# Nmap 7.98 scan initiated Sun Apr 5 07:38:44 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/auth.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/auth.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml auth.lan.ddnsgeek.com Nmap scan report for auth.lan.ddnsgeek.com (167.179.167.166) Host is up, received user-set (0.014s latency). rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net Scanned at 2026-04-05 07:38:57 UTC for 991s PORT STATE SERVICE REASON VERSION 443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API) | http-useragent-tester: | Status for browser useragent: 404 | Allowed User Agents: | libwww | libcurl-agent/1.0 | MFC_Tear_Sample | Change in Status Code: | Snoopy: 200 | Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html): 200 | Zend_Http_Client: 200 | Wget/1.13.4 (linux-gnu): 200 | WWW-Mechanize/1.34: 200 | PHP/: 200 | lwp-trivial: 200 | URI::Fetch: 200 | PECL::HTTP: 200 | http client: 200 | PHPCrawl: 200 | GT::WWW: 200 | Python-urllib/2.5: 200 |_ HTTP::Lite: 200 |_http-chrono: Request times for /; avg: 88516.23ms; min: 4669.52ms; max: 330853.21ms |_http-malware-host: Host appears to be clean |_http-dombased-xss: Couldn't find any DOM based XSS. | http-backup-finder: | Spidering limited to: maxdepth=3; maxpagecount=20; withinhost=auth.lan.ddnsgeek.com | http://auth.lan.ddnsgeek.com:443/favicon.bak | http://auth.lan.ddnsgeek.com:443/favicon.ico~ | http://auth.lan.ddnsgeek.com:443/favicon copy.ico | http://auth.lan.ddnsgeek.com:443/Copy of favicon.ico | http://auth.lan.ddnsgeek.com:443/Copy (2) of favicon.ico | http://auth.lan.ddnsgeek.com:443/favicon.ico.1 |_ http://auth.lan.ddnsgeek.com:443/favicon.ico.~1~ | http-errors: | Spidering limited to: maxpagecount=40; withinhost=auth.lan.ddnsgeek.com | Found the following error pages: | | Error Code: 404 | http://auth.lan.ddnsgeek.com:443/static/css/index.Dny_JsW-.css | | Error Code: 404 |_ http://auth.lan.ddnsgeek.com:443/static/js/hooks.RemoteCall.2c24izsT.js |_http-csrf: Couldn't find any CSRF vulnerabilities. | http-methods: |_ Supported Methods: GET HEAD OPTIONS |_http-stored-xss: Couldn't find any stored XSS vulnerabilities. | http-sitemap-generator: | Directory structure: | / | Other: 1; ico: 1; json: 1 | /static/js/ | js: 15 | Longest directory structure: | Depth: 2 | Dir: /static/js/ | Total files found (by extension): |_ Other: 1; ico: 1; js: 15; json: 1 |_http-config-backup: ERROR: Script execution failed (use -d to debug) |_http-userdir-enum: Potential Users: root, admin, administrator, webadmin, sysadmin, netadmin, guest, user, web, test |_http-trane-info: Problem with XML parsing of /evox/about | ssl-enum-ciphers: | TLSv1.2: | ciphers: | TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A | TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A | TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A | compressors: | NULL | cipher preference: client | warnings: | Key exchange (secp256r1) of lower strength than certificate key | TLSv1.3: | ciphers: | TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A | TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A | TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A | cipher preference: server |_ least strength: A | http-comments-displayer: | Spidering limited to: maxdepth=3; maxpagecount=20; withinhost=auth.lan.ddnsgeek.com | | Path: https://auth.lan.ddnsgeek.com:443/static/js/index.D1XP2tyz.js | Line number: 232 | Comment: | /* converts a 24px size into an em-based value that's relative to the scale's 16px base */ | | Path: https://auth.lan.ddnsgeek.com:443/static/js/index.D1XP2tyz.js | Line number: 208 | Comment: | /* converts a 10px size into an em-based value that's relative to the scale's 16px base */ | | Path: https://auth.lan.ddnsgeek.com:443/static/js/mui.CircularProgress.Dj19OJ7X.js | Line number: 65 | Comment: | /* @noflip */ | | Path: https://auth.lan.ddnsgeek.com:443/static/js/index.D1XP2tyz.js | Line number: 214 | Comment: | /* converts a 12px size into an em-based value that's relative to the scale's 16px base */ | | Path: https://auth.lan.ddnsgeek.com:443/static/js/chunk-LFPYN7LY.DxuuhCLW.js | Line number: 1 | Comment: | /*/g,`/`)||`/`}var xe=typeof window<`u`&&window.document!==void 0&&window.document.createElement!==void 0;function Se(e,t){let n=e;if(typeof n!=`string`||!le.test(n))return{absoluteURL:void 0,isExternal:!1,to:n};let r=n,i=!1;if(xe)try{let e=new URL(window.location.href),r=n.startsWith(`//`)?new URL(e.protocol+n):new URL(n),a=k(r.pathname,t);r.origin===e.origin&&a!=null?n=a+r.search+r.hash:i=!0}catch{d(!1,` contains an invalid URL which will probably break when clicked - please update to a valid URL path.`)}return{absoluteURL:r,isExternal:i,to:n}}Object.getOwnPropertyNames(Object.prototype).sort().join(`\0`);var M=o.createContext(null);M.displayName=`DataRouter`;var N=o.createContext(null);N.displayName=`DataRouterState`;var Ce=o.createContext(!1),we=o.createContext({isTransitioning:!1});we.displayName=`ViewTransition`;var Te=o.createContext(new Map);Te.displayName=`Fetchers`;var Ee=o.createContext(null);Ee.displayName=`Await`;var P=o.createContext(null);P.displayName=`Navigation`;var F=o.createContext(null);F.displayName=`Location`;var I=o.createContext({outlet:null,matches:[],isDataRoute:!1});I.displayName=`Route`;var L=o.createContext(null);L.displayName=`RouteError`;var De=`REACT_ROUTER_ERROR`,Oe=`REDIRECT`,ke=`ROUTE_ERROR_RESPONSE`;function Ae(e){if(e.startsWith(`${De}:${Oe}:{`))try{let t=JSON.parse(e.slice(28));if(typeof t==`object`&&t&&typeof t.status==`number`&&typeof t.statusText==`string`&&typeof t.location==`string`&&typeof t.reloadDocument==`boolean`&&typeof t.replace==`boolean`)return t}catch{}}function je(e){if(e.startsWith(`${De}:${ke}:{`))try{let t=JSON.parse(e.slice(40));if(typeof t==`object`&&t&&typeof t.status==`number`&&typeof t.statusText==`string`)return new ve(t.status,t.statusText,t.data)}catch{}}function Me(e,{relative:t}={}){u(R(),`useHref() may be used only in the context of a component.`);let{basename:n,navigator:r}=o.useContext(P),{hash:i,pathname:a,search:s}=V(e,{relative:t}),c=a;return n!==`/`&&(c=a===`/`?n:j([n,a])),r.createHref({pathname:c,search:s,hash:i})}function R(){return o.useContext(F)!=null}function z(){return u(R(),`useLocation() may be used only in the context of a component.`),o.useContext(F).location}var Ne=`You should call navigate() in a React.useEffect(), not when your component is first rendered.`;function Pe(e){o.useContext(P).static||o.useLayoutEffect(e)}function B(){let{isDataRoute:e}=o.useContext(I);return e?Xe():Fe()}function Fe(){u(R(),`useNavigate() may be used only in the context of a component.`);let e=o.useContext(M),{basename:t,navigator:n}=o.useContext(P),{matches:r}=o.useContext(I),{pathname:i}=z(),a=JSON.stringify(me(r)),s=o.useRef(!1);return Pe(()=>{s.current=!0}),o.useCallback((r,o={})=>{if(d(s.current,Ne),!s.current)return;if(typeof r==`number`){n.go(r);return}let c=A(r,JSON.parse(a),i,o.relative===`path`);e==null&&t!==`/`&&(c.pathname=c.pathname===`/`?t:j([t,c.pathname])),(o.replace?n.replace:n.push)(c,o.state,o)},[t,n,a,i,e])}o.createContext(null);function V(e,{relative:t}={}){let{matches:n}=o.useContext(I),{pathname:r}=z(),i=JSON.stringify(me(n));return o.useMemo(()=>A(e,JSON.parse(i),r,t===`path`),[e,i,r,t])}function Ie(e,t){return Le(e,t)}function Le(e,t,n){u(R(),`useRoutes() may be used only in the context of a component.