56:00:
|
||||
ff:9f:1d:4d:c0:ba:91:7e:bf:58:ee:42:4d:1b:02:
|
||||
ce:48:58:d1:c0:98:db:11:ab:b3:68:ba:6e:89:39:
|
||||
d1:3c:d0:f7:42:25:22:96:b8:20:ad:7d:b8:3b:a7:
|
||||
c5:be:a2:ec:11:58:fe:6e:7a:96:6a:4a:91:87:32:
|
||||
35:f9:41:08:ea:cf:b4:14:a4:56:95:1e:e3:9b:24:
|
||||
55:57:51
|
||||
Exponent: 65537 (0x10001)
|
||||
X509v3 Extensions:
|
||||
X509v3 Key Usage: critical
|
||||
Digital Signature, Key Encipherment
|
||||
X509v3 Extended Key Usage:
|
||||
TLS Web Server Authentication, TLS Web Client Authentication
|
||||
X509v3 Basic Constraints: critical
|
||||
CA:FALSE
|
||||
X509v3 Subject Key Identifier:
|
||||
2F:A7:49:E0:BE:37:58:D6:3C:25:3E:3C:7E:92:B6:37:6E:0C:8A:6C
|
||||
X509v3 Authority Key Identifier:
|
||||
00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2
|
||||
Authority Information Access:
|
||||
CA Issuers - URI:http://r12.i.lencr.org/
|
||||
X509v3 Subject Alternative Name:
|
||||
DNS:nextcloud.lan.ddnsgeek.com
|
||||
X509v3 Certificate Policies:
|
||||
Policy: 2.23.140.1.2.1
|
||||
X509v3 CRL Distribution Points:
|
||||
Full Name:
|
||||
URI:http://r12.c.lencr.org/81.crl
|
||||
|
||||
CT Precertificate SCTs:
|
||||
Signed Certificate Timestamp:
|
||||
Version : v1 (0x0)
|
||||
Log ID : E3:23:8D:F2:8D:A2:88:E0:AA:E0:AC:F0:FA:90:C9:85:
|
||||
F0:B6:BF:F5:D2:A5:27:B0:01:FC:1C:44:58:C4:B6:E8
|
||||
Timestamp : Feb 9 20:01:07.523 2026 GMT
|
||||
Extensions: 00:00:05:00:32:0E:2C:21
|
||||
Signature : ecdsa-with-SHA256
|
||||
30:45:02:20:22:B0:B2:76:41:B6:38:0D:E4:FA:8B:78:
|
||||
C4:38:71:46:97:27:CE:40:4A:1D:33:59:CA:51:C4:96:
|
||||
F5:73:D0:9F:02:21:00:DF:26:E7:8B:78:27:15:8D:8A:
|
||||
C5:C4:57:E2:04:2E:C7:FF:4C:5D:8D:44:88:3F:45:30:
|
||||
64:A9:96:C5:AA:3F:4F
|
||||
Signed Certificate Timestamp:
|
||||
Version : v1 (0x0)
|
||||
Log ID : 16:83:2D:AB:F0:A9:25:0F:0F:F0:3A:A5:45:FF:C8:BF:
|
||||
C8:23:D0:87:4B:F6:04:29:27:F8:E7:1F:33:13:F5:FA
|
||||
Timestamp : Feb 9 20:01:09.430 2026 GMT
|
||||
Extensions: none
|
||||
Signature : ecdsa-with-SHA256
|
||||
30:45:02:21:00:F9:07:C4:11:7C:F0:DB:30:2C:1C:F1:
|
||||
DA:3A:A7:D5:17:A7:26:8B:40:E2:B1:6B:35:03:3D:D4:
|
||||
4A:1F:FF:26:7B:02:20:07:2F:99:3E:72:A1:32:FC:62:
|
||||
7F:E5:E4:AB:0D:82:EB:EC:70:A0:14:16:41:13:91:47:
|
||||
62:55:DF:43:F9:77:D8
|
||||
Verify m:
|
||||
unable to get local issuer certificate
|
||||
|
||||
SSL Certificate:
|
||||
Signature Algorithm: sha256WithRSAEncryption
|
||||
RSA Key Strength: 4096
|
||||
|
||||
Subject: nextcloud.lan.ddnsgeek.com
|
||||
Altnames: DNS:nextcloud.lan.ddnsgeek.com
|
||||
Issuer: R12
|
||||
|
||||
Not valid before: Feb 9 19:02:37 2026 GMT
|
||||
Not valid after: May 10 19:02:36 2026 GMT
|
||||
|
||||
|
||||
```
|
||||
+9
@@ -0,0 +1,9 @@
|
||||
```bash
|
||||
ffuf -u https://nextcloud.lan.ddnsgeek.com:443/ -t 10 -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -H "Host: FUZZ.nextcloud.lan.ddnsgeek.com" -mc all -fs 19 -r -noninteractive -s | tee "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nextcloud.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt"
|
||||
```
|
||||
|
||||
[/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nextcloud.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt](file:///root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nextcloud.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt):
|
||||
|
||||
```
|
||||
|
||||
```
|
||||
+31
@@ -0,0 +1,31 @@
|
||||
```bash
|
||||
nikto -ask=no -Tuning=x4567890ac -nointeractive -host https://nextcloud.lan.ddnsgeek.com:443 2>&1 | tee "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt"
|
||||
```
|
||||
|
||||
[/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt](file:///root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt):
|
||||
|
||||
```
|
||||
- Nikto v2.6.0
|
||||
---------------------------------------------------------------------------
|
||||
+ Your Nikto installation is out of date.
|
||||
+ Target IP: 167.179.167.166
|
||||
+ Target Hostname: nextcloud.lan.ddnsgeek.com
|
||||
+ Target Port: 443
|
||||
---------------------------------------------------------------------------
|
||||
+ SSL Info: Subject: /CN=nextcloud.lan.ddnsgeek.com
|
||||
CN: nextcloud.lan.ddnsgeek.com
|
||||
SAN: nextcloud.lan.ddnsgeek.com
|
||||
Ciphers: TLS_AES_128_GCM_SHA256
|
||||
Issuer: /C=US/O=Let's Encrypt/CN=R12
|
||||
+ Platform: Linux/Unix
|
||||
+ Start Time: 2026-04-05 08:16:11 (GMT0)
|
||||
---------------------------------------------------------------------------
|
||||
+ Server: Apache/2.4.66 (Debian)
|
||||
+ [999986] /: Retrieved x-powered-by header: PHP/8.3.30.
|
||||
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
|
||||
+ [999100] /index.php/login: Uncommon header(s) 'x-request-id' found, with contents: cM0SfixyCyb80zOKJ4nJ.
|
||||
+ [600625] PHP/8.3.30 appears to be outdated (current is at least 8.5.1).
|
||||
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
|
||||
+ [999984] /index.html: Server may leak inodes via ETags, header found with file /index.html, inode: 14b, size: 64e41fd0d4aac, mtime: gzip. See: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1418
|
||||
|
||||
```
|
||||
+266
@@ -0,0 +1,266 @@
|
||||
```bash
|
||||
whatweb --color=never --no-errors -a 3 -v https://nextcloud.lan.ddnsgeek.com:443 2>&1
|
||||
```
|
||||
|
||||
[/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt](file:///root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt):
|
||||
|
||||
```
|
||||
WhatWeb report for https://nextcloud.lan.ddnsgeek.com:443
|
||||
Status : 302 Found
|
||||
Title : <None>
|
||||
IP : 167.179.167.166
|
||||
Country : NEW ZEALAND, NZ
|
||||
|
||||
Summary : Apache[2.4.66], Cookies[__Host-nc_sameSiteCookielax,__Host-nc_sameSiteCookiestrict,oc_sessionPassphrase,ocexfs76yoe2], HTTPServer[Debian Linux][Apache/2.4.66 (Debian)], HttpOnly[__Host-nc_sameSiteCookielax,__Host-nc_sameSiteCookiestrict,oc_sessionPassphrase,ocexfs76yoe2], PHP[8.3.30], RedirectLocation[https://nextcloud.lan.ddnsgeek.com/index.php/login], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[content-security-policy,referrer-policy,x-content-type-options,x-permitted-cross-domain-policies,x-robots-tag], X-Frame-Options[SAMEORIGIN], X-Powered-By[PHP/8.3.30], X-XSS-Protection[1; mode=block]
|
||||
|
||||
Detected Plugins:
|
||||
[ Apache ]
|
||||
The Apache HTTP Server Project is an effort to develop and
|
||||
maintain an open-source HTTP server for modern operating
|
||||
systems including UNIX and Windows NT. The goal of this
|
||||
project is to provide a secure, efficient and extensible
|
||||
server that provides HTTP services in sync with the current
|
||||
HTTP standards.
|
||||
|
||||
Version : 2.4.66 (from HTTP Server Header)
|
||||
Google Dorks: (3)
|
||||
Website : http://httpd.apache.org/
|
||||
|
||||
[ Cookies ]
|
||||
Display the names of cookies in the HTTP headers. The
|
||||
values are not returned to save on space.
|
||||
|
||||
String : ocexfs76yoe2
|
||||
String : oc_sessionPassphrase
|
||||
String : ocexfs76yoe2
|
||||
String : __Host-nc_sameSiteCookielax
|
||||
String : __Host-nc_sameSiteCookiestrict
|
||||
String : ocexfs76yoe2
|
||||
|
||||
[ HTTPServer ]
|
||||
HTTP server header string. This plugin also attempts to
|
||||
identify the operating system from the server header.
|
||||
|
||||
OS : Debian Linux
|
||||
String : Apache/2.4.66 (Debian) (from server string)
|
||||
|
||||
[ HttpOnly ]
|
||||
If the HttpOnly flag is included in the HTTP set-cookie
|
||||
response header and the browser supports it then the cookie
|
||||
cannot be accessed through client side script - More Info:
|
||||
http://en.wikipedia.org/wiki/HTTP_cookie
|
||||
|
||||
String : __Host-nc_sameSiteCookielax,__Host-nc_sameSiteCookiestrict,oc_sessionPassphrase,ocexfs76yoe2
|
||||
|
||||
[ PHP ]
|
||||
PHP is a widely-used general-purpose scripting language
|
||||
that is especially suited for Web development and can be
|
||||
embedded into HTML. This plugin identifies PHP errors,
|
||||
modules and versions and extracts the local file path and
|
||||
username if present.
|
||||
|
||||
Version : 8.3.30
|
||||
Google Dorks: (3)
|
||||
Website : http://www.php.net/
|
||||
|
||||
[ RedirectLocation ]
|
||||
HTTP Server string location. used with http-status 301 and
|
||||
302
|
||||
|
||||
String : https://nextcloud.lan.ddnsgeek.com/index.php/login (from location)
|
||||
|
||||
[ Strict-Transport-Security ]
|
||||
Strict-Transport-Security is an HTTP header that restricts
|
||||
a web browser from accessing a website without the security
|
||||
of the HTTPS protocol.
|
||||
|
||||
String : max-age=15552000; includeSubDomains; preload
|
||||
|
||||
[ UncommonHeaders ]
|
||||
Uncommon HTTP server headers. The blacklist includes all
|
||||
the standard headers and many non standard but common ones.
|
||||
Interesting but fairly common headers should have their own
|
||||
plugins, eg. x-powered-by, server and x-aspnet-version.
|
||||
Info about headers can be found at www.http-stats.com
|
||||
|
||||
String : content-security-policy,referrer-policy,x-content-type-options,x-permitted-cross-domain-policies,x-robots-tag (from headers)
|
||||
|
||||
[ X-Frame-Options ]
|
||||
This plugin retrieves the X-Frame-Options value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : SAMEORIGIN
|
||||
|
||||
[ X-Powered-By ]
|
||||
X-Powered-By HTTP header
|
||||
|
||||
String : PHP/8.3.30 (from x-powered-by string)
|
||||
|
||||
[ X-XSS-Protection ]
|
||||
This plugin retrieves the X-XSS-Protection value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : 1; mode=block
|
||||
|
||||
HTTP Headers:
|
||||
HTTP/1.1 302 Found
|
||||
Content-Length: 0
|
||||
Content-Security-Policy: default-src 'self'; script-src 'self' 'nonce-jBF4PW7Nahz7qJf01Ql5+OPaeNUN0RV0T/nfH+WBIPA='; style-src 'self' 'unsafe-inline'; frame-src *; img-src * data: blob:; font-src 'self' data:; media-src *; connect-src *; object-src 'none'; base-uri 'self';
|
||||
Content-Type: text/html; charset=UTF-8
|
||||
Date: Sun, 05 Apr 2026 08:25:23 GMT
|
||||
Location: https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
Referrer-Policy: no-referrer
|
||||
Server: Apache/2.4.66 (Debian)
|
||||
Set-Cookie: ocexfs76yoe2=0502aeb89f6be80bb391a1abfd08525d; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Set-Cookie: oc_sessionPassphrase=yh7PzM6DWTY7HEAttA9lvgWmmVxOQ2YDkL19S3w0zOHt8ozOqNco9XLM%2BLiTUrNHJXssRgYZ67HAiDcpGTK7cKtYBZ6wm%2BCEvIefKrgsn9h0UPRGcc0FGFf%2B6kNtvkvn; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Set-Cookie: ocexfs76yoe2=0502aeb89f6be80bb391a1abfd08525d; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Set-Cookie: __Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
|
||||
Set-Cookie: __Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
|
||||
Set-Cookie: ocexfs76yoe2=0502aeb89f6be80bb391a1abfd08525d; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
X-Content-Type-Options: nosniff
|
||||
X-Frame-Options: SAMEORIGIN
|
||||
X-Permitted-Cross-Domain-Policies: none
|
||||
X-Powered-By: PHP/8.3.30
|
||||
X-Robots-Tag: noindex, nofollow
|
||||
X-Xss-Protection: 1; mode=block
|
||||
Connection: close
|
||||
|
||||
WhatWeb report for https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
Status : 200 OK
|
||||
Title : ,Login – Nextcloud
|
||||
IP : 167.179.167.166
|
||||
Country : NEW ZEALAND, NZ
|
||||
|
||||
Summary : Apache[2.4.66], Cookies[ocexfs76yoe2], HTML5, HTTPServer[Debian Linux][Apache/2.4.66 (Debian)], HttpOnly[ocexfs76yoe2], Open-Graph-Protocol[website], PHP[8.3.30], Script, Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[content-security-policy,feature-policy,referrer-policy,x-content-type-options,x-permitted-cross-domain-policies,x-request-id,x-robots-tag], X-Frame-Options[SAMEORIGIN], X-Powered-By[PHP/8.3.30], X-XSS-Protection[1; mode=block]
|
||||
|
||||
Detected Plugins:
|
||||
[ Apache ]
|
||||
The Apache HTTP Server Project is an effort to develop and
|
||||
maintain an open-source HTTP server for modern operating
|
||||
systems including UNIX and Windows NT. The goal of this
|
||||
project is to provide a secure, efficient and extensible
|
||||
server that provides HTTP services in sync with the current
|
||||
HTTP standards.
|
||||
|
||||
Version : 2.4.66 (from HTTP Server Header)
|
||||
Google Dorks: (3)
|
||||
Website : http://httpd.apache.org/
|
||||
|
||||
[ Cookies ]
|
||||
Display the names of cookies in the HTTP headers. The
|
||||
values are not returned to save on space.
|
||||
|
||||
String : ocexfs76yoe2
|
||||
|
||||
[ HTML5 ]
|
||||
HTML version 5, detected by the doctype declaration
|
||||
|
||||
|
||||
[ HTTPServer ]
|
||||
HTTP server header string. This plugin also attempts to
|
||||
identify the operating system from the server header.
|
||||
|
||||
OS : Debian Linux
|
||||
String : Apache/2.4.66 (Debian) (from server string)
|
||||
|
||||
[ HttpOnly ]
|
||||
If the HttpOnly flag is included in the HTTP set-cookie
|
||||
response header and the browser supports it then the cookie
|
||||
cannot be accessed through client side script - More Info:
|
||||
http://en.wikipedia.org/wiki/HTTP_cookie
|
||||
|
||||
String : ocexfs76yoe2
|
||||
|
||||
[ Open-Graph-Protocol ]
|
||||
The Open Graph protocol enables you to integrate your Web
|
||||
pages into the social graph. It is currently designed for
|
||||
Web pages representing profiles of real-world things .
|
||||
things like movies, sports teams, celebrities, and
|
||||
restaurants. Including Open Graph tags on your Web page,
|
||||
makes your page equivalent to a Facebook Page.
|
||||
|
||||
Version : website
|
||||
|
||||
[ PHP ]
|
||||
PHP is a widely-used general-purpose scripting language
|
||||
that is especially suited for Web development and can be
|
||||
embedded into HTML. This plugin identifies PHP errors,
|
||||
modules and versions and extracts the local file path and
|
||||
username if present.
|
||||
|
||||
Version : 8.3.30
|
||||
Google Dorks: (3)
|
||||
Website : http://www.php.net/
|
||||
|
||||
[ Script ]
|
||||
This plugin detects instances of script HTML elements and
|
||||
returns the script language/type.
|
||||
|
||||
|
||||
[ Strict-Transport-Security ]
|
||||
Strict-Transport-Security is an HTTP header that restricts
|
||||
a web browser from accessing a website without the security
|
||||
of the HTTPS protocol.
|
||||
|
||||
String : max-age=15552000; includeSubDomains; preload
|
||||
|
||||
[ UncommonHeaders ]
|
||||
Uncommon HTTP server headers. The blacklist includes all
|
||||
the standard headers and many non standard but common ones.
|
||||
Interesting but fairly common headers should have their own
|
||||
plugins, eg. x-powered-by, server and x-aspnet-version.
|
||||
Info about headers can be found at www.http-stats.com
|
||||
|
||||
String : content-security-policy,feature-policy,referrer-policy,x-content-type-options,x-permitted-cross-domain-policies,x-request-id,x-robots-tag (from headers)
|
||||
|
||||
[ X-Frame-Options ]
|
||||
This plugin retrieves the X-Frame-Options value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : SAMEORIGIN
|
||||
|
||||
[ X-Powered-By ]
|
||||
X-Powered-By HTTP header
|
||||
|
||||
String : PHP/8.3.30 (from x-powered-by string)
|
||||
|
||||
[ X-XSS-Protection ]
|
||||
This plugin retrieves the X-XSS-Protection value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : 1; mode=block
|
||||
|
||||
HTTP Headers:
|
||||
HTTP/1.1 200 OK
|
||||
Cache-Control: no-cache, no-store, must-revalidate
|
||||
Content-Encoding: gzip
|
||||
Content-Length: 5803
|
||||
Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-E/y++JVhUAGMmgbdxDsI7DMjrWvCSk3K8sBFlL2CjXM=';script-src-elem 'strict-dynamic' 'nonce-E/y++JVhUAGMmgbdxDsI7DMjrWvCSk3K8sBFlL2CjXM=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'
|
||||
Content-Type: text/html; charset=UTF-8
|
||||
Date: Sun, 05 Apr 2026 08:28:23 GMT
|
||||
Feature-Policy: autoplay 'self';camera 'none';fullscreen 'self';geolocation 'none';microphone 'none';payment 'none'
|
||||
Referrer-Policy: same-origin
|
||||
Server: Apache/2.4.66 (Debian)
|
||||
Set-Cookie: ocexfs76yoe2=0502aeb89f6be80bb391a1abfd08525d; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
X-Content-Type-Options: nosniff
|
||||
X-Frame-Options: SAMEORIGIN
|
||||
X-Permitted-Cross-Domain-Policies: none
|
||||
X-Powered-By: PHP/8.3.30
|
||||
X-Request-Id: hQlveGNuRyEf5cb7mJIq
|
||||
X-Robots-Tag: noindex, nofollow
|
||||
X-Xss-Protection: 1; mode=block
|
||||
Connection: close
|
||||
|
||||
|
||||
|
||||
```
|
||||
+14
@@ -0,0 +1,14 @@
|
||||
```bash
|
||||
curl -sSikf http://nextcloud.lan.ddnsgeek.com:80/robots.txt
|
||||
```
|
||||
|
||||
[/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl-robots.txt](file:///root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl-robots.txt):
|
||||
|
||||
```
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://nextcloud.lan.ddnsgeek.com/robots.txt
|
||||
Date: Sun, 05 Apr 2026 08:15:01 GMT
|
||||
Content-Length: 17
|
||||
|
||||
Moved Permanently
|
||||
```
|
||||
+15
@@ -0,0 +1,15 @@
|
||||
```bash
|
||||
curl -sSik http://nextcloud.lan.ddnsgeek.com:80/
|
||||
```
|
||||
|
||||
[/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl.html](file:///root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl.html):
|
||||
|
||||
```
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://nextcloud.lan.ddnsgeek.com/
|
||||
Date: Sun, 05 Apr 2026 08:15:01 GMT
|
||||
Content-Length: 17
|
||||
|
||||
Moved Permanently
|
||||
|
||||
```
|
||||
+352
@@ -0,0 +1,352 @@
|
||||
```bash
|
||||
feroxbuster -u http://nextcloud.lan.ddnsgeek.com:80/ -t 10 -w /root/.local/share/AutoRecon/wordlists/dirbuster.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -q -e -r -o "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt"
|
||||
```
|
||||
|
||||
[/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt](file:///root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt):
|
||||
|
||||
```
|
||||
Configuration {
|
||||
kind: "configuration",
|
||||
wordlist: "/root/.local/share/AutoRecon/wordlists/dirbuster.txt",
|
||||
config: "/etc/feroxbuster/ferox-config.toml",
|
||||
proxy: "",
|
||||
replay_proxy: "",
|
||||
server_certs: [],
|
||||
client_cert: "",
|
||||
client_key: "",
|
||||
target_url: "http://nextcloud.lan.ddnsgeek.com/",
|
||||
status_codes: [
|
||||
100,
|
||||
101,
|
||||
102,
|
||||
200,
|
||||
201,
|
||||
202,
|
||||
203,
|
||||
204,
|
||||
205,
|
||||
206,
|
||||
207,
|
||||
208,
|
||||
226,
|
||||
300,
|
||||
301,
|
||||
302,
|
||||
303,
|
||||
304,
|
||||
305,
|
||||
307,
|
||||
308,
|
||||
400,
|
||||
401,
|
||||
402,
|
||||
403,
|
||||
404,
|
||||
405,
|
||||
406,
|
||||
407,
|
||||
408,
|
||||
409,
|
||||
410,
|
||||
411,
|
||||
412,
|
||||
413,
|
||||
414,
|
||||
415,
|
||||
416,
|
||||
417,
|
||||
418,
|
||||
421,
|
||||
422,
|
||||
423,
|
||||
424,
|
||||
426,
|
||||
428,
|
||||
429,
|
||||
431,
|
||||
451,
|
||||
500,
|
||||
501,
|
||||
502,
|
||||
503,
|
||||
504,
|
||||
505,
|
||||
506,
|
||||
507,
|
||||
508,
|
||||
510,
|
||||
511,
|
||||
103,
|
||||
425,
|
||||
],
|
||||
replay_codes: [
|
||||
100,
|
||||
101,
|
||||
102,
|
||||
200,
|
||||
201,
|
||||
202,
|
||||
203,
|
||||
204,
|
||||
205,
|
||||
206,
|
||||
207,
|
||||
208,
|
||||
226,
|
||||
300,
|
||||
301,
|
||||
302,
|
||||
303,
|
||||
304,
|
||||
305,
|
||||
307,
|
||||
308,
|
||||
400,
|
||||
401,
|
||||
402,
|
||||
403,
|
||||
404,
|
||||
405,
|
||||
406,
|
||||
407,
|
||||
408,
|
||||
409,
|
||||
410,
|
||||
411,
|
||||
412,
|
||||
413,
|
||||
414,
|
||||
415,
|
||||
416,
|
||||
417,
|
||||
418,
|
||||
421,
|
||||
422,
|
||||
423,
|
||||
424,
|
||||
426,
|
||||
428,
|
||||
429,
|
||||
431,
|
||||
451,
|
||||
500,
|
||||
501,
|
||||
502,
|
||||
503,
|
||||
504,
|
||||
505,
|
||||
506,
|
||||
507,
|
||||
508,
|
||||
510,
|
||||
511,
|
||||
103,
|
||||
425,
|
||||
],
|
||||
filter_status: [],
|
||||
client: Client {
|
||||
accepts: Accepts,
|
||||
proxies: [
|
||||
Matcher,
|
||||
],
|
||||
redirect_policy: "Policy(Custom)",
|
||||
referer: true,
|
||||
default_headers: {
|
||||
"accept": "*/*",
|
||||
"user-agent": "feroxbuster/2.13.1",
|
||||
},
|
||||
reqwest::config::RequestTimeout: 7s,
|
||||
},
|
||||
replay_client: None,
|
||||
threads: 10,
|
||||
timeout: 7,
|
||||
verbosity: 1,
|
||||
silent: false,
|
||||
quiet: true,
|
||||
output_level: Quiet,
|
||||
auto_bail: false,
|
||||
auto_tune: false,
|
||||
requester_policy: Default,
|
||||
json: false,
|
||||
output: "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt",
|
||||
debug_log: "",
|
||||
user_agent: "feroxbuster/2.13.1",
|
||||
random_agent: false,
|
||||
redirects: true,
|
||||
insecure: true,
|
||||
extensions: [
|
||||
"txt",
|
||||
"html",
|
||||
"php",
|
||||
"asp",
|
||||
"aspx",
|
||||
"jsp",
|
||||
],
|
||||
methods: [
|
||||
"GET",
|
||||
],
|
||||
data: [],
|
||||
headers: {},
|
||||
queries: [],
|
||||
no_recursion: true,
|
||||
extract_links: true,
|
||||
add_slash: false,
|
||||
stdin: false,
|
||||
cached_stdin: [],
|
||||
depth: 4,
|
||||
scan_limit: 0,
|
||||
parallel: 0,
|
||||
rate_limit: 0,
|
||||
filter_size: [],
|
||||
filter_line_count: [],
|
||||
filter_word_count: [],
|
||||
filter_regex: [],
|
||||
dont_filter: false,
|
||||
resumed: false,
|
||||
resume_from: "",
|
||||
save_state: true,
|
||||
time_limit: "",
|
||||
filter_similar: [],
|
||||
url_denylist: [],
|
||||
regex_denylist: [],
|
||||
scope: [
|
||||
Url {
|
||||
scheme: "http",
|
||||
cannot_be_a_base: false,
|
||||
username: "",
|
||||
password: None,
|
||||
host: Some(
|
||||
Domain(
|
||||
"nextcloud.lan.ddnsgeek.com",
|
||||
),
|
||||
),
|
||||
port: None,
|
||||
path: "/",
|
||||
query: None,
|
||||
fragment: None,
|
||||
},
|
||||
],
|
||||
collect_extensions: false,
|
||||
dont_collect: [
|
||||
"woff2",
|
||||
"woff",
|
||||
"ttf",
|
||||
"otf",
|
||||
"eot",
|
||||
"tif",
|
||||
"tiff",
|
||||
"ico",
|
||||
"cur",
|
||||
"bmp",
|
||||
"webp",
|
||||
"svg",
|
||||
"png",
|
||||
"jpg",
|
||||
"jpeg",
|
||||
"jfif",
|
||||
"gif",
|
||||
"avif",
|
||||
"apng",
|
||||
"pjpeg",
|
||||
"pjp",
|
||||
"mov",
|
||||
"wav",
|
||||
"mpg",
|
||||
"mpeg",
|
||||
"mp3",
|
||||
"mp4",
|
||||
"m4a",
|
||||
"m4p",
|
||||
"m4v",
|
||||
"ogg",
|
||||
"webm",
|
||||
"ogv",
|
||||
"oga",
|
||||
"flac",
|
||||
"aac",
|
||||
"3gp",
|
||||
"css",
|
||||
"zip",
|
||||
"xls",
|
||||
"xml",
|
||||
"gz",
|
||||
"tgz",
|
||||
],
|
||||
collect_backups: false,
|
||||
backup_extensions: [
|
||||
"~",
|
||||
".bak",
|
||||
".bak2",
|
||||
".old",
|
||||
".1",
|
||||
],
|
||||
collect_words: false,
|
||||
force_recursion: false,
|
||||
update_app: false,
|
||||
scan_dir_listings: false,
|
||||
request_file: "",
|
||||
protocol: "https",
|
||||
limit_bars: 0,
|
||||
unique: false,
|
||||
response_size_limit: 4194304,
|
||||
}
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/apps/dashboard
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/apps/logreader
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/apps/photos
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/apps/files
|
||||
200 GET 494l 1557w 31067c https://nextcloud.lan.ddnsgeek.com/index.php/apps/files_pdfviewer
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/apps/activity
|
||||
200 GET 93l 341w 16047c https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.txt
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/settings/user/security
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.txt
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.html
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.html
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.php
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.php
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.asp
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.asp
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.aspx
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.aspx
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.jsp
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.jsp
|
||||
200 GET 6l 12w 281c https://nextcloud.lan.ddnsgeek.com/.well-known/security.txt
|
||||
200 GET 1l 5w 77c https://nextcloud.lan.ddnsgeek.com/cron.php
|
||||
200 GET 12l 31w 331c https://nextcloud.lan.ddnsgeek.com/index.html
|
||||
500 GET 2l 11w 72c https://nextcloud.lan.ddnsgeek.com/public.php
|
||||
200 GET 2l 4w 26c https://nextcloud.lan.ddnsgeek.com/robots.txt
|
||||
200 GET 1l 1w 170c https://nextcloud.lan.ddnsgeek.com/status.php
|
||||
200 GET 0l 0w 0c https://nextcloud.lan.ddnsgeek.com/version.php
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/] => https://nextcloud.lan.ddnsgeek.com/]
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/[ => https://nextcloud.lan.ddnsgeek.com/[
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/[.txt => https://nextcloud.lan.ddnsgeek.com/[.txt
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/].txt => https://nextcloud.lan.ddnsgeek.com/].txt
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/].html => https://nextcloud.lan.ddnsgeek.com/].html
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/[.html => https://nextcloud.lan.ddnsgeek.com/[.html
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/[.php => https://nextcloud.lan.ddnsgeek.com/[.php
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/].php => https://nextcloud.lan.ddnsgeek.com/].php
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/].asp => https://nextcloud.lan.ddnsgeek.com/].asp
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/[.asp => https://nextcloud.lan.ddnsgeek.com/[.asp
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/[.aspx => https://nextcloud.lan.ddnsgeek.com/[.aspx
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/].aspx => https://nextcloud.lan.ddnsgeek.com/].aspx
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/].jsp => https://nextcloud.lan.ddnsgeek.com/].jsp
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/[.jsp => https://nextcloud.lan.ddnsgeek.com/[.jsp
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/plain] => https://nextcloud.lan.ddnsgeek.com/plain]
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/plain].txt => https://nextcloud.lan.ddnsgeek.com/plain].txt
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/plain].html => https://nextcloud.lan.ddnsgeek.com/plain].html
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/plain].php => https://nextcloud.lan.ddnsgeek.com/plain].php
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/plain].asp => https://nextcloud.lan.ddnsgeek.com/plain].asp
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/plain].aspx => https://nextcloud.lan.ddnsgeek.com/plain].aspx
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/plain].jsp => https://nextcloud.lan.ddnsgeek.com/plain].jsp
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/quote] => https://nextcloud.lan.ddnsgeek.com/quote]
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/quote].txt => https://nextcloud.lan.ddnsgeek.com/quote].txt
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/quote].html => https://nextcloud.lan.ddnsgeek.com/quote].html
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/quote].php => https://nextcloud.lan.ddnsgeek.com/quote].php
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/quote].asp => https://nextcloud.lan.ddnsgeek.com/quote].asp
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/quote].aspx => https://nextcloud.lan.ddnsgeek.com/quote].aspx
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/quote].jsp => https://nextcloud.lan.ddnsgeek.com/quote].jsp
|
||||
200 GET 661l 5535w 34520c https://nextcloud.lan.ddnsgeek.com/COPYING
|
||||
|
||||
```
|
||||
+14
@@ -0,0 +1,14 @@
|
||||
```bash
|
||||
curl -sSikf http://nextcloud.lan.ddnsgeek.com:80/.well-known/security.txt
|
||||
```
|
||||
|
||||
[/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_known-security.txt](file:///root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_known-security.txt):
|
||||
|
||||
```
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://nextcloud.lan.ddnsgeek.com/.well-known/security.txt
|
||||
Date: Sun, 05 Apr 2026 08:15:01 GMT
|
||||
Content-Length: 17
|
||||
|
||||
Moved Permanently
|
||||
```
|
||||
+99
@@ -0,0 +1,99 @@
|
||||
```bash
|
||||
nmap -vv --reason -Pn -T4 -sV -p 80 --script="banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt" -oX "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml" nextcloud.lan.ddnsgeek.com
|
||||
```
|
||||
|
||||
[/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt](file:///root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt):
|
||||
|
||||
```
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 08:15:02 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml nextcloud.lan.ddnsgeek.com
|
||||
Nmap scan report for nextcloud.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set (0.015s latency).
