ZAP Full Scan Report - Githubissues

githubfoam / zap-full-githubactions

zap full githubactions

GNU General Public License v3.0

0 stars 0 forks source link

Site: https://www.hackthissite.org New Alerts
- Application Error Disclosure [90022] total: 4:
  - https://www.hackthissite.org/articles/read/855
  - https://www.hackthissite.org/articles/read/991
  - https://www.hackthissite.org/articles/read/991/
  - https://www.hackthissite.org/user/view/HackThisSite%20Staff/2/30
- CSP: Wildcard Directive [10055] total: 5:
  - https://www.hackthissite.org/
  - https://www.hackthissite.org/forums
  - https://www.hackthissite.org/killing/all/humans/
  - https://www.hackthissite.org/missions/
  - https://www.hackthissite.org/sitemap.xml
- Cross-Domain Misconfiguration [10098] total: 11:
  - https://www.hackthissite.org/
  - https://www.hackthissite.org/advertise
  - https://www.hackthissite.org/forums
  - https://www.hackthissite.org/killing/all/humans/
  - https://www.hackthissite.org/missions/
  - ..
- Referer Exposes Session ID [3] total: 6:
  - https://www.hackthissite.org/forums/viewforum.php?f&sid=fc7062d44c0b45c3fbf8ac0137f78c42
  - https://www.hackthissite.org/forums/viewforum.php?f=14&sid=fc7062d44c0b45c3fbf8ac0137f78c42
  - https://www.hackthissite.org/forums/viewforum.php?f=15&sid=fc7062d44c0b45c3fbf8ac0137f78c42
  - https://www.hackthissite.org/forums/viewforum.php?f=16&sid=fc7062d44c0b45c3fbf8ac0137f78c42
  - https://www.hackthissite.org/forums/viewforum.php?f=19&sid=fc7062d44c0b45c3fbf8ac0137f78c42
  - ..
- Reverse Tabnabbing [10108] total: 11:
  - https://www.hackthissite.org/
  - https://www.hackthissite.org/advertise
  - https://www.hackthissite.org/killing/all/humans/
  - https://www.hackthissite.org/missions/
  - https://www.hackthissite.org/missions/application/
  - ..
- Session ID in URL Rewrite [3] total: 6:
  - https://www.hackthissite.org/forums/viewforum.php?f&sid=fc7062d44c0b45c3fbf8ac0137f78c42
  - https://www.hackthissite.org/forums/viewforum.php?f=14&sid=fc7062d44c0b45c3fbf8ac0137f78c42
  - https://www.hackthissite.org/forums/viewforum.php?f=15&sid=fc7062d44c0b45c3fbf8ac0137f78c42
  - https://www.hackthissite.org/forums/viewforum.php?f=16&sid=fc7062d44c0b45c3fbf8ac0137f78c42
  - https://www.hackthissite.org/forums/viewforum.php?f=19&sid=fc7062d44c0b45c3fbf8ac0137f78c42
  - ..
- Source Code Disclosure - ASP [10099] total: 1:
  - https://www.hackthissite.org/articles/read/1103
- Source Code Disclosure - Java [10099] total: 2:
  - https://www.hackthissite.org/articles/read/1095
  - https://www.hackthissite.org/articles/read/1141
- Source Code Disclosure - PHP [10099] total: 2:
  - https://www.hackthissite.org/articles/read/948
  - https://www.hackthissite.org/articles/read/951
- Source Code Disclosure - Perl [10099] total: 1:
  - https://www.hackthissite.org/articles/read/1118
- Source Code Disclosure - SQL [10099] total: 6:
  - https://www.hackthissite.org/pages/programs/programs.php
  - https://www.hackthissite.org/pages/programs/programs.php?cat=7
  - https://www.hackthissite.org/pages/programs/programs.php?class
  - https://www.hackthissite.org/pages/programs/programs.php?class=1
  - https://www.hackthissite.org/pages/programs/programs.php?os
  - ..
- Sub Resource Integrity Attribute Missing [90003] total: 10:
  - https://www.hackthissite.org/
  - https://www.hackthissite.org/
  - https://www.hackthissite.org/
  - https://www.hackthissite.org/
  - https://www.hackthissite.org/
  - ..
- X-Frame-Options Header Not Set [10020] total: 11:
  - https://www.hackthissite.org/
  - https://www.hackthissite.org/advertise
  - https://www.hackthissite.org/donate/
  - https://www.hackthissite.org/missions/
  - https://www.hackthissite.org/missions/application/
  - ..
- Absence of Anti-CSRF Tokens [10202] total: 12:
  - https://www.hackthissite.org/
  - https://www.hackthissite.org/advertise
  - https://www.hackthissite.org/killing/all/humans/
  - https://www.hackthissite.org/missions/
  - https://www.hackthissite.org/register
  - ..
- CSP: Notices [10055] total: 5:
  - https://www.hackthissite.org/
  - https://www.hackthissite.org/forums
  - https://www.hackthissite.org/killing/all/humans/
  - https://www.hackthissite.org/missions/
  - https://www.hackthissite.org/sitemap.xml
- Cookie No HttpOnly Flag [10010] total: 3:
