update: https://cassiopee.fabnum.fr/

qblanc · May 1, 2022 · d1a1e7f · d1a1e7f
1 parent 8f741b8
commit d1a1e7f
Show file tree

Hide file tree

Showing 15 changed files with 1,302 additions and 1,083 deletions.
diff --git a/results/aHR0cHM6Ly9jYXNzaW9wZWUuZmFibnVtLmZyLw==/http.json b/results/aHR0cHM6Ly9jYXNzaW9wZWUuZmFibnVtLmZyLw==/http.json
@@ -1 +1 @@
-{"url":"https://cassiopee.fabnum.fr/","algorithm_version":2,"end_time":"Sun, 24 Apr 2022 10:12:30 GMT","grade":"D+","hidden":false,"likelihood_indicator":"MEDIUM","response_headers":{"accept-ranges":"none","content-encoding":"gzip","content-type":"text/html; charset=utf-8","date":"Sun, 24 Apr 2022 10:12:28 GMT","etag":"\"fe6-3IUYA7pcDxZFJMNNa9n0H7ED/EA\"","keep-alive":"timeout=5","transfer-encoding":"chunked","vary":"Accept-Encoding","x-frame-options":"DENY"},"scan_id":26003637,"score":40,"start_time":"Sun, 24 Apr 2022 10:12:26 GMT","state":"FINISHED","status_code":200,"tests_failed":4,"tests_passed":8,"tests_quantity":12,"details":{"content-security-policy":{"expectation":"csp-implemented-with-no-unsafe","name":"content-security-policy","output":{"data":null,"http":false,"meta":false,"policy":null},"pass":false,"result":"csp-not-implemented","score_description":"Content Security Policy (CSP) header not implemented","score_modifier":-25},"contribute":{"expectation":"contribute-json-only-required-on-mozilla-properties","name":"contribute","output":{"data":null},"pass":true,"result":"contribute-json-only-required-on-mozilla-properties","score_description":"Contribute.json isn't required on websites that don't belong to Mozilla","score_modifier":0},"cookies":{"expectation":"cookies-secure-with-httponly-sessions","name":"cookies","output":{"data":null,"sameSite":null},"pass":true,"result":"cookies-not-found","score_description":"No cookies detected","score_modifier":0},"cross-origin-resource-sharing":{"expectation":"cross-origin-resource-sharing-not-implemented","name":"cross-origin-resource-sharing","output":{"data":{"acao":null,"clientaccesspolicy":null,"crossdomain":null}},"pass":true,"result":"cross-origin-resource-sharing-not-implemented","score_description":"Content is not visible via cross-origin resource sharing (CORS) files or headers","score_modifier":0},"public-key-pinning":{"expectation":"hpkp-not-implemented","name":"public-key-pinning","output":{"data":null,"includeSubDomains":false,"max-age":null,"numPins":null,"preloaded":false},"pass":true,"result":"hpkp-not-implemented","score_description":"HTTP Public Key Pinning (HPKP) header not implemented","score_modifier":0},"redirection":{"expectation":"redirection-to-https","name":"redirection","output":{"destination":"https://cassiopee.fabnum.fr:443/","redirects":true,"route":["http://cassiopee.fabnum.fr/","https://cassiopee.fabnum.fr:443/"],"status_code":200},"pass":true,"result":"redirection-to-https","score_description":"Initial redirection is to HTTPS on same host, final destination is HTTPS","score_modifier":0},"referrer-policy":{"expectation":"referrer-policy-private","name":"referrer-policy","output":{"data":null,"http":false,"meta":false},"pass":true,"result":"referrer-policy-not-implemented","score_description":"Referrer-Policy header not implemented","score_modifier":0},"strict-transport-security":{"expectation":"hsts-implemented-max-age-at-least-six-months","name":"strict-transport-security","output":{"data":null,"includeSubDomains":false,"max-age":null,"preload":false,"preloaded":false},"pass":false,"result":"hsts-not-implemented","score_description":"HTTP Strict Transport Security (HSTS) header