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 08:15:16 UTC for 1235s
|
||||
|
||||
Bug in http-security-headers: no string output.
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
| http-traceroute:
|
||||
| Status Code
|
||||
| Hop #1: 301
|
||||
| Hop #2: 301
|
||||
| Hop #3: 404
|
||||
| content-type
|
||||
| Hop #1
|
||||
| Hop #2
|
||||
| Hop #3: text/plain; charset=utf-8
|
||||
| content-length
|
||||
| Hop #1: 17
|
||||
| Hop #2: 17
|
||||
| Hop #3: 19
|
||||
| location
|
||||
| Hop #1: https://nextcloud.lan.ddnsgeek.com/
|
||||
| Hop #2: https://nextcloud.lan.ddnsgeek.com/
|
||||
|_ Hop #3
|
||||
| http-useragent-tester:
|
||||
| Status for browser useragent: 200
|
||||
| Redirected To: https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
| Allowed User Agents:
|
||||
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
|
||||
| libwww
|
||||
| lwp-trivial
|
||||
| libcurl-agent/1.0
|
||||
| PHP/
|
||||
| Python-urllib/2.5
|
||||
| GT::WWW
|
||||
| Snoopy
|
||||
| MFC_Tear_Sample
|
||||
| HTTP::Lite
|
||||
| PHPCrawl
|
||||
| URI::Fetch
|
||||
| Zend_Http_Client
|
||||
| http client
|
||||
| PECL::HTTP
|
||||
| Wget/1.13.4 (linux-gnu)
|
||||
|_ WWW-Mechanize/1.34
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
|_http-title: Did not follow redirect to https://nextcloud.lan.ddnsgeek.com/
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
|_http-date: Sun, 05 Apr 2026 08:16:39 GMT; -2m03s from local time.
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
| http-headers:
|
||||
| Location: https://nextcloud.lan.ddnsgeek.com/
|
||||
| Date: Sun, 05 Apr 2026 08:18:48 GMT
|
||||
| Content-Length: 17
|
||||
| Connection: close
|
||||
|
|
||||
|_ (Request type: GET)
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
|_http-errors: Couldn't find any error pages.
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
| http-vhosts:
|
||||
| 126 names had status 308
|
||||
| news.lan.ddnsgeek.com : 404
|
||||
|_intra.lan.ddnsgeek.com : 404
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
|_http-chrono: Request times for /; avg: 1469.81ms; min: 1340.59ms; max: 1702.87ms
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| Longest directory structure:
|
||||
| Depth: 0
|
||||
| Dir: /
|
||||
| Total files found (by extension):
|
||||
|_
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 08:35:52 2026 -- 1 IP address (1 host up) scanned in 1251.73 seconds
|
||||
|
||||
```
|
||||
+40485
File diff suppressed because it is too large
Load Diff
+32
@@ -0,0 +1,32 @@
|
||||
```bash
|
||||
nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://nextcloud.lan.ddnsgeek.com:80 2>&1 | tee "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt"
|
||||
```
|
||||
|
||||
[/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt](file:///root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt):
|
||||
|
||||
```
|
||||
- Nikto v2.6.0
|
||||
---------------------------------------------------------------------------
|
||||
+ Your Nikto installation is out of date.
|
||||
+ Target IP: 167.179.167.166
|
||||
+ Target Hostname: nextcloud.lan.ddnsgeek.com
|
||||
+ Target Port: 80
|
||||
+ Platform: Unknown
|
||||
+ Start Time: 2026-04-05 08:16:04 (GMT0)
|
||||
---------------------------------------------------------------------------
|
||||
+ Server: No banner retrieved
|
||||
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
|
||||
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
|
||||
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
|
||||
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
|
||||
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
|
||||
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
|
||||
+ [999979] http://100.100.100.200/latest/meta-data/: IP address found in the 'location' header. The IP is "100.100.100.200". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed
|
||||
+ [007342] /: X-Frame-Options header is deprecated and was replaced with the Content-Security-Policy HTTP header with the frame-ancestors directive. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options
|
||||
+ [007352] /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/
|
||||
+ 7900 requests: 16 errors and 8 items reported on the remote host
|
||||
+ End Time: 2026-04-05 08:47:41 (GMT0) (1897 seconds)
|
||||
---------------------------------------------------------------------------
|
||||
+ 1 host(s) tested
|
||||
|
||||
```
|
||||
+276
@@ -0,0 +1,276 @@
|
||||
```bash
|
||||
whatweb --color=never --no-errors -a 3 -v http://nextcloud.lan.ddnsgeek.com:80 2>&1
|
||||
```
|
||||
|
||||
[/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_whatweb.txt](file:///root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_whatweb.txt):
|
||||
|
||||
```
|
||||
WhatWeb report for http://nextcloud.lan.ddnsgeek.com:80
|
||||
Status : 301 Moved Permanently
|
||||
Title : <None>
|
||||
IP : 167.179.167.166
|
||||
Country : NEW ZEALAND, NZ
|
||||
|
||||
Summary : RedirectLocation[https://nextcloud.lan.ddnsgeek.com/]
|
||||
|
||||
Detected Plugins:
|
||||
[ RedirectLocation ]
|
||||
HTTP Server string location. used with http-status 301 and
|
||||
302
|
||||
|
||||
String : https://nextcloud.lan.ddnsgeek.com/ (from location)
|
||||
|
||||
HTTP Headers:
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://nextcloud.lan.ddnsgeek.com/
|
||||
Date: Sun, 05 Apr 2026 08:19:27 GMT
|
||||
Content-Length: 17
|
||||
Connection: close
|
||||
|
||||
WhatWeb report for https://nextcloud.lan.ddnsgeek.com/
|
||||
Status : 302 Found
|
||||
Title : <None>
|
||||
IP : 167.179.167.166
|
||||
Country : NEW ZEALAND, NZ
|
||||
|
||||
Summary : Cookies[__Host-nc_sameSiteCookielax,__Host-nc_sameSiteCookiestrict,oc_sessionPassphrase,ocexfs76yoe2], HTTPServer[Debian Linux][Apache/2.4.66 (Debian)], HttpOnly[__Host-nc_sameSiteCookielax,__Host-nc_sameSiteCookiestrict,oc_sessionPassphrase,ocexfs76yoe2], PHP[8.3.30], RedirectLocation[https://nextcloud.lan.ddnsgeek.com/index.php/login], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[content-security-policy,referrer-policy,x-content-type-options,x-permitted-cross-domain-policies,x-robots-tag], X-Frame-Options[SAMEORIGIN], X-Powered-By[PHP/8.3.30], X-XSS-Protection[1; mode=block]
|
||||
|
||||
Detected Plugins:
|
||||
[ Cookies ]
|
||||
Display the names of cookies in the HTTP headers. The
|
||||
values are not returned to save on space.
|
||||
|
||||
String : ocexfs76yoe2
|
||||
String : oc_sessionPassphrase
|
||||
String : ocexfs76yoe2
|
||||
String : __Host-nc_sameSiteCookielax
|
||||
String : __Host-nc_sameSiteCookiestrict
|
||||
String : ocexfs76yoe2
|
||||
|
||||
[ HTTPServer ]
|
||||
HTTP server header string. This plugin also attempts to
|
||||
identify the operating system from the server header.
|
||||
|
||||
OS : Debian Linux
|
||||
String : Apache/2.4.66 (Debian) (from server string)
|
||||
|
||||
[ HttpOnly ]
|
||||
If the HttpOnly flag is included in the HTTP set-cookie
|
||||
response header and the browser supports it then the cookie
|
||||
cannot be accessed through client side script - More Info:
|
||||
http://en.wikipedia.org/wiki/HTTP_cookie
|
||||
|
||||
String : __Host-nc_sameSiteCookielax,__Host-nc_sameSiteCookiestrict,oc_sessionPassphrase,ocexfs76yoe2
|
||||
|
||||
[ PHP ]
|
||||
PHP is a widely-used general-purpose scripting language
|
||||
that is especially suited for Web development and can be
|
||||
embedded into HTML. This plugin identifies PHP errors,
|
||||
modules and versions and extracts the local file path and
|
||||
username if present.
|
||||
|
||||
Version : 8.3.30
|
||||
Google Dorks: (3)
|
||||
Website : http://www.php.net/
|
||||
|
||||
[ RedirectLocation ]
|
||||
HTTP Server string location. used with http-status 301 and
|
||||
302
|
||||
|
||||
String : https://nextcloud.lan.ddnsgeek.com/index.php/login (from location)
|
||||
|
||||
[ Strict-Transport-Security ]
|
||||
Strict-Transport-Security is an HTTP header that restricts
|
||||
a web browser from accessing a website without the security
|
||||
of the HTTPS protocol.
|
||||
|
||||
String : max-age=15552000; includeSubDomains; preload
|
||||
|
||||
[ UncommonHeaders ]
|
||||
Uncommon HTTP server headers. The blacklist includes all
|
||||
the standard headers and many non standard but common ones.
|
||||
Interesting but fairly common headers should have their own
|
||||
plugins, eg. x-powered-by, server and x-aspnet-version.
|
||||
Info about headers can be found at www.http-stats.com
|
||||
|
||||
String : content-security-policy,referrer-policy,x-content-type-options,x-permitted-cross-domain-policies,x-robots-tag (from headers)
|
||||
|
||||
[ X-Frame-Options ]
|
||||
This plugin retrieves the X-Frame-Options value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : SAMEORIGIN
|
||||
|
||||
[ X-Powered-By ]
|
||||
X-Powered-By HTTP header
|
||||
|
||||
String : PHP/8.3.30 (from x-powered-by string)
|
||||
|
||||
[ X-XSS-Protection ]
|
||||
This plugin retrieves the X-XSS-Protection value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : 1; mode=block
|
||||
|
||||
HTTP Headers:
|
||||
HTTP/1.1 302 Found
|
||||
Content-Length: 0
|
||||
Content-Security-Policy: default-src 'self'; script-src 'self' 'nonce-FGzDOrcXLc9zPk8VixPSWXyY4A9tblc9Ze4kMyv+2aw='; style-src 'self' 'unsafe-inline'; frame-src *; img-src * data: blob:; font-src 'self' data:; media-src *; connect-src *; object-src 'none'; base-uri 'self';
|
||||
Content-Type: text/html; charset=UTF-8
|
||||
Date: Sun, 05 Apr 2026 08:19:48 GMT
|
||||
Location: https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
Referrer-Policy: no-referrer
|
||||
Server: Apache/2.4.66 (Debian)
|
||||
Set-Cookie: ocexfs76yoe2=affd533eb58b675e17ca401e417639b0; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Set-Cookie: oc_sessionPassphrase=yrnjr3kTg5BYogPZrxShkmXeTE8dkyeIKMDcnI6OlDMjnWEovYLupGYoV79IoPWumbrliRho5HBAGcWNtAuiz4%2F0w9aVsB8cO2JPviTZ6IyP6VgHAnbiy%2FLVpH3UVqiU; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Set-Cookie: ocexfs76yoe2=affd533eb58b675e17ca401e417639b0; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Set-Cookie: __Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
|
||||
Set-Cookie: __Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
|
||||
Set-Cookie: ocexfs76yoe2=affd533eb58b675e17ca401e417639b0; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
X-Content-Type-Options: nosniff
|
||||
X-Frame-Options: SAMEORIGIN
|
||||
X-Permitted-Cross-Domain-Policies: none
|
||||
X-Powered-By: PHP/8.3.30
|
||||
X-Robots-Tag: noindex, nofollow
|
||||
X-Xss-Protection: 1; mode=block
|
||||
Connection: close
|
||||
|
||||
WhatWeb report for https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
Status : 200 OK
|
||||
Title : ,Login – Nextcloud
|
||||
IP : 167.179.167.166
|
||||
Country : NEW ZEALAND, NZ
|
||||
|
||||
Summary : Apache[2.4.66], Cookies[ocexfs76yoe2], HTML5, HTTPServer[Debian Linux][Apache/2.4.66 (Debian)], HttpOnly[ocexfs76yoe2], Open-Graph-Protocol[website], PHP[8.3.30], Script, Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[content-security-policy,feature-policy,referrer-policy,x-content-type-options,x-permitted-cross-domain-policies,x-request-id,x-robots-tag], X-Frame-Options[SAMEORIGIN], X-Powered-By[PHP/8.3.30], X-XSS-Protection[1; mode=block]
|
||||
|
||||
Detected Plugins:
|
||||
[ Apache ]
|
||||
The Apache HTTP Server Project is an effort to develop and
|
||||
maintain an open-source HTTP server for modern operating
|
||||
systems including UNIX and Windows NT. The goal of this
|
||||
project is to provide a secure, efficient and extensible
|
||||
server that provides HTTP services in sync with the current
|
||||
HTTP standards.
|
||||
|
||||
Version : 2.4.66 (from HTTP Server Header)
|
||||
Google Dorks: (3)
|
||||
Website : http://httpd.apache.org/
|
||||
|
||||
[ Cookies ]
|
||||
Display the names of cookies in the HTTP headers. The
|
||||
values are not returned to save on space.
|
||||
|
||||
String : ocexfs76yoe2
|
||||
|
||||
[ HTML5 ]
|
||||
HTML version 5, detected by the doctype declaration
|
||||
|
||||
|
||||
[ HTTPServer ]
|
||||
HTTP server header string. This plugin also attempts to
|
||||
identify the operating system from the server header.
|
||||
|
||||
OS : Debian Linux
|
||||
String : Apache/2.4.66 (Debian) (from server string)
|
||||
|
||||
[ HttpOnly ]
|
||||
If the HttpOnly flag is included in the HTTP set-cookie
|
||||
response header and the browser supports it then the cookie
|
||||
cannot be accessed through client side script - More Info:
|
||||
http://en.wikipedia.org/wiki/HTTP_cookie
|
||||
|
||||
String : ocexfs76yoe2
|
||||
|
||||
[ Open-Graph-Protocol ]
|
||||
The Open Graph protocol enables you to integrate your Web
|
||||
pages into the social graph. It is currently designed for
|
||||
Web pages representing profiles of real-world things .
|
||||
things like movies, sports teams, celebrities, and
|
||||
restaurants. Including Open Graph tags on your Web page,
|
||||
makes your page equivalent to a Facebook Page.
|
||||
|
||||
Version : website
|
||||
|
||||
[ PHP ]
|
||||
PHP is a widely-used general-purpose scripting language
|
||||
that is especially suited for Web development and can be
|
||||
embedded into HTML. This plugin identifies PHP errors,
|
||||
modules and versions and extracts the local file path and
|
||||
username if present.
|
||||
|
||||
Version : 8.3.30
|
||||
Google Dorks: (3)
|
||||
Website : http://www.php.net/
|
||||
|
||||
[ Script ]
|
||||
This plugin detects instances of script HTML elements and
|
||||
returns the script language/type.
|
||||
|
||||
|
||||
[ Strict-Transport-Security ]
|
||||
Strict-Transport-Security is an HTTP header that restricts
|
||||
a web browser from accessing a website without the security
|
||||
of the HTTPS protocol.
|
||||
|
||||
String : max-age=15552000; includeSubDomains; preload
|
||||
|
||||
[ UncommonHeaders ]
|
||||
Uncommon HTTP server headers. The blacklist includes all
|
||||
the standard headers and many non standard but common ones.
|
||||
Interesting but fairly common headers should have their own
|
||||
plugins, eg. x-powered-by, server and x-aspnet-version.
|
||||
Info about headers can be found at www.http-stats.com
|
||||
|
||||
String : content-security-policy,feature-policy,referrer-policy,x-content-type-options,x-permitted-cross-domain-policies,x-request-id,x-robots-tag (from headers)
|
||||
|
||||
[ X-Frame-Options ]
|
||||
This plugin retrieves the X-Frame-Options value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : SAMEORIGIN
|
||||
|
||||
[ X-Powered-By ]
|
||||
X-Powered-By HTTP header
|
||||
|
||||
String : PHP/8.3.30 (from x-powered-by string)
|
||||
|
||||
[ X-XSS-Protection ]
|
||||
This plugin retrieves the X-XSS-Protection value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : 1; mode=block
|
||||
|
||||
HTTP Headers:
|
||||
HTTP/1.1 200 OK
|
||||
Cache-Control: no-cache, no-store, must-revalidate
|
||||
Content-Encoding: gzip
|
||||
Content-Length: 5801
|
||||
Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-yOG1PxBMIFP1f74ch3smft3R4lRE5UCTbgBUiKnBJNU=';script-src-elem 'strict-dynamic' 'nonce-yOG1PxBMIFP1f74ch3smft3R4lRE5UCTbgBUiKnBJNU=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'
|
||||
Content-Type: text/html; charset=UTF-8
|
||||
Date: Sun, 05 Apr 2026 08:25:30 GMT
|
||||
Feature-Policy: autoplay 'self';camera 'none';fullscreen 'self';geolocation 'none';microphone 'none';payment 'none'
|
||||
Referrer-Policy: same-origin
|
||||
Server: Apache/2.4.66 (Debian)
|
||||
Set-Cookie: ocexfs76yoe2=affd533eb58b675e17ca401e417639b0; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
X-Content-Type-Options: nosniff
|
||||
X-Frame-Options: SAMEORIGIN
|
||||
X-Permitted-Cross-Domain-Policies: none
|
||||
X-Powered-By: PHP/8.3.30
|
||||
X-Request-Id: HGFDRAOx21eCKoMjPMZh
|
||||
X-Robots-Tag: noindex, nofollow
|
||||
X-Xss-Protection: 1; mode=block
|
||||
Connection: close
|
||||
|
||||
|
||||
|
||||
```
|
||||
@@ -0,0 +1,40 @@
|
||||
nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN "/root/results/nextcloud.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt" -oX "/root/results/nextcloud.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml" nextcloud.lan.ddnsgeek.com
|
||||
|
||||
nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN "/root/results/nextcloud.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt" -oX "/root/results/nextcloud.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml" nextcloud.lan.ddnsgeek.com
|
||||
|
||||
nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN "/root/results/nextcloud.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt" -oX "/root/results/nextcloud.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml" nextcloud.lan.ddnsgeek.com
|
||||
|
||||
feroxbuster -u http://nextcloud.lan.ddnsgeek.com:80/ -t 10 -w /root/.local/share/AutoRecon/wordlists/dirbuster.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -q -e -r -o "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt"
|
||||
|
||||
curl -sSikf http://nextcloud.lan.ddnsgeek.com:80/.well-known/security.txt
|
||||
|
||||
curl -sSikf http://nextcloud.lan.ddnsgeek.com:80/robots.txt
|
||||
|
||||
curl -sSik http://nextcloud.lan.ddnsgeek.com:80/
|
||||
|
||||
nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://nextcloud.lan.ddnsgeek.com:80 2>&1 | tee "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt"
|
||||
|
||||
nmap -vv --reason -Pn -T4 -sV -p 80 --script="banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt" -oX "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml" nextcloud.lan.ddnsgeek.com
|
||||
|
||||
ffuf -u http://nextcloud.lan.ddnsgeek.com:80/ -t 10 -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -H "Host: FUZZ.nextcloud.lan.ddnsgeek.com" -mc all -fs 17 -r -noninteractive -s | tee "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nextcloud.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt"
|
||||
|
||||
whatweb --color=never --no-errors -a 3 -v http://nextcloud.lan.ddnsgeek.com:80 2>&1
|
||||
|
||||
feroxbuster -u https://nextcloud.lan.ddnsgeek.com:443/ -t 10 -w /root/.local/share/AutoRecon/wordlists/dirbuster.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -q -e -r -o "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt"
|
||||
|
||||
curl -sSikf https://nextcloud.lan.ddnsgeek.com:443/.well-known/security.txt
|
||||
|
||||
curl -sSikf https://nextcloud.lan.ddnsgeek.com:443/robots.txt
|
||||
|
||||
curl -sSik https://nextcloud.lan.ddnsgeek.com:443/
|
||||
|
||||
nikto -ask=no -Tuning=x4567890ac -nointeractive -host https://nextcloud.lan.ddnsgeek.com:443 2>&1 | tee "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt"
|
||||
|
||||
nmap -vv --reason -Pn -T4 -sV -p 443 --script="banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt" -oX "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml" nextcloud.lan.ddnsgeek.com
|
||||
|
||||
sslscan --show-certificate --no-colour nextcloud.lan.ddnsgeek.com:443 2>&1
|
||||
|
||||
ffuf -u https://nextcloud.lan.ddnsgeek.com:443/ -t 10 -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -H "Host: FUZZ.nextcloud.lan.ddnsgeek.com" -mc all -fs 19 -r -noninteractive -s | tee "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nextcloud.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt"
|
||||
|
||||
whatweb --color=never --no-errors -a 3 -v https://nextcloud.lan.ddnsgeek.com:443 2>&1
|
||||
|
||||
@@ -0,0 +1,112 @@
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 08:11:07 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml nextcloud.lan.ddnsgeek.com
|
||||
Increasing send delay for 167.179.167.166 from 0 to 5 due to 11 out of 22 dropped probes since last increase.
|
||||
Nmap scan report for nextcloud.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set (0.020s latency).
