147 lines
7.2 KiB
Plaintext
147 lines
7.2 KiB
Plaintext
# Nmap 7.99 scan initiated Tue Apr 14 03:27:37 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/gotify.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml gotify.lan.ddnsgeek.com
|
|
Nmap scan report for gotify.lan.ddnsgeek.com (167.179.167.166)
|
|
Host is up, received user-set (0.015s latency).
|
|
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
|
Scanned at 2026-04-14 03:27:43 UTC for 200s
|
|
|
|
PORT STATE SERVICE REASON VERSION
|
|
443/tcp open ssl/https syn-ack ttl 55
|
|
|_http-malware-host: Host appears to be clean
|
|
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
|
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
|
| http-security-headers:
|
|
| Strict_Transport_Security:
|
|
| HSTS not configured in HTTPS Server
|
|
| X_Content_Type_Options:
|
|
| Header: X-Content-Type-Options: nosniff
|
|
|_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
|
|
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
|
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
|
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
|
| ssl-cert: Subject: commonName=gotify.lan.ddnsgeek.com
|
|
| Subject Alternative Name: DNS:gotify.lan.ddnsgeek.com
|
|
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
|
|
| Public Key type: rsa
|
|
| Public Key bits: 4096
|
|
| Signature Algorithm: sha256WithRSAEncryption
|
|
| Not valid before: 2026-02-14T19:02:31
|
|
| Not valid after: 2026-05-15T19:02:30
|
|
| MD5: 0663 3538 85f4 573b 487c 09cb e7dd f8fc
|
|
| SHA-1: c524 c1ab 9e90 457e 0aa8 630f 6277 e73a eeb2 5078
|
|
| SHA-256: b69e 7113 332a b817 efd6 6485 19a7 ca69 eccc 1918 b1f5 1193 7883 4e0b 69f2 a4f8
|
|
| -----BEGIN CERTIFICATE-----
|
|
| MIIGCDCCBPCgAwIBAgISBWjxVFy9rGrar3/Ia3tZt0wJMA0GCSqGSIb3DQEBCwUA
|
|
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
|
|
| EwNSMTMwHhcNMjYwMjE0MTkwMjMxWhcNMjYwNTE1MTkwMjMwWjAiMSAwHgYDVQQD
|
|
| Exdnb3RpZnkubGFuLmRkbnNnZWVrLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIP
|
|
| ADCCAgoCggIBAJKWJGSSAoVrS6NqFLLjikQard2jHkoMhwLwosukVIZ70U+dxLdM
|
|
| k7PJb/DHLM1sj4Wf04jBBMF2tlD/A4/unLaX3No+bsznq6V6yYVA0QFWQZhKrhN3
|
|
| hsHLRbyuibfan2XQNMCWPtmWEe76xTP+i2STKFoZmz4oSRilOExy5RzxwWDei4qn
|
|
| 4dtrLSp/vHvaDTERd8eY7ssmOM39HkzZbZpHP0kg0AaejBUTK7jcjTTVQat/09sR
|
|
| TH41bajyXdqdQ5D8JWESKZTxtT579M8wGQOEfe68dnVRSH4XSw69MfuHpIXzhTl9
|
|
| pZOx2091QqOwN80Aj4rfHz182qCdwXEmnTT8V+nnJ6Zl566Ch5Z/SJG6Kw1ozoPk
|
|
| h68Nzmt1j60PxW4DYW1CH/Xg9TrV04gZreQ9/uMpPmwX4x9aqmKuiP4QttKwLN43
|
|
| 4F1p6D9/hBNHJvwnkTD7N+MxsnoRsOfGOLLIWaggEcwByEj2WctTbwWWBbnZNEgH
|
|
| m2aI782aWDCIk3/eKy8Ikh/Lvy0YwdCSXj8x9XNrii7cl2uUTvbN7Vk8NiVapowx
|
|
| PZ4O0mFPnOlZQ5NZTvRjSo19IQeNDYuzJIEgADHRTPqTvi+aLzs2oyeOuDWmfvyg
|
|
| 4GLXhxIzy6WQtVSFzAFp6g3ogJLIQ6poRiHTugWDDppj/sqMugBYwWMfAgMBAAGj
|
|
| ggIlMIICITAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYD
|
|
| VR0TAQH/BAIwADAdBgNVHQ4EFgQU6cGnXT7obSZnDAKEzKmtQ4U1CMgwHwYDVR0j
|
|
| BBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUHAQEEJzAlMCMGCCsG
|
|
| AQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAiBgNVHREEGzAZghdnb3Rp
|
|
| ZnkubGFuLmRkbnNnZWVrLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATAuBgNVHR8E
|
|
| JzAlMCOgIaAfhh1odHRwOi8vcjEzLmMubGVuY3Iub3JnLzEwLmNybDCCAQwGCisG
|
|
| AQQB1nkCBAIEgf0EgfoA+AB2AJaXZL9VWJet90OHaDcIQnfp8DrV9qTzNm5GpD8P
|
|
| yqnGAAABnF2+CggAAAQDAEcwRQIgXZAcyFu2NrRhVSoEKvpPZdQVjeXWsj+RkmPL
|
|
| v75RmQoCIQCHRZek8tNK2DlyM85HTCLV3UOI/N3PBC+FZKwNc8a9cgB+ABqLnWlK
|
|