not implemented","score_modifier":-20},"subresource-integrity":{"expectation":"sri-implemented-and-external-scripts-loaded-securely","name":"subresource-integrity","output":{"data":{}},"pass":true,"result":"sri-not-implemented-but-all-scripts-loaded-from-secure-origin","score_description":"Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin","score_modifier":0},"x-content-type-options":{"expectation":"x-content-type-options-nosniff","name":"x-content-type-options","output":{"data":null},"pass":false,"result":"x-content-type-options-not-implemented","score_description":"X-Content-Type-Options header not implemented","score_modifier":-5},"x-frame-options":{"expectation":"x-frame-options-sameorigin-or-deny","name":"x-frame-options","output":{"data":"DENY"},"pass":true,"result":"x-frame-options-sameorigin-or-deny","score_description":"X-Frame-Options (XFO) header set to SAMEORIGIN or DENY","score_modifier":0},"x-xss-protection":{"expectation":"x-xss-protection-1-mode-block","name":"x-xss-protection","output":{"data":null},"pass":false,"result":"x-xss-protection-not-implemented","score_description":"X-XSS-Protection header not implemented","score_modifier":-10}}}
+{"url":"https://cassiopee.fabnum.fr/","algorithm_version":2,"end_time":"Sun, 01 May 2022 10:24:56 GMT","grade":"D+","hidden":false,"likelihood_indicator":"MEDIUM","response_headers":{"accept-ranges":"none","content-encoding":"gzip","content-type":"text/html; charset=utf-8","date":"Sun, 01 May 2022 10:24:54 GMT","etag":"\"fe6-3IUYA7pcDxZFJMNNa9n0H7ED/EA\"","keep-alive":"timeout=5","transfer-encoding":"chunked","vary":"Accept-Encoding","x-frame-options":"DENY"},"scan_id":26149015,"score":40,"start_time":"Sun, 01 May 2022 10:24:52 GMT","state":"FINISHED","status_code":200,"tests_failed":4,"tests_passed":8,"tests_quantity":12,"details":{"content-security-policy":{"expectation":"csp-implemented-with-no-unsafe","name":"content-security-policy","output":{"data":null,"http":false,"meta":false,"policy":null},"pass":false,"result":"csp-not-implemented","score_description":"Content Security Policy (CSP) header not implemented","score_modifier":-25},"contribute":{"expectation":"contribute-json-only-required-on-mozilla-properties","name":"contribute","output":{"data":null},"pass":true,"result":"contribute-json-only-required-on-mozilla-properties","score_description":"Contribute.json isn't required on websites that don't belong to Mozilla","score_modifier":0},"cookies":{"expectation":"cookies-secure-with-httponly-sessions","name":"cookies","output":{"data":null,"sameSite":null},"pass":true,"result":"cookies-not-found","score_description":"No cookies detected","score_modifier":0},"cross-origin-resource-sharing":{"expectation":"cross-origin-resource-sharing-not-implemented","name":"cross-origin-resource-sharing","output":{"data":{"acao":null,"clientaccesspolicy":null,"crossdomain":null}},"pass":true,"result":"cross-origin-resource-sharing-not-implemented","score_description":"Content is not visible via cross-origin resource sharing (CORS) files or headers","score_modifier":0},"public-key-pinning":{"expectation":"hpkp-not-implemented","name":"public-key-pinning","output":{"data":null,"includeSubDomains":false,"max-age":null,"numPins":null,"preloaded":false},"pass":true,"result":"hpkp-not-implemented","score_description":"HTTP Public Key Pinning (HPKP) header not implemented","score_modifier":0},"redirection":{"expectation":"redirection-to-https","name":"redirection","output":{"destination":"https://cassiopee.fabnum.fr:443/","redirects":true,"route":["http://cassiopee.fabnum.fr/","https://cassiopee.fabnum.fr:443/"],"status_code":200},"pass":true,"result":"redirection-to-https","score_description":"Initial