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 08:11:21 UTC for 16892s
|
||||
Not shown: 65531 filtered tcp ports (no-response)
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-title: Did not follow redirect to https://nextcloud.lan.ddnsgeek.com/
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-server-header: Apache/2.4.66 (Debian)
|
||||
| ssl-cert: Subject: commonName=nextcloud.lan.ddnsgeek.com
|
||||
| Subject Alternative Name: DNS:nextcloud.lan.ddnsgeek.com
|
||||
| Issuer: commonName=R12/organizationName=Let's Encrypt/countryName=US
|
||||
| Public Key type: rsa
|
||||
| Public Key bits: 4096
|
||||
| Signature Algorithm: sha256WithRSAEncryption
|
||||
| Not valid before: 2026-02-09T19:02:37
|
||||
| Not valid after: 2026-05-10T19:02:36
|
||||
| MD5: 1238 93af a1bb d72b 58cc 04da ce8f 39a3
|
||||
| SHA-1: 0a0a 3103 f4a5 94ce bd08 4e19 38a0 3ee8 3bea 02d5
|
||||
| SHA-256: af41 2c3f b7bf 6ee9 68ff 4449 2627 0604 6d6c 04c9 069f 11d9 8366 47fe 7a22 d02d
|
||||
| -----BEGIN CERTIFICATE-----
|
||||
| MIIGGDCCBQCgAwIBAgISBs84fOBMHD0zq0Oj2DfRjS1QMA0GCSqGSIb3DQEBCwUA
|
||||
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
|
||||
| EwNSMTIwHhcNMjYwMjA5MTkwMjM3WhcNMjYwNTEwMTkwMjM2WjAlMSMwIQYDVQQD
|
||||
| ExpuZXh0Y2xvdWQubGFuLmRkbnNnZWVrLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQAD
|
||||
| ggIPADCCAgoCggIBAMfZPcsjUERAyRB3mvCx+kUJE/5gKelvulMMV3uCdil8yiop
|
||||
| 3CgXHNN1E/9hsK8/gueXU1AbcpNUrHP1clNlrMku+GuwAQF4+eulJdycXM8UBOB4
|
||||
| HkWO/CljSna1EZQlPx4FhDLMSki2uLP9mgNOM1/lBQ1qPG3B3EXLKOqGlEQ/zOjg
|
||||
| /gyPEBxjWA3bYZZN4oiaFHnA32ontFN7CQ7COeCJCnRpr2zAUvpRO5U5uH2cfApt
|
||||
| 4gha9FQSgAj6lAqFGDrRDLqUl1oGY4HM5DWDhYiYnJ/n34hDRoWOt1D02PpCjNQf
|
||||
| O4CDs+6udQN7zBNQBZiSBEtpGnQn73EFeElRvoGqZMrQFJa6/VEle+oJxdQL5JIv
|
||||
| yeqILlfJqlMgAiM4rItUKl9hTtWOfTuPCGbtPx7qDG6gdD2CDxdgPfPBseiKU6DV
|
||||
| sbHAs6aAv17982O0FIf4LE7vSmkVSpzafYRXdx/F5I6Zi+t7SlsC+l7cZiYMAyfU
|
||||
| DP6kmO7mCGRRQmxu1Ui6hZjIWEa2VJ6epueY7GtrEmsVulna+uq+jz2vI/uk99EF
|
||||
| H2NZuc/65i67UAjUllYA/58dTcC6kX6/WO5CTRsCzkhY0cCY2xGrs2i6bok50TzQ
|
||||
| 90IlIpa4IK19uDunxb6i7BFY/m56lmpKkYcyNflBCOrPtBSkVpUe45skVVdRAgMB
|
||||
| AAGjggIyMIICLjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
|
||||
| CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFC+nSeC+N1jWPCU+PH6S
|
||||
| tjduDIpsMB8GA1UdIwQYMBaAFAC1KfItjm8x6JtMrXg++tzpDNHSMDMGCCsGAQUF
|
||||
| BwEBBCcwJTAjBggrBgEFBQcwAoYXaHR0cDovL3IxMi5pLmxlbmNyLm9yZy8wJQYD
|
||||
| VR0RBB4wHIIabmV4dGNsb3VkLmxhbi5kZG5zZ2Vlay5jb20wEwYDVR0gBAwwCjAI
|
||||
| BgZngQwBAgEwLgYDVR0fBCcwJTAjoCGgH4YdaHR0cDovL3IxMi5jLmxlbmNyLm9y
|
||||
| Zy84MS5jcmwwggEMBgorBgEEAdZ5AgQCBIH9BIH6APgAfgDjI43yjaKI4KrgrPD6
|
||||
| kMmF8La/9dKlJ7AB/BxEWMS26AAAAZxD/lXDAAgAAAUAMg4sIQQDAEcwRQIgIrCy
|
||||
| dkG2OA3k+ot4xDhxRpcnzkBKHTNZylHElvVz0J8CIQDfJueLeCcVjYrFxFfiBC7H
|
||||
| /0xdjUSIP0UwZKmWxao/TwB2ABaDLavwqSUPD/A6pUX/yL/II9CHS/YEKSf45x8z
|
||||
| E/X6AAABnEP+XTYAAAQDAEcwRQIhAPkHxBF88NswLBzx2jqn1RenJotA4rFrNQM9
|
||||
| 1Eof/yZ7AiAHL5k+cqEy/GJ/5eSrDYLr7HCgFBZBE5FHYlXfQ/l32DANBgkqhkiG
|
||||
| 9w0BAQsFAAOCAQEAlW2wfkaVWzbyhttsFH2ZuSqGY2PMi4UzJWCkokkB2fPG16Ky
|
||||
| +EvvTkkkj+U39fkyDqc44jCWJ1cvM5KP6YNyit2w+dhzicllKsO5OJeOQF49EZuC
|
||||
| jBxyK2AHJzOVUOpTSeaeWjRH6eVgq8ebnwxrN1APCKRhb99SRgfF5SttfVl9CHt+
|
||||
| qlimvDKxX7/PeXz+PW3KAI/DOTBF7mjZUUvIRZLr2Tv7AXtl27fbfpEtXhlBVsdy
|
||||
| 2JtMrKu0qbfxfWeOr1uD69WWsPkgWZ8HHP+7VibHwyXUuc7FmHuxDQCtWFNkj9rm
|
||||
| lZr6d0LRlE/gU6T/SDixaqBbYR7VEOEMYhL0SA==
|
||||
|_-----END CERTIFICATE-----
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
| http-title: Login \xE2\x80\x93 Nextcloud
|
||||
|_Requested resource was https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
| http-robots.txt: 1 disallowed entry
|
||||
|_/
|
||||
20001/tcp closed microsan reset ttl 57
|
||||
51413/tcp open tcpwrapped syn-ack ttl 56
|
||||
Device type: general purpose
|
||||
Running (JUST GUESSING): Linux 4.X (88%)
|
||||
OS CPE: cpe:/o:linux:linux_kernel:4
|
||||
OS fingerprint not ideal because: Didn't receive UDP response. Please try again with -sSU
|
||||
Aggressive OS guesses: Linux 4.19 - 5.15 (88%)
|
||||
No exact OS matches for host (test conditions non-ideal).
|
||||
TCP/IP fingerprint:
|
||||
SCAN(V=7.98%E=4%D=4/5%OT=80%CT=20001%CU=%PV=N%DS=8%DC=T%G=N%TM=69D25B25%P=x86_64-pc-linux-gnu)
|
||||
SEQ(SP=101%GCD=1%ISR=10F%TI=Z%TS=A)
|
||||
SEQ(SP=FF%GCD=1%ISR=105%TI=Z%TS=A)
|
||||
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
|
||||
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
|
||||
ECN(R=Y%DF=Y%TG=40%W=FAF0%O=M5B4NNSNW7%CC=Y%Q=)
|
||||
T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
|
||||
T2(R=N)
|
||||
T3(R=N)
|
||||
T4(R=N)
|
||||
T5(R=N)
|
||||
T6(R=N)
|
||||
T7(R=N)
|
||||
T7(R=Y%DF=Y%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
|
||||
U1(R=N)
|
||||
IE(R=N)
|
||||
|
||||
Uptime guess: 17.135 days (since Thu Mar 19 09:37:52 2026)
|
||||
Network Distance: 8 hops
|
||||
TCP Sequence Prediction: Difficulty=255 (Good luck!)
|
||||
IP ID Sequence Generation: All zeros
|
||||
|
||||
TRACEROUTE (using port 20001/tcp)
|
||||
HOP RTT ADDRESS
|
||||
1 0.06 ms 10.216.0.161
|
||||
2 0.43 ms 10.216.35.12
|
||||
3 0.87 ms 10.216.32.1
|
||||
4 0.46 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
|
||||
5 4.04 ms as4764.syd.edgeix.net.au (202.77.88.3)
|
||||
6 11.67 ms 10.241.1.187
|
||||
7 12.61 ms 10.241.2.71
|
||||
8 15.61 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 12:52:53 2026 -- 1 IP address (1 host up) scanned in 16914.51 seconds
|
||||
@@ -0,0 +1,40 @@
|
||||
[*] http on tcp/80
|
||||
|
||||
[-] (feroxbuster) Multi-threaded recursive directory/file enumeration for web servers using various wordlists:
|
||||
|
||||
feroxbuster -u http://nextcloud.lan.ddnsgeek.com:80 -t 10 -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -e -r -o /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt
|
||||
|
||||
[-] Credential bruteforcing commands (don't run these without modifying them):
|
||||
|
||||
hydra -L "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e nsr -s 80 -o "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_auth_hydra.txt" http-get://nextcloud.lan.ddnsgeek.com/path/to/auth/area
|
||||
|
||||
medusa -U "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e ns -n 80 -O "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_auth_medusa.txt" -M http -h nextcloud.lan.ddnsgeek.com -m DIR:/path/to/auth/area
|
||||
|
||||
hydra -L "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e nsr -s 80 -o "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_form_hydra.txt" http-post-form://nextcloud.lan.ddnsgeek.com/path/to/login.php:"username=^USER^&password=^PASS^":"invalid-login-message"
|
||||
|
||||
medusa -U "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e ns -n 80 -O "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_form_medusa.txt" -M web-form -h nextcloud.lan.ddnsgeek.com -m FORM:/path/to/login.php -m FORM-DATA:"post?username=&password=" -m DENY-SIGNAL:"invalid login message"
|
||||
|
||||
[-] (wpscan) WordPress Security Scanner (useful if WordPress is found):
|
||||
|
||||
wpscan --url http://nextcloud.lan.ddnsgeek.com:80/ --no-update -e vp,vt,tt,cb,dbe,u,m --plugins-detection aggressive --plugins-version-detection aggressive -f cli-no-color 2>&1 | tee "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_wpscan.txt"
|
||||
|
||||
[*] http on tcp/443
|
||||
|
||||
[-] (feroxbuster) Multi-threaded recursive directory/file enumeration for web servers using various wordlists:
|
||||
|
||||
feroxbuster -u https://nextcloud.lan.ddnsgeek.com:443 -t 10 -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -e -r -o /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt
|
||||
|
||||
[-] Credential bruteforcing commands (don't run these without modifying them):
|
||||
|
||||
hydra -L "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e nsr -s 443 -o "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_auth_hydra.txt" https-get://nextcloud.lan.ddnsgeek.com/path/to/auth/area
|
||||
|
||||
medusa -U "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e ns -n 443 -O "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_auth_medusa.txt" -M http -h nextcloud.lan.ddnsgeek.com -m DIR:/path/to/auth/area
|
||||
|
||||
hydra -L "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e nsr -s 443 -o "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_form_hydra.txt" https-post-form://nextcloud.lan.ddnsgeek.com/path/to/login.php:"username=^USER^&password=^PASS^":"invalid-login-message"
|
||||
|
||||
medusa -U "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e ns -n 443 -O "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_form_medusa.txt" -M web-form -h nextcloud.lan.ddnsgeek.com -m FORM:/path/to/login.php -m FORM-DATA:"post?username=&password=" -m DENY-SIGNAL:"invalid login message"
|
||||
|
||||
[-] (wpscan) WordPress Security Scanner (useful if WordPress is found):
|
||||
|
||||
wpscan --url https://nextcloud.lan.ddnsgeek.com:443/ --no-update -e vp,vt,tt,cb,dbe,u,m --plugins-detection aggressive --plugins-version-detection aggressive -f cli-no-color 2>&1 | tee "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_wpscan.txt"
|
||||
|
||||
@@ -0,0 +1,6 @@
|
||||
Matched Pattern: powered-by: PHP/8.3.30
|
||||
|
||||
CVE Identified: CVE-2003-1418
|
||||
|
||||
Identified HTTP Server: Apache/2.4.66 (Debian)
|
||||
|
||||
@@ -0,0 +1,62 @@
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 08:08:23 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml nextcloud.lan.ddnsgeek.com
|
||||
Increasing send delay for 167.179.167.166 from 0 to 5 due to 11 out of 25 dropped probes since last increase.
|
||||
Nmap scan report for nextcloud.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set (0.019s latency).
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 08:10:26 UTC for 270s
|
||||
Not shown: 998 filtered tcp ports (no-response)
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
|_http-title: Did not follow redirect to https://nextcloud.lan.ddnsgeek.com/
|
||||
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
| http-robots.txt: 1 disallowed entry
|
||||
|_/
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
|_http-server-header: Apache/2.4.66 (Debian)
|
||||
| http-title: Login \xE2\x80\x93 Nextcloud
|
||||
|_Requested resource was https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
|
||||
Device type: general purpose
|
||||
Running (JUST GUESSING): Linux 5.X (89%)
|
||||
OS CPE: cpe:/o:linux:linux_kernel:5.4
|
||||
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
|
||||
Aggressive OS guesses: Linux 5.4 (89%)
|
||||
No exact OS matches for host (test conditions non-ideal).
|
||||
TCP/IP fingerprint:
|
||||
SCAN(V=7.98%E=4%D=4/5%OT=80%CT=%CU=%PV=N%DS=8%DC=T%G=N%TM=69D21A01%P=x86_64-pc-linux-gnu)
|
||||
SEQ(SP=101%GCD=1%ISR=10C%TI=Z%TS=A)
|
||||
SEQ(SP=103%GCD=1%ISR=10C%TI=Z%TS=A)
|
||||
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=NNT11%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
|
||||
WIN(W1=FE88%W2=FE88%W3=9AE%W4=FE88%W5=FE88%W6=FE88)
|
||||
ECN(R=N)
|
||||
T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
|
||||
T2(R=N)
|
||||
T3(R=N)
|
||||
T4(R=N)
|
||||
T6(R=Y%DF=Y%TG=40%W=FE88%S=O%A=O%F=AS%O=M5B4ST11NW7%RD=0%Q=)
|
||||
U1(R=N)
|
||||
IE(R=N)
|
||||
|
||||
Uptime guess: 16.942 days (since Thu Mar 19 09:37:52 2026)
|
||||
Network Distance: 8 hops
|
||||
TCP Sequence Prediction: Difficulty=259 (Good luck!)
|
||||
IP ID Sequence Generation: All zeros
|
||||
|
||||
TRACEROUTE (using port 80/tcp)
|
||||
HOP RTT ADDRESS
|
||||
1 0.34 ms 10.216.0.161
|
||||
2 0.42 ms 10.216.35.11
|
||||
3 4.77 ms 10.216.32.1
|
||||
4 0.37 ms lo0-0.gw2.syd1.au.linode.com (172.105.160.102)
|
||||
5 3.72 ms as4764.syd.edgeix.net.au (202.77.88.3)
|
||||
6 11.80 ms 10.241.1.187
|
||||
7 12.53 ms 10.241.2.71
|
||||
8 14.18 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 08:14:57 2026 -- 1 IP address (1 host up) scanned in 402.48 seconds
|
||||
@@ -0,0 +1,29 @@
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 08:11:26 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml nextcloud.lan.ddnsgeek.com
|
||||
Nmap scan report for nextcloud.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set.
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 08:11:43 UTC for 1412s
|
||||
All 100 scanned ports on nextcloud.lan.ddnsgeek.com (167.179.167.166) are in ignored states.
|
||||
Not shown: 100 open|filtered udp ports (no-response)
|
||||
Too many fingerprints match this host to give specific OS details
|
||||
TCP/IP fingerprint:
|
||||
SCAN(V=7.98%E=4%D=4/5%OT=%CT=%CU=%PV=N%G=N%TM=69D21EC4%P=x86_64-pc-linux-gnu)
|
||||
SEQ()
|
||||
U1(R=N)
|
||||
IE(R=N)
|
||||
|
||||
|
||||
TRACEROUTE (using proto 1/icmp)
|
||||
HOP RTT ADDRESS
|
||||
1 0.06 ms 10.216.0.161
|
||||
2 0.22 ms 10.216.35.11
|
||||
3 2.48 ms 10.216.32.2
|
||||
4 0.28 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
|
||||
5 4.58 ms as4764.syd.edgeix.net.au (202.77.88.3)
|
||||
6 11.64 ms 10.241.1.187
|
||||
7 12.71 ms 10.241.2.71
|
||||
8 ... 30
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 08:35:17 2026 -- 1 IP address (1 host up) scanned in 1438.42 seconds
|
||||
@@ -0,0 +1,18 @@
|
||||
HTTP/2 200
|
||||
accept-ranges: bytes
|
||||
content-type: text/plain; charset=utf-8
|
||||
date: Sun, 05 Apr 2026 08:15:05 GMT
|
||||
etag: "1a-64e41fd0d5664"
|
||||
last-modified: Mon, 30 Mar 2026 18:26:25 GMT
|
||||
referrer-policy: no-referrer
|
||||
server: Apache/2.4.66 (Debian)
|
||||
strict-transport-security: max-age=15552000; includeSubDomains; preload
|
||||
x-content-type-options: nosniff
|
||||
x-frame-options: SAMEORIGIN
|
||||
x-permitted-cross-domain-policies: none
|
||||
x-robots-tag: noindex, nofollow
|
||||
x-xss-protection: 1; mode=block
|
||||
content-length: 26
|
||||
|
||||
User-agent: *
|
||||
Disallow: /
|
||||
@@ -0,0 +1,23 @@
|
||||
HTTP/2 302
|
||||
content-security-policy: default-src 'self'; script-src 'self' 'nonce-0UjAoEIy1Rabnj72oZ1MOexz4/Jo1zf+kWHhit5OsFg='; style-src 'self' 'unsafe-inline'; frame-src *; img-src * data: blob:; font-src 'self' data:; media-src *; connect-src *; object-src 'none'; base-uri 'self';
|
||||
content-type: text/html; charset=UTF-8
|
||||
date: Sun, 05 Apr 2026 08:15:07 GMT
|
||||
location: https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
referrer-policy: no-referrer
|
||||
server: Apache/2.4.66 (Debian)
|
||||
set-cookie: ocexfs76yoe2=e967eb027dcffbc8de5b9970ea4f1d49; path=/; secure; HttpOnly; SameSite=Lax
|
||||
set-cookie: oc_sessionPassphrase=Qe9VfIvKEADVVKypzMAh9bod76L%2BO9pllh2SFfHSV9qilitYJE4V6f0E2h8mXiocS%2F9WjZgYB5qZJFhGfKXnNlbkJ7UL9%2FPeJVKhCuXEOVCJ4nhjMBP3igQmb%2BAiBYKm; path=/; secure; HttpOnly; SameSite=Lax
|
||||
set-cookie: ocexfs76yoe2=e967eb027dcffbc8de5b9970ea4f1d49; path=/; secure; HttpOnly; SameSite=Lax
|
||||
set-cookie: __Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
|
||||
set-cookie: __Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
|
||||
set-cookie: ocexfs76yoe2=e967eb027dcffbc8de5b9970ea4f1d49; path=/; secure; HttpOnly; SameSite=Lax
|
||||
strict-transport-security: max-age=15552000; includeSubDomains; preload
|
||||
x-content-type-options: nosniff
|
||||
x-frame-options: SAMEORIGIN
|
||||
x-permitted-cross-domain-policies: none
|
||||
x-powered-by: PHP/8.3.30
|
||||
x-robots-tag: noindex, nofollow
|
||||
x-xss-protection: 1; mode=block
|
||||
content-length: 0
|
||||
|
||||
|
||||
+315
@@ -0,0 +1,315 @@
|
||||
Configuration {
|
||||
kind: "configuration",
|
||||
wordlist: "/root/.local/share/AutoRecon/wordlists/dirbuster.txt",
|
||||
config: "/etc/feroxbuster/ferox-config.toml",
|
||||
proxy: "",
|
||||
replay_proxy: "",
|
||||
server_certs: [],
|
||||
client_cert: "",
|
||||
client_key: "",
|
||||
target_url: "https://nextcloud.lan.ddnsgeek.com/",
|
||||
status_codes: [
|
||||
100,
|
||||
101,
|
||||
102,
|
||||
200,
|
||||
201,
|
||||
202,
|
||||
203,
|
||||
204,
|
||||
205,
|
||||
206,
|
||||
207,
|
||||
208,
|
||||
226,
|
||||
300,
|
||||
301,
|
||||
302,
|
||||
303,
|
||||
304,
|
||||
305,
|
||||
307,
|
||||
308,
|
||||
400,
|
||||
401,
|
||||
402,
|
||||
403,
|
||||
404,
|
||||
405,
|
||||
406,
|
||||
407,
|
||||
408,
|
||||
409,
|
||||
410,
|
||||
411,
|
||||
412,
|
||||
413,
|
||||
414,
|
||||
415,
|
||||
416,
|
||||
417,
|
||||
418,
|
||||
421,
|
||||
422,
|
||||
423,
|
||||
424,
|
||||
426,
|
||||
428,
|
||||
429,
|
||||
431,
|
||||
451,
|
||||
500,
|
||||
501,
|
||||
502,
|
||||
503,
|
||||
504,
|
||||
505,
|
||||
506,
|
||||
507,
|
||||
508,
|
||||
510,
|
||||
511,
|
||||
103,
|
||||
425,
|
||||
],
|
||||
replay_codes: [
|
||||
100,
|
||||
101,
|
||||
102,
|
||||
200,
|
||||
201,
|
||||
202,
|
||||
203,
|
||||
204,
|
||||
205,
|
||||
206,
|
||||
207,
|
||||
208,
|
||||
226,
|
||||
300,
|
||||
301,
|
||||
302,
|
||||
303,
|
||||
304,
|
||||
305,
|
||||
307,
|
||||
308,
|
||||
400,
|
||||
401,
|
||||
402,
|
||||
403,
|
||||
404,
|
||||
405,
|
||||
406,
|
||||
407,
|
||||
408,
|
||||
409,
|
||||
410,
|
||||
411,
|
||||
412,
|
||||
413,
|
||||
414,
|
||||
415,
|
||||
416,
|
||||
417,
|
||||
418,
|
||||
421,
|
||||
422,
|
||||
423,
|
||||
424,
|
||||
426,
|
||||
428,
|
||||
429,
|
||||
431,
|
||||
451,
|
||||
500,
|
||||
501,
|
||||
502,
|
||||
503,
|
||||
504,
|
||||
505,
|
||||
506,
|
||||
507,
|
||||
508,
|
||||
510,
|
||||
511,
|
||||
103,
|
||||
425,
|
||||
],
|
||||
filter_status: [],
|
||||
client: Client {
|
||||
accepts: Accepts,
|
||||
proxies: [
|
||||
Matcher,
|
||||
],
|
||||
redirect_policy: "Policy(Custom)",
|
||||
referer: true,
|
||||
default_headers: {
|
||||
"accept": "*/*",
|
||||
"user-agent": "feroxbuster/2.13.1",
|
||||
},
|
||||
reqwest::config::RequestTimeout: 7s,
|
||||
},
|
||||
replay_client: None,
|
||||
threads: 10,
|
||||
timeout: 7,
|
||||
verbosity: 1,
|
||||
silent: false,
|
||||
quiet: true,
|
||||
output_level: Quiet,
|
||||
auto_bail: false,
|
||||
auto_tune: false,
|
||||
requester_policy: Default,
|
||||
json: false,
|
||||
output: "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt",
|
||||
debug_log: "",
|
||||
user_agent: "feroxbuster/2.13.1",
|
||||
random_agent: false,
|
||||
redirects: true,
|
||||
insecure: true,
|
||||
extensions: [
|
||||
"txt",
|
||||
"html",
|
||||
"php",
|
||||
"asp",
|
||||
"aspx",
|
||||
"jsp",
|
||||
],
|
||||
methods: [
|
||||
"GET",
|
||||
],
|
||||
data: [],
|
||||
headers: {},
|
||||
queries: [],
|
||||
no_recursion: true,
|
||||
extract_links: true,
|
||||
add_slash: false,
|
||||
stdin: false,
|
||||
cached_stdin: [],
|
||||
depth: 4,
|
||||
scan_limit: 0,
|
||||
parallel: 0,
|
||||
rate_limit: 0,
|
||||
filter_size: [],
|
||||
filter_line_count: [],
|
||||
filter_word_count: [],
|
||||
filter_regex: [],
|
||||
dont_filter: false,
|
||||
resumed: false,
|
||||
resume_from: "",
|
||||
save_state: true,
|
||||
time_limit: "",
|
||||
filter_similar: [],
|
||||
url_denylist: [],
|
||||
regex_denylist: [],
|
||||
scope: [
|
||||
Url {
|
||||
scheme: "https",
|
||||
cannot_be_a_base: false,
|
||||
username: "",
|
||||
password: None,
|
||||
host: Some(
|
||||
Domain(
|
||||
"nextcloud.lan.ddnsgeek.com",
|
||||
),
|
||||
),
|
||||
port: None,
|
||||
path: "/",
|
||||
query: None,
|
||||
fragment: None,
|
||||
},
|
||||
],
|
||||
collect_extensions: false,
|
||||
dont_collect: [
|
||||
"woff2",
|
||||
"woff",
|
||||
"ttf",
|
||||
"otf",
|
||||
"eot",
|
||||
"tif",
|
||||
"tiff",
|
||||
"ico",
|
||||
"cur",
|
||||
"bmp",
|
||||
"webp",
|
||||
"svg",
|
||||
"png",
|
||||
"jpg",
|
||||
"jpeg",
|
||||
"jfif",
|
||||
"gif",
|
||||
"avif",
|
||||
"apng",
|
||||
"pjpeg",
|
||||
"pjp",
|
||||
"mov",
|
||||
"wav",
|
||||
"mpg",
|
||||
"mpeg",
|
||||
"mp3",
|
||||
"mp4",
|
||||
"m4a",
|
||||
"m4p",
|
||||
"m4v",
|
||||
"ogg",
|
||||
"webm",
|
||||
"ogv",
|
||||
"oga",
|
||||
"flac",
|
||||
"aac",
|
||||
"3gp",
|
||||
"css",
|
||||
"zip",
|
||||
"xls",
|
||||
"xml",
|
||||
"gz",
|
||||
"tgz",
|
||||
],
|
||||
collect_backups: false,
|
||||
backup_extensions: [
|
||||
"~",
|
||||
".bak",
|
||||
".bak2",
|
||||
".old",
|
||||
".1",
|
||||
],
|
||||
collect_words: false,
|
||||
force_recursion: false,
|
||||
update_app: false,
|
||||
scan_dir_listings: false,
|
||||
request_file: "",
|
||||
protocol: "https",
|
||||
limit_bars: 0,
|
||||
unique: false,
|
||||
response_size_limit: 4194304,
|
||||
}
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/apps/dashboard
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/apps/logreader
|
||||
200 GET 494l 1557w 31067c https://nextcloud.lan.ddnsgeek.com/index.php/apps/files_pdfviewer
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/apps/activity
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/apps/files
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/apps/photos
|
||||
200 GET 93l 341w 16047c https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/settings/user/security
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.txt
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.txt
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.html
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.html
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.php
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.php
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.asp
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.asp
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.aspx
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.aspx
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.jsp
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.jsp
|
||||
200 GET 6l 12w 281c https://nextcloud.lan.ddnsgeek.com/.well-known/security.txt
|
||||
200 GET 1l 5w 77c https://nextcloud.lan.ddnsgeek.com/cron.php
|
||||
200 GET 12l 31w 331c https://nextcloud.lan.ddnsgeek.com/index.html
|
||||
500 GET 2l 11w 72c https://nextcloud.lan.ddnsgeek.com/public.php
|
||||
200 GET 2l 4w 26c https://nextcloud.lan.ddnsgeek.com/robots.txt
|
||||
200 GET 1l 1w 170c https://nextcloud.lan.ddnsgeek.com/status.php
|
||||
200 GET 0l 0w 0c https://nextcloud.lan.ddnsgeek.com/version.php
|
||||
200 GET 661l 5535w 34520c https://nextcloud.lan.ddnsgeek.com/COPYING
|
||||
@@ -0,0 +1,31 @@
|
||||
HTTP/2 200
|
||||
cache-control: no-cache, no-store, must-revalidate
|
||||
content-security-policy: default-src 'none';base-uri 'none';manifest-src 'self';frame-ancestors 'none'
|
||||
content-type: text/plain;charset=UTF-8
|
||||
date: Sun, 05 Apr 2026 08:15:04 GMT
|
||||
feature-policy: autoplay 'none';camera 'none';fullscreen 'none';geolocation 'none';microphone 'none';payment 'none'
|
||||
referrer-policy: no-referrer
|
||||
server: Apache/2.4.66 (Debian)
|
||||
set-cookie: ocexfs76yoe2=0e51bcf9950c6c3c1daa59f041984726; path=/; secure; HttpOnly; SameSite=Lax
|
||||
set-cookie: oc_sessionPassphrase=wMD2r4bjh3qzFmpNL0NjJILFcgpYM7BaIp9xoMpv24WNwSUdpi3tOs5%2FTjqdmUplkJf6bjitdDnd3ItEf4g2yfB7kyCENUGFDsaqdH23YmQe7xumvAbfzZt5w0IdtZc4; path=/; secure; HttpOnly; SameSite=Lax
|
||||
set-cookie: ocexfs76yoe2=0e51bcf9950c6c3c1daa59f041984726; path=/; secure; HttpOnly; SameSite=Lax
|
||||
set-cookie: __Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
|
||||
set-cookie: __Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
|
||||
set-cookie: ocexfs76yoe2=0e51bcf9950c6c3c1daa59f041984726; path=/; secure; HttpOnly; SameSite=Lax
|
||||
strict-transport-security: max-age=15552000; includeSubDomains; preload
|
||||
vary: Accept-Encoding
|
||||
x-content-type-options: nosniff
|
||||
x-frame-options: SAMEORIGIN
|
||||
x-nextcloud-well-known: 1
|
||||
x-permitted-cross-domain-policies: none
|
||||
x-powered-by: PHP/8.3.30
|
||||
x-request-id: lt7eKRvu1nrKBoKkjBte
|
||||
x-robots-tag: noindex, nofollow
|
||||
x-xss-protection: 1; mode=block
|
||||
|
||||
Contact: https://hackerone.com/nextcloud
|
||||
Expires: 2026-08-31T23:00:00.000Z
|
||||
Acknowledgments: https://hackerone.com/nextcloud/thanks
|
||||
Acknowledgments: https://github.com/nextcloud/security-advisories/security/advisories
|
||||
Policy: https://hackerone.com/nextcloud
|
||||
Preferred-Languages: en
|
||||
@@ -0,0 +1,22 @@
|
||||
- Nikto v2.6.0
|
||||
---------------------------------------------------------------------------
|
||||
+ Your Nikto installation is out of date.
|
||||
+ Target IP: 167.179.167.166
|
||||
+ Target Hostname: nextcloud.lan.ddnsgeek.com
|
||||
+ Target Port: 443
|
||||
---------------------------------------------------------------------------
|
||||
+ SSL Info: Subject: /CN=nextcloud.lan.ddnsgeek.com
|
||||
CN: nextcloud.lan.ddnsgeek.com
|
||||
SAN: nextcloud.lan.ddnsgeek.com
|
||||
Ciphers: TLS_AES_128_GCM_SHA256
|
||||
Issuer: /C=US/O=Let's Encrypt/CN=R12
|
||||
+ Platform: Linux/Unix
|
||||
+ Start Time: 2026-04-05 08:16:11 (GMT0)
|
||||
---------------------------------------------------------------------------
|
||||
+ Server: Apache/2.4.66 (Debian)
|
||||
+ [999986] /: Retrieved x-powered-by header: PHP/8.3.30.
|
||||
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
|
||||
+ [999100] /index.php/login: Uncommon header(s) 'x-request-id' found, with contents: cM0SfixyCyb80zOKJ4nJ.
|
||||
+ [600625] PHP/8.3.30 appears to be outdated (current is at least 8.5.1).
|
||||
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
|
||||
+ [999984] /index.html: Server may leak inodes via ETags, header found with file /index.html, inode: 14b, size: 64e41fd0d4aac, mtime: gzip. See: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1418
|
||||
@@ -0,0 +1,177 @@
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 08:16:04 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml nextcloud.lan.ddnsgeek.com
|
||||
Nmap scan report for nextcloud.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set (0.026s latency).