`);let{navigator:r}=o.useContext(P),{matches:i}=o.useContext(I),a=i[i.length-1],s=a?a.params:{},c=a?a.pathname:`/`,l=a?a.pathnameBase:`/`,f=a&&a.route;{let e=f&&f.path||``;Qe(c,!f||e.endsWith(`*`)||e.endsWith(`*?`),`You rendered descendant (or called \`useRoutes()\`) at "${c}" (under ) but the parent route path has no trailing "*". This means if you navigate deeper, the parent won't match anymore and therefore the child routes will never render. | | Please change the parent to .`)}let p=z(),m;if(t){let e=typeof t==`string`?g(t):t;u(l===`/`||e.pathname?.startsWith(l),`When overriding the location using \`\` or \`useRoutes(routes, location)\`, the location pathname must begin with the portion of the URL pathname that was matched by all parent routes. The current pathname base is "${l}" but pathname "${e.pathname}" was given in the \`location\` prop.`),m=e}else m=p;let h=m.pathname||`/`,_=h;if(l!==`/`){let e=l.replace(/^\//,``).split(`/`);_=`/`+h.replace(/^\//,``).split(`/`).slice(e.length).join(`/`)}let v=y(e,{pathname:_});d(f||v!=null,`No routes matched location "${m.pathname}${m.search}${m.hash}" `),d(v==null||v[v.length-1].route.element!==void 0||v[v.length-1].route.Component!==void 0||v[v.length-1].route.lazy!==void 0,`Matched leaf route at location "${m.pathname}${m.search}${m.hash}" does not have an element or Component. This means it will render an with a null value by default resulting in an "empty" page.`);let b=Ue(v&&v.map(e=>Object.assign({},e,{params:Object.assign({},s,e.params),pathname:j([l,r.encodeLocation?r.encodeLocation(e.pathname.replace(/\?/g,`%3F`).replace(/#/g,`%23`)).pathname:e.pathname]),pathnameBase:e.pathnameBase===`/`?l:j([l,r.encodeLocation?r.encodeLocation(e.pathnameBase.replace(/\?/g,`%3F`).replace(/#/g,`%23`)).pathname:e.pathnameBase])})),i,n);return t&&b?o.createElement(F.Provider,{value:{location:{pathname:`/`,search:``,hash:``,state:null,key:`default`,unstable_mask:void 0,...m},navigationType:`POP`}},b):b}function Re(){let e=Ye(),t=ye(e)?`${e.status} ${e.statusText}`:e instanceof Error?e.message:JSON.stringify(e),n=e instanceof Error?e.stack:null,r=`rgba(200,200,200, 0.5)`,i={padding:`0.5rem`,backgroundColor:r},a={padding:`2px 4px`,backgroundColor:r},s=null;return console.error(`Error handled by React Router default ErrorBoundary:`,e),s=o.createElement(o.Fragment,null,o.createElement(`p`,null,`\xF0\x9F\x92\xBF Hey developer \xF0\x9F\x91\x8B`),o.createElement(`p`,null,`You can provide a way better UX than this when your app throws errors by providing your own `,o.createElement(`code`,{style:a},`ErrorBoundary`),` or`,` `,o.createElement(`code`,{style:a},`errorElement`),` prop on your route.`)),o.createElement(o.Fragment,null,o.createElement(`h2`,null,`Unexpected Application Error!`),o.createElement(`h3`,{style:{fontStyle:`italic`}},t),n?o.createElement(`pre`,{style:i},n):null,s)}var ze=o.createElement(Re,null),Be=class extends o.Component{constructor(e){super(e),this.state={location:e.location,revalidation:e.revalidation,error:e.error}}static getDerivedStateFromError(e){return{error:e}}static getDerivedStateFromProps(e,t){return t.location!==e.location||t.revalidation!==`idle`&&e.revalidation===`idle`?{error:e.error,location:e.location,revalidation:e.revalidation}:{error:e.error===void 0?t.error:e.error,location:t.location,revalidation:e.revalidation||t.revalidation}}componentDidCatch(e,t){this.props.onError?this.props.onError(e,t):console.error(`React Router caught the following error during render`,e)}render(){let e=this.state.error;if(this.context&&typeof e==`object`&&e&&`digest`in e&&typeof e.digest==`string`){let t=je(e.digest);t&&(e=t)}let t=e===void 0?this.props.children:o.createElement(I.Provider,{value:this.props.routeContext},o.createElement(L.Provider,{value:e,children:this.props.component}));return this.context?o.createElement(Ve,{error:e},t):t}};Be.contextType=Ce;var H=new WeakMap;function Ve({children:e,error:t}){let{basename:n}=o.useContext(P);if(typeof t==`object`&&t&&`digest`in t&&typeof t.digest==`string`){let e=Ae(t.digest);if(e){let r=H.get(t);if(r)throw r;let i=Se(e.location,n);if(xe&&!H.get(t))if(i.isExternal||e.reloadDocument)window.location.href=i.absoluteURL||i.to;else{let n=Promise.resolve().then(()=>window.__reactRouterDataRouter.navigate(i.to,{replace:e.replace}));throw H.set(t,n),n}return o.createElement(`meta`,{httpEquiv:`refresh`,content:`0;url=${i.absoluteURL||i.to}`})}}return e}function He({routeContext:e,match:t,children:n}){let r=o.useContext(M);return r&&r.static&&r.staticContext&&(t.route.errorElement||t.route.ErrorBoundary)&&(r.staticContext._deepestRenderedBoundaryId=t.route.id),o.createElement(I.Provider,{value:e},n)}function Ue(e,t=[],n){let r=n?.state;if(e==null){if(!r)return null;if(r.errors)e=r.matches;else if(t.length===0&&!r.initialized&&r.matches.length>0)e=r.matches;else return null}let i=e,a=r?.errors;if(a!=null){let e=i.findIndex(e=>e.route.id&&a?.[e.route.id]!==void 0);u(e>=0,`Could not find a matching route for errors on route IDs: ${Object.keys(a).join(`,`)}`),i=i.slice(0,Math.min(i.length,e+1))}let s=!1,c=-1;if(n&&r){s=r.renderFallback;for(let e=0;e=0?i.slice(0,c+1):[i[0]];break}}}}let l=n?.onError,d=r&&l?(e,t)=>{l(e,{location:r.location,params:r.matches?.[0]?.params??{},unstable_pattern:be(r.matches),errorInfo:t})}:void 0;return i.reduceRight((e,n,l)=>{let u,f=!1,p=null,m=null;r&&(u=a&&n.route.id?a[n.route.id]:void 0,p=n.route.errorElement||ze,s&&(c<0&&l===0?(Qe(`route-fallback`,!1,"No `HydrateFallback` element provided to render during initial hydration"),f=!0,m=null):c===l&&(f=!0,m=n.route.hydrateFallbackElement||null)));let h=t.concat(i.slice(0,l+1)),g=()=>{let t;return t=u?p:f?m:n.route.Component?o.createElement(n.route.Component,null):n.route.element?n.route.element:e,o.createElement(He,{match:n,routeContext:{outlet:e,matches:h,isDataRoute:r!=null},children:t})};return r&&(n.route.ErrorBoundary||n.route.errorElement||l===0)?o.createElement(Be,{location:r.location,revalidation:r.revalidation,component:p,error:u,children:g(),routeContext:{outlet:null,matches:h,isDataRoute:!0},onError:d}):g()},null)}function U(e){return`${e} must be used within a data router. See https://reactrouter.com/en/main/routers/picking-a-router.`}function We(e){let t=o.useContext(M);return u(t,U(e)),t}function W(e){let t=o.useContext(N);return u(t,U(e)),t}function Ge(e){let t=o.useContext(I);return u(t,U(e)),t}function G(e){let t=Ge(e),n=t.matches[t.matches.length-1];return u(n.route.id,`${e} can only be used on routes that contain a unique "id"`),n.route.id}function Ke(){return G(`useRouteId`)}function qe(){return W(`useNavigation`).navigation}function Je(){let{matches:e,loaderData:t}=W(`useMatches`);return o.useMemo(()=>e.map(e=>x(e,t)),[e,t])}function Ye(){let e=o.useContext(L),t=W(`useRouteError`),n=G(`useRouteError`);return e===void 0?t.errors?.[n]:e}function Xe(){let{router:e}=We(`useNavigate`),t=G(`useNavigate`),n=o.useRef(!1);return Pe(()=>{n.current=!0}),o.useCallback(async(r,i={})=>{d(n.current,Ne),n.current&&(typeof r==`number`?await e.navigate(r):await e.navigate(r,{fromRouteId:t,...i}))},[e,t])}var Ze={};function Qe(e,t,n){!t&&!Ze[e]&&(Ze[e]=!0,d(!1,n))}o.useOptimistic,o.memo($e);function $e({routes:e,future:t,state:n,isStatic:r,onError:i}){return Le(e,void 0,{state:n,isStatic:r,onError:i,future:t})}function et(e){u(!1,`A is only ever to be used as the child of element, never rendered directly. Please wrap your in a .`)}function tt({basename:e=`/`,children:t=null,location:n,navigationType:r=`POP`,navigator:i,static:a=!1,unstable_useTransitions:s}){u(!R(),`You cannot render a inside another . You should never have more than one in your app.