redirection is to HTTPS on same host, final destination is HTTPS","score_modifier":0},"referrer-policy":{"expectation":"referrer-policy-private","name":"referrer-policy","output":{"data":null,"http":false,"meta":false},"pass":true,"result":"referrer-policy-not-implemented","score_description":"Referrer-Policy header not implemented","score_modifier":0},"strict-transport-security":{"expectation":"hsts-implemented-max-age-at-least-six-months","name":"strict-transport-security","output":{"data":null,"includeSubDomains":false,"max-age":null,"preload":false,"preloaded":false},"pass":false,"result":"hsts-not-implemented","score_description":"HTTP Strict Transport Security (HSTS) header not implemented","score_modifier":-20},"subresource-integrity":{"expectation":"sri-implemented-and-external-scripts-loaded-securely","name":"subresource-integrity","output":{"data":{}},"pass":true,"result":"sri-not-implemented-but-all-scripts-loaded-from-secure-origin","score_description":"Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin","score_modifier":0},"x-content-type-options":{"expectation":"x-content-type-options-nosniff","name":"x-content-type-options","output":{"data":null},"pass":false,"result":"x-content-type-options-not-implemented","score_description":"X-Content-Type-Options header not implemented","score_modifier":-5},"x-frame-options":{"expectation":"x-frame-options-sameorigin-or-deny","name":"x-frame-options","output":{"data":"DENY"},"pass":true,"result":"x-frame-options-sameorigin-or-deny","score_description":"X-Frame-Options (XFO) header set to SAMEORIGIN or DENY","score_modifier":0},"x-xss-protection":{"expectation":"x-xss-protection-1-mode-block","name":"x-xss-protection","output":{"data":null},"pass":false,"result":"x-xss-protection-not-implemented","score_description":"X-XSS-Protection header not implemented","score_modifier":-10}}}
diff --git a/results/aHR0cHM6Ly9jYXNzaW9wZWUuZmFibnVtLmZyLw==/lhr.html b/results/aHR0cHM6Ly9jYXNzaW9wZWUuZmFibnVtLmZyLw==/lhr.html
diff --git a/results/aHR0cHM6Ly9jYXNzaW9wZWUuZmFibnVtLmZyLw==/lhr.json b/results/aHR0cHM6Ly9jYXNzaW9wZWUuZmFibnVtLmZyLw==/lhr.json
diff --git a/results/aHR0cHM6Ly9jYXNzaW9wZWUuZmFibnVtLmZyLw==/nmapvuln.gnmap b/results/aHR0cHM6Ly9jYXNzaW9wZWUuZmFibnVtLmZyLw==/nmapvuln.gnmap
@@ -1,4 +1,4 @@
-# Nmap 7.91 scan initiated Sun Apr 24 10:15:00 2022 as: nmap -sV --script vulners --script-args mincvss=5.0 -oA /data/nmapvuln cassiopee.fabnum.fr
+# Nmap 7.91 scan initiated Sun May  1 10:27:22 2022 as: nmap -sV --script vulners --script-args mincvss=5.0 -oA /data/nmapvuln cassiopee.fabnum.fr
 Host: 195.154.70.159 (195-154-70-159.lb.fr-par.scw.cloud)	Status: Up
 Host: 195.154.70.159 (195-154-70-159.lb.fr-par.scw.cloud)	Ports: 80/open/tcp//http///, 443/open/tcp//ssl|https///	Ignored State: closed (998)
-# Nmap done at Sun Apr 24 10:15:31 2022 -- 1 IP address (1 host up) scanned in 30.25 seconds
+# Nmap done at Sun May  1 10:27:52 2022 -- 1 IP address (1 host up) scanned in 30.71 seconds
diff --git a/results/aHR0cHM6Ly9jYXNzaW9wZWUuZmFibnVtLmZyLw==/nmapvuln.html b/results/aHR0cHM6Ly9jYXNzaW9wZWUuZmFibnVtLmZyLw==/nmapvuln.html
@@ -54,7 +54,7 @@
 <h1>Scan Report<br><small>Nmap 7.91</small>
 </h1>
 <pre style="white-space:pre-wrap; word-wrap:break-word;">nmap -sV --script vulners --script-args mincvss=5.0 -oA /data/nmapvuln cassiopee.fabnum.fr</pre>
-<p class="lead">Sun Apr 24 10:15:00 2022 – Sun Apr 24 10:15:31 2022<br>1 hosts scanned.