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 08:16:23 UTC for 705s
|
||||
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
|_http-server-header: Apache/2.4.66 (Debian)
|
||||
| http-headers:
|
||||
| Cache-Control: no-cache, no-store, must-revalidate
|
||||
| Content-Length: 16047
|
||||
| Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';script-src-elem 'strict-dynamic' 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'
|
||||
| Content-Type: text/html; charset=UTF-8
|
||||
| Date: Sun, 05 Apr 2026 08:19:52 GMT
|
||||
| Feature-Policy: autoplay 'self';camera 'none';fullscreen 'self';geolocation 'none';microphone 'none';payment 'none'
|
||||
| Referrer-Policy: same-origin
|
||||
| Server: Apache/2.4.66 (Debian)
|
||||
| Set-Cookie: ocexfs76yoe2=ec8e4644674a95fc3c6b23b49c28df1f; path=/; secure; HttpOnly; SameSite=Lax
|
||||
| Set-Cookie: oc_sessionPassphrase=vaA75gLRczK4PR19LRVIdeCUbAH2eyCr84lwC0J%2FRs%2FAJzlQYpiLdt%2BxMWrssNRkSjTrifW2r%2Fg0sWzn7Cact8Zw3rXzotR6z4WBk4sSNdwp4UgXFlUAwNHKCMEVwmfq; path=/; secure; HttpOnly; SameSite=Lax
|
||||
| Set-Cookie: ocexfs76yoe2=ec8e4644674a95fc3c6b23b49c28df1f; path=/; secure; HttpOnly; SameSite=Lax
|
||||
| Set-Cookie: __Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
|
||||
| Set-Cookie: __Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
|
||||
| Set-Cookie: ocexfs76yoe2=ec8e4644674a95fc3c6b23b49c28df1f; path=/; secure; HttpOnly; SameSite=Lax
|
||||
| Set-Cookie: ocexfs76yoe2=ec8e4644674a95fc3c6b23b49c28df1f; path=/; secure; HttpOnly; SameSite=Lax
|
||||
| Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
| X-Content-Type-Options: nosniff
|
||||
| X-Frame-Options: SAMEORIGIN
|
||||
| X-Permitted-Cross-Domain-Policies: none
|
||||
| X-Powered-By: PHP/8.3.30
|
||||
| X-Request-Id: 8l0zCl9BZ2uwysWABFY8
|
||||
| X-Robots-Tag: noindex, nofollow
|
||||
| X-Xss-Protection: 1; mode=block
|
||||
| Connection: close
|
||||
|
|
||||
|_ (Request type: HEAD)
|
||||
| http-title: Login \xE2\x80\x93 Nextcloud
|
||||
|_Requested resource was https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
| http-vhosts:
|
||||
| 127 names had status 404
|
||||
|_auth.lan.ddnsgeek.com : 200
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
| ssl-enum-ciphers:
|
||||
| TLSv1.2:
|
||||
| ciphers:
|
||||
| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A
|
||||
| TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A
|
||||
| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A
|
||||
| TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
|
||||
| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
|
||||
| compressors:
|
||||
| NULL
|
||||
| cipher preference: client
|
||||
| warnings:
|
||||
| Key exchange (secp256r1) of lower strength than certificate key
|
||||
| TLSv1.3:
|
||||
| ciphers:
|
||||
| TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A
|
||||
| TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A
|
||||
| TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
|
||||
| cipher preference: server
|
||||
|_ least strength: A
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
| http-errors:
|
||||
| Spidering limited to: maxpagecount=40; withinhost=nextcloud.lan.ddnsgeek.com
|
||||
| Found the following error pages:
|
||||
|
|
||||
| Error Code: 404
|
||||
|_ http://nextcloud.lan.ddnsgeek.com:443/
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| /index.php/
|
||||
| Other: 1
|
||||
| Longest directory structure:
|
||||
| Depth: 1
|
||||
| Dir: /index.php/
|
||||
| Total files found (by extension):
|
||||
|_ Other: 1
|
||||
|_http-date: Sun, 05 Apr 2026 08:20:00 GMT; -6s from local time.
|
||||
| http-waf-detect: IDS/IPS/WAF detected:
|
||||
|_nextcloud.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>
|
||||
| http-security-headers:
|
||||
| Strict_Transport_Security:
|
||||
| Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
| X_Frame_Options:
|
||||
| Header: X-Frame-Options: SAMEORIGIN
|
||||
| Description: The browser must not display this content in any frame from a page of different origin than the content itself.
|
||||
| X_XSS_Protection:
|
||||
| Header: X-XSS-Protection: 1; mode=block
|
||||
| Description: The browser will prevent the rendering of the page when XSS is detected.
|
||||
| X_Content_Type_Options:
|
||||
| Header: X-Content-Type-Options: nosniff
|
||||
| Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
|
||||
| Content_Security_Policy:
|
||||
| Header: Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';script-src-elem 'strict-dynamic' 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'
|
||||
| Description: Define the base uri for relative uri.
|
||||
| Description: Define loading policy for all resources type in case of a resource type dedicated directive is not defined (fallback).
|
||||
| Description: Define which scripts the protected resource can execute.
|
||||
| Description: Define which styles (CSS) the user applies to the protected resource.
|
||||
| Description: Define from where the protected resource can load images.
|
||||
| Description: Define from where the protected resource can load video and audio.
|
||||
| Description: Deprecated and replaced by child-src. Define from where the protected resource can embed frames.
|
||||
| Description: Define from where the protected resource can be embedded in frames.
|
||||
| Description: Define from where the protected resource can load fonts.
|
||||
| Description: Define which URIs the protected resource can load using script interfaces.
|
||||
| Description: Define which URIs can be used as the action of HTML form elements.
|
||||
| X_Permitted_Cross_Domain_Policies:
|
||||
| Header: X-Permitted-Cross-Domain-Policies: none
|
||||
| Description: No policy files are allowed anywhere on the target server, including this master policy file.
|
||||
| Cookie:
|
||||
| Cookies are secured with Secure Flag in HTTPS Connection
|
||||
| Cache_Control:
|
||||
|_ Header: Cache-Control: no-cache, no-store, must-revalidate
|
||||
| http-useragent-tester:
|
||||
| Status for browser useragent: 200
|
||||
| Redirected To: https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
| Allowed User Agents:
|
||||
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
|
||||
| libwww
|
||||
| lwp-trivial
|
||||
| libcurl-agent/1.0
|
||||
| PHP/
|
||||
| Python-urllib/2.5
|
||||
| GT::WWW
|
||||
| Snoopy
|
||||
| MFC_Tear_Sample
|
||||
| HTTP::Lite
|
||||
| PHPCrawl
|
||||
| URI::Fetch
|
||||
| Zend_Http_Client
|
||||
| http client
|
||||
| PECL::HTTP
|
||||
| Wget/1.13.4 (linux-gnu)
|
||||
|_ WWW-Mechanize/1.34
|
||||
|_http-chrono: Request times for /index.php/login; avg: 3919.89ms; min: 1656.25ms; max: 10499.33ms
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_http-php-version: Logo query returned unknown hash e473773cc5b8b9dc08c846c0dc434c15
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
| http-traceroute:
|
||||
| Status Code
|
||||
| Hop #1: 404
|
||||
| Hop #2: 302
|
||||
| Hop #3: 302
|
||||
| server
|
||||
| Hop #1
|
||||
| Hop #2: Apache/2.4.66 (Debian)
|
||||
| Hop #3: Apache/2.4.66 (Debian)
|
||||
| content-type
|
||||
| Hop #1: text/plain; charset=utf-8
|
||||
| Hop #2: text/html; charset=UTF-8
|
||||
| Hop #3: text/html; charset=UTF-8
|
||||
| content-length
|
||||
| Hop #1: 19
|
||||
| Hop #2: 0
|
||||
| Hop #3: 0
|
||||
| location
|
||||
| Hop #1
|
||||
| Hop #2: https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
|_ Hop #3: https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 08:28:09 2026 -- 1 IP address (1 host up) scanned in 727.15 seconds
|
||||
@@ -0,0 +1,257 @@
|
||||
WhatWeb report for https://nextcloud.lan.ddnsgeek.com:443
|
||||
Status : 302 Found
|
||||
Title : <None>
|
||||
IP : 167.179.167.166
|
||||
Country : NEW ZEALAND, NZ
|
||||
|
||||
Summary : Apache[2.4.66], Cookies[__Host-nc_sameSiteCookielax,__Host-nc_sameSiteCookiestrict,oc_sessionPassphrase,ocexfs76yoe2], HTTPServer[Debian Linux][Apache/2.4.66 (Debian)], HttpOnly[__Host-nc_sameSiteCookielax,__Host-nc_sameSiteCookiestrict,oc_sessionPassphrase,ocexfs76yoe2], PHP[8.3.30], RedirectLocation[https://nextcloud.lan.ddnsgeek.com/index.php/login], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[content-security-policy,referrer-policy,x-content-type-options,x-permitted-cross-domain-policies,x-robots-tag], X-Frame-Options[SAMEORIGIN], X-Powered-By[PHP/8.3.30], X-XSS-Protection[1; mode=block]
|
||||
|
||||
Detected Plugins:
|
||||
[ Apache ]
|
||||
The Apache HTTP Server Project is an effort to develop and
|
||||
maintain an open-source HTTP server for modern operating
|
||||
systems including UNIX and Windows NT. The goal of this
|
||||
project is to provide a secure, efficient and extensible
|
||||
server that provides HTTP services in sync with the current
|
||||
HTTP standards.
|
||||
|
||||
Version : 2.4.66 (from HTTP Server Header)
|
||||
Google Dorks: (3)
|
||||
Website : http://httpd.apache.org/
|
||||
|
||||
[ Cookies ]
|
||||
Display the names of cookies in the HTTP headers. The
|
||||
values are not returned to save on space.
|
||||
|
||||
String : ocexfs76yoe2
|
||||
String : oc_sessionPassphrase
|
||||
String : ocexfs76yoe2
|
||||
String : __Host-nc_sameSiteCookielax
|
||||
String : __Host-nc_sameSiteCookiestrict
|
||||
String : ocexfs76yoe2
|
||||
|
||||
[ HTTPServer ]
|
||||
HTTP server header string. This plugin also attempts to
|
||||
identify the operating system from the server header.
|
||||
|
||||
OS : Debian Linux
|
||||
String : Apache/2.4.66 (Debian) (from server string)
|
||||
|
||||
[ HttpOnly ]
|
||||
If the HttpOnly flag is included in the HTTP set-cookie
|
||||
response header and the browser supports it then the cookie
|
||||
cannot be accessed through client side script - More Info:
|
||||
http://en.wikipedia.org/wiki/HTTP_cookie
|
||||
|
||||
String : __Host-nc_sameSiteCookielax,__Host-nc_sameSiteCookiestrict,oc_sessionPassphrase,ocexfs76yoe2
|
||||
|
||||
[ PHP ]
|
||||
PHP is a widely-used general-purpose scripting language
|
||||
that is especially suited for Web development and can be
|
||||
embedded into HTML. This plugin identifies PHP errors,
|
||||
modules and versions and extracts the local file path and
|
||||
username if present.
|
||||
|
||||
Version : 8.3.30
|
||||
Google Dorks: (3)
|
||||
Website : http://www.php.net/
|
||||
|
||||
[ RedirectLocation ]
|
||||
HTTP Server string location. used with http-status 301 and
|
||||
302
|
||||
|
||||
String : https://nextcloud.lan.ddnsgeek.com/index.php/login (from location)
|
||||
|
||||
[ Strict-Transport-Security ]
|
||||
Strict-Transport-Security is an HTTP header that restricts
|
||||
a web browser from accessing a website without the security
|
||||
of the HTTPS protocol.
|
||||
|
||||
String : max-age=15552000; includeSubDomains; preload
|
||||
|
||||
[ UncommonHeaders ]
|
||||
Uncommon HTTP server headers. The blacklist includes all
|
||||
the standard headers and many non standard but common ones.
|
||||
Interesting but fairly common headers should have their own
|
||||
plugins, eg. x-powered-by, server and x-aspnet-version.
|
||||
Info about headers can be found at www.http-stats.com
|
||||
|
||||
String : content-security-policy,referrer-policy,x-content-type-options,x-permitted-cross-domain-policies,x-robots-tag (from headers)
|
||||
|
||||
[ X-Frame-Options ]
|
||||
This plugin retrieves the X-Frame-Options value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : SAMEORIGIN
|
||||
|
||||
[ X-Powered-By ]
|
||||
X-Powered-By HTTP header
|
||||
|
||||
String : PHP/8.3.30 (from x-powered-by string)
|
||||
|
||||
[ X-XSS-Protection ]
|
||||
This plugin retrieves the X-XSS-Protection value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : 1; mode=block
|
||||
|
||||
HTTP Headers:
|
||||
HTTP/1.1 302 Found
|
||||
Content-Length: 0
|
||||
Content-Security-Policy: default-src 'self'; script-src 'self' 'nonce-jBF4PW7Nahz7qJf01Ql5+OPaeNUN0RV0T/nfH+WBIPA='; style-src 'self' 'unsafe-inline'; frame-src *; img-src * data: blob:; font-src 'self' data:; media-src *; connect-src *; object-src 'none'; base-uri 'self';
|
||||
Content-Type: text/html; charset=UTF-8
|
||||
Date: Sun, 05 Apr 2026 08:25:23 GMT
|
||||
Location: https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
Referrer-Policy: no-referrer
|
||||
Server: Apache/2.4.66 (Debian)
|
||||
Set-Cookie: ocexfs76yoe2=0502aeb89f6be80bb391a1abfd08525d; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Set-Cookie: oc_sessionPassphrase=yh7PzM6DWTY7HEAttA9lvgWmmVxOQ2YDkL19S3w0zOHt8ozOqNco9XLM%2BLiTUrNHJXssRgYZ67HAiDcpGTK7cKtYBZ6wm%2BCEvIefKrgsn9h0UPRGcc0FGFf%2B6kNtvkvn; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Set-Cookie: ocexfs76yoe2=0502aeb89f6be80bb391a1abfd08525d; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Set-Cookie: __Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
|
||||
Set-Cookie: __Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
|
||||
Set-Cookie: ocexfs76yoe2=0502aeb89f6be80bb391a1abfd08525d; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
X-Content-Type-Options: nosniff
|
||||
X-Frame-Options: SAMEORIGIN
|
||||
X-Permitted-Cross-Domain-Policies: none
|
||||
X-Powered-By: PHP/8.3.30
|
||||
X-Robots-Tag: noindex, nofollow
|
||||
X-Xss-Protection: 1; mode=block
|
||||
Connection: close
|
||||
|
||||
WhatWeb report for https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
Status : 200 OK
|
||||
Title : ,Login – Nextcloud
|
||||
IP : 167.179.167.166
|
||||
Country : NEW ZEALAND, NZ
|
||||
|
||||
Summary : Apache[2.4.66], Cookies[ocexfs76yoe2], HTML5, HTTPServer[Debian Linux][Apache/2.4.66 (Debian)], HttpOnly[ocexfs76yoe2], Open-Graph-Protocol[website], PHP[8.3.30], Script, Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[content-security-policy,feature-policy,referrer-policy,x-content-type-options,x-permitted-cross-domain-policies,x-request-id,x-robots-tag], X-Frame-Options[SAMEORIGIN], X-Powered-By[PHP/8.3.30], X-XSS-Protection[1; mode=block]
|
||||
|
||||
Detected Plugins:
|
||||
[ Apache ]
|
||||
The Apache HTTP Server Project is an effort to develop and
|
||||
maintain an open-source HTTP server for modern operating
|
||||
systems including UNIX and Windows NT. The goal of this
|
||||
project is to provide a secure, efficient and extensible
|
||||
server that provides HTTP services in sync with the current
|
||||
HTTP standards.
|
||||
|
||||
Version : 2.4.66 (from HTTP Server Header)
|
||||
Google Dorks: (3)
|
||||
Website : http://httpd.apache.org/
|
||||
|
||||
[ Cookies ]
|
||||
Display the names of cookies in the HTTP headers. The
|
||||
values are not returned to save on space.
|
||||
|
||||
String : ocexfs76yoe2
|
||||
|
||||
[ HTML5 ]
|
||||
HTML version 5, detected by the doctype declaration
|
||||
|
||||
|
||||
[ HTTPServer ]
|
||||
HTTP server header string. This plugin also attempts to
|
||||
identify the operating system from the server header.
|
||||
|
||||
OS : Debian Linux
|
||||
String : Apache/2.4.66 (Debian) (from server string)
|
||||
|
||||
[ HttpOnly ]
|
||||
If the HttpOnly flag is included in the HTTP set-cookie
|
||||
response header and the browser supports it then the cookie
|
||||
cannot be accessed through client side script - More Info:
|
||||
http://en.wikipedia.org/wiki/HTTP_cookie
|
||||
|
||||
String : ocexfs76yoe2
|
||||
|
||||
[ Open-Graph-Protocol ]
|
||||
The Open Graph protocol enables you to integrate your Web
|
||||
pages into the social graph. It is currently designed for
|
||||
Web pages representing profiles of real-world things .
|
||||
things like movies, sports teams, celebrities, and
|
||||
restaurants. Including Open Graph tags on your Web page,
|
||||
makes your page equivalent to a Facebook Page.
|
||||
|
||||
Version : website
|
||||
|
||||
[ PHP ]
|
||||
PHP is a widely-used general-purpose scripting language
|
||||
that is especially suited for Web development and can be
|
||||
embedded into HTML. This plugin identifies PHP errors,
|
||||
modules and versions and extracts the local file path and
|
||||
username if present.
|
||||
|
||||
Version : 8.3.30
|
||||
Google Dorks: (3)
|
||||
Website : http://www.php.net/
|
||||
|
||||
[ Script ]
|
||||
This plugin detects instances of script HTML elements and
|
||||
returns the script language/type.
|
||||
|
||||
|
||||
[ Strict-Transport-Security ]
|
||||
Strict-Transport-Security is an HTTP header that restricts
|
||||
a web browser from accessing a website without the security
|
||||
of the HTTPS protocol.
|
||||
|
||||
String : max-age=15552000; includeSubDomains; preload
|
||||
|
||||
[ UncommonHeaders ]
|
||||
Uncommon HTTP server headers. The blacklist includes all
|
||||
the standard headers and many non standard but common ones.
|
||||
Interesting but fairly common headers should have their own
|
||||
plugins, eg. x-powered-by, server and x-aspnet-version.