`);let c=e.replace(/^\/*/ | | Path: https://auth.lan.ddnsgeek.com:443/static/js/chunk-LFPYN7LY.DxuuhCLW.js | Line number: 1 | Comment: | /*`?`(.*)$`:`(?:\\/(.+)|\\/*)$`):n?i+=`\\/*$`:e!==``&&e!==`/`&&(i+=`(?:(?=\\/|$))`),[new RegExp(i,t?void 0:`i`),r]}function ce(e){try{return e.split(`/`).map(e=>decodeURIComponent(e).replace(/\//g,`%2F`)).join(`/`)}catch(t){return d(!1,`The URL path "${e}" could not be decoded because it is a malformed URL segment. This is probably due to a bad percent encoding (${t}).`),e}}function k(e,t){if(t===`/`)return e;if(!e.toLowerCase().startsWith(t.toLowerCase()))return null;let n=t.endsWith(`/`)?t.length-1:t.length,r=e.charAt(n);return r&&r!==`/`?null:e.slice(n)||`/`}var le=/^(?:[a-z][a-z0-9+.-]*:|\/\/)/i;function ue(e,t=`/`){let{pathname:n,search:r=``,hash:i=``}=typeof e==`string`?g(e):e,a;return n?(n=n.replace(/\/\/+/g,`/`),a=n.startsWith(`/`)?de(n.substring(1),`/`):de(n,t)):a=t,{pathname:a,search:ge(r),hash:_e(i)}}function de(e,t){let n=t.replace(/\/+$/,``).split(`/`);return e.split(`/`).forEach(e=>{e===`..`?n.length>1&&n.pop():e!==`.`&&n.push(e)}),n.length>1?n.join(`/`):`/`}function fe(e,t,n,r){return`Cannot include a '${e}' character in a manually specified \`to.${t}\` field [${JSON.stringify(r)}]. Please separate it out to the \`to.${n}\` field. Alternatively you may provide the full path as a string in and the router will parse it for you.`}function pe(e){return e.filter((e,t)=>t===0||e.route.path&&e.route.path.length>0)}function me(e){let t=pe(e);return t.map((e,n)=>n===t.length-1?e.pathname:e.pathnameBase)}function A(e,t,n,r=!1){let i;typeof e==`string`?i=g(e):(i={...e},u(!i.pathname||!i.pathname.includes(`?`),fe(`?`,`pathname`,`search`,i)),u(!i.pathname||!i.pathname.includes(`#`),fe(`#`,`pathname`,`hash`,i)),u(!i.search||!i.search.includes(`#`),fe(`#`,`search`,`hash`,i)));let a=e===``||i.pathname===``,o=a?`/`:i.pathname,s;if(o==null)s=n;else{let e=t.length-1;if(!r&&o.startsWith(`..`)){let t=o.split(`/`);for(;t[0]===`..`;)t.shift(),--e;i.pathname=t.join(`/`)}s=e>=0?t[e]:`/`}let c=ue(i,s),l=o&&o!==`/`&&o.endsWith(`/`),d=(a||o===`.`)&&n.endsWith(`/`);return!c.pathname.endsWith(`/`)&&(l||d)&&(c.pathname+=`/`),c}var j=e=>e.join(`/`).replace(/\/\/+/g,`/`),he=e=>e.replace(/\/+$/,``).replace(/^\/*/ | | Path: https://auth.lan.ddnsgeek.com:443/static/js/index.D1XP2tyz.js | Line number: 269 | Comment: | /* Heads Up: Bordered Icons will not be supported in the future! | - This feature will be deprecated in the next major release of Font Awesome (v8)! | - You may continue to use it in this version *v7), but it will not be supported in Font Awesome v8. | */ | | Path: https://auth.lan.ddnsgeek.com:443/static/js/index.D1XP2tyz.js | Line number: 210 | Comment: | /* vertically centers the icon taking into account the surrounding text's descender */ | | Path: https://auth.lan.ddnsgeek.com:443/static/js/chunk-LFPYN7LY.DxuuhCLW.js | Line number: 1 | Comment: | /*`),`Route path "${e}" will be treated as if it were "${e.replace(/\*$/,`/*`)}" because the \`*\` character must always follow a \`/\` in the pattern. To get rid of this warning, please change the route path to "${e.replace(/\*$/,`/*`)}".`);let r=[],i=`^`+e.replace(/\/*\*?$/,``).replace(/^\/*/ | | Path: https://auth.lan.ddnsgeek.com:443/static/js/index.D1XP2tyz.js | Line number: 87 | Comment: | /* syncing vertical alignment with Web Font rendering */ | | Path: https://auth.lan.ddnsgeek.com:443/static/js/index.D1XP2tyz.js | Line number: 220 | Comment: | /* converts a 14px size into an em-based value that's relative to the scale's 16px base */ | | Path: https://auth.lan.ddnsgeek.com:443/static/js/index.D1XP2tyz.js | Line number: 577 | Comment: | // handle system mode | | Path: https://auth.lan.ddnsgeek.com:443/static/js/index.D1XP2tyz.js | Line number: 273 | Comment: | /* Notes: | * --@{v.$css-prefix}-border-width = 1/16 by default (to render as ~1px based on a 16px default font-size) | * --@{v.$css-prefix}-border-padding = | ** 3/16 for vertical padding (to give ~2px of vertical whitespace around an icon considering it's vertical alignment) | ** 4/16 for horizontal padding (to give ~4px of horizontal whitespace around an icon) | */ | | Path: https://auth.lan.ddnsgeek.com:443/static/js/index.D1XP2tyz.js | Line number: 238 | Comment: | /* converts a 32px size into an em-based value that's relative to the scale's 16px base */ | | Path: https://auth.lan.ddnsgeek.com:443/static/js/index.D1XP2tyz.js | Line number: 209 | Comment: | /* sets the line-height of the icon back to that of it's parent */ | | Path: https://auth.lan.ddnsgeek.com:443/static/js/index.D1XP2tyz.js | Line number: 226 | Comment: |_ /* converts a 20px size into an em-based value that's relative to the scale's 16px base */ | http-phpmyadmin-dir-traversal: | VULNERABLE: | phpMyAdmin grab_globals.lib.php subform Parameter Traversal Local File Inclusion | State: VULNERABLE (Exploitable) | IDs: CVE:CVE-2005-3299 | PHP file inclusion vulnerability in grab_globals.lib.php in phpMyAdmin 2.6.4 and 2.6.4-pl1 allows remote attackers to include local files via the $__redirect parameter, possibly involving the subform array. | | Disclosure date: 2005-10-nil | Extra information: | ../../../../../etc/passwd : | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
| | | | References: | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3299 |_ http://www.exploit-db.com/exploits/1244/ |_http-traceroute: ERROR: Script execution failed (use -d to debug) |_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php | http-default-accounts: | [Arris 2307] at /logo_t.gif |_ : |_http-favicon: Unknown favicon MD5: 93AEC1FCC7DC8E261CAC2F90C6788BD0 |_http-fetch: Please enter the complete path of the directory to save data in. | http-security-headers: | Strict_Transport_Security: | Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload | X_Frame_Options: | Header: X-Frame-Options: SAMEORIGIN | Description: The browser must not display this content in any frame from a page of different origin than the content itself. | X_XSS_Protection: | Header: X-XSS-Protection: 1; mode=block | Description: The browser will prevent the rendering of the page when XSS is detected. | X_Content_Type_Options: | Header: X-Content-Type-Options: nosniff | Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. | Content_Security_Policy: | Header: Content-Security-Policy: default-src 'self'; base-uri 'self'; connect-src 'self'; frame-ancestors 'none'; frame-src 'none'; object-src 'none'; script-src 'self'; style-src 'self' 'nonce-8TRy5BDTsjSq0bu7uS4lNlGgIjJF5O5H' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' | Description: Define the base uri for relative uri. | Description: Define loading policy for all resources type in case of a resource type dedicated directive is not defined (fallback). | Description: Define which scripts the protected resource can execute. | Description: Define from where the protected resource can load plugins. | Description: Define which styles (CSS) the user applies to the protected resource. | Description: Deprecated and replaced by child-src. Define from where the protected resource can embed frames. | Description: Define from where the protected resource can be embedded in frames. |_ Description: Define which URIs the protected resource can load using script interfaces. |_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable |_http-feed: Couldn't find any feeds. |_http-referer-checker: Couldn't find