+<p class="lead">Sun May  1 10:27:22 2022 – Sun May  1 10:27:52 2022<br>1 hosts scanned.
               1 hosts up.
               0 hosts down.
             </p>
@@ -133,13 +133,13 @@ <h4>Ports</h4>
     &lt;/body&gt;&lt;/html&gt;
   FourOhFourRequest: 
     HTTP/1.0 404 Not Found
-    date: Sun, 24 Apr 2022 10:15:09 GMT
+    date: Sun, 01 May 2022 10:27:30 GMT
     content-length: 21
     content-type: text/plain; charset=utf-8
     default backend - 404
   GetRequest, HTTPOptions: 
     HTTP/1.0 404 Not Found
-    date: Sun, 24 Apr 2022 10:15:08 GMT
+    date: Sun, 01 May 2022 10:27:29 GMT
     content-length: 21
     content-type: text/plain; charset=utf-8
     default backend - 404
@@ -170,15 +170,9 @@ <h4>Ports</h4>
     &lt;html&gt;&lt;body&gt;&lt;h1&gt;400 Bad request&lt;/h1&gt;
     Your browser sent an invalid request.
     &lt;/body&gt;&lt;/html&gt;
-  FourOhFourRequest, HTTPOptions: 
+  FourOhFourRequest, GetRequest, HTTPOptions: 
     HTTP/1.0 404 Not Found
-    date: Sun, 24 Apr 2022 10:15:15 GMT
-    content-length: 21
-    content-type: text/plain; charset=utf-8
-    default backend - 404
-  GetRequest: 
-    HTTP/1.0 404 Not Found
-    date: Sun, 24 Apr 2022 10:15:14 GMT
+    date: Sun, 01 May 2022 10:27:36 GMT
     content-length: 21
     content-type: text/plain; charset=utf-8
     default backend - 404
Original file line number	Diff line number	Diff line change
		@@ -1 +1 @@
		{"url":"https://cassiopee.fabnum.fr/","algorithm_version":2,"end_time":"Sun, 24 Apr 2022 10:12:30 GMT","grade":"D+","hidden":false,"likelihood_indicator":"MEDIUM","response_headers":{"accept-ranges":"none","content-encoding":"gzip","content-type":"text/html; charset=utf-8","date":"Sun, 24 Apr 2022 10:12:28 GMT","etag":"\"fe6-3IUYA7pcDxZFJMNNa9n0H7ED/EA\"","keep-alive":"timeout=5","transfer-encoding":"chunked","vary":"Accept-Encoding","x-frame-options":"DENY"},"scan_id":26003637,"score":40,"start_time":"Sun, 24 Apr 2022 10:12:26 GMT","state":"FINISHED","status_code":200,"tests_failed":4,"tests_passed":8,"tests_quantity":12,"details":{"content-security-policy":{"expectation":"csp-implemented-with-no-unsafe","name":"content-security-policy","output":{"data":null,"http":false,"meta":false,"policy":null},"pass":false,"result":"csp-not-implemented","score_description":"Content Security Policy (CSP) header not implemented","score_modifier":-25},"contribute":{"expectation":"contribute-json-only-required-on-mozilla-properties","name":"contribute","output":{"data":null},"pass":true,"result":"contribute-json-only-required-on-mozilla-properties","score_description":"Contribute.json isn't required on websites that don't belong to Mozilla","score_modifier":0},"cookies":{"expectation":"cookies-secure-with-httponly-sessions","name":"cookies","output":{"data":null,"sameSite":null},"pass":true,"result":"cookies-not-found","score_description":"No cookies detected","score_modifier":0},"cross-origin-resource-sharing":{"expectation":"cross-origin-resource-sharing-not-implemented","name":"cross-origin-resource-sharing","output":{"data":{"acao":null,"clientaccesspolicy":null,"crossdomain":null}},"pass":true,"result":"cross-origin-resource-sharing-not-implemented","score_description":"Content is not visible via cross-origin resource sharing (CORS) files or