Scan report for "hack-yourself-first.com"

Membership level: Free member
Summary

Found

-

Duration

1min 1sec

Date

2024-09-15

IP

-

Report
Nikto scan (max 60 sec) (nikto -host hack-yourself-first.com -maxtime 60)
- Nikto 
---------------------------------------------------------------------------
+ Multiple IPs found: 172.67.156.87, 104.21.89.41, 2606:4700:3033::ac43:9c57, 2606:4700:3037::6815:5929
+ Target IP:          172.67.156.87
+ Target Hostname:    hack-yourself-first.com
+ Target Port:        80
+ Start Time:         2024-09-15 11:57:25 (GMT-4)
---------------------------------------------------------------------------
+ Server: cloudflare
+ /: Cookie VisitStart created without the httponly flag. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies
+ /: Retrieved x-aspnet-version header: 4.0.30319.
+ /: Retrieved x-powered-by header: ASP.NET.
+ /: An alt-svc header was found which is advertising HTTP/3. The endpoint is: ':443'. Nikto cannot test HTTP/3 over QUIC. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/alt-svc
+ /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/
+ /robots.txt: Entry '/secret/admin/' is returned a non-forbidden or redirect HTTP code (200). See: https://portswigger.net/kb/issues/00600600_robots-txt-file
+ /robots.txt: Entry '/api/admin/users/' is returned a non-forbidden or redirect HTTP code (200). See: https://portswigger.net/kb/issues/00600600_robots-txt-file
+ /robots.txt: contains 4 entries which should be manually viewed. See: https://developer.mozilla.org/en-US/docs/Glossary/Robots.txt
+ /database.zip: Potentially interesting backup/cert file found. . See: https://cwe.mitre.org/data/definitions/530.html
+ /backup.zip: Potentially interesting backup/cert file found. . See: https://cwe.mitre.org/data/definitions/530.html
+ /: Web Server returns a valid response with junk HTTP methods which may cause false positives.
+ Scan terminated: 0 error(s) and 11 item(s) reported on remote host
+ End Time:           2024-09-15 11:58:26 (GMT-4) (61 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested
Detailed report
Target
hack-yourself-first.com
Scan method
Nikto scan (max 60 sec)
Run command
nikto -host hack-yourself-first.com -maxtime 60
Duration
Quick report
Scan date
15 Sep 2024 11:58
Copy scan report
Download report
Remove scan result
$
Total scans
Check ports
API - Scan ID