|
||||
Info about headers can be found at www.http-stats.com
|
||||
|
||||
String : content-security-policy,feature-policy,referrer-policy,x-content-type-options,x-permitted-cross-domain-policies,x-request-id,x-robots-tag (from headers)
|
||||
|
||||
[ X-Frame-Options ]
|
||||
This plugin retrieves the X-Frame-Options value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : SAMEORIGIN
|
||||
|
||||
[ X-Powered-By ]
|
||||
X-Powered-By HTTP header
|
||||
|
||||
String : PHP/8.3.30 (from x-powered-by string)
|
||||
|
||||
[ X-XSS-Protection ]
|
||||
This plugin retrieves the X-XSS-Protection value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : 1; mode=block
|
||||
|
||||
HTTP Headers:
|
||||
HTTP/1.1 200 OK
|
||||
Cache-Control: no-cache, no-store, must-revalidate
|
||||
Content-Encoding: gzip
|
||||
Content-Length: 5803
|
||||
Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-E/y++JVhUAGMmgbdxDsI7DMjrWvCSk3K8sBFlL2CjXM=';script-src-elem 'strict-dynamic' 'nonce-E/y++JVhUAGMmgbdxDsI7DMjrWvCSk3K8sBFlL2CjXM=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'
|
||||
Content-Type: text/html; charset=UTF-8
|
||||
Date: Sun, 05 Apr 2026 08:28:23 GMT
|
||||
Feature-Policy: autoplay 'self';camera 'none';fullscreen 'self';geolocation 'none';microphone 'none';payment 'none'
|
||||
Referrer-Policy: same-origin
|
||||
Server: Apache/2.4.66 (Debian)
|
||||
Set-Cookie: ocexfs76yoe2=0502aeb89f6be80bb391a1abfd08525d; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
X-Content-Type-Options: nosniff
|
||||
X-Frame-Options: SAMEORIGIN
|
||||
X-Permitted-Cross-Domain-Policies: none
|
||||
X-Powered-By: PHP/8.3.30
|
||||
X-Request-Id: hQlveGNuRyEf5cb7mJIq
|
||||
X-Robots-Tag: noindex, nofollow
|
||||
X-Xss-Protection: 1; mode=block
|
||||
Connection: close
|
||||
|
||||
|
||||
@@ -0,0 +1,192 @@
|
||||
Version: 2.1.5
|
||||
OpenSSL 3.5.3 16 Sep 2025
|
||||
|
||||
Connected to 167.179.167.166
|
||||
|
||||
Testing SSL server nextcloud.lan.ddnsgeek.com on port 443 using SNI name nextcloud.lan.ddnsgeek.com
|
||||
|
||||
SSL/TLS Protocols:
|
||||
SSLv2 disabled
|
||||
SSLv3 disabled
|
||||
TLSv1.0 disabled
|
||||
TLSv1.1 disabled
|
||||
TLSv1.2 enabled
|
||||
TLSv1.3 enabled
|
||||
|
||||
TLS Fallback SCSV:
|
||||
Server supports TLS Fallback SCSV
|
||||
|
||||
TLS renegotiation:
|
||||
Session renegotiation not supported
|
||||
|
||||
TLS Compression:
|
||||
Compression disabled
|
||||
|
||||
Heartbleed:
|
||||
TLSv1.3 not vulnerable to heartbleed
|
||||
TLSv1.2 not vulnerable to heartbleed
|
||||
|
||||
Supported Server Cipher(s):
|
||||
Preferred TLSv1.3 128 bits TLS_AES_128_GCM_SHA256
|
||||
Accepted TLSv1.3 256 bits TLS_AES_256_GCM_SHA384
|
||||
Accepted TLSv1.3 256 bits TLS_CHACHA20_POLY1305_SHA256
|
||||
Preferred TLSv1.2 128 bits ECDHE-RSA-AES128-GCM-SHA256 Curve 25519 DHE 253
|
||||
Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-GCM-SHA384 Curve 25519 DHE 253
|
||||
Accepted TLSv1.2 256 bits ECDHE-RSA-CHACHA20-POLY1305 Curve 25519 DHE 253
|
||||
Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA Curve 25519 DHE 253
|
||||
Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA Curve 25519 DHE 253
|
||||
|
||||
Server Key Exchange Group(s):
|
||||
TLSv1.3 128 bits secp256r1 (NIST P-256)
|
||||
TLSv1.3 192 bits secp384r1 (NIST P-384)
|
||||
TLSv1.3 260 bits secp521r1 (NIST P-521)
|
||||
TLSv1.3 128 bits x25519
|
||||
TLSv1.2 128 bits secp256r1 (NIST P-256)
|
||||
TLSv1.2 192 bits secp384r1 (NIST P-384)
|
||||
TLSv1.2 260 bits secp521r1 (NIST P-521)
|
||||
TLSv1.2 128 bits x25519
|
||||
|
||||
SSL Certificate:
|
||||
Certificate blob:
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIGGDCCBQCgAwIBAgISBs84fOBMHD0zq0Oj2DfRjS1QMA0GCSqGSIb3DQEBCwUA
|
||||
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
|
||||
EwNSMTIwHhcNMjYwMjA5MTkwMjM3WhcNMjYwNTEwMTkwMjM2WjAlMSMwIQYDVQQD
|
||||
ExpuZXh0Y2xvdWQubGFuLmRkbnNnZWVrLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQAD
|
||||
ggIPADCCAgoCggIBAMfZPcsjUERAyRB3mvCx+kUJE/5gKelvulMMV3uCdil8yiop
|
||||
3CgXHNN1E/9hsK8/gueXU1AbcpNUrHP1clNlrMku+GuwAQF4+eulJdycXM8UBOB4
|
||||
HkWO/CljSna1EZQlPx4FhDLMSki2uLP9mgNOM1/lBQ1qPG3B3EXLKOqGlEQ/zOjg
|
||||
/gyPEBxjWA3bYZZN4oiaFHnA32ontFN7CQ7COeCJCnRpr2zAUvpRO5U5uH2cfApt
|
||||
4gha9FQSgAj6lAqFGDrRDLqUl1oGY4HM5DWDhYiYnJ/n34hDRoWOt1D02PpCjNQf
|
||||
O4CDs+6udQN7zBNQBZiSBEtpGnQn73EFeElRvoGqZMrQFJa6/VEle+oJxdQL5JIv
|
||||
yeqILlfJqlMgAiM4rItUKl9hTtWOfTuPCGbtPx7qDG6gdD2CDxdgPfPBseiKU6DV
|
||||
sbHAs6aAv17982O0FIf4LE7vSmkVSpzafYRXdx/F5I6Zi+t7SlsC+l7cZiYMAyfU
|
||||
DP6kmO7mCGRRQmxu1Ui6hZjIWEa2VJ6epueY7GtrEmsVulna+uq+jz2vI/uk99EF
|
||||
H2NZuc/65i67UAjUllYA/58dTcC6kX6/WO5CTRsCzkhY0cCY2xGrs2i6bok50TzQ
|
||||
90IlIpa4IK19uDunxb6i7BFY/m56lmpKkYcyNflBCOrPtBSkVpUe45skVVdRAgMB
|
||||
AAGjggIyMIICLjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
|
||||
CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFC+nSeC+N1jWPCU+PH6S
|
||||
tjduDIpsMB8GA1UdIwQYMBaAFAC1KfItjm8x6JtMrXg++tzpDNHSMDMGCCsGAQUF
|
||||
BwEBBCcwJTAjBggrBgEFBQcwAoYXaHR0cDovL3IxMi5pLmxlbmNyLm9yZy8wJQYD
|
||||
VR0RBB4wHIIabmV4dGNsb3VkLmxhbi5kZG5zZ2Vlay5jb20wEwYDVR0gBAwwCjAI
|
||||
BgZngQwBAgEwLgYDVR0fBCcwJTAjoCGgH4YdaHR0cDovL3IxMi5jLmxlbmNyLm9y
|
||||
Zy84MS5jcmwwggEMBgorBgEEAdZ5AgQCBIH9BIH6APgAfgDjI43yjaKI4KrgrPD6
|
||||
kMmF8La/9dKlJ7AB/BxEWMS26AAAAZxD/lXDAAgAAAUAMg4sIQQDAEcwRQIgIrCy
|
||||
dkG2OA3k+ot4xDhxRpcnzkBKHTNZylHElvVz0J8CIQDfJueLeCcVjYrFxFfiBC7H
|
||||
/0xdjUSIP0UwZKmWxao/TwB2ABaDLavwqSUPD/A6pUX/yL/II9CHS/YEKSf45x8z
|
||||
E/X6AAABnEP+XTYAAAQDAEcwRQIhAPkHxBF88NswLBzx2jqn1RenJotA4rFrNQM9
|
||||
1Eof/yZ7AiAHL5k+cqEy/GJ/5eSrDYLr7HCgFBZBE5FHYlXfQ/l32DANBgkqhkiG
|
||||
9w0BAQsFAAOCAQEAlW2wfkaVWzbyhttsFH2ZuSqGY2PMi4UzJWCkokkB2fPG16Ky
|
||||
+EvvTkkkj+U39fkyDqc44jCWJ1cvM5KP6YNyit2w+dhzicllKsO5OJeOQF49EZuC
|
||||
jBxyK2AHJzOVUOpTSeaeWjRH6eVgq8ebnwxrN1APCKRhb99SRgfF5SttfVl9CHt+
|
||||
qlimvDKxX7/PeXz+PW3KAI/DOTBF7mjZUUvIRZLr2Tv7AXtl27fbfpEtXhlBVsdy
|
||||
2JtMrKu0qbfxfWeOr1uD69WWsPkgWZ8HHP+7VibHwyXUuc7FmHuxDQCtWFNkj9rm
|
||||
lZr6d0LRlE/gU6T/SDixaqBbYR7VEOEMYhL0SA==
|
||||
-----END CERTIFICATE-----
|
||||
Version: 2
|
||||
Serial Number: 06:cf:38:7c:e0:4c:1c:3d:33:ab:43:a3:d8:37:d1:8d:2d:50
|
||||
Signature Algorithm: sha256WithRSAEncryption
|
||||
Issuer: /C=US/O=Let's Encrypt/CN=R12
|
||||
Not valid before: Feb 9 19:02:37 2026 GMT
|
||||
Not valid after: May 10 19:02:36 2026 GMT
|
||||
Subject: /CN=nextcloud.lan.ddnsgeek.com
|
||||
Public Key Algorithm: NULL
|
||||
RSA Public Key: (4096 bit)
|
||||
RSA Public-Key: (4096 bit)
|
||||
Modulus:
|
||||
00:c7:d9:3d:cb:23:50:44:40:c9:10:77:9a:f0:b1:
|
||||
fa:45:09:13:fe:60:29:e9:6f:ba:53:0c:57:7b:82:
|
||||
76:29:7c:ca:2a:29:dc:28:17:1c:d3:75:13:ff:61:
|
||||
b0:af:3f:82:e7:97:53:50:1b:72:93:54:ac:73:f5:
|
||||
72:53:65:ac:c9:2e:f8:6b:b0:01:01:78:f9:eb:a5:
|
||||
25:dc:9c:5c:cf:14:04:e0:78:1e:45:8e:fc:29:63:
|
||||
4a:76:b5:11:94:25:3f:1e:05:84:32:cc:4a:48:b6:
|
||||
b8:b3:fd:9a:03:4e:33:5f:e5:05:0d:6a:3c:6d:c1:
|
||||
dc:45:cb:28:ea:86:94:44:3f:cc:e8:e0:fe:0c:8f:
|
||||
10:1c:63:58:0d:db:61:96:4d:e2:88:9a:14:79:c0:
|
||||
df:6a:27:b4:53:7b:09:0e:c2:39:e0:89:0a:74:69:
|
||||
af:6c:c0:52:fa:51:3b:95:39:b8:7d:9c:7c:0a:6d:
|
||||
e2:08:5a:f4:54:12:80:08:fa:94:0a:85:18:3a:d1:
|
||||
0c:ba:94:97:5a:06:63:81:cc:e4:35:83:85:88:98:
|
||||
9c:9f:e7:df:88:43:46:85:8e:b7:50:f4:d8:fa:42:
|
||||
8c:d4:1f:3b:80:83:b3:ee:ae:75:03:7b:cc:13:50:
|
||||
05:98:92:04:4b:69:1a:74:27:ef:71:05:78:49:51:
|
||||
be:81:aa:64:ca:d0:14:96:ba:fd:51:25:7b:ea:09:
|
||||
c5:d4:0b:e4:92:2f:c9:ea:88:2e:57:c9:aa:53:20:
|
||||
02:23:38:ac:8b:54:2a:5f:61:4e:d5:8e:7d:3b:8f:
|
||||
08:66:ed:3f:1e:ea:0c:6e:a0:74:3d:82:0f:17:60:
|
||||
3d:f3:c1:b1:e8:8a:53:a0:d5:b1:b1:c0:b3:a6:80:
|
||||
bf:5e:fd:f3:63:b4:14:87:f8:2c:4e:ef:4a:69:15:
|
||||
4a:9c:da:7d:84:57:77:1f:c5:e4:8e:99:8b:eb:7b:
|
||||
4a:5b:02:fa:5e:dc:66:26:0c:03:27:d4:0c:fe:a4:
|
||||
98:ee:e6:08:64:51:42:6c:6e:d5:48:ba:85:98:c8:
|
||||
58:46:b6:54:9e:9e:a6:e7:98:ec:6b:6b:12:6b:15:
|
||||
ba:59:da:fa:ea:be:8f:3d:af:23:fb:a4:f7:d1:05:
|
||||
1f:63:59:b9:cf:fa:e6:2e:bb:50:08:d4:96:56:00:
|
||||
ff:9f:1d:4d:c0:ba:91:7e:bf:58:ee:42:4d:1b:02:
|
||||
ce:48:58:d1:c0:98:db:11:ab:b3:68:ba:6e:89:39:
|
||||
d1:3c:d0:f7:42:25:22:96:b8:20:ad:7d:b8:3b:a7:
|
||||
c5:be:a2:ec:11:58:fe:6e:7a:96:6a:4a:91:87:32:
|
||||
35:f9:41:08:ea:cf:b4:14:a4:56:95:1e:e3:9b:24:
|
||||
55:57:51
|
||||
Exponent: 65537 (0x10001)
|
||||
X509v3 Extensions:
|
||||
X509v3 Key Usage: critical
|
||||
Digital Signature, Key Encipherment
|
||||
X509v3 Extended Key Usage:
|
||||
TLS Web Server Authentication, TLS Web Client Authentication
|
||||
X509v3 Basic Constraints: critical
|
||||
CA:FALSE
|
||||
X509v3 Subject Key Identifier:
|
||||
2F:A7:49:E0:BE:37:58:D6:3C:25:3E:3C:7E:92:B6:37:6E:0C:8A:6C
|
||||
X509v3 Authority Key Identifier:
|
||||
00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2
|
||||
Authority Information Access:
|
||||
CA Issuers - URI:http://r12.i.lencr.org/
|
||||
X509v3 Subject Alternative Name:
|
||||
DNS:nextcloud.lan.ddnsgeek.com
|
||||
X509v3 Certificate Policies:
|
||||
Policy: 2.23.140.1.2.1
|
||||
X509v3 CRL Distribution Points:
|
||||
Full Name:
|
||||
URI:http://r12.c.lencr.org/81.crl
|
||||
|
||||
CT Precertificate SCTs:
|
||||
Signed Certificate Timestamp:
|
||||
Version : v1 (0x0)
|
||||
Log ID : E3:23:8D:F2:8D:A2:88:E0:AA:E0:AC:F0:FA:90:C9:85:
|
||||
F0:B6:BF:F5:D2:A5:27:B0:01:FC:1C:44:58:C4:B6:E8
|
||||
Timestamp : Feb 9 20:01:07.523 2026 GMT
|
||||
Extensions: 00:00:05:00:32:0E:2C:21
|
||||
Signature : ecdsa-with-SHA256
|
||||
30:45:02:20:22:B0:B2:76:41:B6:38:0D:E4:FA:8B:78:
|
||||
C4:38:71:46:97:27:CE:40:4A:1D:33:59:CA:51:C4:96:
|
||||
F5:73:D0:9F:02:21:00:DF:26:E7:8B:78:27:15:8D:8A:
|
||||
C5:C4:57:E2:04:2E:C7:FF:4C:5D:8D:44:88:3F:45:30:
|
||||
64:A9:96:C5:AA:3F:4F
|
||||
Signed Certificate Timestamp:
|
||||
Version : v1 (0x0)
|
||||
Log ID : 16:83:2D:AB:F0:A9:25:0F:0F:F0:3A:A5:45:FF:C8:BF:
|
||||
C8:23:D0:87:4B:F6:04:29:27:F8:E7:1F:33:13:F5:FA
|
||||
Timestamp : Feb 9 20:01:09.430 2026 GMT
|
||||
Extensions: none
|
||||
Signature : ecdsa-with-SHA256
|
||||
30:45:02:21:00:F9:07:C4:11:7C:F0:DB:30:2C:1C:F1:
|
||||
DA:3A:A7:D5:17:A7:26:8B:40:E2:B1:6B:35:03:3D:D4:
|
||||
4A:1F:FF:26:7B:02:20:07:2F:99:3E:72:A1:32:FC:62:
|
||||
7F:E5:E4:AB:0D:82:EB:EC:70:A0:14:16:41:13:91:47:
|
||||
62:55:DF:43:F9:77:D8
|
||||
Verify m:
|
||||
unable to get local issuer certificate
|
||||
|
||||
SSL Certificate:
|
||||
Signature Algorithm: sha256WithRSAEncryption
|
||||
RSA Key Strength: 4096
|
||||
|
||||
Subject: nextcloud.lan.ddnsgeek.com
|
||||
Altnames: DNS:nextcloud.lan.ddnsgeek.com
|
||||
Issuer: R12
|
||||
|
||||
Not valid before: Feb 9 19:02:37 2026 GMT
|
||||
Not valid after: May 10 19:02:36 2026 GMT
|
||||
|
||||
@@ -0,0 +1,187 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<!DOCTYPE nmaprun>
|
||||
<?xml-stylesheet href="file:///usr/share/nmap/nmap.xsl" type="text/xsl"?>
|
||||
<!-- Nmap 7.98 scan initiated Sun Apr 5 08:16:04 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml nextcloud.lan.ddnsgeek.com -->
|
||||
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml nextcloud.lan.ddnsgeek.com" start="1775376964" startstr="Sun Apr 5 08:16:04 2026" version="7.98" xmloutputversion="1.05">
|
||||
<scaninfo type="syn" protocol="tcp" numservices="1" services="443"/>
|
||||
<verbose level="2"/>
|
||||
<debugging level="0"/>
|
||||
<taskbegin task="NSE" time="1775376977"/>
|
||||
<taskend task="NSE" time="1775376977"/>
|
||||
<taskbegin task="NSE" time="1775376977"/>
|
||||
<taskend task="NSE" time="1775376977"/>
|
||||
<taskbegin task="NSE" time="1775376977"/>
|
||||
<taskend task="NSE" time="1775376977"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1775376982"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1775376982"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1775376983"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1775376983"/>
|
||||
<taskbegin task="SYN Stealth Scan" time="1775376983"/>
|
||||
<taskend task="SYN Stealth Scan" time="1775376984" extrainfo="1 total ports"/>
|
||||
<taskbegin task="Service scan" time="1775377099"/>
|
||||
<taskend task="Service scan" time="1775377135" extrainfo="1 service on 1 host"/>
|
||||
<taskbegin task="NSE" time="1775377135"/>
|
||||
<taskprogress task="NSE" time="1775377166" percent="53.74" remaining="27" etc="1775377193"/>
|
||||
<taskprogress task="NSE" time="1775377196" percent="82.21" remaining="14" etc="1775377209"/>
|
||||
<taskprogress task="NSE" time="1775377313" percent="84.44" remaining="33" etc="1775377346"/>
|
||||
<taskprogress task="NSE" time="1775377349" percent="84.49" remaining="40" etc="1775377388"/>
|
||||
<taskprogress task="NSE" time="1775377454" percent="84.54" remaining="59" etc="1775377512"/>
|
||||
<taskprogress task="NSE" time="1775377484" percent="84.54" remaining="64" etc="1775377548"/>
|
||||
<taskprogress task="NSE" time="1775377514" percent="95.13" remaining="20" etc="1775377533"/>
|
||||
<taskprogress task="NSE" time="1775377544" percent="99.03" remaining="5" etc="1775377548"/>
|
||||
<taskprogress task="NSE" time="1775377575" percent="99.35" remaining="3" etc="1775377578"/>
|
||||
<taskprogress task="NSE" time="1775377606" percent="99.68" remaining="2" etc="1775377608"/>
|
||||
<taskprogress task="NSE" time="1775377658" percent="99.68" remaining="2" etc="1775377660"/>
|
||||
<taskend task="NSE" time="1775377676"/>
|
||||
<taskbegin task="NSE" time="1775377676"/>
|
||||
<taskend task="NSE" time="1775377687"/>
|
||||
<taskbegin task="NSE" time="1775377687"/>
|
||||
<taskend task="NSE" time="1775377688"/>
|
||||
<host starttime="1775376983" endtime="1775377688"><status state="up" reason="user-set" reason_ttl="0"/>
|
||||
<address addr="167.179.167.166" addrtype="ipv4"/>
|
||||
<hostnames>
|
||||
<hostname name="nextcloud.lan.ddnsgeek.com" type="user"/>
|
||||
<hostname name="167-179-167-166.a7b3a7.bne.nbn.aussiebb.net" type="PTR"/>
|
||||
</hostnames>
|
||||
<ports><port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" tunnel="ssl" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-dombased-xss" output="Couldn't find any DOM based XSS."/><script id="http-server-header" output="Apache/2.4.66 (Debian)"><elem>Apache/2.4.66 (Debian)</elem>
|
||||
</script><script id="http-headers" output="
 Cache-Control: no-cache, no-store, must-revalidate
 Content-Length: 16047
 Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';script-src-elem 'strict-dynamic' 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'
 Content-Type: text/html; charset=UTF-8
 Date: Sun, 05 Apr 2026 08:19:52 GMT
 Feature-Policy: autoplay 'self';camera 'none';fullscreen 'self';geolocation 'none';microphone 'none';payment 'none'
 Referrer-Policy: same-origin
 Server: Apache/2.4.66 (Debian)
 Set-Cookie: ocexfs76yoe2=ec8e4644674a95fc3c6b23b49c28df1f; path=/; secure; HttpOnly; SameSite=Lax
 Set-Cookie: oc_sessionPassphrase=vaA75gLRczK4PR19LRVIdeCUbAH2eyCr84lwC0J%2FRs%2FAJzlQYpiLdt%2BxMWrssNRkSjTrifW2r%2Fg0sWzn7Cact8Zw3rXzotR6z4WBk4sSNdwp4UgXFlUAwNHKCMEVwmfq; path=/; secure; HttpOnly; SameSite=Lax
 Set-Cookie: ocexfs76yoe2=ec8e4644674a95fc3c6b23b49c28df1f; path=/; secure; HttpOnly; SameSite=Lax
 Set-Cookie: __Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
 Set-Cookie: __Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
 Set-Cookie: ocexfs76yoe2=ec8e4644674a95fc3c6b23b49c28df1f; path=/; secure; HttpOnly; SameSite=Lax
 Set-Cookie: ocexfs76yoe2=ec8e4644674a95fc3c6b23b49c28df1f; path=/; secure; HttpOnly; SameSite=Lax
 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
 X-Content-Type-Options: nosniff
 X-Frame-Options: SAMEORIGIN
 X-Permitted-Cross-Domain-Policies: none
 X-Powered-By: PHP/8.3.30
 X-Request-Id: 8l0zCl9BZ2uwysWABFY8
 X-Robots-Tag: noindex, nofollow
 X-Xss-Protection: 1; mode=block
 Connection: close
 
 (Request type: HEAD)
"/><script id="http-title" output="Login \xE2\x80\x93 Nextcloud
Requested resource was https://nextcloud.lan.ddnsgeek.com/index.php/login"><elem key="title">
			Login \xE2\x80\x93 Nextcloud		</elem>
|
||||
<elem key="redirect_url">https://nextcloud.lan.ddnsgeek.com/index.php/login</elem>
|
||||
</script><script id="http-vhosts" output="
127 names had status 404
auth.lan.ddnsgeek.com : 200"/><script id="http-feed" output="Couldn't find any feeds."/><script id="http-jsonp-detection" output="Couldn't find any JSONP endpoints."/><script id="ssl-enum-ciphers" output="
 TLSv1.2: 
 ciphers: 
 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
 compressors: 
 NULL
 cipher preference: client
 warnings: 
 Key exchange (secp256r1) of lower strength than certificate key
 TLSv1.3: 
 ciphers: 
 TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A
 TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A
 TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
 cipher preference: server
 least strength: A"><table key="TLSv1.2">
|
||||
<table key="ciphers">
|
||||
<table>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</elem>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</elem>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</elem>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384</elem>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256</elem>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
</table>
|
||||
</table>
|
||||
<table key="compressors">
|
||||
<elem>NULL</elem>
|
||||
</table>
|
||||
<elem key="cipher preference">client</elem>
|
||||
<table key="warnings">
|
||||
<elem>Key exchange (secp256r1) of lower strength than certificate key</elem>
|
||||
</table>
|
||||
</table>
|
||||
<table key="TLSv1.3">
|
||||
<table key="ciphers">
|
||||
<table>
|
||||
<elem key="name">TLS_AKE_WITH_AES_128_GCM_SHA256</elem>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="kex_info">X25519MLKEM768</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">TLS_AKE_WITH_AES_256_GCM_SHA384</elem>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="kex_info">X25519MLKEM768</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">TLS_AKE_WITH_CHACHA20_POLY1305_SHA256</elem>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="kex_info">X25519MLKEM768</elem>
|
||||
</table>
|
||||
</table>
|
||||
<elem key="cipher preference">server</elem>
|
||||
</table>
|
||||
<elem key="least strength">A</elem>
|
||||
</script><script id="http-wordpress-enum" output="Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)"/><script id="http-errors" output="
Spidering limited to: maxpagecount=40; withinhost=nextcloud.lan.ddnsgeek.com
 Found the following error pages: 
 
 Error Code: 404
 	http://nextcloud.lan.ddnsgeek.com:443/
"/><script id="http-referer-checker" output="Couldn't find any cross-domain scripts."/><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
|
||||
</script><script id="http-sitemap-generator" output="
 Directory structure:
 /index.php/
 Other: 1
 Longest directory structure:
 Depth: 1
 Dir: /index.php/
 Total files found (by extension):
 Other: 1
"/><script id="http-date" output="Sun, 05 Apr 2026 08:20:00 GMT; -6s from local time."><elem key="date">2026-04-05T08:20:00+00:00</elem>
|
||||
<elem key="delta">-6.0</elem>
|
||||
</script><script id="http-waf-detect" output="IDS/IPS/WAF detected:
nextcloud.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>"/><script id="http-security-headers" output="
 Strict_Transport_Security: 
 Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
 X_Frame_Options: 
 Header: X-Frame-Options: SAMEORIGIN
 Description: The browser must not display this content in any frame from a page of different origin than the content itself.
 X_XSS_Protection: 
 Header: X-XSS-Protection: 1; mode=block
 Description: The browser will prevent the rendering of the page when XSS is detected.
 X_Content_Type_Options: 
 Header: X-Content-Type-Options: nosniff
 Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. 
 Content_Security_Policy: 
 Header: Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';script-src-elem 'strict-dynamic' 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'
 Description: Define the base uri for relative uri.
 Description: Define loading policy for all resources type in case of a resource type dedicated directive is not defined (fallback).
 Description: Define which scripts the protected resource can execute.
 Description: Define which styles (CSS) the user applies to the protected resource.
 Description: Define from where the protected resource can load images.
 Description: Define from where the protected resource can load video and audio.
 Description: Deprecated and replaced by child-src. Define from where the protected resource can embed frames.
 Description: Define from where the protected resource can be embedded in frames.
 Description: Define from where the protected resource can load fonts.
 Description: Define which URIs the protected resource can load using script interfaces.
 Description: Define which URIs can be used as the action of HTML form elements.
 X_Permitted_Cross_Domain_Policies: 
 Header: X-Permitted-Cross-Domain-Policies: none
 Description: No policy files are allowed anywhere on the target server, including this master policy file. 