headers","score_modifier":0},"public-key-pinning":{"expectation":"hpkp-not-implemented","name":"public-key-pinning","output":{"data":null,"includeSubDomains":false,"max-age":null,"numPins":null,"preloaded":false},"pass":true,"result":"hpkp-not-implemented","score_description":"HTTP Public Key Pinning (HPKP) header not implemented","score_modifier":0},"redirection":{"expectation":"redirection-to-https","name":"redirection","output":{"destination":"https://cassiopee.fabnum.fr:443/","redirects":true,"route":["http://cassiopee.fabnum.fr/","https://cassiopee.fabnum.fr:443/"],"status_code":200},"pass":true,"result":"redirection-to-https","score_description":"Initial redirection is to HTTPS on same host, final destination is HTTPS","score_modifier":0},"referrer-policy":{"expectation":"referrer-policy-private","name":"referrer-policy","output":{"data":null,"http":false,"meta":false},"pass":true,"result":"referrer-policy-not-implemented","score_description":"Referrer-Policy header not implemented","score_modifier":0},"strict-transport-security":{"expectation":"hsts-implemented-max-age-at-least-six-months","name":"strict-transport-security","output":{"data":null,"includeSubDomains":false,"max-age":null,"preload":false,"preloaded":false},"pass":false,"result":"hsts-not-implemented","score_description":"HTTP Strict Transport Security (HSTS) header not implemented","score_modifier":-20},"subresource-integrity":{"expectation":"sri-implemented-and-external-scripts-loaded-securely","name":"subresource-integrity","output":{"data":{}},"pass":true,"result":"sri-not-implemented-but-all-scripts-loaded-from-secure-origin","score_description":"Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin","score_modifier":0},"x-content-type-options":{"expectation":"x-content-type-options-nosniff","name":"x-content-type-options","output":{"data":null},"pass":false,"result":"x-content-type-options-not-implemented","score_description":"X-Content-Type-Options header not implemented","score_modifier":-5},"x-frame-options":{"expectation":"x-frame-options-sameorigin-or-deny","name":"x-frame-options","output":{"data":"DENY"},"pass":true,"result":"x-frame-options-sameorigin-or-deny","score_description":"X-Frame-Options (XFO) header set to SAMEORIGIN or DENY","score_modifier":0},"x-xss-protection":{"expectation":"x-xss-protection-1-mode-block","name":"x-xss-protection","output":{"data":null},"pass":false,"result":"x-xss-protection-not-implemented","score_description":"X-XSS-Protection header not implemented","score_modifier":-10}}}
		{"url":"https://cassiopee.fabnum.fr/","algorithm_version":2,"end_time":"Sun, 01 May 2022 10:24:56 GMT","grade":"D+","hidden":false,"likelihood_indicator":"MEDIUM","response_headers":{"accept-ranges":"none","content-encoding":"gzip","content-type":"text/html; charset=utf-8","date":"Sun, 01 May 2022 10:24:54 GMT","etag":"\"fe6-3IUYA7pcDxZFJMNNa9n0H7ED/EA\"","keep-alive":"timeout=5","transfer-encoding":"chunked","vary":"Accept-Encoding","x-frame-options":"DENY"},"scan_id":26149015,"score":40,"start_time":"Sun, 01 May 2022 10:24:52 GMT","state":"FINISHED","status_code":200,"tests_failed":4,"tests_passed":8,"tests_quantity":12,"details":{"content-security-policy":{"expectation":"csp-implemented-with-no-unsafe","name":"content-security-policy","output":{"data":null,"http":false,"meta":false,"policy":null},"pass":false,"result":"csp-not-implemented","score_description":"Content Security Policy (CSP) header not