any cross-domain scripts. |_http-title: Site doesn't have a title (text/html; charset=utf-8). | http-headers: | Content-Length: 2675 | Content-Security-Policy: default-src 'self'; base-uri 'self'; connect-src 'self'; frame-ancestors 'none'; frame-src 'none'; object-src 'none'; script-src 'self'; style-src 'self' 'nonce-8TRy5BDTsjSq0bu7uS4lNlGgIjJF5O5H' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' | Content-Type: text/html; charset=utf-8 | Date: Sun, 05 Apr 2026 07:39:42 GMT | Permissions-Policy: accelerometer=(), autoplay=(), camera=(), display-capture=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), screen-wake-lock=(), sync-xhr=(), xr-spatial-tracking=(), interest-cohort=() | Referrer-Policy: strict-origin-when-cross-origin | Strict-Transport-Security: max-age=15552000; includeSubDomains; preload | X-Content-Type-Options: nosniff | X-Dns-Prefetch-Control: off | X-Frame-Options: SAMEORIGIN | X-Xss-Protection: 1; mode=block | Connection: close | |_ (Request type: HEAD) | http-vhosts: | auth.lan.ddnsgeek.com : 200 |_127 names had status 404 | http-php-version: Logo query returned unknown hash caee5660535b7887cc5f210398f5ec66 |_Credits query returned unknown hash 7603ca4d30f24cdbb68b6788e43d9d6a | http-vuln-cve2010-0738: |_ /jmx-console/: Authentication was not required | http-drupal-enum: | Modules: | views | token | ctools | pathauto | libraries | entity | admin_menu | date | imce | jquery_update | ckeditor | wysiwyg | link | webform | backup_migrate | rules | module_filter | google_analytics | views_slideshow | features | xmlsitemap | metatag | captcha | colorbox | media | entityreference | panels | field_group | devel | views_bulk_operations | menu_block | transliteration | l10n_update | imce_wysiwyg | globalredirect | variable | i18n | context | imageapi | advanced_help | filefield | email | page_title | lightbox2 | ds | strongarm | superfish | imagefield | calendar | imagecache | references | field_collection | block_class | job_scheduler | menu_attributes | redirect | addressfield | mailsystem | nice_menus | diff | flexslider | taxonomy_menu | file_entity | feeds | media_youtube | node_clone | admin_views | smtp | special_menu_items | auto_nodetitle | jquery_ui | insert | cck | quicktabs | mimemail | views_php | content_access | jcarousel | print | plupload | votingapi | poormanscron | simplenews | filefield_sources | extlink | honeypot | facetapi | logintoboggan | search_api | uuid | commerce | custom_breadcrumbs | views_data_export | oauth | better_formats | site_verify | location | fontyourface | masquerade | imce_mkdir | Themes: | zen | omega | bootstrap | adaptivetheme | corporateclean | adminimal_theme | marinelli | tao | danland | business | framework | rubik | bluemasters | fusion | shiny | skeletontheme | pixture_reloaded | corolla | nucleus | mayo | omega_kickstart | professional_theme | sky | nexus | andromeda | acquia_marina | mix_and_match | basic | responsive | responsive_bartik | responsive_blog | simplecorp | rootcandy | best_responsive | zeropoint | business_responsive_theme | acquia_prosper | mothership | touch | bamboo | busy | genesis | ninesixty | corporate | ember | aurora | venture_theme | zircon | corkedscrewer | jackson | zurb_foundation | responsive_business | bluez | multipurpose | responsive_green | oa_radix | creative | tb_sirate | urbansolice | impact_theme | footheme | mobile | cti_flex | kanji | radix | journalcrunch | dark_elegant | fresh | blogbuzz | gratis | likable | acquia_slate | boron | business_theme | newsflash | seven | clean_theme | fontfolio | plasma | simpleclean | magazeen_lite | metropolis | clean | company | blueprint | tb_purity | openchurch_theme | platon | colourise | black_premium | blogger_theme | metro_zymphonies_theme | elegant_theme | tma | corporate_agency | education | hertz | md_foto | antonelli |_ admire_grunge |_http-date: Sun, 05 Apr 2026 07:41:10 GMT; -57s from local time. | http-wordpress-enum: | Search limited to top 100 themes/plugins | themes | astra | twentyseventeen | twentyfifteen | twentynineteen | twentytwenty | twentysixteen | twentyfourteen | twentytwentyone | hello-elementor | twentythirteen | oceanwp | twentytwelve | storefront | twentyeleven | twentytwentytwo | twentyten | generatepress | twentytwentythree | neve | responsive | sydney | blocksy | hestia | customizr | colormag | kadence | vantage | hueman | twentytwentyfour | spacious | lightning | virtue | newsup | onepress | specia | ashe | mh-magazine-lite | zakra | sinatra | phlox | mesmerize | evolve | graphene | shapely | colibri-wp | sparkling | colorway | enigma | make | flash | customify | total | mantra | appointment | ifeature | inspiro | go | covernews | iconic-one | popularfx | minamaze | omega | twentytwentyfive | catch-box | bard | bizberg | dispatch | poseidon | page-builder-framework | illdy | coraline | accelerate | alexandria | pinboard | hemingway | wallstreet | royal-elementor-kit | portfolio-press | startkit | radiate | attitude | nirvana | arilewp | avril | custom-community | argent | blogus | rife-free | raindrops | activello | tempera | spicepress | mystique | estore | sela | suevafree | delicate | travelify | woostify |_ agama | http-cakephp-version: Version of codebase: 1.1.x, 1.2.x | Version of icons: 1.3.x |_Default stylesheet has an unknown hash: 4baacd5fce27e89f3215868cd0ababda |_ssl-date: TLS randomness does not represent time |_http-jsonp-detection: Couldn't find any JSONP endpoints. | http-enum: | /blog/: Blog | /weblog/: Blog | /weblogs/: Blog | /wordpress/: Blog | /wiki/: Wiki | /mediawiki/: Wiki | /wiki/Main_Page: Wiki | /tikiwiki/: Tikiwiki | /cgi-bin/mj_wwwusr: Majordomo2 Mailing List | /majordomo/mj_wwwusr: Majordomo2 Mailing List | /j2ee/examples/servlets/: Oracle j2ee examples | /j2ee/examples/jsp/: Oracle j2ee examples | /dsc/: Trend Micro Data Loss Prevention Virtual Appliance | /reg_1.htm: Polycom IP phone | /adr.htm: Snom IP Phone | /line_login.htm?l=1: Snom IP Phone | /tbook.csv: Snom IP Phone | /globalSIPsettings.html: Aastra IP Phone | /SIPsettingsLine1.html: Aastra IP Phone | /websvn/: WEBSVN Repository | /repos/: Possible code repository | /repo/: Possible code repository | /svn/: Possible code repository | /cvs/: Possible code repository | /login.stm: Belkin G Wireless Router | /tools_admin.php: D-Link DIR-300 | /bsc_lan.php: D-Link DIR-300, DIR-320, DIR-615 revD | /Manage.tri: Linksys WRT54G2 | //system.html: CMNC-200 IP Camera | /main_configure.cgi: Intellinet IP Camera | /OvCgi/Toolbar.exe: HP OpenView Network Node Manager | /frontend/x3/: CPanel | /awstatstotals/awstatstotals.php: AWStats Totals | /awstats/awstatstotals.php: AWStats Totals | /awstatstotals.php: AWStats Totals | /awstats/index.php: AWStats Totals | /awstatstotals/index.php: AWStats Totals | /egroupware/: eGroupware | /calendar/cal_search.php: ExtCalendar | /cal_search.php: ExtCalendar | /a_viewusers.php: Andys PHP Knowledgebase | /aphpkb/: Andys PHP Knowledgebase | /webedition/we/include/we_modules/: Web Edition | /webedition/: Web Edition | /Examples/: Possible documentation files | /LightNEasy.php?do=login: LightNEasy | /channel_detail.php: DzTube | /cgi-bin/vcs: Mitel Audio and Web Conferencing (AWC) | /ocsreports/: OCS Inventory | /vbseo.php: vBSEO | /forum/: Forum | /forums/: Forum | /smf/: Forum | /phpbb/: Forum | /manager/: Possible admin folder | /admin.php: Possible admin folder | /admin/: Possible admin folder | /admin/admin/: Possible admin folder | /administrator/: Possible admin folder | /moderator/: Possible admin folder | /webadmin/: Possible admin folder | /adminarea/: Possible admin folder | /bb-admin/: Possible admin folder | /adminLogin/: Possible admin folder | /admin_area/: Possible admin folder | /panel-administracion/: Possible admin folder | /instadmin/: Possible admin folder | /memberadmin/: Possible admin folder | /administratorlogin/: Possible admin folder | /adm/: Possible admin folder | /admin/account.php: Possible admin folder | /admin/index.php: Possible admin folder | /admin/login.php: Possible admin folder | /admin/admin.php: Possible admin folder | /joomla/administrator: Possible admin folder | /login.php: Possible admin folder | /admin_area/admin.php: Possible admin folder | /admin_area/login.php: Possible admin folder | /siteadmin/login.php: Possible admin folder | /siteadmin/index.php: Possible admin folder | /siteadmin/login.html: Possible admin folder | /admin/index.html: Possible admin folder | /admin/login.html: Possible admin folder | /admin/admin.html: Possible admin folder | /admin_area/index.php: Possible admin folder | /bb-admin/index.php: Possible admin folder | /bb-admin/login.php: Possible admin folder | /bb-admin/admin.php: Possible admin folder | /admin/home.php: Possible admin folder | /admin_area/login.html: Possible admin folder | /admin_area/index.html: Possible admin folder | /admin/controlpanel.php: Possible admin folder | /admincp/: Possible admin folder | /admincp/index.asp: Possible admin folder | /admincp/index.html: Possible admin folder | /admincp/login.php: Possible admin folder | /admin/account.html: Possible admin folder | /adminpanel.html: Possible admin folder | /webadmin.html: Possible admin folder | /webadmin/index.html: Possible admin folder | /webadmin/admin.html: Possible admin folder | /webadmin/login.html: Possible admin folder | /admin/admin_login.html: Possible admin folder | /admin_login.html: Possible admin folder | /panel-administracion/login.html: Possible admin folder | /admin/cp.php: Possible admin folder | /cp.php: Possible admin folder | /administrator/index.php: Possible admin folder | /administrator/login.php: Possible admin folder | /nsw/admin/login.php: Possible admin folder | /webadmin/login.php: Possible admin folder | /admin/admin_login.php: Possible admin folder | /admin_login.php: Possible admin folder | /administrator/account.php: Possible admin folder | /administrator.php: Possible admin folder | /admin_area/admin.html: Possible admin folder | /pages/admin/admin-login.php: Possible admin folder | /admin/admin-login.php: Possible admin folder | /admin-login.php: Possible admin folder | /bb-admin/index.html: Possible admin folder | /bb-admin/login.html: Possible admin folder | /bb-admin/admin.html: Possible admin folder | /admin/home.html: Possible admin folder | /modelsearch/login.php: Possible admin folder | /moderator.php: Possible admin folder | /moderator/login.php: Possible admin folder | /moderator/admin.php: Possible admin folder | /account.php: Possible admin folder | /pages/admin/admin-login.html: Possible admin folder | /admin/admin-login.html: Possible admin folder | /admin-login.html: Possible admin folder | /controlpanel.php: Possible admin folder | /admincontrol.php: Possible admin folder | /admin/adminLogin.html: Possible admin folder | /adminLogin.html: Possible admin folder | /home.html: Possible admin folder | /rcjakar/admin/login.php: Possible admin folder | /adminarea/index.html: Possible admin folder | /adminarea/admin.html: Possible admin folder | /webadmin.php: Possible admin folder | /webadmin/index.php: Possible admin folder | /webadmin/admin.php: Possible admin folder | /admin/controlpanel.html: Possible admin folder | /admin.html: Possible admin folder | /admin/cp.html: Possible admin folder | /cp.html: Possible admin folder | /adminpanel.php: Possible admin folder | /moderator.html: Possible admin folder | /administrator/index.html: Possible admin folder | /administrator/login.html: Possible admin folder | /user.html: Possible admin folder | /administrator/account.html: Possible admin folder | /administrator.html: Possible admin folder | /login.html: Possible admin folder | /modelsearch/login.html: Possible admin folder | /moderator/login.html: Possible admin folder | /adminarea/login.html: Possible admin folder | /panel-administracion/index.html: Possible admin folder | /panel-administracion/admin.html: Possible admin folder | /modelsearch/index.html: Possible admin folder | /modelsearch/admin.html: Possible admin folder | /admincontrol/login.html: Possible admin folder | /adm/index.html: Possible admin folder | /adm.html: Possible admin folder | /moderator/admin.html: Possible admin folder | /user.php: Possible admin folder | /account.html: Possible admin folder | /controlpanel.html: Possible admin folder | /admincontrol.html: Possible admin folder | /panel-administracion/login.php: Possible admin folder | /wp-login.php: Possible admin folder | /wp-json: Possible admin folder | /adminLogin.php: Possible admin folder | /admin/adminLogin.php: Possible admin folder | /adminarea/index.php: Possible admin folder | /adminarea/admin.php: Possible admin folder | /adminarea/login.php: Possible admin folder | /panel-administracion/index.php: Possible admin folder | /panel-administracion/admin.php: Possible admin folder | /modelsearch/index.php: Possible admin folder | /modelsearch/admin.php: Possible admin folder | /admincontrol/login.php: Possible admin folder | /adm/admloginuser.php: Possible admin folder | /admloginuser.php: Possible admin folder | /admin2.php: Possible admin folder | /admin2/login.php: Possible admin folder | /admin2/index.php: Possible admin folder | /adm/index.php: Possible admin folder | /adm.php: Possible admin folder | /affiliate.php: Possible admin folder | /adm_auth.php: Possible admin folder | /memberadmin.php: Possible admin folder | /administratorlogin.php: Possible admin folder | /account.cfm: Possible admin folder | /admin/account.cfm: Possible admin folder | /admin/index.cfm: Possible admin folder | /admin/login.cfm: Possible admin folder | /admin/admin.cfm: Possible admin folder | /admin.cfm: Possible admin folder | /admin/admin_login.cfm: Possible admin folder | /admin_login.cfm: Possible admin folder | /adminpanel.cfm: Possible admin folder | /admin/controlpanel.cfm: Possible admin folder | /admincontrol.cfm: Possible admin folder | /panel-administracion/login.cfm: Possible admin folder | /admin/cp.cfm: Possible admin folder | /pages/admin/admin-login.cfm: Possible admin folder | /admincp/index.cfm: Possible admin folder | /admincp/login.cfm: Possible admin folder | /admin_area/admin.cfm: Possible admin folder | /admin_area/login.cfm: Possible admin folder | /moderator/login.cfm: Possible admin folder | /administrator/login.cfm: Possible admin folder | /moderator.cfm: Possible admin folder | /modelsearch/index.cfm: Possible admin folder | /panel-administracion/admin.cfm: Possible admin folder | /adm/admloginuser.cfm: Possible admin folder | /adm.cfm: Possible admin folder | /adm_auth.cfm: Possible admin folder | /administratorlogin.cfm: Possible admin folder | /webadmin.cfm: Possible admin folder | /webadmin/index.cfm: Possible admin folder | /modelsearch/login.cfm: Possible admin folder | /login.cfm: Possible admin folder | /administrator.cfm: Possible admin folder | /administrator/account.cfm: Possible admin folder | /adminLogin.cfm: Possible admin folder | /siteadmin/login.cfm: Possible admin folder | /admin2/index.cfm: Possible admin folder | /adm/index.cfm: Possible admin folder | /admin_area/index.cfm: Possible admin folder | /bb-admin/index.cfm: Possible admin folder | /bb-admin/login.cfm: Possible admin folder | /bb-admin/admin.cfm: Possible admin folder | /siteadmin/index.cfm: Possible admin folder | /memberadmin.cfm: Possible admin folder | /admin2/login.cfm: Possible admin folder | /admloginuser.cfm: Possible admin folder | /admincontrol/login.cfm: Possible admin folder | /administrator/index.cfm: Possible admin folder | /modelsearch/admin.cfm: Possible admin folder | /panel-administracion/index.cfm: Possible admin folder | /adminarea/login.cfm: Possible admin folder | /adminarea/admin.cfm: Possible admin folder | /adminarea/index.cfm: Possible admin folder | /admin/adminLogin.cfm: Possible admin folder | /webadmin/login.cfm: Possible admin folder | /webadmin/admin.cfm: Possible admin folder | /user.cfm: Possible admin folder | /controlpanel.cfm: Possible admin folder | /moderator/admin.cfm: Possible admin folder | /cp.cfm: Possible admin folder | /admin-login.cfm: Possible admin folder | /admin/admin-login.cfm: Possible admin folder | /admin/home.cfm: Possible admin folder | /adm1n/: Possible admin folder | /4dm1n/: Possible admin folder | /account.asp: Possible admin folder | /admin/account.asp: Possible admin folder | /admin/index.asp: Possible admin folder | /admin/login.asp: Possible admin folder | /admin/admin.asp: Possible admin folder | /admin_area/admin.asp: Possible admin folder | /admin_area/login.asp: Possible admin folder | /admin_area/index.asp: Possible admin folder | /bb-admin/index.asp: Possible admin folder | /bb-admin/login.asp: Possible admin folder | /bb-admin/admin.asp: Possible admin folder | /admin/home.asp: Possible admin folder | /admin/controlpanel.asp: Possible admin folder | /admin.asp: Possible admin folder | /pages/admin/admin-login.asp: Possible admin folder | /admin/admin-login.asp: Possible admin folder | /admin-login.asp: Possible admin folder | /admin/cp.asp: Possible admin folder | /cp.asp: Possible admin folder | /administrator/account.asp: Possible admin folder | /administrator.asp: Possible admin folder | /login.asp: Possible admin folder | /modelsearch/login.asp: Possible admin folder | /moderator.asp: Possible admin folder | /moderator/login.asp: Possible admin folder | /administrator/login.asp: Possible admin folder | /moderator/admin.asp: Possible admin folder | /controlpanel.asp: Possible admin folder | /user.asp: Possible admin folder | /admincp/login.asp: Possible admin folder | /admincontrol.asp: Possible admin folder | /adminpanel.asp: Possible admin folder | /webadmin.asp: Possible admin folder | /webadmin/index.asp: Possible admin folder | /webadmin/admin.asp: Possible admin folder | /webadmin/login.asp: Possible admin folder | /admin/admin_login.asp: Possible admin folder | /admin_login.asp: Possible admin folder | /panel-administracion/login.asp: Possible admin folder | /adminLogin.asp: Possible admin folder | /admin/adminLogin.asp: Possible admin folder | /home.asp: Possible admin folder | /adminarea/index.asp: Possible admin folder | /adminarea/admin.asp: Possible admin folder | /adminarea/login.asp: Possible admin folder | /panel-administracion/index.asp: Possible admin folder | /panel-administracion/admin.asp: Possible admin folder | /modelsearch/index.asp: Possible admin folder | /modelsearch/admin.asp: Possible admin folder | /administrator/index.asp: Possible admin folder | /admincontrol/login.asp: Possible admin folder | /adm/admloginuser.asp: Possible admin folder | /admloginuser.asp: Possible admin folder | /admin2.asp: Possible admin folder | /admin2/login.asp: Possible admin folder | /admin2/index.asp: Possible admin folder | /adm/index.asp: Possible admin folder | /adm.asp: Possible admin folder | /adm_auth.asp: Possible admin folder | /memberadmin.asp: Possible admin folder | /administratorlogin.asp: Possible admin folder | /siteadmin/login.asp: Possible admin folder | /siteadmin/index.asp: Possible admin folder | /account.aspx: Possible admin folder | /admin/account.aspx: Possible admin folder | /admin/index.aspx: Possible admin folder | /admin/login.aspx: Possible admin folder | /admin/admin.aspx: Possible admin folder | /admin_area/admin.aspx: Possible admin folder | /admin_area/login.aspx: Possible admin folder | /admin_area/index.aspx: Possible admin folder | /bb-admin/index.aspx: Possible admin folder | /bb-admin/login.aspx: Possible admin folder | /bb-admin/admin.aspx: Possible admin folder | /admin/home.aspx: Possible admin folder | /admin/controlpanel.aspx: Possible admin folder | /admin.aspx: Possible admin folder | /pages/admin/admin-login.aspx: Possible admin folder | /admin/admin-login.aspx: Possible admin folder | /admin-login.aspx: Possible admin folder | /admin/cp.aspx: Possible admin folder | /cp.aspx: Possible admin folder | /administrator/account.aspx: Possible admin folder | /administrator.aspx: Possible admin folder | /login.aspx: Possible admin folder | /modelsearch/login.aspx: Possible admin folder | /moderator.aspx: Possible admin folder | /moderator/login.aspx: Possible admin folder | /administrator/login.aspx: Possible admin folder | /moderator/admin.aspx: Possible admin folder | /controlpanel.aspx: Possible admin folder | /user.aspx: Possible admin folder | /admincp/index.aspx: Possible admin folder | /admincp/login.aspx: Possible admin folder | /admincontrol.aspx: Possible admin folder | /adminpanel.aspx: Possible admin folder | /webadmin.aspx: Possible admin folder | /webadmin/index.aspx: Possible admin folder | /webadmin/admin.aspx: Possible admin folder | /webadmin/login.aspx: Possible admin folder | /admin/admin_login.aspx: Possible admin folder | /admin_login.aspx: Possible admin folder | /panel-administracion/login.aspx: Possible admin folder | /adminLogin.aspx: Possible admin folder | /admin/adminLogin.aspx: Possible admin folder | /home.aspx: Possible admin folder | /adminarea/index.aspx: Possible admin folder | /adminarea/admin.aspx: Possible admin folder | /adminarea/login.aspx: Possible admin folder | /panel-administracion/index.aspx: Possible admin folder | /panel-administracion/admin.aspx: Possible admin folder | /modelsearch/index.aspx: Possible admin folder | /modelsearch/admin.aspx: Possible admin folder | /administrator/index.aspx: Possible admin folder | /admincontrol/login.aspx: Possible admin folder | /adm/admloginuser.aspx: Possible admin folder | /admloginuser.aspx: Possible admin folder | /admin2.aspx: Possible admin folder | /admin2/login.aspx: Possible admin folder | /admin2/index.aspx: Possible admin folder | /adm/index.aspx: Possible admin folder | /adm.aspx: Possible admin folder | /adm_auth.aspx: Possible admin folder | /memberadmin.aspx: Possible admin folder | /administratorlogin.aspx: Possible admin folder | /siteadmin/login.aspx: Possible admin folder | /siteadmin/index.aspx: Possible admin folder | /account.jsp: Possible admin folder | /admin/index.jsp: Possible admin folder | /admin/login.jsp: Possible admin folder | /admin/admin.jsp: Possible admin folder | /admin_area/admin.jsp: Possible admin folder | /admin_area/login.jsp: Possible admin folder | /admin_area/index.jsp: Possible admin folder | /bb-admin/index.jsp: Possible admin folder | /bb-admin/login.jsp: Possible admin folder | /bb-admin/admin.jsp: Possible admin folder | /admin/home.jsp: Possible admin folder | /admin/controlpanel.jsp: Possible admin folder | /admin.jsp: Possible admin folder | /pages/admin/admin-login.jsp: Possible admin folder | /admin/admin-login.jsp: Possible admin folder | /admin-login.jsp: Possible admin folder | /admin/cp.jsp: Possible admin folder | /cp.jsp: Possible admin folder | /administrator/account.jsp: Possible admin folder | /administrator.jsp: Possible admin folder | /login.jsp: Possible admin folder | /modelsearch/login.jsp: Possible admin folder | /moderator.jsp: Possible admin folder | /moderator/login.jsp: Possible admin folder | /administrator/login.jsp: Possible admin folder | /moderator/admin.jsp: Possible admin folder | /controlpanel.jsp: Possible admin folder | /user.jsp: Possible admin folder | /admincp/index.jsp: Possible admin folder | /admincp/login.jsp: Possible admin folder | /admincontrol.jsp: Possible admin folder | /admin/account.jsp: Possible admin folder | /adminpanel.jsp: Possible admin folder | /webadmin.jsp: Possible admin folder | /webadmin/index.jsp: Possible admin folder | /webadmin/admin.jsp: Possible admin folder | /webadmin/login.jsp: Possible admin folder | /admin/admin_login.jsp: Possible admin folder | /admin_login.jsp: Possible admin folder | /panel-administracion/login.jsp: Possible admin folder | /adminLogin.jsp: Possible admin folder | /admin/adminLogin.jsp: Possible admin folder | /home.jsp: Possible admin folder | /adminarea/index.jsp: Possible admin folder | /adminarea/admin.jsp: Possible admin folder | /adminarea/login.jsp: Possible admin folder | /panel-administracion/index.jsp: Possible admin folder | /panel-administracion/admin.jsp: Possible admin folder | /modelsearch/index.jsp: Possible admin folder | /modelsearch/admin.jsp: Possible admin folder | /administrator/index.jsp: Possible admin folder | /admincontrol/login.jsp: Possible admin folder | /adm/admloginuser.jsp: Possible admin folder | /admloginuser.jsp: Possible admin folder | /admin2.jsp: Possible admin folder | /admin2/login.jsp: Possible admin folder | /admin2/index.jsp: Possible admin folder | /adm/index.jsp: Possible admin folder | /adm.jsp: Possible admin folder | /adm_auth.jsp: Possible admin folder | /memberadmin.jsp: Possible admin folder | /administratorlogin.jsp: Possible admin folder | /siteadmin/login.jsp: Possible admin folder | /siteadmin/index.jsp: Possible admin folder | /admin1.php: Possible admin folder | /administr8.asp: Possible admin folder | /administr8.php: Possible admin folder | /administr8.jsp: Possible admin folder | /administr8.aspx: Possible admin folder | /administr8.cfm: Possible admin folder | /administr8/: Possible admin folder | /administer/: Possible admin folder | /administracao.php: Possible admin folder | /administracao.asp: Possible admin folder | /administracao.aspx: Possible admin folder | /administracao.cfm: Possible admin folder | /administracao.jsp: Possible admin folder | /administracion.php: Possible admin folder | /administracion.asp: Possible admin folder | /administracion.aspx: Possible admin folder | /administracion.jsp: Possible admin folder | /administracion.cfm: Possible admin folder | /administrators/: Possible admin folder | /adminpro/: Possible admin folder | /admins/: Possible admin folder | /admins.cfm: Possible admin folder | /admins.php: Possible admin folder | /admins.jsp: Possible admin folder | /admins.asp: Possible admin folder | /admins.aspx: Possible admin folder | /maintenance/: Possible admin folder | /Lotus_Domino_Admin/: Possible admin folder | /hpwebjetadmin/: Possible admin folder | /_admin/: Possible admin folder | /_administrator/: Possible admin folder | /_administrador/: Possible admin folder | /_admins/: Possible admin folder | /_administrators/: Possible admin folder | /_administradores/: Possible admin folder | /_administracion/: Possible admin folder | /_4dm1n/: Possible admin folder | /_adm1n/: Possible admin folder | /_Admin/: Possible admin folder | /system_administration/: Possible admin folder | /system-administration/: Possible admin folder | /system-admin/: Possible admin folder | /system-admins/: Possible admin folder | /system-administrators/: Possible admin folder | /administracion-sistema/: Possible admin folder | /Administracion/: Possible admin folder | /Admin/: Possible admin folder | /Administrator/: Possible admin folder | /Manager/: Possible admin folder | /Adm/: Possible admin folder | /systemadmin/: Possible admin folder | /AdminLogin.asp: Possible admin folder | /AdminLogin.php: Possible admin folder | /AdminLogin.jsp: Possible admin folder | /AdminLogin.aspx: Possible admin folder | /AdminLogin.cfm: Possible admin folder | /admin108/: Possible admin folder | /pec_admin/: Possible admin folder | /system/admin/: Possible admin folder | /plog-admin/: Possible admin folder | /ESAdmin/: Possible admin folder | /axis2-admin/: Possible admin folder | /_sys/: Possible admin folder | /admin_cp.asp: Possible admin folder | /sitecore/admin/: Possible admin folder | /sitecore/login/admin/: Possible admin folder | /backup/: Possible backup | /backup: Possible backup | /backup.sql: Possible backup | /backup.sql.gz: Possible backup | /backup.sql.bz2: Possible backup | /backup.zip: Possible backup | /backups/: Possible backup | /bak/: Possible backup | /back/: Possible backup | /cache/backup/: Possible backup | /admin/backup/: Possible backup | /dbbackup.txt: Possible backup | /b.sql: Possible database backup | /db.sql: Possible database backup | /ddb.sql: Possible database backup | /users.sql: Possible database backup | /database.sql: Possible database backup | /mysql.sql: Possible database backup | /dump.sql: Possible database backup | /respaldo.sql: Possible database backup | /data.sql: Possible database backup | /old.sql: Possible database backup | /usuarios.sql: Possible database backup | /bdb.sql: Possible database backup | /1.sql: Possible database backup | /admin/download/backup.sql: Possible database backup | /clientaccesspolicy.xml: Microsoft Silverlight crossdomain policy | /atom/: RSS or Atom feed | /atom.aspx: RSS or Atom feed | /atom.php: RSS or Atom feed | /atom.xml: RSS or Atom feed | /atom.jsp: RSS or Atom feed | /rss/: RSS or Atom feed | /rss.aspx: RSS or Atom feed | /rss.php: RSS or Atom feed | /rss.xml: RSS or Atom feed | /rss.jsp: RSS or Atom feed | /etc/passwd: Webroot might be in root folder | /boot.ini: Webroot might be in root folder | /example/: Sample scripts | /examples/: Sample scripts | /iissamples/: Sample scripts | /j2eeexamples/: Sample scripts | /j2eeexamplesjsp/: Sample scripts | /sample/: Sample scripts | /ncsample/: Sample scripts | /fpsample/: Sample scripts | /cmsample/: Sample scripts | /samples/: Sample scripts | /mono/1.1/index.aspx: Sample scripts | /login/: Login page | /login.htm: Login page | /login.jsp: Login page | /test.asp: Test page | /test.class: Test page | /test/: Test page | /test.htm: Test page | /test.html: Test page | /test.php: Test page | /test.txt: Test page | /webmail/: Mail folder | /mail/: Mail folder | /log/: Logs | /log.htm: Logs | /log.php: Logs | /log.asp: Logs | /log.aspx: Logs | /log.jsp: Logs | /logs/: Logs | /logs.htm: Logs | /logs.php: Logs | /logs.asp: Logs | /logs.aspx: Logs | /logs.jsp: Logs | /wwwlog/: Logs | /wwwlogs/: Logs | /mail_log_files/: Logs | /images/rails.png: Ruby on Rails | /mono/: Mono | /robots.txt: Robots file | /crossdomain.xml: Adobe Flash crossdomain policy | /css/cake.generic.css: CakePHP application | /img/cake.icon.gif: CakePHP application | /img/cake.icon.png: CakePHP application | /js/vendors.php: CakePHP application | /cgi-bin/ffileman.cgi?: Ffileman