 Cookie: 
 Cookies are secured with Secure Flag in HTTPS Connection
 Cache_Control: 
 Header: Cache-Control: no-cache, no-store, must-revalidate"><table key="Strict_Transport_Security">
|
||||
<elem>Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload</elem>
|
||||
</table>
|
||||
<table key="X_Frame_Options">
|
||||
<elem>Header: X-Frame-Options: SAMEORIGIN</elem>
|
||||
<elem>Description: The browser must not display this content in any frame from a page of different origin than the content itself.</elem>
|
||||
</table>
|
||||
<table key="X_XSS_Protection">
|
||||
<elem>Header: X-XSS-Protection: 1; mode=block</elem>
|
||||
<elem>Description: The browser will prevent the rendering of the page when XSS is detected.</elem>
|
||||
</table>
|
||||
<table key="X_Content_Type_Options">
|
||||
<elem>Header: X-Content-Type-Options: nosniff</elem>
|
||||
<elem>Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. </elem>
|
||||
</table>
|
||||
<table key="Content_Security_Policy">
|
||||
<elem>Header: Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';script-src-elem 'strict-dynamic' 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'</elem>
|
||||
<elem>Description: Define the base uri for relative uri.</elem>
|
||||
<elem>Description: Define loading policy for all resources type in case of a resource type dedicated directive is not defined (fallback).</elem>
|
||||
<elem>Description: Define which scripts the protected resource can execute.</elem>
|
||||
<elem>Description: Define which styles (CSS) the user applies to the protected resource.</elem>
|
||||
<elem>Description: Define from where the protected resource can load images.</elem>
|
||||
<elem>Description: Define from where the protected resource can load video and audio.</elem>
|
||||
<elem>Description: Deprecated and replaced by child-src. Define from where the protected resource can embed frames.</elem>
|
||||
<elem>Description: Define from where the protected resource can be embedded in frames.</elem>
|
||||
<elem>Description: Define from where the protected resource can load fonts.</elem>
|
||||
<elem>Description: Define which URIs the protected resource can load using script interfaces.</elem>
|
||||
<elem>Description: Define which URIs can be used as the action of HTML form elements.</elem>
|
||||
</table>
|
||||
<table key="X_Permitted_Cross_Domain_Policies">
|
||||
<elem>Header: X-Permitted-Cross-Domain-Policies: none</elem>
|
||||
<elem>Description: No policy files are allowed anywhere on the target server, including this master policy file. </elem>
|
||||
</table>
|
||||
<table key="Cookie">
|
||||
<elem>Cookies are secured with Secure Flag in HTTPS Connection</elem>
|
||||
</table>
|
||||
<table key="Cache_Control">
|
||||
<elem>Header: Cache-Control: no-cache, no-store, must-revalidate</elem>
|
||||
</table>
|
||||
</script><script id="http-useragent-tester" output="
 Status for browser useragent: 200
 Redirected To: https://nextcloud.lan.ddnsgeek.com/index.php/login
 Allowed User Agents: 
 Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
 libwww
 lwp-trivial
 libcurl-agent/1.0
 PHP/
 Python-urllib/2.5
 GT::WWW
 Snoopy
 MFC_Tear_Sample
 HTTP::Lite
 PHPCrawl
 URI::Fetch
 Zend_Http_Client
 http client
 PECL::HTTP
 Wget/1.13.4 (linux-gnu)
 WWW-Mechanize/1.34"><elem key="Status for browser useragent">200</elem>
|
||||
<elem key="Redirected To">https://nextcloud.lan.ddnsgeek.com/index.php/login</elem>
|
||||
<table key="Allowed User Agents">
|
||||
<elem>Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)</elem>
|
||||
<elem>libwww</elem>
|
||||
<elem>lwp-trivial</elem>
|
||||
<elem>libcurl-agent/1.0</elem>
|
||||
<elem>PHP/</elem>
|
||||
<elem>Python-urllib/2.5</elem>
|
||||
<elem>GT::WWW</elem>
|
||||
<elem>Snoopy</elem>
|
||||
<elem>MFC_Tear_Sample</elem>
|
||||
<elem>HTTP::Lite</elem>
|
||||
<elem>PHPCrawl</elem>
|
||||
<elem>URI::Fetch</elem>
|
||||
<elem>Zend_Http_Client</elem>
|
||||
<elem>http client</elem>
|
||||
<elem>PECL::HTTP</elem>
|
||||
<elem>Wget/1.13.4 (linux-gnu)</elem>
|
||||
<elem>WWW-Mechanize/1.34</elem>
|
||||
</table>
|
||||
</script><script id="http-chrono" output="Request times for /index.php/login; avg: 3919.89ms; min: 1656.25ms; max: 10499.33ms"/><script id="http-stored-xss" output="Couldn't find any stored XSS vulnerabilities."/><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)"/><script id="http-csrf" output="Couldn't find any CSRF vulnerabilities."/><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-php-version" output="Logo query returned unknown hash e473773cc5b8b9dc08c846c0dc434c15"/><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-methods" output="
 Supported Methods: GET HEAD POST OPTIONS"><table key="Supported Methods">
|
||||
<elem>GET</elem>
|
||||
<elem>HEAD</elem>
|
||||
<elem>POST</elem>
|
||||
<elem>OPTIONS</elem>
|
||||
</table>
|
||||
</script><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="http-devframework" output="Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages."/><script id="http-comments-displayer" output="Couldn't find any comments."/><script id="http-traceroute" output="
 Status Code
 Hop #1: 404
 Hop #2: 302
 Hop #3: 302
 server
 Hop #1
 Hop #2: Apache/2.4.66 (Debian)
 Hop #3: Apache/2.4.66 (Debian)
 content-type
 Hop #1: text/plain; charset=utf-8
 Hop #2: text/html; charset=UTF-8
 Hop #3: text/html; charset=UTF-8
 content-length
 Hop #1: 19
 Hop #2: 0
 Hop #3: 0
 location
 Hop #1
 Hop #2: https://nextcloud.lan.ddnsgeek.com/index.php/login
 Hop #3: https://nextcloud.lan.ddnsgeek.com/index.php/login
"/><script id="http-malware-host" output="Host appears to be clean"/><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn't find wp-login.php"/></port>
|
||||
</ports>
|
||||
<times srtt="26044" rttvar="26044" to="130220"/>
|
||||
</host>
|
||||
<taskbegin task="NSE" time="1775377688"/>
|
||||
<taskend task="NSE" time="1775377688"/>
|
||||
<taskbegin task="NSE" time="1775377688"/>
|
||||
<taskend task="NSE" time="1775377688"/>
|
||||
<taskbegin task="NSE" time="1775377688"/>
|
||||
<taskend task="NSE" time="1775377688"/>
|
||||
<runstats><finished time="1775377689" timestr="Sun Apr 5 08:28:09 2026" summary="Nmap done at Sun Apr 5 08:28:09 2026; 1 IP address (1 host up) scanned in 727.15 seconds" elapsed="727.15" exit="success"/><hosts up="1" down="0" total="1"/>
|
||||
</runstats>
|
||||
</nmaprun>
|
||||
@@ -0,0 +1,6 @@
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://nextcloud.lan.ddnsgeek.com/robots.txt
|
||||
Date: Sun, 05 Apr 2026 08:15:01 GMT
|
||||
Content-Length: 17
|
||||
|
||||
Moved Permanently
|
||||
@@ -0,0 +1,6 @@
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://nextcloud.lan.ddnsgeek.com/
|
||||
Date: Sun, 05 Apr 2026 08:15:01 GMT
|
||||
Content-Length: 17
|
||||
|
||||
Moved Permanently
|
||||
@@ -0,0 +1,343 @@
|
||||
Configuration {
|
||||
kind: "configuration",
|
||||
wordlist: "/root/.local/share/AutoRecon/wordlists/dirbuster.txt",
|
||||
config: "/etc/feroxbuster/ferox-config.toml",
|
||||
proxy: "",
|
||||
replay_proxy: "",
|
||||
server_certs: [],
|
||||
client_cert: "",
|
||||
client_key: "",
|
||||
target_url: "http://nextcloud.lan.ddnsgeek.com/",
|
||||
status_codes: [
|
||||
100,
|
||||
101,
|
||||
102,
|
||||
200,
|
||||
201,
|
||||
202,
|
||||
203,
|
||||
204,
|
||||
205,
|
||||
206,
|
||||
207,
|
||||
208,
|
||||
226,
|
||||
300,
|
||||
301,
|
||||
302,
|
||||
303,
|
||||
304,
|
||||
305,
|
||||
307,
|
||||
308,
|
||||
400,
|
||||
401,
|
||||
402,
|
||||
403,
|
||||
404,
|
||||
405,
|
||||
406,
|
||||
407,
|
||||
408,
|
||||
409,
|
||||
410,
|
||||
411,
|
||||
412,
|
||||
413,
|
||||
414,
|
||||
415,
|
||||
416,
|
||||
417,
|
||||
418,
|
||||
421,
|
||||
422,
|
||||
423,
|
||||
424,
|
||||
426,
|
||||
428,
|
||||
429,
|
||||
431,
|
||||
451,
|
||||
500,
|
||||
501,
|
||||
502,
|
||||
503,
|
||||
504,
|
||||
505,
|
||||
506,
|
||||
507,
|
||||
508,
|
||||
510,
|
||||
511,
|
||||
103,
|
||||
425,
|
||||
],
|
||||
replay_codes: [
|
||||
100,
|
||||
101,
|
||||
102,
|
||||
200,
|
||||
201,
|
||||
202,
|
||||
203,
|
||||
204,
|
||||
205,
|
||||
206,
|
||||
207,
|
||||
208,
|
||||
226,
|
||||
300,
|
||||
301,
|
||||
302,
|
||||
303,
|
||||
304,
|
||||
305,
|
||||
307,
|
||||
308,
|
||||
400,
|
||||
401,
|
||||
402,
|
||||
403,
|
||||
404,
|
||||
405,
|
||||
406,
|
||||
407,
|
||||
408,
|
||||
409,
|
||||
410,
|
||||
411,
|
||||
412,
|
||||
413,
|
||||
414,
|
||||
415,
|
||||
416,
|
||||
417,
|
||||
418,
|
||||
421,
|
||||
422,
|
||||
423,
|
||||
424,
|
||||
426,
|
||||
428,
|
||||
429,
|
||||
431,
|
||||
451,
|
||||
500,
|
||||
501,
|
||||
502,
|
||||
503,
|
||||
504,
|
||||
505,
|
||||
506,
|
||||
507,
|
||||
508,
|
||||
510,
|
||||
511,
|
||||
103,
|
||||
425,
|
||||
],
|
||||
filter_status: [],
|
||||
client: Client {
|
||||
accepts: Accepts,
|
||||
proxies: [
|
||||
Matcher,
|
||||
],
|
||||
redirect_policy: "Policy(Custom)",
|
||||
referer: true,
|
||||
default_headers: {
|
||||
"accept": "*/*",
|
||||
"user-agent": "feroxbuster/2.13.1",
|
||||
},
|
||||
reqwest::config::RequestTimeout: 7s,
|
||||
},
|
||||
replay_client: None,
|
||||
threads: 10,
|
||||
timeout: 7,
|
||||
verbosity: 1,
|
||||
silent: false,
|
||||
quiet: true,
|
||||
output_level: Quiet,
|
||||
auto_bail: false,
|
||||
auto_tune: false,
|
||||
requester_policy: Default,
|
||||
json: false,
|
||||
output: "/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt",
|
||||
debug_log: "",
|
||||
user_agent: "feroxbuster/2.13.1",
|
||||
random_agent: false,
|
||||
redirects: true,
|
||||
insecure: true,
|
||||
extensions: [
|
||||
"txt",
|
||||
"html",
|
||||
"php",
|
||||
"asp",
|
||||
"aspx",
|
||||
"jsp",
|
||||
],
|
||||
methods: [
|
||||
"GET",
|
||||
],
|
||||
data: [],
|
||||
headers: {},
|
||||
queries: [],
|
||||
no_recursion: true,
|
||||
extract_links: true,
|
||||
add_slash: false,
|
||||
stdin: false,
|
||||
cached_stdin: [],
|
||||
depth: 4,
|
||||
scan_limit: 0,
|
||||
parallel: 0,
|
||||
rate_limit: 0,
|
||||
filter_size: [],
|
||||
filter_line_count: [],
|
||||
filter_word_count: [],
|
||||
filter_regex: [],
|
||||
dont_filter: false,
|
||||
resumed: false,
|
||||
resume_from: "",
|
||||
save_state: true,
|
||||
time_limit: "",
|
||||
filter_similar: [],
|
||||
url_denylist: [],
|
||||
regex_denylist: [],
|
||||
scope: [
|
||||
Url {
|
||||
scheme: "http",
|
||||
cannot_be_a_base: false,
|
||||
username: "",
|
||||
password: None,
|
||||
host: Some(
|
||||
Domain(
|
||||
"nextcloud.lan.ddnsgeek.com",
|
||||
),
|
||||
),
|
||||
port: None,
|
||||
path: "/",
|
||||
query: None,
|
||||
fragment: None,
|
||||
},
|
||||
],
|
||||
collect_extensions: false,
|
||||
dont_collect: [
|
||||
"woff2",
|
||||
"woff",
|
||||
"ttf",
|
||||
"otf",
|
||||
"eot",
|
||||
"tif",
|
||||
"tiff",
|
||||
"ico",
|
||||
"cur",
|
||||
"bmp",
|
||||
"webp",
|
||||
"svg",
|
||||
"png",
|
||||
"jpg",
|
||||
"jpeg",
|
||||
"jfif",
|
||||
"gif",
|
||||
"avif",
|
||||
"apng",
|
||||
"pjpeg",
|
||||
"pjp",
|
||||
"mov",
|
||||
"wav",
|
||||
"mpg",
|
||||
"mpeg",
|
||||
"mp3",
|
||||
"mp4",
|
||||
"m4a",
|
||||
"m4p",
|
||||
"m4v",
|
||||
"ogg",
|
||||
"webm",
|
||||
"ogv",
|
||||
"oga",
|
||||
"flac",
|
||||
"aac",
|
||||
"3gp",
|
||||
"css",
|
||||
"zip",
|
||||
"xls",
|
||||
"xml",
|
||||
"gz",
|
||||
"tgz",
|
||||
],
|
||||
collect_backups: false,
|
||||
backup_extensions: [
|
||||
"~",
|
||||
".bak",
|
||||
".bak2",
|
||||
".old",
|
||||
".1",
|
||||
],
|
||||
collect_words: false,
|
||||
force_recursion: false,
|
||||
update_app: false,
|
||||
scan_dir_listings: false,
|
||||
request_file: "",
|
||||
protocol: "https",
|
||||
limit_bars: 0,
|
||||
unique: false,
|
||||
response_size_limit: 4194304,
|
||||
}
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/apps/dashboard
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/apps/logreader
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/apps/photos
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/apps/files
|
||||
200 GET 494l 1557w 31067c https://nextcloud.lan.ddnsgeek.com/index.php/apps/files_pdfviewer
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/apps/activity
|
||||
200 GET 93l 341w 16047c https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.txt
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/settings/user/security
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.txt
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.html
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.html
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.php
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.php
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.asp
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.asp
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.aspx
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.aspx
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.jsp
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.jsp
|
||||
200 GET 6l 12w 281c https://nextcloud.lan.ddnsgeek.com/.well-known/security.txt
|
||||
200 GET 1l 5w 77c https://nextcloud.lan.ddnsgeek.com/cron.php
|
||||
200 GET 12l 31w 331c https://nextcloud.lan.ddnsgeek.com/index.html
|
||||
500 GET 2l 11w 72c https://nextcloud.lan.ddnsgeek.com/public.php
|
||||
200 GET 2l 4w 26c https://nextcloud.lan.ddnsgeek.com/robots.txt
|
||||
200 GET 1l 1w 170c https://nextcloud.lan.ddnsgeek.com/status.php
|
||||
200 GET 0l 0w 0c https://nextcloud.lan.ddnsgeek.com/version.php
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/] => https://nextcloud.lan.ddnsgeek.com/]
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/[ => https://nextcloud.lan.ddnsgeek.com/[
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/[.txt => https://nextcloud.lan.ddnsgeek.com/[.txt
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/].txt => https://nextcloud.lan.ddnsgeek.com/].txt
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/].html => https://nextcloud.lan.ddnsgeek.com/].html
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/[.html => https://nextcloud.lan.ddnsgeek.com/[.html
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/[.php => https://nextcloud.lan.ddnsgeek.com/[.php
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/].php => https://nextcloud.lan.ddnsgeek.com/].php
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/].asp => https://nextcloud.lan.ddnsgeek.com/].asp
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/[.asp => https://nextcloud.lan.ddnsgeek.com/[.asp
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/[.aspx => https://nextcloud.lan.ddnsgeek.com/[.aspx
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/].aspx => https://nextcloud.lan.ddnsgeek.com/].aspx
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/].jsp => https://nextcloud.lan.ddnsgeek.com/].jsp
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/[.jsp => https://nextcloud.lan.ddnsgeek.com/[.jsp
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/plain] => https://nextcloud.lan.ddnsgeek.com/plain]
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/plain].txt => https://nextcloud.lan.ddnsgeek.com/plain].txt
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/plain].html => https://nextcloud.lan.ddnsgeek.com/plain].html
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/plain].php => https://nextcloud.lan.ddnsgeek.com/plain].php
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/plain].asp => https://nextcloud.lan.ddnsgeek.com/plain].asp
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/plain].aspx => https://nextcloud.lan.ddnsgeek.com/plain].aspx
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/plain].jsp => https://nextcloud.lan.ddnsgeek.com/plain].jsp
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/quote] => https://nextcloud.lan.ddnsgeek.com/quote]
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/quote].txt => https://nextcloud.lan.ddnsgeek.com/quote].txt
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/quote].html => https://nextcloud.lan.ddnsgeek.com/quote].html
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/quote].php => https://nextcloud.lan.ddnsgeek.com/quote].php
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/quote].asp => https://nextcloud.lan.ddnsgeek.com/quote].asp
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/quote].aspx => https://nextcloud.lan.ddnsgeek.com/quote].aspx
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/quote].jsp => https://nextcloud.lan.ddnsgeek.com/quote].jsp
|
||||
200 GET 661l 5535w 34520c https://nextcloud.lan.ddnsgeek.com/COPYING
|
||||
@@ -0,0 +1,6 @@
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://nextcloud.lan.ddnsgeek.com/.well-known/security.txt
|
||||
Date: Sun, 05 Apr 2026 08:15:01 GMT
|
||||
Content-Length: 17
|
||||
|
||||
Moved Permanently
|
||||
+40476
File diff suppressed because it is too large
Load Diff
@@ -0,0 +1,23 @@
|
||||
- Nikto v2.6.0
|
||||
---------------------------------------------------------------------------
|
||||
+ Your Nikto installation is out of date.
|
||||
+ Target IP: 167.179.167.166
|
||||
+ Target Hostname: nextcloud.lan.ddnsgeek.com
|
||||
+ Target Port: 80
|
||||
+ Platform: Unknown
|
||||
+ Start Time: 2026-04-05 08:16:04 (GMT0)
|
||||
---------------------------------------------------------------------------
|
||||
+ Server: No banner retrieved
|
||||
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
|
||||
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
|
||||
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
|
||||
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
|
||||
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
|
||||
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
|
||||
+ [999979] http://100.100.100.200/latest/meta-data/: IP address found in the 'location' header. The IP is "100.100.100.200". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed
|
||||
+ [007342] /: X-Frame-Options header is deprecated and was replaced with the Content-Security-Policy HTTP header with the frame-ancestors directive. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options
|
||||
+ [007352] /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/
|
||||
+ 7900 requests: 16 errors and 8 items reported on the remote host
|
||||
+ End Time: 2026-04-05 08:47:41 (GMT0) (1897 seconds)
|
||||
---------------------------------------------------------------------------
|
||||
+ 1 host(s) tested
|
||||
@@ -0,0 +1,90 @@
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 08:15:02 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml nextcloud.lan.ddnsgeek.com
|
||||
Nmap scan report for nextcloud.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set (0.015s latency).
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 08:15:16 UTC for 1235s
|
||||
|
||||
Bug in http-security-headers: no string output.
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
| http-traceroute:
|
||||
| Status Code
|
||||
| Hop #1: 301
|
||||
| Hop #2: 301
|
||||
| Hop #3: 404
|
||||
| content-type
|
||||
| Hop #1
|
||||
| Hop #2
|
||||
| Hop #3: text/plain; charset=utf-8
|
||||
| content-length
|
||||
| Hop #1: 17
|
||||
| Hop #2: 17
|
||||
| Hop #3: 19
|
||||
| location
|
||||
| Hop #1: https://nextcloud.lan.ddnsgeek.com/
|
||||
| Hop #2: https://nextcloud.lan.ddnsgeek.com/
|
||||
|_ Hop #3
|
||||
| http-useragent-tester:
|
||||
| Status for browser useragent: 200
|
||||
| Redirected To: https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
| Allowed User Agents:
|
||||
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
|
||||
| libwww
|
||||
| lwp-trivial
|
||||
| libcurl-agent/1.0
|
||||
| PHP/
|
||||
| Python-urllib/2.5
|
||||
| GT::WWW
|
||||
| Snoopy
|
||||
| MFC_Tear_Sample
|
||||
| HTTP::Lite
|
||||
| PHPCrawl
|
||||
| URI::Fetch
|
||||
| Zend_Http_Client
|
||||
| http client
|
||||
| PECL::HTTP
|
||||
| Wget/1.13.4 (linux-gnu)
|
||||
|_ WWW-Mechanize/1.34
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
|_http-title: Did not follow redirect to https://nextcloud.lan.ddnsgeek.com/
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
|_http-date: Sun, 05 Apr 2026 08:16:39 GMT; -2m03s from local time.
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
| http-headers:
|
||||
| Location: https://nextcloud.lan.ddnsgeek.com/
|
||||
| Date: Sun, 05 Apr 2026 08:18:48 GMT
|
||||
| Content-Length: 17
|
||||
| Connection: close
|
||||
|
|
||||
|_ (Request type: GET)
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
|_http-errors: Couldn't find any error pages.
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
| http-vhosts:
|
||||
| 126 names had status 308
|
||||
| news.lan.ddnsgeek.com : 404
|
||||
|_intra.lan.ddnsgeek.com : 404
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
|_http-chrono: Request times for /; avg: 1469.81ms; min: 1340.59ms; max: 1702.87ms
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| Longest directory structure:
|
||||
| Depth: 0
|
||||
| Dir: /
|
||||
| Total files found (by extension):
|
||||
|_
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 08:35:52 2026 -- 1 IP address (1 host up) scanned in 1251.73 seconds
|
||||
@@ -0,0 +1,267 @@
|
||||
WhatWeb report for http://nextcloud.lan.ddnsgeek.com:80
|
||||
Status : 301 Moved Permanently
|
||||
Title : <None>
|
||||
IP : 167.179.167.166
|
||||
Country : NEW ZEALAND, NZ
|
||||
|
||||
Summary : RedirectLocation[https://nextcloud.lan.ddnsgeek.com/]
|
||||
|
||||
Detected Plugins:
|
||||
[ RedirectLocation ]
|
||||
HTTP Server string location. used with http-status 301 and
|
||||
302
|
||||
|
||||
String : https://nextcloud.lan.ddnsgeek.com/ (from location)
|
||||
|
||||
HTTP Headers:
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://nextcloud.lan.ddnsgeek.com/
|
||||
Date: Sun, 05 Apr 2026 08:19:27 GMT
|
||||
Content-Length: 17
|
||||
Connection: close
|
||||
|
||||
WhatWeb report for https://nextcloud.lan.ddnsgeek.com/
|
||||
Status : 302 Found
|
||||
Title : <None>
|
||||
IP : 167.179.167.166
|
||||
Country : NEW ZEALAND, NZ
|
||||
|
||||
Summary : Cookies[__Host-nc_sameSiteCookielax,__Host-nc_sameSiteCookiestrict,oc_sessionPassphrase,ocexfs76yoe2], HTTPServer[Debian Linux][Apache/2.4.66 (Debian)], HttpOnly[__Host-nc_sameSiteCookielax,__Host-nc_sameSiteCookiestrict,oc_sessionPassphrase,ocexfs76yoe2], PHP[8.3.30], RedirectLocation[https://nextcloud.lan.ddnsgeek.com/index.php/login], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[content-security-policy,referrer-policy,x-content-type-options,x-permitted-cross-domain-policies,x-robots-tag], X-Frame-Options[SAMEORIGIN], X-Powered-By[PHP/8.3.30], X-XSS-Protection[1; mode=block]
|
||||
|
||||
Detected Plugins:
|
||||
[ Cookies ]
|
||||
Display the names of cookies in the HTTP headers. The
|
||||
values are not returned to save on space.
|
||||
|
||||
String : ocexfs76yoe2
|
||||
String : oc_sessionPassphrase
|
||||
String : ocexfs76yoe2
|
||||
String : __Host-nc_sameSiteCookielax
|
||||
String : __Host-nc_sameSiteCookiestrict
|
||||
String : ocexfs76yoe2
|
||||
|
||||
[ HTTPServer ]
|
||||
HTTP server header string. This plugin also attempts to
|
||||
identify the operating system from the server header.
|
||||
|
||||
OS : Debian Linux
|
||||
String : Apache/2.4.66 (Debian) (from server string)
|
||||
|
||||
[ HttpOnly ]
|
||||
If the HttpOnly flag is included in the HTTP set-cookie
|
||||
response header and the browser supports it then the cookie
|
||||
cannot be accessed through client side script - More Info:
|
||||
http://en.wikipedia.org/wiki/HTTP_cookie
|
||||
|
||||
String : __Host-nc_sameSiteCookielax,__Host-nc_sameSiteCookiestrict,oc_sessionPassphrase,ocexfs76yoe2
|
||||
|
||||
[ PHP ]
|
||||
PHP is a widely-used general-purpose scripting language
|
||||
that is especially suited for Web development and can be
|
||||
embedded into HTML. This plugin identifies PHP errors,
|
||||
modules and versions and extracts the local file path and
|
||||
username if present.
|
||||
|
||||
Version : 8.3.30
|
||||
Google Dorks: (3)
|
||||
Website : http://www.php.net/
|
||||
|
||||
[ RedirectLocation ]
|
||||
HTTP Server string location. used with http-status 301 and
|
||||
302
|
||||
|
||||
String : https://nextcloud.lan.ddnsgeek.com/index.php/login (from location)
|
||||
|
||||
[ Strict-Transport-Security ]
|
||||
Strict-Transport-Security is an HTTP header that restricts
|
||||
a web browser from accessing a website without the security
|
||||
of the HTTPS protocol.
|
||||
|
||||
String : max-age=15552000; includeSubDomains; preload
|
||||
|
||||
[ UncommonHeaders ]
|
||||
Uncommon HTTP server headers. The blacklist includes all
|
||||
the standard headers and many non standard but common ones.
|
||||
Interesting but fairly common headers should have their own
|
||||
plugins, eg. x-powered-by, server and x-aspnet-version.
|
||||
Info about headers can be found at www.http-stats.com
|
||||
|
||||
String : content-security-policy,referrer-policy,x-content-type-options,x-permitted-cross-domain-policies,x-robots-tag (from headers)
|
||||
|
||||
[ X-Frame-Options ]
|
||||
This plugin retrieves the X-Frame-Options value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : SAMEORIGIN
|
||||
|
||||
[ X-Powered-By ]
|
||||
X-Powered-By HTTP header
|
||||
|
||||
String : PHP/8.3.30 (from x-powered-by string)
|
||||
|
||||
[ X-XSS-Protection ]
|
||||
This plugin retrieves the X-XSS-Protection value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : 1; mode=block
|
||||
|
||||
HTTP Headers:
|
||||
HTTP/1.1 302 Found
|
||||
Content-Length: 0
|
||||
Content-Security-Policy: default-src 'self'; script-src 'self' 'nonce-FGzDOrcXLc9zPk8VixPSWXyY4A9tblc9Ze4kMyv+2aw='; style-src 'self' 'unsafe-inline'; frame-src *; img-src * data: blob:; font-src 'self' data:; media-src *; connect-src *; object-src 'none'; base-uri 'self';
|
||||
Content-Type: text/html; charset=UTF-8
|
||||
Date: Sun, 05 Apr 2026 08:19:48 GMT
|
||||
Location: https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
Referrer-Policy: no-referrer
|
||||
Server: Apache/2.4.66 (Debian)
|
||||
Set-Cookie: ocexfs76yoe2=affd533eb58b675e17ca401e417639b0; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Set-Cookie: oc_sessionPassphrase=yrnjr3kTg5BYogPZrxShkmXeTE8dkyeIKMDcnI6OlDMjnWEovYLupGYoV79IoPWumbrliRho5HBAGcWNtAuiz4%2F0w9aVsB8cO2JPviTZ6IyP6VgHAnbiy%2FLVpH3UVqiU; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Set-Cookie: ocexfs76yoe2=affd533eb58b675e17ca401e417639b0; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Set-Cookie: __Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
|
||||
Set-Cookie: __Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
|
||||
Set-Cookie: ocexfs76yoe2=affd533eb58b675e17ca401e417639b0; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
X-Content-Type-Options: nosniff
|
||||
X-Frame-Options: SAMEORIGIN
|
||||
X-Permitted-Cross-Domain-Policies: none
|
||||
X-Powered-By: PHP/8.3.30
|
||||
X-Robots-Tag: noindex, nofollow
|
||||
X-Xss-Protection: 1; mode=block
|
||||
Connection: close
|
||||
|
||||
WhatWeb report for https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
Status : 200 OK
|
||||
Title : ,Login – Nextcloud
|
||||
IP : 167.179.167.166
|
||||
Country : NEW ZEALAND, NZ
|
||||
|
||||
Summary : Apache[2.4.66], Cookies[ocexfs76yoe2], HTML5, HTTPServer[Debian Linux][Apache/2.4.66 (Debian)], HttpOnly[ocexfs76yoe2], Open-Graph-Protocol[website], PHP[8.3.30], Script, Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[content-security-policy,feature-policy,referrer-policy,x-content-type-options,x-permitted-cross-domain-policies,x-request-id,x-robots-tag], X-Frame-Options[SAMEORIGIN], X-Powered-By[PHP/8.3.30], X-XSS-Protection[1; mode=block]
|
||||
|
||||
Detected Plugins:
|
||||
[ Apache ]
|
||||
The Apache HTTP Server Project is an effort to develop and
|
||||
maintain an open-source HTTP server for modern operating
|
||||
systems including UNIX and Windows NT. The goal of this
|
||||
project is to provide a secure, efficient and extensible
|
||||
server that provides HTTP services in sync with the current
|
||||
HTTP standards.
|
||||
|
||||
Version : 2.4.66 (from HTTP Server Header)
|
||||
Google Dorks: (3)
|
||||
Website : http://httpd.apache.org/
|
||||
|
||||
[ Cookies ]
|
||||
Display the names of cookies in the HTTP headers. The
|
||||
values are not returned to save on space.
|
||||
|
||||
String : ocexfs76yoe2
|
||||
|
||||
[ HTML5 ]
|
||||
HTML version 5, detected by the doctype declaration
|
||||
|
||||
|
||||
[ HTTPServer ]
|
||||
HTTP server header string. This plugin also attempts to
|
||||
identify the operating system from the server header.
|
||||
|
||||
OS : Debian Linux
|
||||
String : Apache/2.4.66 (Debian) (from server string)
|
||||
|
||||
[ HttpOnly ]
|
||||
If the HttpOnly flag is included in the HTTP set-cookie
|
||||
response header and the browser supports it then the cookie
|
||||
cannot be accessed through client side script - More Info:
|
||||
http://en.wikipedia.org/wiki/HTTP_cookie
|
||||
|
||||
String : ocexfs76yoe2
|
||||
|
||||
[ Open-Graph-Protocol ]
|
||||
The Open Graph protocol enables you to integrate your Web
|
||||
pages into the social graph. It is currently designed for
|
||||
Web pages representing profiles of real-world things .
|
||||
things like movies, sports teams, celebrities, and
|
||||
restaurants. Including Open Graph tags on your Web page,
|
||||
makes your page equivalent to a Facebook Page.
|
||||
|
||||
Version : website
|
||||
|
||||
[ PHP ]
|
||||
PHP is a widely-used general-purpose scripting language
|
||||
that is especially suited for Web development and can be
|
||||
embedded into HTML. This plugin identifies PHP errors,
|
||||
modules and versions and extracts the local file path and
|
||||
username if present.
|
||||
|
||||
Version : 8.3.30
|
||||
Google Dorks: (3)
|
||||
Website : http://www.php.net/
|
||||
|
||||
[ Script ]
|
||||
This plugin detects instances of script HTML elements and
|
||||
returns the script language/type.
|
||||
|
||||
|
||||
[ Strict-Transport-Security ]
|
||||
Strict-Transport-Security is an HTTP header that restricts
|
||||
a web browser from accessing a website without the security
|
||||
of the HTTPS protocol.
|
||||
|
||||
String : max-age=15552000; includeSubDomains; preload
|
||||
|
||||
[ UncommonHeaders ]
|
||||
Uncommon HTTP server headers. The blacklist includes all
|
||||
the standard headers and many non standard but common ones.
|
||||
Interesting but fairly common headers should have their own
|
||||
plugins, eg. x-powered-by, server and x-aspnet-version.
