Nmap
| severity | service | vulnerability |
info | http (port:80) | |
info | http (port:443) |
Mozilla HTTP observatory
| Impact | Description | Documentation |
Content Security Policy (CSP) header not implemented | Implement one, see MDN's Content Security Policy (CSP) documentation. | |
| Documentation for x-content-type-options-nosniff |
Scan OWASP
| risk | name |
High (Medium) | PII Disclosure |
High (Medium) | Vulnerable JS Library |
Medium (High) | Content Security Policy (CSP) Header Not Set |
Medium (High) | Sub Resource Integrity Attribute Missing |
Medium (Medium) | Application Error Disclosure |
Medium (Medium) | Source Code Disclosure - SQL |
Medium (Medium) | Vulnerable JS Library |
Medium (Low) | Absence of Anti-CSRF Tokens |
Low (High) | CSP: X-Content-Security-Policy |
Low (High) | CSP: X-WebKit-CSP |
Low (High) | In Page Banner Information Leak |
Low (High) | Server Leaks Version Information via "Server" HTTP Response Header Field |
Low (High) | Strict-Transport-Security Header Not Set |
Low (High) | Strict-Transport-Security Multiple Header Entries (Non-compliant with Spec) |
Low (Medium) | Application Error Disclosure |
Low (Medium) | Cookie without SameSite Attribute |
Low (Medium) | Cross-Domain JavaScript Source File Inclusion |
Low (Medium) | Information Disclosure - Debug Error Messages |
Low (Medium) | Insufficient Site Isolation Against Spectre Vulnerability |
Low (Medium) | Permissions Policy Header Not Set |
Low (Medium) | Private IP Disclosure |
Low (Medium) | Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) |
Low (Medium) | X-Content-Type-Options Header Missing |
Low (Low) | Dangerous JS Functions |
Low (Low) | Timestamp Disclosure - Unix |
Informational (High) | Sec-Fetch-Dest Header is Missing |
Informational (High) | Sec-Fetch-Mode Header is Missing |
Informational (High) | Sec-Fetch-Site Header is Missing |
Informational (High) | Sec-Fetch-User Header is Missing |
Informational (Medium) | Base64 Disclosure |
Informational (Medium) | Modern Web Application |
Informational (Medium) | Non-Storable Content |
Informational (Medium) | Session Management Response Identified |
Informational (Medium) | Storable and Cacheable Content |
Informational (Medium) | WSDL File Detection |
Informational (Low) | Information Disclosure - Suspicious Comments |
Informational (Low) | Re-examine Cache-control Directives |
Informational (Low) | User Controllable HTML Element Attribute (Potential XSS) |
Nuclei
| Séverité | Name | Matcher |
info | DNS SaaS Service Detection | dns-saas-service-detection |
info | NS Record Detection | nameserver-fingerprint |
info | CAA Record | caa-fingerprint |
info | AWS Cloudfront service detection | aws-cloudfront-service |
info | HTTP Missing Security Headers | x-permitted-cross-domain-policies |
info | HTTP Missing Security Headers | clear-site-data |
info | HTTP Missing Security Headers | cross-origin-embedder-policy |
info | HTTP Missing Security Headers | cross-origin-opener-policy |
info | HTTP Missing Security Headers | strict-transport-security |
info | HTTP Missing Security Headers | content-security-policy |
info | HTTP Missing Security Headers | permissions-policy |
info | HTTP Missing Security Headers | x-frame-options |
info | HTTP Missing Security Headers | x-content-type-options |
info | HTTP Missing Security Headers | referrer-policy |
info | HTTP Missing Security Headers | cross-origin-resource-policy |
info | AWS Service - Detect | aws-cloudfront |
info | WAF Detection | cloudfront |
info | Header Based Generic OOB Interaction | dns |
info | Detect SSL Certificate Issuer | ssl-issuer |
info | SSL DNS Names | ssl-dns-names |
info | TLS Version - Detect | tls-version |
info | TLS Version - Detect | tls-version |