| V5jImaDKiL30j8C0VmDMw2ANH3H0af/H0ayjAAABnF2+CywACAAABQBH+lCyBAMA
|
|
| RzBFAiAQHPX3dCEgtXOtKnunRRmiTCXrEXzZL+KHpU/4bnCEcQIhALLzF1xFYvJR
|
|
| y8MDKPHd6SXSi01LFkil8UNBu1x++cLCMA0GCSqGSIb3DQEBCwUAA4IBAQBzxqbU
|
|
| ANmKar7Hl1sDtpXXmYA7fqtT8QToH8hne93Edrhe4wa9aJzb/SJS5Jp9Dkuqb/WG
|
|
| ES0HMFD1MSvO37cpCsuKebYrsz8RT86iYFTrlUqvHsgUA7YukdZy7zi6LEXIi7xN
|
|
| 7ywov+BUO30KakhcG95fLYTqudoWlEEpOtiiSzvyGaNcNIX8FKh+SUgxGFlPO3Ep
|
|
| UQWefkONj9BkFwKu63UdmP3TXP4X8sDZXY7vA6qsoA1k2WOzDVGY3TFC3kArlkjD
|
|
| Lc3uWbMBAgMe6LIg0A45uMNzHVq6Jz6Cqxbq4zWCpTJG86mS74VI+Z4Vr9d+BzQr
|
|
| u7L76W6EfP8Aau/l
|
|
|_-----END CERTIFICATE-----
|
|
|_http-title: Site doesn't have a title (text/plain; charset=utf-8).
|
|
| ssl-enum-ciphers:
|
|
| TLSv1.2:
|
|
| ciphers:
|
|
| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A
|
|
| TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A
|
|
| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A
|
|
| TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
|
|
| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
|
|
| compressors:
|
|
| NULL
|
|
| cipher preference: client
|
|
| warnings:
|
|
| Key exchange (secp256r1) of lower strength than certificate key
|
|
| TLSv1.3:
|
|
| ciphers:
|
|
| TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A
|
|
| TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A
|
|
| TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
|
|
| cipher preference: server
|
|
|_ least strength: A
|
|
|_ssl-date: TLS randomness does not represent time
|
|
|_http-fetch: Please enter the complete path of the directory to save data in.
|
|
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
|
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
|
| http-vhosts:
|
|
|_128 names had status 404
|
|
|_http-date: Tue, 14 Apr 2026 03:28:15 GMT; 0s from local time.
|
|
| http-errors:
|
|
| Spidering limited to: maxpagecount=40; withinhost=gotify.lan.ddnsgeek.com
|
|
| Found the following error pages:
|
|
|
|
|
| Error Code: 404
|
|
|_ http://gotify.lan.ddnsgeek.com:443/
|
|
| http-useragent-tester:
|
|
| Status for browser useragent: 404
|
|
| Allowed User Agents:
|
|
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
|
|
| libwww
|
|
| lwp-trivial
|
|
| libcurl-agent/1.0
|
|
| PHP/
|
|
| Python-urllib/2.5
|
|
| GT::WWW
|
|
| Snoopy
|
|
| MFC_Tear_Sample
|
|
| HTTP::Lite
|
|
| PHPCrawl
|
|
| URI::Fetch
|
|
| Zend_Http_Client
|
|
| http client
|
|
| PECL::HTTP
|
|
| Wget/1.13.4 (linux-gnu)
|
|
|_ WWW-Mechanize/1.34
|
|
|_http-feed: Couldn't find any feeds.
|
|
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
|
|_http-comments-displayer: Couldn't find any comments.
|
|
|_http-mobileversion-checker: No mobile version detected.
|
|
| http-headers:
|
|
| Content-Type: text/plain; charset=utf-8
|
|
| X-Content-Type-Options: nosniff
|
|
| Date: Tue, 14 Apr 2026 03:28:30 GMT
|
|
| Content-Length: 19
|
|
| Connection: close
|
|
|
|
|
|_ (Request type: GET)
|
|
| http-sitemap-generator:
|
|
| Directory structure:
|
|
| Longest directory structure:
|
|
| Depth: 0
|
|
| Dir: /
|
|
| Total files found (by extension):
|
|
|_
|
|
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
|
|_http-chrono: Request times for /; avg: 793.49ms; min: 415.71ms; max: 1062.27ms
|
|
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
|
|
|
Read data files from: /usr/share/nmap
|
|
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
|
# Nmap done at Tue Apr 14 03:31:03 2026 -- 1 IP address (1 host up) scanned in 207.02 seconds
|