Found
Duration
Date
IP
- Nikto v2.5.0 --------------------------------------------------------------------------- + Multiple IPs found: 172.67.156.87, 104.21.89.41, 2606:4700:3033::ac43:9c57, 2606:4700:3037::6815:5929 + Target IP: 172.67.156.87 + Target Hostname: hack-yourself-first.com + Target Port: 80 + Start Time: 2024-09-15 11:57:25 (GMT-4) --------------------------------------------------------------------------- + Server: cloudflare + /: Cookie VisitStart created without the httponly flag. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies + /: Retrieved x-aspnet-version header: 4.0.30319. + /: Retrieved x-powered-by header: ASP.NET. + /: An alt-svc header was found which is advertising HTTP/3. The endpoint is: ':443'. Nikto cannot test HTTP/3 over QUIC. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/alt-svc + /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/ + /robots.txt: Entry '/secret/admin/' is returned a non-forbidden or redirect HTTP code (200). See: https://portswigger.net/kb/issues/00600600_robots-txt-file + /robots.txt: Entry '/api/admin/users/' is returned a non-forbidden or redirect HTTP code (200). See: https://portswigger.net/kb/issues/00600600_robots-txt-file + /robots.txt: contains 4 entries which should be manually viewed. See: https://developer.mozilla.org/en-US/docs/Glossary/Robots.txt + /database.zip: Potentially interesting backup/cert file found. . See: https://cwe.mitre.org/data/definitions/530.html + /backup.zip: Potentially interesting backup/cert file found. . See: https://cwe.mitre.org/data/definitions/530.html + /: Web Server returns a valid response with junk HTTP methods which may cause false positives. + Scan terminated: 0 error(s) and 11 item(s) reported on remote host + End Time: 2024-09-15 11:58:26 (GMT-4) (61 seconds) --------------------------------------------------------------------------- + 1 host(s) tested