- Nikto --------------------------------------------------------------------------- + Target IP: 23.229.189.137 + Target Hostname: hidayricke.com + Target Port: 80 + Start Time: 2025-07-18 21:26:02 (GMT-7) --------------------------------------------------------------------------- + Server: Apache + /: Server may leak inodes via ETags, header found with file /, inode: 59044795, size: 95853, mtime: Wed Jun 18 14:32:26 2025. See: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1418 + /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/ + /hidayricke.com.zip: Potentially interesting backup/cert file found. . See: https://cwe.mitre.org/data/definitions/530.html + /: Retrieved x-powered-by header: PHP/5.4.45. + /: Cookie 56d2f330b35f04dea336f3b3cfd35f8b created without the httponly flag. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies + OPTIONS: Allowed HTTP Methods: GET, POST, OPTIONS, HEAD . + /webmail/blank.html: IlohaMail 0.8.10 contains an XSS vulnerability. Previous versions contain other non-descript vulnerabilities. + /securecontrolpanel/: Web Server Control Panel. + /webmail/: Web based mail package installed. + Scan terminated: 2 error(s) and 9 item(s) reported on remote host + End Time: 2025-07-18 21:27:18 (GMT-7) (76 seconds) --------------------------------------------------------------------------- + 1 host(s) tested