- Nikto v2.5.0 --------------------------------------------------------------------------- + Target IP: 217.160.0.108 + Target Hostname: sigmaes.co.uk + Target Port: 80 + Start Time: 2024-06-30 02:21:46 (GMT-4) --------------------------------------------------------------------------- + Server: Apache + /: Cookie zenid created without the httponly flag. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies + /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/ + /.3wfZefP4: The mod_speling module can reveal otherwise 'hidden' files in directories. + No CGI Directories found (use '-C all' to force check all possible dirs) + /index.asp: The mod_speling module can reveal otherwise 'hidden' files in directories. + /index.aspx: The mod_speling module can reveal otherwise 'hidden' files in directories. + : Server banner changed from 'Apache' to 'nginx'. + /index.html: The mod_speling module can reveal otherwise 'hidden' files in directories. + /index.htm: The mod_speling module can reveal otherwise 'hidden' files in directories. + /index.shtml: The mod_speling module can reveal otherwise 'hidden' files in directories. + /index.cfm: The mod_speling module can reveal otherwise 'hidden' files in directories. + /index.cgi: The mod_speling module can reveal otherwise 'hidden' files in directories. + /index.pl: The mod_speling module can reveal otherwise 'hidden' files in directories. + /index.do: The mod_speling module can reveal otherwise 'hidden' files in directories. + /index.jhtml: The mod_speling module can reveal otherwise 'hidden' files in directories. + /index.jsp: The mod_speling module can reveal otherwise 'hidden' files in directories. + /index.xml: The mod_speling module can reveal otherwise 'hidden' files in directories. + /index: Uncommon header 'tcn' found, with contents: list. + /index: Apache mod_negotiation is enabled with MultiViews, which allows attackers to easily brute force file names. The following alternatives for 'index' were found: index.php. See: http://www.wisec.it/sectou.php?id=4698ebdc59d15,https://exchange.xforce.ibmcloud.com/vulnerabilities/8275 + Scan terminated: 0 error(s) and 18 item(s) reported on remote host + End Time: 2024-06-30 02:22:47 (GMT-4) (61 seconds) --------------------------------------------------------------------------- + 1 host(s) tested