Session 6a7aeb01
Mozilla/5.00 (Nikto/2.5.0) (Evasions:None) (Test:Port Check) r1 · 127.0.x.x · 30 requests · 21 distinct pages · mode mirage
vuln_scanning T1595.002
Automated scanner probed for admin panels, sensitive files (.env, backups, git config), and API endpoints, then injected SQLi, path traversal, and XSS payloads against discovered endpoints.
Automated scanner probed for admin panels, sensitive files (.env, backups, git config), and API endpoints, then injected SQLi, path traversal, and XSS payloads against discovered endpoints.
| +time | Request | Status | Answered by | Model ms | Body sent by visitor |
|---|---|---|---|---|---|
| +0.0s | GET /robots.txt | 404 | offsurface | ||
| +0.1s | GET /sitemap.xml | 404 | offsurface | ||
| +0.2s | GET /admin | 403 | cache | ||
| +0.3s | GET /administrator | 404 | offsurface | ||
| +0.4s | GET /login | 200 | cache | ||
| +0.5s | GET /wp-login.php | 404 | offsurface | ||
| +0.6s | GET /phpmyadmin/ | 404 | offsurface | ||
| +0.8s | GET /.env | 200 | cache | ||
| +0.9s | GET /.git/config | 404 | offsurface | ||
| +1.0s | GET /backup.zip | 404 | offsurface | ||
| +1.1s | GET /config.php | 404 | offsurface | ||
| +1.2s | GET /server-status | 200 | cache | ||
| +1.9s | GET /api/v1/users | 404 | generated | 599 | |
| +2.0s | GET /api/v1/shipments | 200 | cache | ||
| +2.1s | GET /uploads/ | 404 | offsurface | ||
| +2.2s | GET /info.php | 404 | offsurface | ||
| +2.3s | GET /cgi-bin/ | 404 | offsurface | ||
| +2.4s | GET /console | 404 | offsurface | ||
| +2.6s | GET /db.sql | 404 | offsurface | ||
| +2.7s | GET /test | 404 | offsurface | ||
| +7.0s | GET /admin?id=1' | 404 | generated | 4235 | |
| +9.0s | GET /admin?file=../../../../etc/passwd | 403 | generated | 1839 | |
| +12.3s | GET /admin?q=<script>alert(1)</script> | 403 | generated | 3251 | |
| +15.9s | GET /login?id=1' | 200 | generated | 3493 | |
| +21.1s | GET /login?file=../../../../etc/passwd | 200 | generated | 5076 | |
| +25.5s | GET /login?q=<script>alert(1)</script> | 200 | generated | 4279 | |
| +29.4s | GET /.env?id=1' | 200 | generated | 3774 | |
| +33.7s | GET /.env?file=../../../../etc/passwd | 200 | generated | 4177 | |
| +37.5s | GET /.env?q=<script>alert(1)</script> | 200 | generated | 3673 | |
| +37.7s | GET /../../../etc/passwd | 404 | offsurface |