Session a20e1677

Mozilla/5.00 (Nikto/2.5.0) (Evasions:None) (Test:Port Check) r3 · 127.0.x.x · 30 requests · 21 distinct pages · mode mirage

vuln_scanning T1595.002
Automated scanner (Nikto) probed for admin panels, sensitive files (.env, git config, backups), and injected SQLi, path traversal, and XSS payloads against login and admin endpoints.

+time	Request	Status	Answered by
+0.0s	GET /robots.txt	404	offsurface
+0.1s	GET /sitemap.xml	404	offsurface
+0.2s	GET /admin	403	cache
+0.4s	GET /administrator	404	offsurface
+0.5s	GET /login	200	cache
+0.6s	GET /wp-login.php	404	offsurface
+0.7s	GET /phpmyadmin/	404	offsurface
+0.8s	GET /.env	200	cache
+0.9s	GET /.git/config	404	offsurface
+1.0s	GET /backup.zip	404	offsurface
+1.1s	GET /config.php	404	offsurface
+1.3s	GET /server-status	200	cache
+1.4s	GET /api/v1/users	404	cache
+1.5s	GET /api/v1/shipments	200	cache
+1.6s	GET /uploads/	404	offsurface
+1.7s	GET /info.php	404	offsurface
+1.8s	GET /cgi-bin/	404	offsurface
+1.9s	GET /console	404	offsurface
+2.1s	GET /db.sql	404	offsurface
+2.2s	GET /test	404	offsurface
+2.3s	GET /admin?id=1'	404	cache
+2.4s	GET /admin?file=../../../../etc/passwd	403	cache
+2.5s	GET /admin?q=<script>alert(1)</script>	403	cache
+2.6s	GET /login?id=1'	200	cache
+2.7s	GET /login?file=../../../../etc/passwd	200	cache
+2.9s	GET /login?q=<script>alert(1)</script>	200	cache
+3.0s	GET /.env?id=1'	200	cache
+3.1s	GET /.env?file=../../../../etc/passwd	200	cache
+3.2s	GET /.env?q=<script>alert(1)</script>	200	cache
+3.3s	GET /../../../etc/passwd	404	offsurface