Health Check · evaluare externă, autorizată · realizată la 23 octombrie 2026 de Ionuț-Robert Sandu
Una sau mai multe probleme permit unui atacator să preia controlul sau să extragă date. Repară întâi elementele critice.
| Subdomenii descoperite | 12 |
|---|---|
| Host-uri active testate | 3 |
| Porturi / servicii deschise | 22/ssh, 80/http, 443/https, 3000/grafana, 3306/mysql |
| Tehnologii identificate | nginx, PHP, WordPress, jQuery, Grafana |
| Autentificare email | SPF prezent · DMARC lipsă · DNSSEC inactiv |
| Formulare / puncte de intrare | 9 |
| Secrete expuse în cod | 2 |
| Suprafață API (OpenAPI) | Găsit |
Dacă fiecare țintă este semnalată pentru malware sau phishing (informații de la Cloudflare și URLhaus unde e disponibil) și dacă adresele serverelor de mail și web apar pe liste publice de blocare a spamului.
203.0.113.11 (mail server) pe UCEPROTECT L1
admin.northwind-retail.example:3306
The MySQL service on admin.northwind-retail.example accepts connections from any address on port 3306. An exposed database is a direct route to full data theft and ransomware.
Remediere. Bind MySQL to localhost or a private network and block 3306 at the firewall. Rotate database credentials.
https://api.northwind-retail.example
The API runs a PHP version affected by CVE-2024-4577, an argument-injection flaw that allows remote code execution and is being exploited in the wild.
Remediere. Update PHP to 8.3.8 / 8.2.20 / 8.1.29 or later immediately, or apply your distribution's patched package.
https://grafana.northwind-retail.example
The Grafana instance accepts the default admin/admin credentials, exposing dashboards and data sources — and often database passwords stored in them.
Remediere. Change the admin password, disable default accounts, and put Grafana behind SSO or a VPN.
https://www.northwind-retail.example/.git/config
The .git directory is served publicly. Attackers can download the full source code and any secrets committed to it.
Remediere. Block access to /.git in the web server and remove the directory from the web root.
staging-old.northwind-retail.example
staging-old.northwind-retail.example points to a decommissioned cloud host that is no longer claimed. An attacker can register it and serve content from your domain.
Remediere. Remove the dangling DNS record, or reclaim the resource it points to.
https://shop.northwind-retail.example/search?q=
The product search endpoint returns database errors for crafted input, indicating an injectable parameter. Confirmed exploitation is part of the App Pen Test.
Remediere. Use parameterized queries / prepared statements and validate input. Review the endpoint for data exposure.
https://www.northwind-retail.example
The web server still negotiates TLS 1.0/1.1, which are deprecated and vulnerable to downgrade attacks.
Remediere. Disable TLS 1.0 and 1.1; serve only TLS 1.2 and 1.3.
https://www.northwind-retail.example
The server offers CBC-mode and RSA-key-exchange ciphers without forward secrecy.
Remediere. Prefer ECDHE suites with AES-GCM; remove CBC and static-RSA ciphers.
https://www.northwind-retail.example
The CSP permits inline scripts, which weakens its protection against cross-site scripting.
Remediere. Move to nonce- or hash-based CSP and remove 'unsafe-inline'.
https://shop.northwind-retail.example
Without HSTS, browsers may connect over plain HTTP first, where traffic can be intercepted.
Remediere. Send Strict-Transport-Security: max-age=31536000; includeSubDomains.
northwind-retail.example
Listed on UCEPROTECT L1. Email sent from this server may land in spam or be rejected.
Remediere. Find what sent spam (a compromised mailbox, form or plugin), fix it, then request delisting on each list.
https://northwind-retail.example
DNS answers for this domain cannot be cryptographically verified.
Remediere. Enable DNSSEC at your DNS provider and add the DS record at your registrar.
https://northwind-retail.example
No enforcing DMARC record, so spoofed mail using this domain is not rejected.
Remediere. Publish a DMARC record and move to p=quarantine then p=reject.
https://www.northwind-retail.example
Full page addresses can leak to third-party sites through links.
Remediere. Send Referrer-Policy: strict-origin-when-cross-origin.
https://www.northwind-retail.example
Browser features are not restricted, widening the impact of a compromise.
Remediere. Send a Permissions-Policy limiting camera, microphone and geolocation.
https://shop.northwind-retail.example
Sensitive pages may be cached by browsers or proxies.
Remediere. Send Cache-Control: no-store on authenticated responses.
https://https://www.northwind-retail.example
A token was found in a public JS bundle. Confirm it is not a privileged credential.
Remediere. Move secrets server-side and rotate the exposed token.
A fost o health check extern, de tip black-box pentru northwind-retail.example, autorizată de client. Am cartografiat suprafața de atac așa cum ar face un atacator — fără credențiale sau acces intern — folosind uneltele noastre ofensive (descoperire de subdomenii, scanare de porturi și servicii, analiză TLS și anteturi, identificarea tehnologiilor și o scanare de vulnerabilități cu Nuclei și OpenVAS), fiecare descoperire fiind verificată de un inginer de securitate.
Module rulate: whois, subdomain_discovery, dns_resolution, shodan_enrich, port_scan, nmap_scan, tlsx, http_probe, resource_enum, vuln_scan. Descoperirile reflectă starea țintelor la momentul scanării. O evaluare externă nu poate garanta că nu există nicio vulnerabilitate; reflectă ce este accesibil și testabil din internet în perimetrul convenit. Nu s-a efectuat testare de tip denial-of-service sau distructivă.