|
||||
Info about headers can be found at www.http-stats.com
|
||||
|
||||
String : content-security-policy,feature-policy,referrer-policy,x-content-type-options,x-permitted-cross-domain-policies,x-request-id,x-robots-tag (from headers)
|
||||
|
||||
[ X-Frame-Options ]
|
||||
This plugin retrieves the X-Frame-Options value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : SAMEORIGIN
|
||||
|
||||
[ X-Powered-By ]
|
||||
X-Powered-By HTTP header
|
||||
|
||||
String : PHP/8.3.30 (from x-powered-by string)
|
||||
|
||||
[ X-XSS-Protection ]
|
||||
This plugin retrieves the X-XSS-Protection value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : 1; mode=block
|
||||
|
||||
HTTP Headers:
|
||||
HTTP/1.1 200 OK
|
||||
Cache-Control: no-cache, no-store, must-revalidate
|
||||
Content-Encoding: gzip
|
||||
Content-Length: 5801
|
||||
Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-yOG1PxBMIFP1f74ch3smft3R4lRE5UCTbgBUiKnBJNU=';script-src-elem 'strict-dynamic' 'nonce-yOG1PxBMIFP1f74ch3smft3R4lRE5UCTbgBUiKnBJNU=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'
|
||||
Content-Type: text/html; charset=UTF-8
|
||||
Date: Sun, 05 Apr 2026 08:25:30 GMT
|
||||
Feature-Policy: autoplay 'self';camera 'none';fullscreen 'self';geolocation 'none';microphone 'none';payment 'none'
|
||||
Referrer-Policy: same-origin
|
||||
Server: Apache/2.4.66 (Debian)
|
||||
Set-Cookie: ocexfs76yoe2=affd533eb58b675e17ca401e417639b0; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
X-Content-Type-Options: nosniff
|
||||
X-Frame-Options: SAMEORIGIN
|
||||
X-Permitted-Cross-Domain-Policies: none
|
||||
X-Powered-By: PHP/8.3.30
|
||||
X-Request-Id: HGFDRAOx21eCKoMjPMZh
|
||||
X-Robots-Tag: noindex, nofollow
|
||||
X-Xss-Protection: 1; mode=block
|
||||
Connection: close
|
||||
|
||||
|
||||
@@ -0,0 +1,115 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<!DOCTYPE nmaprun>
|
||||
<?xml-stylesheet href="file:///usr/share/nmap/nmap.xsl" type="text/xsl"?>
|
||||
<!-- Nmap 7.98 scan initiated Sun Apr 5 08:15:02 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml nextcloud.lan.ddnsgeek.com -->
|
||||
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml nextcloud.lan.ddnsgeek.com" start="1775376902" startstr="Sun Apr 5 08:15:02 2026" version="7.98" xmloutputversion="1.05">
|
||||
<scaninfo type="syn" protocol="tcp" numservices="1" services="80"/>
|
||||
<verbose level="2"/>
|
||||
<debugging level="0"/>
|
||||
<taskbegin task="NSE" time="1775376915"/>
|
||||
<taskend task="NSE" time="1775376915"/>
|
||||
<taskbegin task="NSE" time="1775376915"/>
|
||||
<taskend task="NSE" time="1775376915"/>
|
||||
<taskbegin task="NSE" time="1775376915"/>
|
||||
<taskend task="NSE" time="1775376916"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1775376916"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1775376916"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1775376916"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1775376916"/>
|
||||
<taskbegin task="SYN Stealth Scan" time="1775376916"/>
|
||||
<taskend task="SYN Stealth Scan" time="1775376916" extrainfo="1 total ports"/>
|
||||
<taskbegin task="Service scan" time="1775376921"/>
|
||||
<taskend task="Service scan" time="1775376943" extrainfo="1 service on 1 host"/>
|
||||
<taskbegin task="NSE" time="1775376944"/>
|
||||
<taskprogress task="NSE" time="1775376975" percent="60.54" remaining="21" etc="1775376995"/>
|
||||
<taskprogress task="NSE" time="1775377062" percent="79.07" remaining="32" etc="1775377093"/>
|
||||
<taskprogress task="NSE" time="1775377121" percent="80.46" remaining="43" etc="1775377164"/>
|
||||
<taskprogress task="NSE" time="1775377151" percent="98.06" remaining="5" etc="1775377155"/>
|
||||
<taskprogress task="NSE" time="1775377181" percent="99.03" remaining="3" etc="1775377183"/>
|
||||
<taskprogress task="NSE" time="1775377211" percent="99.35" remaining="2" etc="1775377213"/>
|
||||
<taskprogress task="NSE" time="1775377241" percent="99.68" remaining="1" etc="1775377242"/>
|
||||
<taskprogress task="NSE" time="1775377271" percent="99.68" remaining="2" etc="1775377272"/>
|
||||
<taskprogress task="NSE" time="1775377301" percent="99.68" remaining="2" etc="1775377302"/>
|
||||
<taskprogress task="NSE" time="1775377331" percent="99.68" remaining="2" etc="1775377332"/>
|
||||
<taskprogress task="NSE" time="1775377361" percent="99.68" remaining="2" etc="1775377362"/>
|
||||
<taskprogress task="NSE" time="1775377391" percent="99.68" remaining="2" etc="1775377392"/>
|
||||
<taskprogress task="NSE" time="1775377421" percent="99.68" remaining="2" etc="1775377423"/>
|
||||
<taskprogress task="NSE" time="1775377451" percent="99.68" remaining="2" etc="1775377453"/>
|
||||
<taskprogress task="NSE" time="1775377481" percent="99.68" remaining="2" etc="1775377483"/>
|
||||
<taskprogress task="NSE" time="1775377511" percent="99.68" remaining="2" etc="1775377513"/>
|
||||
<taskprogress task="NSE" time="1775377541" percent="99.68" remaining="2" etc="1775377543"/>
|
||||
<taskprogress task="NSE" time="1775377571" percent="99.68" remaining="3" etc="1775377573"/>
|
||||
<taskprogress task="NSE" time="1775377601" percent="99.68" remaining="3" etc="1775377603"/>
|
||||
<taskprogress task="NSE" time="1775377631" percent="99.68" remaining="3" etc="1775377633"/>
|
||||
<taskprogress task="NSE" time="1775377661" percent="99.68" remaining="3" etc="1775377663"/>
|
||||
<taskprogress task="NSE" time="1775377691" percent="99.68" remaining="3" etc="1775377693"/>
|
||||
<taskprogress task="NSE" time="1775377721" percent="99.68" remaining="3" etc="1775377724"/>
|
||||
<taskprogress task="NSE" time="1775377751" percent="99.68" remaining="3" etc="1775377754"/>
|
||||
<taskprogress task="NSE" time="1775377781" percent="99.68" remaining="3" etc="1775377784"/>
|
||||
<taskprogress task="NSE" time="1775377811" percent="99.68" remaining="3" etc="1775377814"/>
|
||||
<taskprogress task="NSE" time="1775377841" percent="99.68" remaining="3" etc="1775377844"/>
|
||||
<taskprogress task="NSE" time="1775377871" percent="99.68" remaining="4" etc="1775377874"/>
|
||||
<taskprogress task="NSE" time="1775377901" percent="99.68" remaining="4" etc="1775377904"/>
|
||||
<taskprogress task="NSE" time="1775377931" percent="99.68" remaining="4" etc="1775377934"/>
|
||||
<taskprogress task="NSE" time="1775377961" percent="99.68" remaining="4" etc="1775377964"/>
|
||||
<taskprogress task="NSE" time="1775377991" percent="99.68" remaining="4" etc="1775377994"/>
|
||||
<taskprogress task="NSE" time="1775378021" percent="99.68" remaining="4" etc="1775378024"/>
|
||||
<taskprogress task="NSE" time="1775378051" percent="99.68" remaining="4" etc="1775378055"/>
|
||||
<taskprogress task="NSE" time="1775378081" percent="99.68" remaining="4" etc="1775378085"/>
|
||||
<taskprogress task="NSE" time="1775378111" percent="99.68" remaining="4" etc="1775378115"/>
|
||||
<taskprogress task="NSE" time="1775378141" percent="99.68" remaining="4" etc="1775378145"/>
|
||||
<taskend task="NSE" time="1775378150"/>
|
||||
<taskbegin task="NSE" time="1775378150"/>
|
||||
<taskend task="NSE" time="1775378151"/>
|
||||
<taskbegin task="NSE" time="1775378151"/>
|
||||
<taskend task="NSE" time="1775378151"/>
|
||||
<host starttime="1775376916" endtime="1775378151"><status state="up" reason="user-set" reason_ttl="0"/>
|
||||
<address addr="167.179.167.166" addrtype="ipv4"/>
|
||||
<hostnames>
|
||||
<hostname name="nextcloud.lan.ddnsgeek.com" type="user"/>
|
||||
<hostname name="167-179-167-166.a7b3a7.bne.nbn.aussiebb.net" type="PTR"/>
|
||||
</hostnames>
|
||||
<ports><port protocol="tcp" portid="80"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-dombased-xss" output="Couldn't find any DOM based XSS."/><script id="http-traceroute" output="
 Status Code
 Hop #1: 301
 Hop #2: 301
 Hop #3: 404
 content-type
 Hop #1
 Hop #2
 Hop #3: text/plain; charset=utf-8
 content-length
 Hop #1: 17
 Hop #2: 17
 Hop #3: 19
 location
 Hop #1: https://nextcloud.lan.ddnsgeek.com/
 Hop #2: https://nextcloud.lan.ddnsgeek.com/
 Hop #3
"/><script id="http-useragent-tester" output="
 Status for browser useragent: 200
 Redirected To: https://nextcloud.lan.ddnsgeek.com/index.php/login
 Allowed User Agents: 
 Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
 libwww
 lwp-trivial
 libcurl-agent/1.0
 PHP/
 Python-urllib/2.5
 GT::WWW
 Snoopy
 MFC_Tear_Sample
 HTTP::Lite
 PHPCrawl
 URI::Fetch
 Zend_Http_Client
 http client
 PECL::HTTP
 Wget/1.13.4 (linux-gnu)
 WWW-Mechanize/1.34"><elem key="Status for browser useragent">200</elem>
|
||||
<elem key="Redirected To">https://nextcloud.lan.ddnsgeek.com/index.php/login</elem>
|
||||
<table key="Allowed User Agents">
|
||||
<elem>Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)</elem>
|
||||
<elem>libwww</elem>
|
||||
<elem>lwp-trivial</elem>
|
||||
<elem>libcurl-agent/1.0</elem>
|
||||
<elem>PHP/</elem>
|
||||
<elem>Python-urllib/2.5</elem>
|
||||
<elem>GT::WWW</elem>
|
||||
<elem>Snoopy</elem>
|
||||
<elem>MFC_Tear_Sample</elem>
|
||||
<elem>HTTP::Lite</elem>
|
||||
<elem>PHPCrawl</elem>
|
||||
<elem>URI::Fetch</elem>
|
||||
<elem>Zend_Http_Client</elem>
|
||||
<elem>http client</elem>
|
||||
<elem>PECL::HTTP</elem>
|
||||
<elem>Wget/1.13.4 (linux-gnu)</elem>
|
||||
<elem>WWW-Mechanize/1.34</elem>
|
||||
</table>
|
||||
</script><script id="http-methods" output="
 Supported Methods: GET HEAD POST OPTIONS"><table key="Supported Methods">
|
||||
<elem>GET</elem>
|
||||
<elem>HEAD</elem>
|
||||
<elem>POST</elem>
|
||||
<elem>OPTIONS</elem>
|
||||
</table>
|
||||
</script><script id="http-csrf" output="Couldn't find any CSRF vulnerabilities."/><script id="http-title" output="Did not follow redirect to https://nextcloud.lan.ddnsgeek.com/"><elem key="redirect_url">https://nextcloud.lan.ddnsgeek.com/</elem>
|
||||
</script><script id="http-stored-xss" output="Couldn't find any stored XSS vulnerabilities."/><script id="http-date" output="Sun, 05 Apr 2026 08:16:39 GMT; -2m03s from local time."><elem key="date">2026-04-05T08:16:39+00:00</elem>
|
||||
<elem key="delta">-123.0</elem>
|
||||
</script><script id="http-referer-checker" output="Couldn't find any cross-domain scripts."/><script id="http-headers" output="
 Location: https://nextcloud.lan.ddnsgeek.com/
 Date: Sun, 05 Apr 2026 08:18:48 GMT
 Content-Length: 17
 Connection: close
 
 (Request type: GET)
"/><script id="http-wordpress-enum" output="Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)"/><script id="http-jsonp-detection" output="Couldn't find any JSONP endpoints."/><script id="http-errors" output="Couldn't find any error pages."/><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-comments-displayer" output="Couldn't find any comments."/><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
|
||||
</script><script id="http-vhosts" output="
126 names had status 308
news.lan.ddnsgeek.com : 404
intra.lan.ddnsgeek.com : 404"/><script id="http-malware-host" output="Host appears to be clean"/><script id="http-security-headers" output=""></script><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)"/><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn't find wp-login.php"/><script id="http-feed" output="Couldn't find any feeds."/><script id="http-devframework" output="Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages."/><script id="http-chrono" output="Request times for /; avg: 1469.81ms; min: 1340.59ms; max: 1702.87ms"/><script id="http-sitemap-generator" output="
 Directory structure:
 Longest directory structure:
 Depth: 0
 Dir: /
 Total files found (by extension):
 
"/></port>
|
||||
</ports>
|
||||
<times srtt="14505" rttvar="14505" to="100000"/>
|
||||
</host>
|
||||
<taskbegin task="NSE" time="1775378152"/>
|
||||
<taskend task="NSE" time="1775378152"/>
|
||||
<taskbegin task="NSE" time="1775378152"/>
|
||||
<taskend task="NSE" time="1775378152"/>
|
||||
<taskbegin task="NSE" time="1775378152"/>
|
||||
<taskend task="NSE" time="1775378152"/>
|
||||
<runstats><finished time="1775378152" timestr="Sun Apr 5 08:35:52 2026" summary="Nmap done at Sun Apr 5 08:35:52 2026; 1 IP address (1 host up) scanned in 1251.73 seconds" elapsed="1251.73" exit="success"/><hosts up="1" down="0" total="1"/>
|
||||
</runstats>
|
||||
</nmaprun>
|
||||
@@ -0,0 +1,205 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<!DOCTYPE nmaprun>
|
||||
<?xml-stylesheet href="file:///usr/share/nmap/nmap.xsl" type="text/xsl"?>
|
||||
<!-- Nmap 7.98 scan initiated Sun Apr 5 08:11:07 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml nextcloud.lan.ddnsgeek.com -->
|
||||
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml nextcloud.lan.ddnsgeek.com" start="1775376667" startstr="Sun Apr 5 08:11:07 2026" version="7.98" xmloutputversion="1.05">
|
||||
<scaninfo type="syn" protocol="tcp" numservices="65535" services="1-65535"/>
|
||||
<verbose level="2"/>
|
||||
<debugging level="0"/>
|
||||
<taskbegin task="NSE" time="1775376680"/>
|
||||
<taskend task="NSE" time="1775376680"/>
|
||||
<taskbegin task="NSE" time="1775376680"/>
|
||||
<taskend task="NSE" time="1775376680"/>
|
||||
<taskbegin task="NSE" time="1775376680"/>
|
||||
<taskend task="NSE" time="1775376680"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1775376680"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1775376681"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1775376681"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1775376681"/>
|
||||
<taskbegin task="SYN Stealth Scan" time="1775376681"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775376779" percent="0.30"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775376809" percent="0.37"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775376839" percent="0.44"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775376869" percent="0.51"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775376899" percent="0.58"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775376929" percent="0.66"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775376959" percent="0.77"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775376989" percent="0.82"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775377019" percent="0.87"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775377049" percent="0.98"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775377079" percent="1.13" remaining="34945" etc="1775412024"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775377253" percent="1.70" remaining="33159" etc="1775410412"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775377289" percent="1.91" remaining="31269" etc="1775408557"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775377340" percent="2.17" remaining="29670" etc="1775407009"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775377397" percent="2.48" remaining="28142" etc="1775405539"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775377442" percent="2.78" remaining="26657" etc="1775404098"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775377706" percent="3.53" remaining="28034" etc="1775405739"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775377886" percent="3.92" remaining="29515" etc="1775407401"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775378204" percent="4.67" remaining="31056" etc="1775409260"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775378800" percent="6.73" remaining="29352" etc="1775408151"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775379604" percent="9.52" remaining="27778" etc="1775407381"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775380678" percent="13.22" remaining="26235" etc="1775406912"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775383063" percent="20.52" remaining="24719" etc="1775407782"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775383931" percent="23.84" remaining="23160" etc="1775407091"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775384906" percent="27.54" remaining="21639" etc="1775406544"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775386022" percent="31.69" remaining="20132" etc="1775406154"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775386823" percent="35.44" remaining="18479" etc="1775405301"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775386853" percent="38.06" remaining="16553" etc="1775403406"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775386883" percent="40.69" remaining="14868" etc="1775401751"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775386913" percent="43.30" remaining="13399" etc="1775400312"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775386943" percent="45.85" remaining="12120" etc="1775399062"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775386973" percent="48.42" remaining="10964" etc="1775397936"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775387003" percent="51.06" remaining="9893" etc="1775396895"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775387363" percent="54.61" remaining="8880" etc="1775396243"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775388476" percent="59.89" remaining="7901" etc="1775396377"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775389475" percent="64.92" remaining="6914" etc="1775396388"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775390354" percent="69.77" remaining="5926" etc="1775396279"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775391113" percent="74.49" remaining="4944" etc="1775396056"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775391701" percent="79.09" remaining="3971" etc="1775395671"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775392223" percent="83.74" remaining="3019" etc="1775395241"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775392688" percent="88.47" remaining="2087" etc="1775394775"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775393081" percent="93.31" remaining="1177" etc="1775394257"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775393426" percent="98.26" remaining="298" etc="1775393723"/>
|
||||
<taskend task="SYN Stealth Scan" time="1775393546" extrainfo="65535 total ports"/>
|
||||
<taskbegin task="Service scan" time="1775393547"/>
|
||||
<taskend task="Service scan" time="1775393560" extrainfo="3 services on 1 host"/>
|
||||
<taskbegin task="Traceroute" time="1775393565"/>
|
||||
<taskend task="Traceroute" time="1775393565"/>
|
||||
<taskbegin task="Parallel DNS resolution of 7 hosts." time="1775393565"/>
|
||||
<taskend task="Parallel DNS resolution of 7 hosts." time="1775393566"/>
|
||||
<taskbegin task="NSE" time="1775393566"/>
|
||||
<taskend task="NSE" time="1775393572"/>
|
||||
<taskbegin task="NSE" time="1775393572"/>
|
||||
<taskend task="NSE" time="1775393573"/>
|
||||
<taskbegin task="NSE" time="1775393573"/>
|
||||
<taskend task="NSE" time="1775393573"/>
|
||||
<host starttime="1775376681" endtime="1775393573"><status state="up" reason="user-set" reason_ttl="0"/>
|
||||
<address addr="167.179.167.166" addrtype="ipv4"/>
|
||||
<hostnames>
|
||||
<hostname name="nextcloud.lan.ddnsgeek.com" type="user"/>
|
||||
<hostname name="167-179-167-166.a7b3a7.bne.nbn.aussiebb.net" type="PTR"/>
|
||||
</hostnames>
|
||||
<ports><extraports state="filtered" count="65531">
|
||||
<extrareasons reason="no-response" count="65531" proto="tcp" ports="1-79,81-442,444-20000,20002-51412,51414-65535"/>
|
||||
</extraports>
|
||||
<port protocol="tcp" portid="80"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-title" output="Did not follow redirect to https://nextcloud.lan.ddnsgeek.com/"><elem key="redirect_url">https://nextcloud.lan.ddnsgeek.com/</elem>
|
||||
</script><script id="http-methods" output="
 Supported Methods: GET HEAD POST OPTIONS"><table key="Supported Methods">
|
||||
<elem>GET</elem>
|
||||
<elem>HEAD</elem>
|
||||
<elem>POST</elem>
|
||||
<elem>OPTIONS</elem>
|
||||
</table>
|
||||
</script></port>
|
||||
<port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" tunnel="ssl" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-server-header" output="Apache/2.4.66 (Debian)"><elem>Apache/2.4.66 (Debian)</elem>
|
||||
</script><script id="ssl-cert" output="Subject: commonName=nextcloud.lan.ddnsgeek.com
Subject Alternative Name: DNS:nextcloud.lan.ddnsgeek.com
Issuer: commonName=R12/organizationName=Let's Encrypt/countryName=US
Public Key type: rsa
Public Key bits: 4096
Signature Algorithm: sha256WithRSAEncryption
Not valid before: 2026-02-09T19:02:37
Not valid after: 2026-05-10T19:02:36
MD5: 1238 93af a1bb d72b 58cc 04da ce8f 39a3
SHA-1: 0a0a 3103 f4a5 94ce bd08 4e19 38a0 3ee8 3bea 02d5
SHA-256: af41 2c3f b7bf 6ee9 68ff 4449 2627 0604 6d6c 04c9 069f 11d9 8366 47fe 7a22 d02d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
"><table key="subject">
|
||||
<elem key="commonName">nextcloud.lan.ddnsgeek.com</elem>
|
||||
</table>
|
||||
<table key="issuer">
|
||||
<elem key="commonName">R12</elem>
|
||||
<elem key="countryName">US</elem>
|
||||
<elem key="organizationName">Let's Encrypt</elem>
|
||||
</table>
|
||||
<table key="pubkey">
|
||||
<elem key="type">rsa</elem>
|
||||
<elem key="bits">4096</elem>
|
||||
<elem key="modulus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elem>
|
||||
<elem key="exponent">65537</elem>
|
||||
</table>
|
||||
<table key="extensions">
|
||||
<table>
|
||||
<elem key="name">X509v3 Key Usage</elem>
|
||||
<elem key="value">Digital Signature, Key Encipherment</elem>
|
||||
<elem key="critical">true</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">X509v3 Extended Key Usage</elem>
|
||||
<elem key="value">TLS Web Server Authentication, TLS Web Client Authentication</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">X509v3 Basic Constraints</elem>
|
||||
<elem key="value">CA:FALSE</elem>
|
||||
<elem key="critical">true</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">X509v3 Subject Key Identifier</elem>
|
||||
<elem key="value">2F:A7:49:E0:BE:37:58:D6:3C:25:3E:3C:7E:92:B6:37:6E:0C:8A:6C</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">X509v3 Authority Key Identifier</elem>
|
||||
<elem key="value">00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">Authority Information Access</elem>
|
||||
<elem key="value">CA Issuers - URI:http://r12.i.lencr.org/</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">X509v3 Subject Alternative Name</elem>
|
||||
<elem key="value">DNS:nextcloud.lan.ddnsgeek.com</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">X509v3 Certificate Policies</elem>
|
||||
<elem key="value">Policy: 2.23.140.1.2.1</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">X509v3 CRL Distribution Points</elem>
|
||||
<elem key="value">Full Name:
 URI:http://r12.c.lencr.org/81.crl
</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">CT Precertificate SCTs</elem>
|
||||
<elem key="value">Signed Certificate Timestamp:
 Version : v1 (0x0)
 Log ID : E3:23:8D:F2:8D:A2:88:E0:AA:E0:AC:F0:FA:90:C9:85:
 F0:B6:BF:F5:D2:A5:27:B0:01:FC:1C:44:58:C4:B6:E8
 Timestamp : Feb 9 20:01:07.523 2026 GMT
 Extensions: 00:00:05:00:32:0E:2C:21
 Signature : ecdsa-with-SHA256
 30:45:02:20:22:B0:B2:76:41:B6:38:0D:E4:FA:8B:78:
 C4:38:71:46:97:27:CE:40:4A:1D:33:59:CA:51:C4:96:
 F5:73:D0:9F:02:21:00:DF:26:E7:8B:78:27:15:8D:8A:
 C5:C4:57:E2:04:2E:C7:FF:4C:5D:8D:44:88:3F:45:30:
 64:A9:96:C5:AA:3F:4F
Signed Certificate Timestamp:
 Version : v1 (0x0)
 Log ID : 16:83:2D:AB:F0:A9:25:0F:0F:F0:3A:A5:45:FF:C8:BF:
 C8:23:D0:87:4B:F6:04:29:27:F8:E7:1F:33:13:F5:FA
 Timestamp : Feb 9 20:01:09.430 2026 GMT
 Extensions: none
 Signature : ecdsa-with-SHA256
 30:45:02:21:00:F9:07:C4:11:7C:F0:DB:30:2C:1C:F1:
 DA:3A:A7:D5:17:A7:26:8B:40:E2:B1:6B:35:03:3D:D4:
 4A:1F:FF:26:7B:02:20:07:2F:99:3E:72:A1:32:FC:62:
 7F:E5:E4:AB:0D:82:EB:EC:70:A0:14:16:41:13:91:47:
 62:55:DF:43:F9:77:D8</elem>
|
||||
</table>
|
||||
</table>
|
||||
<elem key="sig_algo">sha256WithRSAEncryption</elem>
|
||||
<table key="validity">
|
||||
<elem key="notBefore">2026-02-09T19:02:37</elem>
|
||||
<elem key="notAfter">2026-05-10T19:02:36</elem>
|
||||
</table>
|
||||
<elem key="md5">123893afa1bbd72b58cc04dace8f39a3</elem>
|
||||
<elem key="sha1">0a0a3103f4a594cebd084e1938a03ee83bea02d5</elem>
|
||||
<elem key="sha256">af412c3fb7bf6ee968ff4449262706046d6c04c9069f11d9836647fe7a22d02d</elem>
|
||||
<elem key="pem">-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</elem>
|
||||
</script><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="http-title" output="Login \xE2\x80\x93 Nextcloud
Requested resource was https://nextcloud.lan.ddnsgeek.com/index.php/login"><elem key="title">
			Login \xE2\x80\x93 Nextcloud		</elem>
|
||||
<elem key="redirect_url">https://nextcloud.lan.ddnsgeek.com/index.php/login</elem>
|
||||
</script><script id="http-methods" output="
 Supported Methods: GET HEAD POST OPTIONS"><table key="Supported Methods">
|
||||
<elem>GET</elem>
|
||||
<elem>HEAD</elem>
|
||||
<elem>POST</elem>
|
||||
<elem>OPTIONS</elem>
|
||||
</table>
|
||||
</script><script id="http-robots.txt" output="1 disallowed entry 
/"/></port>
|
||||
<port protocol="tcp" portid="20001"><state state="closed" reason="reset" reason_ttl="57"/><service name="microsan" method="table" conf="3"/></port>