Web File Manager | /fshow.php: Horizon Web App | /admin/upload.php: Admin File Upload | /upload_multiple_js.php: NAS Uploader | /uploadtester.asp: Free ASP Upload Shell | /info.php: Possible information file | /phpinfo.php: Possible information file | /kusabax/manage_page.php: Kusabax Image Board | /plus/lurking.php: phpMyChat Plus | /adm/barra/assetmanager/assetmanager.php: 360 Web Manager | /eyeos/: Possible eyeOS installation | /NETWARE.HTM: Planet FPS-1101 | /setup.cgi: Linksys Cisco Wag120n or similar | /debug.cgi: Linksys WRT54G | /ehcp/?op=applyforftpaccount: Easy Hosting Control Panel | /ehcp/?op=applyforaccount: Easy Hosting Control Panel | /ehcp/?op=applyfordomainaccount: Easy Hosting Control Panel | /vhosts/ehcp/?op=applyforftpaccount: Easy Hosting Control Panel | /vhosts/ehcp/?op=applyforaccount: Easy Hosting Control Panel | /vhosts/ehcp/?op=applyfordomainaccount: Easy Hosting Control Panel | /tools_admin.cgi?: D-Link WBR-1310 | /appServer/jvmReport.jsf?instanceName=server&pageTitle=JVM%20Report: Oracle GlashFish Server Information | /common/appServer/jvmReport.jsf?pageTitle=JVM%20Report: Oracle GlashFish Server Information | /common/appServer/jvmReport.jsf?reportType=summary&instanceName=server: Oracle GlashFish Server Information | /console/login/loginForm.jsp: Oracle WebLogic Server Administration Console | /browserId/wizardForm.jhtml: Cisco Collaboration Server | /webline/html/forms/callback.jhtml: Cisco Collaboration Server | /webline/html/forms/callbackICM.jhtml: Cisco Collaboration Server | /webline/html/agent/AgentFrame.jhtml: Cisco Collaboration Server | /webline/html/agent/default/badlogin.jhtml: Cisco Collaboration Server | /callme/callForm.jhtml: Cisco Collaboration Server | /webline/html/multichatui/nowDefunctWindow.jhtml: Cisco Collaboration Server | /browserId/wizard.jhtml: Cisco Collaboration Server | /admin/CiscoAdmin.jhtml: Cisco Collaboration Server | /msccallme/mscCallForm.jhtml: Cisco Collaboration Server | /webline/html/admin/wcs/LoginPage.jhtml: Cisco Collaboration Server | /restoreinfo.cgi: Sagem router | /confirminvite.php: phpMyBitTorrent | /sourcebans/: SourceBans - Steam server application | /swfupload/index.php: SWFUpload | /mymarket/shopping/index.php: MyMarket | /myshop_start.php: FozzCom shopping | /piranha/secure/passwd.php3: RedHat Piranha Virtual Server | /cgi-bin/ck/mimencode: ContentKeeper Web Appliance | /cgi-bin/masterCGI?: Alcatel-Lucent OmniPCX Enterprise | /tiny_mce/plugins/filemanager/: Tiny MCE File Upload | /upload/scp/ajax.php: osTicket / AJAX File Upload | /cgi-mod/view_help.cgi: Barracuda Networks Spam & Virus Firewall | /cgi-mod/index.cgi: Barracuda Web Application Firewall | /cgi-mod/smtp_test.cgi: Barracuda IM Firewall | /TopToolArea.html: Alteon OS BBI (Nortell) | /switchSystem.html: Alteon OS BBI (Nortell) | /intruvert/jsp/module/Login.jsp: McAfee Network Security Manager | /ajaxfilemanager/: AJAX File Manager | /upload/data/settings.cdb: CF Image Hosting DB | /fm.php: Simple File Manager | /nagios3/cgi-bin/statuswml.cgi: Nagios3 | /nagios3/: Nagios3 | /test/logon.html: Jetty | /cal_cat.php: Calendarix | /calendar/cal_cat.php: Calendarix | /cal/cal_cat.php: Calendarix | /private/sdc.tgz: IBM Bladecenter Management Logs | /cacti/: Cacti Web Monitoring | /cgi-bin/awstats.pl: AWStats | /wiki/rankings.php: Bit Weaver | /reqdetails.php: BtiTracker | /shared/help.php: OpenBiblio/WebBiblio Subject Gateway System | /seti.php: PHP SETI@home | /imc/: 3Com Intelligent Management Center | /imcws/: 3Com Intelligent Management Center | /partymgr/: Apache OFBiz | /Base/upload.php: MassMirror Uploader | /Base/example_1.php: MassMirror Uploader | /YUI-upload/html: YUI Images / File Upload | /tools/filemanager/skins/mobile/admin1.template.php: ispCP Omega | /Uploadify/: Uploadify | /syssite/: ShopEx | /updown.php: PHP Uploader Downloader | /modules/docmanager/doctypetemplates/myuploadedfile: Achievo | /ReqWebHelp/advanced/workingSet.jsp: IBM Rational RequisitePro/ReqWebHelp | /dhost/: Novell eDirectory | /engine/api/api.class.php: DatalifeEngine | /jsft_resource.jsf: JSFTemplating/Mojarra Scales/GlassFish Application Server | /scales_static_resource.jsf: JSFTemplating/Mojarra Scales/GlassFish Application Server | /setup/password_required.html: 2WIRE GATEWAY | /zp-core/: Zen Photo | /amember/: aMember | /.hgignore: Revision control ignore file | /.gitignore: Revision control ignore file | /.bzrignore: Revision control ignore file | /S7Web.css: SCADA Siemens PCS7 | /Portal0000.htm: SCADA Siemens PCS7 | /arcsight/: Arcsight | /arcsight/images/logo-login-arcsight.gif: Arcsight | /arcsight/images/navbar-icon-logout-on.gif: Arcsight | /images/logo-arcsight.gif: Arcsight | /logger/monitor.ftl: Arcsight | /beef/: BeEF Browser Exploitation Framework | /BEEF/: BeEF Browser Exploitation Framework | /beef/images/beef.gif: BeEF Browser Exploitation Framework | /gfx/form_top_left_corner.gif: Secunia NSI | /gfx/logout_24.png: Secunia NSI | /gfx/new_logo.gif: Secunia NSI | /javascript/sorttable.js: Secunia NSI | /images/btn_help_nml.gif: IBM Proventia | /images/hdr_icon_homeG.gif: IBM Proventia | /spControl.php: IBM Proventia | /images/isslogo.gif: IBM Proventia | /deploymentmanager/: IBM Proventia | /i18n/EN/css/foundstone.css: Foundstone | /i18n/EN/images/external_nav_square.gif: Foundstone | /officescan/console/html/cgi/cgiChkMasterPwd.exe: Trend Micro OfficeScan Server | /officescan/console/html/ClientInstall/officescannt.htm: Trend Micro OfficeScan Server | /officescan/console/html/images/icon_refresh.gif: Trend Micro OfficeScan Server | /picts/BC_bwlogorev.gif: BlueCoat Reporter | /picts/menu_leaf.gif: BlueCoat Reporter | /theme/images/en/login1.gif: Fortinet VPN/Firewall | /NessusClient.swf: Nessus | /dotDefender/: dotDefender Web Application Firewall | /actuator/: Spring Boot Actuator endpoint | /auditevents/: Spring Boot Actuator endpoint | /autoconfig/: Spring Boot Actuator endpoint | /beans/: Spring Boot Actuator endpoint | /configprops/: Spring Boot Actuator endpoint | /env/: Spring Boot Actuator endpoint | /flyway/: Spring Boot Actuator endpoint | /health/: Spring Boot Actuator endpoint | /healthcheck/: Spring Boot Actuator endpoint | /healthchecks/: Spring Boot Actuator endpoint | /loggers/: Spring Boot Actuator endpoint | /liquibase/: Spring Boot Actuator endpoint | /metrics/: Spring Boot Actuator endpoint | /mappings/: Spring Boot Actuator endpoint | /trace/: Spring Boot Actuator endpoint | /heapdump/: Spring MVC Endpoint | /jolokia/: Spring MVC Endpoint | /vmware/: VMWare | /vmware/imx/vmware_boxes-16x16.png: VMWare | /ui/: VMWare | /ui/imx/vmwareLogo-16x16.png: VMWare | /ui/imx/vmwarePaperBagLogo-16x16.png: VMWare | /ui/vManage.do: VMWare | /client/VMware-viclient.exe: VMWare | /en/welcomeRes.js: VMWare | /citrix/: Citrix | /sdk/../../../../../../../etc/vmware/hostd/vmInventory.xml: Possible path traversal in VMWare (CVE-2009-3733) | /sdk/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/etc/vmware/hostd/vmInventory.xml: Possible path traversal in VMWare (CVE-2009-3733) | /../../../../../../../../../../etc/passwd: Possible path traversal in URI |_ /../../../../../../../../../../boot.ini: Possible path traversal in URI |_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages. |_http-mobileversion-checker: No mobile version detected. Read data files from: /usr/share/nmap Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . # Nmap done at Sun Apr 5 07:55:30 2026 -- 1 IP address (1 host up) scanned in 1006.14 seconds