Session e74a84f5
Mozilla/5.00 (Nikto/2.5.0) (Evasions:None) (Test:Port Check) r2 · 127.0.x.x · 30 requests · 21 distinct pages · mode mirage
vuln_scanning T1595.002
Automated scanner probed for admin panels, sensitive files (.env, config, backups), and injected SQLi, path traversal, and XSS payloads against login and admin endpoints.
Automated scanner probed for admin panels, sensitive files (.env, config, backups), and injected SQLi, path traversal, and XSS payloads against login and admin endpoints.
| +time | Request | Status | Answered by | Model ms | Body sent by visitor |
|---|---|---|---|---|---|
| +0.0s | GET /robots.txt | 404 | offsurface | ||
| +0.1s | GET /sitemap.xml | 404 | offsurface | ||
| +0.2s | GET /admin | 403 | cache | ||
| +0.3s | GET /administrator | 404 | offsurface | ||
| +0.5s | GET /login | 200 | cache | ||
| +0.6s | GET /wp-login.php | 404 | offsurface | ||
| +0.7s | GET /phpmyadmin/ | 404 | offsurface | ||
| +0.8s | GET /.env | 200 | cache | ||
| +0.9s | GET /.git/config | 404 | offsurface | ||
| +1.0s | GET /backup.zip | 404 | offsurface | ||
| +1.1s | GET /config.php | 404 | offsurface | ||
| +1.3s | GET /server-status | 200 | cache | ||
| +1.4s | GET /api/v1/users | 404 | cache | ||
| +1.5s | GET /api/v1/shipments | 200 | cache | ||
| +1.6s | GET /uploads/ | 404 | offsurface | ||
| +1.7s | GET /info.php | 404 | offsurface | ||
| +1.8s | GET /cgi-bin/ | 404 | offsurface | ||
| +1.9s | GET /console | 404 | offsurface | ||
| +2.0s | GET /db.sql | 404 | offsurface | ||
| +2.2s | GET /test | 404 | offsurface | ||
| +2.3s | GET /admin?id=1' | 404 | cache | ||
| +2.4s | GET /admin?file=../../../../etc/passwd | 403 | cache | ||
| +2.5s | GET /admin?q=<script>alert(1)</script> | 403 | cache | ||
| +2.6s | GET /login?id=1' | 200 | cache | ||
| +2.8s | GET /login?file=../../../../etc/passwd | 200 | cache | ||
| +2.9s | GET /login?q=<script>alert(1)</script> | 200 | cache | ||
| +3.0s | GET /.env?id=1' | 200 | cache | ||
| +3.1s | GET /.env?file=../../../../etc/passwd | 200 | cache | ||
| +3.2s | GET /.env?q=<script>alert(1)</script> | 200 | cache | ||
| +3.3s | GET /../../../etc/passwd | 404 | offsurface |