- Nikto v2.5.0 --------------------------------------------------------------------------- + Target IP: 203.162.10.97 + Target Hostname: lms.ptit.edu.vn + Target Port: 443 --------------------------------------------------------------------------- + SSL Info: Subject: /CN=*.ptit.edu.vn Altnames: *.ptit.edu.vn, ptit.edu.vn Ciphers: TLS_AES_256_GCM_SHA384 Issuer: /C=BE/O=GlobalSign nv-sa/CN=AlphaSSL CA - SHA256 - G4 + Start Time: 2024-04-24 04:34:04 (GMT-4) --------------------------------------------------------------------------- + Server: nginx + /: Cookie frontend_lang created without the secure flag. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies + /: Cookie frontend_lang created without the httponly flag. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies + /: Cookie session_id created without the secure flag. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies + /: Uncommon header 'front-end-https' found, with contents: on. + /: The site uses TLS and the Strict-Transport-Security HTTP header is not defined. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security + /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/ + Scan terminated: 0 error(s) and 6 item(s) reported on remote host + End Time: 2024-04-24 04:35:06 (GMT-4) (62 seconds) --------------------------------------------------------------------------- + 1 host(s) tested