|
||||
<port protocol="tcp" portid="51413"><state state="open" reason="syn-ack" reason_ttl="56"/><service name="tcpwrapped" method="probed" conf="8"/></port>
|
||||
</ports>
|
||||
<os><portused state="open" proto="tcp" portid="80"/>
|
||||
<portused state="closed" proto="tcp" portid="20001"/>
|
||||
<osmatch name="Linux 4.19 - 5.15" accuracy="88" line="70666">
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="4.X" accuracy="88"><cpe>cpe:/o:linux:linux_kernel:4</cpe></osclass>
|
||||
</osmatch>
|
||||
<osfingerprint fingerprint="SCAN(V=7.98%E=4%D=4/5%OT=80%CT=20001%CU=%PV=N%DS=8%DC=T%G=N%TM=69D25B25%P=x86_64-pc-linux-gnu)
SEQ(SP=101%GCD=1%ISR=10F%TI=Z%TS=A)
SEQ(SP=FF%GCD=1%ISR=105%TI=Z%TS=A)
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
ECN(R=Y%DF=Y%TG=40%W=FAF0%O=M5B4NNSNW7%CC=Y%Q=)
T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=N)
T6(R=N)
T7(R=N)
T7(R=Y%DF=Y%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=N)
IE(R=N)
"/>
|
||||
</os>
|
||||
<uptime seconds="1480501" lastboot="Thu Mar 19 09:37:52 2026"/>
|
||||
<distance value="8"/>
|
||||
<tcpsequence index="255" difficulty="Good luck!" values="B4D4E69B,D3C5793E,FA0724E6,C590E1AA,D06F187D,197324E1"/>
|
||||
<ipidsequence class="All zeros" values="0,0,0,0,0,0"/>
|
||||
<tcptssequence class="1000HZ" values="583E80E9,583E814E,583E81B2,583E8216,583E827A,583E82DE"/>
|
||||
<trace port="20001" proto="tcp">
|
||||
<hop ttl="1" ipaddr="10.216.0.161" rtt="0.06"/>
|
||||
<hop ttl="2" ipaddr="10.216.35.12" rtt="0.43"/>
|
||||
<hop ttl="3" ipaddr="10.216.32.1" rtt="0.87"/>
|
||||
<hop ttl="4" ipaddr="172.105.160.101" rtt="0.46" host="lo0-0.gw1.syd1.au.linode.com"/>
|
||||
<hop ttl="5" ipaddr="202.77.88.3" rtt="4.04" host="as4764.syd.edgeix.net.au"/>
|
||||
<hop ttl="6" ipaddr="10.241.1.187" rtt="11.67"/>
|
||||
<hop ttl="7" ipaddr="10.241.2.71" rtt="12.61"/>
|
||||
<hop ttl="8" ipaddr="167.179.167.166" rtt="15.61" host="167-179-167-166.a7b3a7.bne.nbn.aussiebb.net"/>
|
||||
</trace>
|
||||
<times srtt="19817" rttvar="5612" to="100000"/>
|
||||
</host>
|
||||
<taskbegin task="NSE" time="1775393573"/>
|
||||
<taskend task="NSE" time="1775393573"/>
|
||||
<taskbegin task="NSE" time="1775393573"/>
|
||||
<taskend task="NSE" time="1775393573"/>
|
||||
<taskbegin task="NSE" time="1775393573"/>
|
||||
<taskend task="NSE" time="1775393573"/>
|
||||
<runstats><finished time="1775393573" timestr="Sun Apr 5 12:52:53 2026" summary="Nmap done at Sun Apr 5 12:52:53 2026; 1 IP address (1 host up) scanned in 16914.51 seconds" elapsed="16914.51" exit="success"/><hosts up="1" down="0" total="1"/>
|
||||
</runstats>
|
||||
</nmaprun>
|
||||
@@ -0,0 +1,96 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<!DOCTYPE nmaprun>
|
||||
<?xml-stylesheet href="file:///usr/share/nmap/nmap.xsl" type="text/xsl"?>
|
||||
<!-- Nmap 7.98 scan initiated Sun Apr 5 08:08:23 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml nextcloud.lan.ddnsgeek.com -->
|
||||
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml nextcloud.lan.ddnsgeek.com" start="1775376503" startstr="Sun Apr 5 08:08:23 2026" version="7.98" xmloutputversion="1.05">
|
||||
<scaninfo type="syn" protocol="tcp" numservices="1000" services="1,3-4,6-7,9,13,17,19-26,30,32-33,37,42-43,49,53,70,79-85,88-90,99-100,106,109-111,113,119,125,135,139,143-144,146,161,163,179,199,211-212,222,254-256,259,264,280,301,306,311,340,366,389,406-407,416-417,425,427,443-445,458,464-465,481,497,500,512-515,524,541,543-545,548,554-555,563,587,593,616-617,625,631,636,646,648,666-668,683,687,691,700,705,711,714,720,722,726,749,765,777,783,787,800-801,808,843,873,880,888,898,900-903,911-912,981,987,990,992-993,995,999-1002,1007,1009-1011,1021-1100,1102,1104-1108,1110-1114,1117,1119,1121-1124,1126,1130-1132,1137-1138,1141,1145,1147-1149,1151-1152,1154,1163-1166,1169,1174-1175,1183,1185-1187,1192,1198-1199,1201,1213,1216-1218,1233-1234,1236,1244,1247-1248,1259,1271-1272,1277,1287,1296,1300-1301,1309-1311,1322,1328,1334,1352,1417,1433-1434,1443,1455,1461,1494,1500-1501,1503,1521,1524,1533,1556,1580,1583,1594,1600,1641,1658,1666,1687-1688,1700,1717-1721,1723,1755,1761,1782-1783,1801,1805,1812,1839-1840,1862-1864,1875,1900,1914,1935,1947,1971-1972,1974,1984,1998-2010,2013,2020-2022,2030,2033-2035,2038,2040-2043,2045-2049,2065,2068,2099-2100,2103,2105-2107,2111,2119,2121,2126,2135,2144,2160-2161,2170,2179,2190-2191,2196,2200,2222,2251,2260,2288,2301,2323,2366,2381-2383,2393-2394,2399,2401,2492,2500,2522,2525,2557,2601-2602,2604-2605,2607-2608,2638,2701-2702,2710,2717-2718,2725,2800,2809,2811,2869,2875,2909-2910,2920,2967-2968,2998,3000-3001,3003,3005-3006,3011,3017,3030-3031,3052,3071,3077,3128,3168,3211,3221,3260-3261,3268-3269,3283,3300-3301,3306,3322-3325,3333,3351,3367,3369-3372,3389-3390,3404,3476,3493,3517,3527,3546,3551,3580,3659,3689-3690,3703,3737,3766,3784,3800-3801,3809,3814,3826-3828,3851,3869,3871,3878,3880,3889,3905,3914,3918,3920,3945,3971,3986,3995,3998,4000-4006,4045,4111,4125-4126,4129,4224,4242,4279,4321,4343,4443-4446,4449,4550,4567,4662,4848,4899-4900,4998,5000-5004,5009,5030,5033,5050-5051,5054,5060-5061,5080,5087,5100-5102,5120,5190,5200,5214,5221-5222,5225-5226,5269,5280,5298,5357,5405,5414,5431-5432,5440,5500,5510,5544,5550,5555,5560,5566,5631,5633,5666,5678-5679,5718,5730,5800-5802,5810-5811,5815,5822,5825,5850,5859,5862,5877,5900-5904,5906-5907,5910-5911,5915,5922,5925,5950,5952,5959-5963,5985-5989,5998-6007,6009,6025,6059,6100-6101,6106,6112,6123,6129,6156,6346,6389,6502,6510,6543,6547,6565-6567,6580,6646,6666-6669,6689,6692,6699,6779,6788-6789,6792,6839,6881,6901,6969,7000-7002,7004,7007,7019,7025,7070,7100,7103,7106,7200-7201,7402,7435,7443,7496,7512,7625,7627,7676,7741,7777-7778,7800,7911,7920-7921,7937-7938,7999-8002,8007-8011,8021-8022,8031,8042,8045,8080-8090,8093,8099-8100,8180-8181,8192-8194,8200,8222,8254,8290-8292,8300,8333,8383,8400,8402,8443,8500,8600,8649,8651-8652,8654,8701,8800,8873,8888,8899,8994,9000-9003,9009-9011,9040,9050,9071,9080-9081,9090-9091,9099-9103,9110-9111,9200,9207,9220,9290,9415,9418,9485,9500,9502-9503,9535,9575,9593-9595,9618,9666,9876-9878,9898,9900,9917,9929,9943-9944,9968,9998-10004,10009-10010,10012,10024-10025,10082,10180,10215,10243,10566,10616-10617,10621,10626,10628-10629,10778,11110-11111,11967,12000,12174,12265,12345,13456,13722,13782-13783,14000,14238,14441-14442,15000,15002-15004,15660,15742,16000-16001,16012,16016,16018,16080,16113,16992-16993,17877,17988,18040,18101,18988,19101,19283,19315,19350,19780,19801,19842,20000,20005,20031,20221-20222,20828,21571,22939,23502,24444,24800,25734-25735,26214,27000,27352-27353,27355-27356,27715,28201,30000,30718,30951,31038,31337,32768-32785,33354,33899,34571-34573,35500,38292,40193,40911,41511,42510,44176,44442-44443,44501,45100,48080,49152-49161,49163,49165,49167,49175-49176,49400,49999-50003,50006,50300,50389,50500,50636,50800,51103,51493,52673,52822,52848,52869,54045,54328,55055-55056,55555,55600,56737-56738,57294,57797,58080,60020,60443,61532,61900,62078,63331,64623,64680,65000,65129,65389"/>
|
||||
<verbose level="2"/>
|
||||
<debugging level="0"/>
|
||||
<taskbegin task="NSE" time="1775376625"/>
|
||||
<taskend task="NSE" time="1775376625"/>
|
||||
<taskbegin task="NSE" time="1775376625"/>
|
||||
<taskend task="NSE" time="1775376625"/>
|
||||
<taskbegin task="NSE" time="1775376625"/>
|
||||
<taskend task="NSE" time="1775376625"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1775376625"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1775376626"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1775376626"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1775376626"/>
|
||||
<taskbegin task="SYN Stealth Scan" time="1775376626"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775376669" percent="58.80" remaining="31" etc="1775376699"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775376699" percent="65.35" remaining="39" etc="1775376738"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775376741" percent="75.00" remaining="39" etc="1775376779"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775376780" percent="83.65" remaining="31" etc="1775376810"/>
|
||||
<taskend task="SYN Stealth Scan" time="1775376850" extrainfo="1000 total ports"/>
|
||||
<taskbegin task="Service scan" time="1775376856"/>
|
||||
<taskend task="Service scan" time="1775376870" extrainfo="2 services on 1 host"/>
|
||||
<taskbegin task="Traceroute" time="1775376877"/>
|
||||
<taskend task="Traceroute" time="1775376878"/>
|
||||
<taskbegin task="Parallel DNS resolution of 7 hosts." time="1775376878"/>
|
||||
<taskend task="Parallel DNS resolution of 7 hosts." time="1775376879"/>
|
||||
<taskbegin task="NSE" time="1775376879"/>
|
||||
<taskend task="NSE" time="1775376891"/>
|
||||
<taskbegin task="NSE" time="1775376891"/>
|
||||
<taskend task="NSE" time="1775376896"/>
|
||||
<taskbegin task="NSE" time="1775376896"/>
|
||||
<taskend task="NSE" time="1775376896"/>
|
||||
<host starttime="1775376626" endtime="1775376896"><status state="up" reason="user-set" reason_ttl="0"/>
|
||||
<address addr="167.179.167.166" addrtype="ipv4"/>
|
||||
<hostnames>
|
||||
<hostname name="nextcloud.lan.ddnsgeek.com" type="user"/>
|
||||
<hostname name="167-179-167-166.a7b3a7.bne.nbn.aussiebb.net" type="PTR"/>
|
||||
</hostnames>
|
||||
<ports><extraports state="filtered" count="998">
|
||||
<extrareasons reason="no-response" count="998" proto="tcp" ports="1,3-4,6-7,9,13,17,19-26,30,32-33,37,42-43,49,53,70,79,81-85,88-90,99-100,106,109-111,113,119,125,135,139,143-144,146,161,163,179,199,211-212,222,254-256,259,264,280,301,306,311,340,366,389,406-407,416-417,425,427,444-445,458,464-465,481,497,500,512-515,524,541,543-545,548,554-555,563,587,593,616-617,625,631,636,646,648,666-668,683,687,691,700,705,711,714,720,722,726,749,765,777,783,787,800-801,808,843,873,880,888,898,900-903,911-912,981,987,990,992-993,995,999-1002,1007,1009-1011,1021-1100,1102,1104-1108,1110-1114,1117,1119,1121-1124,1126,1130-1132,1137-1138,1141,1145,1147-1149,1151-1152,1154,1163-1166,1169,1174-1175,1183,1185-1187,1192,1198-1199,1201,1213,1216-1218,1233-1234,1236,1244,1247-1248,1259,1271-1272,1277,1287,1296,1300-1301,1309-1311,1322,1328,1334,1352,1417,1433-1434,1443,1455,1461,1494,1500-1501,1503,1521,1524,1533,1556,1580,1583,1594,1600,1641,1658,1666,1687-1688,1700,1717-1721,1723,1755,1761,1782-1783,1801,1805,1812,1839-1840,1862-1864,1875,1900,1914,1935,1947,1971-1972,1974,1984,1998-2010,2013,2020-2022,2030,2033-2035,2038,2040-2043,2045-2049,2065,2068,2099-2100,2103,2105-2107,2111,2119,2121,2126,2135,2144,2160-2161,2170,2179,2190-2191,2196,2200,2222,2251,2260,2288,2301,2323,2366,2381-2383,2393-2394,2399,2401,2492,2500,2522,2525,2557,2601-2602,2604-2605,2607-2608,2638,2701-2702,2710,2717-2718,2725,2800,2809,2811,2869,2875,2909-2910,2920,2967-2968,2998,3000-3001,3003,3005-3006,3011,3017,3030-3031,3052,3071,3077,3128,3168,3211,3221,3260-3261,3268-3269,3283,3300-3301,3306,3322-3325,3333,3351,3367,3369-3372,3389-3390,3404,3476,3493,3517,3527,3546,3551,3580,3659,3689-3690,3703,3737,3766,3784,3800-3801,3809,3814,3826-3828,3851,3869,3871,3878,3880,3889,3905,3914,3918,3920,3945,3971,3986,3995,3998,4000-4006,4045,4111,4125-4126,4129,4224,4242,4279,4321,4343,4443-4446,4449,4550,4567,4662,4848,4899-4900,4998,5000-5004,5009,5030,5033,5050-5051,5054,5060-5061,5080,5087,5100-5102,5120,5190,5200,5214,5221-5222,5225-5226,5269,5280,5298,5357,5405,5414,5431-5432,5440,5500,5510,5544,5550,5555,5560,5566,5631,5633,5666,5678-5679,5718,5730,5800-5802,5810-5811,5815,5822,5825,5850,5859,5862,5877,5900-5904,5906-5907,5910-5911,5915,5922,5925,5950,5952,5959-5963,5985-5989,5998-6007,6009,6025,6059,6100-6101,6106,6112,6123,6129,6156,6346,6389,6502,6510,6543,6547,6565-6567,6580,6646,6666-6669,6689,6692,6699,6779,6788-6789,6792,6839,6881,6901,6969,7000-7002,7004,7007,7019,7025,7070,7100,7103,7106,7200-7201,7402,7435,7443,7496,7512,7625,7627,7676,7741,7777-7778,7800,7911,7920-7921,7937-7938,7999-8002,8007-8011,8021-8022,8031,8042,8045,8080-8090,8093,8099-8100,8180-8181,8192-8194,8200,8222,8254,8290-8292,8300,8333,8383,8400,8402,8443,8500,8600,8649,8651-8652,8654,8701,8800,8873,8888,8899,8994,9000-9003,9009-9011,9040,9050,9071,9080-9081,9090-9091,9099-9103,9110-9111,9200,9207,9220,9290,9415,9418,9485,9500,9502-9503,9535,9575,9593-9595,9618,9666,9876-9878,9898,9900,9917,9929,9943-9944,9968,9998-10004,10009-10010,10012,10024-10025,10082,10180,10215,10243,10566,10616-10617,10621,10626,10628-10629,10778,11110-11111,11967,12000,12174,12265,12345,13456,13722,13782-13783,14000,14238,14441-14442,15000,15002-15004,15660,15742,16000-16001,16012,16016,16018,16080,16113,16992-16993,17877,17988,18040,18101,18988,19101,19283,19315,19350,19780,19801,19842,20000,20005,20031,20221-20222,20828,21571,22939,23502,24444,24800,25734-25735,26214,27000,27352-27353,27355-27356,27715,28201,30000,30718,30951,31038,31337,32768-32785,33354,33899,34571-34573,35500,38292,40193,40911,41511,42510,44176,44442-44443,44501,45100,48080,49152-49161,49163,49165,49167,49175-49176,49400,49999-50003,50006,50300,50389,50500,50636,50800,51103,51493,52673,52822,52848,52869,54045,54328,55055-55056,55555,55600,56737-56738,57294,57797,58080,60020,60443,61532,61900,62078,63331,64623,64680,65000,65129,65389"/>
|
||||
</extraports>
|
||||
<port protocol="tcp" portid="80"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-methods" output="
 Supported Methods: GET HEAD POST OPTIONS"><table key="Supported Methods">
|
||||
<elem>GET</elem>
|
||||
<elem>HEAD</elem>
|
||||
<elem>POST</elem>
|
||||
<elem>OPTIONS</elem>
|
||||
</table>
|
||||
</script><script id="http-title" output="Did not follow redirect to https://nextcloud.lan.ddnsgeek.com/"><elem key="redirect_url">https://nextcloud.lan.ddnsgeek.com/</elem>
|
||||
</script></port>
|
||||
<port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" tunnel="ssl" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-methods" output="
 Supported Methods: GET HEAD POST OPTIONS"><table key="Supported Methods">
|
||||
<elem>GET</elem>
|
||||
<elem>HEAD</elem>
|
||||
<elem>POST</elem>
|
||||
<elem>OPTIONS</elem>
|
||||
</table>
|
||||
</script><script id="http-robots.txt" output="1 disallowed entry 
/"/><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="http-server-header" output="Apache/2.4.66 (Debian)"><elem>Apache/2.4.66 (Debian)</elem>
|
||||
</script><script id="http-title" output="Login \xE2\x80\x93 Nextcloud
Requested resource was https://nextcloud.lan.ddnsgeek.com/index.php/login"><elem key="title">
			Login \xE2\x80\x93 Nextcloud		</elem>
|
||||
<elem key="redirect_url">https://nextcloud.lan.ddnsgeek.com/index.php/login</elem>
|
||||
</script></port>
|
||||
</ports>
|
||||
<os><portused state="open" proto="tcp" portid="80"/>
|
||||
<osmatch name="Linux 5.4" accuracy="89" line="72306">
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="5.X" accuracy="89"><cpe>cpe:/o:linux:linux_kernel:5.4</cpe></osclass>
|
||||
</osmatch>
|
||||
<osfingerprint fingerprint="SCAN(V=7.98%E=4%D=4/5%OT=80%CT=%CU=%PV=N%DS=8%DC=T%G=N%TM=69D21A01%P=x86_64-pc-linux-gnu)
SEQ(SP=101%GCD=1%ISR=10C%TI=Z%TS=A)
SEQ(SP=103%GCD=1%ISR=10C%TI=Z%TS=A)
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=NNT11%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
WIN(W1=FE88%W2=FE88%W3=9AE%W4=FE88%W5=FE88%W6=FE88)
ECN(R=N)
T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T6(R=Y%DF=Y%TG=40%W=FE88%S=O%A=O%F=AS%O=M5B4ST11NW7%RD=0%Q=)
U1(R=N)
IE(R=N)
"/>
|
||||
</os>
|
||||
<uptime seconds="1463825" lastboot="Thu Mar 19 09:37:52 2026"/>
|
||||
<distance value="8"/>
|
||||
<tcpsequence index="259" difficulty="Good luck!" values="451C48B6,BC569E3B,A1F3B06,ABF51E20,88402999"/>
|
||||
<ipidsequence class="All zeros" values="0,0,0,0,0"/>
|
||||
<tcptssequence class="1000HZ" values="573FDB70,573FDBE0,573FDC53,573FDCCC,573FDD46"/>
|
||||
<trace port="80" proto="tcp">
|
||||
<hop ttl="1" ipaddr="10.216.0.161" rtt="0.34"/>
|
||||
<hop ttl="2" ipaddr="10.216.35.11" rtt="0.42"/>
|
||||
<hop ttl="3" ipaddr="10.216.32.1" rtt="4.77"/>
|
||||
<hop ttl="4" ipaddr="172.105.160.102" rtt="0.37" host="lo0-0.gw2.syd1.au.linode.com"/>
|
||||
<hop ttl="5" ipaddr="202.77.88.3" rtt="3.72" host="as4764.syd.edgeix.net.au"/>
|
||||
<hop ttl="6" ipaddr="10.241.1.187" rtt="11.80"/>
|
||||
<hop ttl="7" ipaddr="10.241.2.71" rtt="12.53"/>
|
||||
<hop ttl="8" ipaddr="167.179.167.166" rtt="14.18" host="167-179-167-166.a7b3a7.bne.nbn.aussiebb.net"/>
|
||||
</trace>
|
||||
<times srtt="18641" rttvar="4864" to="100000"/>
|
||||
</host>
|
||||
<taskbegin task="NSE" time="1775376897"/>
|
||||
<taskend task="NSE" time="1775376897"/>
|
||||
<taskbegin task="NSE" time="1775376897"/>
|
||||
<taskend task="NSE" time="1775376897"/>
|
||||
<taskbegin task="NSE" time="1775376897"/>
|
||||
<taskend task="NSE" time="1775376897"/>
|
||||
<runstats><finished time="1775376897" timestr="Sun Apr 5 08:14:57 2026" summary="Nmap done at Sun Apr 5 08:14:57 2026; 1 IP address (1 host up) scanned in 402.48 seconds" elapsed="402.48" exit="success"/><hosts up="1" down="0" total="1"/>
|
||||
</runstats>
|
||||
</nmaprun>
|
||||
@@ -0,0 +1,97 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<!DOCTYPE nmaprun>
|
||||
<?xml-stylesheet href="file:///usr/share/nmap/nmap.xsl" type="text/xsl"?>
|
||||
<!-- Nmap 7.98 scan initiated Sun Apr 5 08:11:26 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml nextcloud.lan.ddnsgeek.com -->
|
||||
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml nextcloud.lan.ddnsgeek.com" start="1775376686" startstr="Sun Apr 5 08:11:26 2026" version="7.98" xmloutputversion="1.05">
|
||||
<scaninfo type="udp" protocol="udp" numservices="100" services="7,9,17,19,49,53,67-69,80,88,111,120,123,135-139,158,161-162,177,427,443,445,497,500,514-515,518,520,593,623,626,631,996-999,1022-1023,1025-1030,1433-1434,1645-1646,1701,1718-1719,1812-1813,1900,2000,2048-2049,2222-2223,3283,3456,3703,4444,4500,5000,5060,5353,5632,9200,10000,17185,20031,30718,31337,32768-32769,32771,32815,33281,49152-49154,49156,49181-49182,49185-49186,49188,49190-49194,49200-49201,65024"/>
|
||||
<verbose level="2"/>
|
||||
<debugging level="0"/>
|
||||
<taskbegin task="NSE" time="1775376697"/>
|
||||
<taskend task="NSE" time="1775376697"/>
|
||||
<taskbegin task="NSE" time="1775376697"/>
|
||||
<taskend task="NSE" time="1775376697"/>
|
||||
<taskbegin task="NSE" time="1775376697"/>
|
||||
<taskend task="NSE" time="1775376697"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1775376697"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1775376698"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1775376698"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1775376698"/>
|
||||
<taskbegin task="UDP Scan" time="1775376698"/>
|
||||
<taskend task="UDP Scan" time="1775376719" extrainfo="100 total ports"/>
|
||||
<taskbegin task="Service scan" time="1775376719"/>
|
||||
<taskprogress task="Service scan" time="1775376817" percent="1.00" remaining="9702" etc="1775386519"/>
|
||||
<taskprogress task="Service scan" time="1775376915" percent="31.00" remaining="437" etc="1775377351"/>
|
||||
<taskprogress task="Service scan" time="1775377014" percent="61.00" remaining="189" etc="1775377203"/>
|
||||
<taskprogress task="Service scan" time="1775377120" percent="91.00" remaining="40" etc="1775377160"/>
|
||||
<taskend task="Service scan" time="1775377125" extrainfo="100 services on 1 host"/>
|
||||
<taskbegin task="Traceroute" time="1775377133"/>
|
||||
<taskend task="Traceroute" time="1775377142"/>
|
||||
<taskbegin task="Parallel DNS resolution of 7 hosts." time="1775377142"/>
|
||||
<taskend task="Parallel DNS resolution of 7 hosts." time="1775377144"/>
|
||||
<taskbegin task="NSE" time="1775377144"/>
|
||||
<taskprogress task="NSE" time="1775377176" percent="86.48" remaining="6" etc="1775377181"/>
|
||||
<taskprogress task="NSE" time="1775377214" percent="92.68" remaining="6" etc="1775377220"/>
|
||||
<taskprogress task="NSE" time="1775377267" percent="95.42" remaining="6" etc="1775377273"/>
|
||||
<taskprogress task="NSE" time="1775377297" percent="98.07" remaining="4" etc="1775377300"/>
|
||||
<taskprogress task="NSE" time="1775377327" percent="98.59" remaining="3" etc="1775377330"/>
|
||||
<taskprogress task="NSE" time="1775377357" percent="99.21" remaining="2" etc="1775377359"/>
|
||||
<taskprogress task="NSE" time="1775377387" percent="99.39" remaining="2" etc="1775377389"/>
|
||||
<taskprogress task="NSE" time="1775377417" percent="99.41" remaining="2" etc="1775377419"/>
|
||||
<taskprogress task="NSE" time="1775377447" percent="99.44" remaining="2" etc="1775377449"/>
|
||||
<taskprogress task="NSE" time="1775377477" percent="99.46" remaining="2" etc="1775377479"/>
|
||||
<taskprogress task="NSE" time="1775377507" percent="99.49" remaining="2" etc="1775377509"/>
|
||||
<taskprogress task="NSE" time="1775377537" percent="99.51" remaining="2" etc="1775377539"/>
|
||||
<taskprogress task="NSE" time="1775377567" percent="99.54" remaining="2" etc="1775377569"/>
|
||||
<taskprogress task="NSE" time="1775377597" percent="99.56" remaining="2" etc="1775377599"/>
|
||||
<taskprogress task="NSE" time="1775377627" percent="99.59" remaining="2" etc="1775377629"/>
|
||||
<taskprogress task="NSE" time="1775377657" percent="99.61" remaining="2" etc="1775377659"/>
|
||||
<taskprogress task="NSE" time="1775377687" percent="99.64" remaining="2" etc="1775377689"/>
|
||||
<taskprogress task="NSE" time="1775377717" percent="99.67" remaining="2" etc="1775377719"/>
|
||||
<taskprogress task="NSE" time="1775377747" percent="99.70" remaining="2" etc="1775377749"/>
|
||||
<taskprogress task="NSE" time="1775377777" percent="99.73" remaining="2" etc="1775377779"/>
|
||||
<taskprogress task="NSE" time="1775377807" percent="99.75" remaining="2" etc="1775377809"/>
|
||||
<taskprogress task="NSE" time="1775377837" percent="99.77" remaining="2" etc="1775377839"/>
|
||||
<taskprogress task="NSE" time="1775377867" percent="99.79" remaining="2" etc="1775377868"/>
|
||||
<taskprogress task="NSE" time="1775377897" percent="99.82" remaining="2" etc="1775377898"/>
|
||||
<taskprogress task="NSE" time="1775377927" percent="99.84" remaining="2" etc="1775377928"/>
|
||||
<taskprogress task="NSE" time="1775377957" percent="99.86" remaining="2" etc="1775377958"/>
|
||||
<taskprogress task="NSE" time="1775377987" percent="99.89" remaining="1" etc="1775377988"/>
|
||||
<taskprogress task="NSE" time="1775378017" percent="99.92" remaining="1" etc="1775378018"/>
|
||||
<taskprogress task="NSE" time="1775378047" percent="99.95" remaining="1" etc="1775378047"/>
|
||||
<taskprogress task="NSE" time="1775378077" percent="99.98" remaining="1" etc="1775378077"/>
|
||||
<taskend task="NSE" time="1775378100"/>
|
||||
<taskbegin task="NSE" time="1775378100"/>
|
||||
<taskend task="NSE" time="1775378115"/>
|
||||
<taskbegin task="NSE" time="1775378115"/>
|
||||
<taskend task="NSE" time="1775378115"/>
|
||||
<host starttime="1775376703" endtime="1775378115"><status state="up" reason="user-set" reason_ttl="0"/>
|
||||
<address addr="167.179.167.166" addrtype="ipv4"/>
|
||||
<hostnames>
|
||||
<hostname name="nextcloud.lan.ddnsgeek.com" type="user"/>
|
||||
<hostname name="167-179-167-166.a7b3a7.bne.nbn.aussiebb.net" type="PTR"/>
|
||||
</hostnames>
|
||||
<ports><extraports state="open|filtered" count="100">
|
||||
<extrareasons reason="no-response" count="100" proto="udp" ports="7,9,17,19,49,53,67-69,80,88,111,120,123,135-139,158,161-162,177,427,443,445,497,500,514-515,518,520,593,623,626,631,996-999,1022-1023,1025-1030,1433-1434,1645-1646,1701,1718-1719,1812-1813,1900,2000,2048-2049,2222-2223,3283,3456,3703,4444,4500,5000,5060,5353,5632,9200,10000,17185,20031,30718,31337,32768-32769,32771,32815,33281,49152-49154,49156,49181-49182,49185-49186,49188,49190-49194,49200-49201,65024"/>
|
||||
</extraports>
|
||||
</ports>
|
||||
<os><osfingerprint fingerprint="SCAN(V=7.98%E=4%D=4/5%OT=%CT=%CU=%PV=N%G=N%TM=69D21EC4%P=x86_64-pc-linux-gnu)
SEQ()
U1(R=N)
IE(R=N)
"/>
|
||||
</os>
|
||||
<trace proto="icmp">
|
||||
<hop ttl="1" ipaddr="10.216.0.161" rtt="0.06"/>
|
||||
<hop ttl="2" ipaddr="10.216.35.11" rtt="0.22"/>
|
||||
<hop ttl="3" ipaddr="10.216.32.2" rtt="2.48"/>
|
||||
<hop ttl="4" ipaddr="172.105.160.101" rtt="0.28" host="lo0-0.gw1.syd1.au.linode.com"/>
|
||||
<hop ttl="5" ipaddr="202.77.88.3" rtt="4.58" host="as4764.syd.edgeix.net.au"/>
|
||||
<hop ttl="6" ipaddr="10.241.1.187" rtt="11.64"/>
|
||||
<hop ttl="7" ipaddr="10.241.2.71" rtt="12.71"/>
|
||||
</trace>
|
||||
</host>
|
||||
<taskbegin task="NSE" time="1775378116"/>
|
||||
<taskend task="NSE" time="1775378116"/>
|
||||
<taskbegin task="NSE" time="1775378116"/>
|
||||
<taskend task="NSE" time="1775378116"/>
|
||||
<taskbegin task="NSE" time="1775378116"/>
|
||||
<taskend task="NSE" time="1775378116"/>
|
||||
<runstats><finished time="1775378117" timestr="Sun Apr 5 08:35:17 2026" summary="Nmap done at Sun Apr 5 08:35:17 2026; 1 IP address (1 host up) scanned in 1438.42 seconds" elapsed="1438.42" exit="success"/><hosts up="1" down="0" total="1"/>
|
||||
</runstats>
|
||||
</nmaprun>
|
||||
Reference in New Issue
Block a user