implemented","score_modifier":-25},"contribute":{"expectation":"contribute-json-only-required-on-mozilla-properties","name":"contribute","output":{"data":null},"pass":true,"result":"contribute-json-only-required-on-mozilla-properties","score_description":"Contribute.json isn't required on websites that don't belong to Mozilla","score_modifier":0},"cookies":{"expectation":"cookies-secure-with-httponly-sessions","name":"cookies","output":{"data":null,"sameSite":null},"pass":true,"result":"cookies-not-found","score_description":"No cookies detected","score_modifier":0},"cross-origin-resource-sharing":{"expectation":"cross-origin-resource-sharing-not-implemented","name":"cross-origin-resource-sharing","output":{"data":{"acao":null,"clientaccesspolicy":null,"crossdomain":null}},"pass":true,"result":"cross-origin-resource-sharing-not-implemented","score_description":"Content is not visible via cross-origin resource sharing (CORS) files or headers","score_modifier":0},"public-key-pinning":{"expectation":"hpkp-not-implemented","name":"public-key-pinning","output":{"data":null,"includeSubDomains":false,"max-age":null,"numPins":null,"preloaded":false},"pass":true,"result":"hpkp-not-implemented","score_description":"HTTP Public Key Pinning (HPKP) header not implemented","score_modifier":0},"redirection":{"expectation":"redirection-to-https","name":"redirection","output":{"destination":"https://cassiopee.fabnum.fr:443/","redirects":true,"route":["http://cassiopee.fabnum.fr/","https://cassiopee.fabnum.fr:443/"],"status_code":200},"pass":true,"result":"redirection-to-https","score_description":"Initial redirection is to HTTPS on same host, final destination is HTTPS","score_modifier":0},"referrer-policy":{"expectation":"referrer-policy-private","name":"referrer-policy","output":{"data":null,"http":false,"meta":false},"pass":true,"result":"referrer-policy-not-implemented","score_description":"Referrer-Policy header not implemented","score_modifier":0},"strict-transport-security":{"expectation":"hsts-implemented-max-age-at-least-six-months","name":"strict-transport-security","output":{"data":null,"includeSubDomains":false,"max-age":null,"preload":false,"preloaded":false},"pass":false,"result":"hsts-not-implemented","score_description":"HTTP Strict Transport Security (HSTS) header not implemented","score_modifier":-20},"subresource-integrity":{"expectation":"sri-implemented-and-external-scripts-loaded-securely","name":"subresource-integrity","output":{"data":{}},"pass":true,"result":"sri-not-implemented-but-all-scripts-loaded-from-secure-origin","score_description":"Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin","score_modifier":0},"x-content-type-options":{"expectation":"x-content-type-options-nosniff","name":"x-content-type-options","output":{"data":null},"pass":false,"result":"x-content-type-options-not-implemented","score_description":"X-Content-Type-Options header not implemented","score_modifier":-5},"x-frame-options":{"expectation":"x-frame-options-sameorigin-or-deny","name":"x-frame-options","output":{"data":"DENY"},"pass":true,"result":"x-frame-options-sameorigin-or-deny","score_description":"X-Frame-Options (XFO) header set to SAMEORIGIN or DENY","score_modifier":0},"x-xss-protection":{"expectation":"x-xss-protection-1-mode-block","name":"x-xss-protection","output":{"data":null},"pass":false,"result":"x-xss-protection-not-implemented","score_description":"X-XSS-Protection header not implemented","score_modifier":-10}}}