  - https://www.hackthissite.org/
  - https://www.hackthissite.org/missions/basic/10/
  - https://www.hackthissite.org/sitemap.xml
- Cookie Without Secure Flag [10011] total: 3:
  - https://www.hackthissite.org/
  - https://www.hackthissite.org/missions/basic/10/
  - https://www.hackthissite.org/sitemap.xml
- Cookie without SameSite Attribute [10054] total: 12:
  - https://www.hackthissite.org/
  - https://www.hackthissite.org/forums/ucp.php?i=pm
  - https://www.hackthissite.org/forums/ucp.php?i=pm
  - https://www.hackthissite.org/forums/ucp.php?i=pm
  - https://www.hackthissite.org/forums/viewforum.php?f=14&sid=fc7062d44c0b45c3fbf8ac0137f78c42
  - ..
- Cross-Domain JavaScript Source File Inclusion [10017] total: 11:
  - https://www.hackthissite.org/
  - https://www.hackthissite.org/advertise
  - https://www.hackthissite.org/killing/all/humans/
  - https://www.hackthissite.org/missions/
  - https://www.hackthissite.org/missions/application/
  - ..
- Dangerous JS Functions [10110] total: 12:
  - https://www.hackthissite.org/forums/index.php?sid=fc7062d44c0b45c3fbf8ac0137f78c42
  - https://www.hackthissite.org/forums/viewforum.php?f&sid=fc7062d44c0b45c3fbf8ac0137f78c42
  - https://www.hackthissite.org/forums/viewforum.php?f=14&sid=fc7062d44c0b45c3fbf8ac0137f78c42
  - https://www.hackthissite.org/forums/viewforum.php?f=147&sid=fc7062d44c0b45c3fbf8ac0137f78c42
  - https://www.hackthissite.org/forums/viewforum.php?f=15&sid=fc7062d44c0b45c3fbf8ac0137f78c42
  - ..
- Deprecated Feature Policy Header Set [10063] total: 11:
  - https://www.hackthissite.org/
  - https://www.hackthissite.org/advertise
  - https://www.hackthissite.org/donate/
  - https://www.hackthissite.org/killing/all/humans/
  - https://www.hackthissite.org/missions/
  - ..
- Incomplete or No Cache-control Header Set [10015] total: 12:
  - https://www.hackthissite.org/missions/basic/11/
  - https://www.hackthissite.org/missions/realistic/1/
  - https://www.hackthissite.org/pages/showsource/loopdeloop.php
  - https://www.hackthissite.org/pages/showsource/viewhts.php?f&g=/www
  - https://www.hackthissite.org/pages/showsource/viewhts.php?f&g=/www/includes
  - ..
- Information Disclosure - Debug Error Messages [10023] total: 9:
  - https://www.hackthissite.org/articles/read/1043
  - https://www.hackthissite.org/articles/read/855
  - https://www.hackthissite.org/articles/read/884
  - https://www.hackthissite.org/articles/read/932
  - https://www.hackthissite.org/articles/read/991
  - ..
- Private IP Disclosure [2] total: 12:
  - https://www.hackthissite.org/articles/read/1094
  - https://www.hackthissite.org/articles/read/1117
  - https://www.hackthissite.org/articles/read/1130
  - https://www.hackthissite.org/articles/read/1131
  - https://www.hackthissite.org/articles/read/1135
  - ..
- Secure Pages Include Mixed Content [10040] total: 12:
  - https://www.hackthissite.org/articles/read/1147
  - https://www.hackthissite.org/articles/read/1149
  - https://www.hackthissite.org/pages/info/linktous.php
  - https://www.hackthissite.org/pages/programs/programs.php
  - https://www.hackthissite.org/pages/programs/programs.php?cat=10
  - ..
- Timestamp Disclosure - Unix [10096] total: 13:
  - https://www.hackthissite.org/news
  - https://www.hackthissite.org/news/view/728
  - https://www.hackthissite.org/news/view/728
  - https://www.hackthissite.org/news/view/728
  - https://www.hackthissite.org/news/view/728
  - ..
- X-Content-Type-Options Header Missing [10021] total: 11:
  - https://www.hackthissite.org/
  - https://www.hackthissite.org/advertise
  - https://www.hackthissite.org/donate/
  - https://www.hackthissite.org/missions/
  - https://www.hackthissite.org/missions/basic/
  - ..
- Base64 Disclosure [10094] total: 11:
  - https://www.hackthissite.org/
  - https://www.hackthissite.org/advertise
  - https://www.hackthissite.org/forums
  - https://www.hackthissite.org/killing/all/humans/
  - https://www.hackthissite.org/missions/
  - ..
- Content-Type Header Missing [10019] total: 1:
  - https://www.hackthissite.org/manifest.webmanifest
- Information Disclosure - Suspicious Comments [10027] total: 12:
  - https://www.hackthissite.org/register
  - https://www.hackthissite.org/register/submit
  - https://www.hackthissite.org/hof
  - https://www.hackthissite.org/missions/realistic/16/
  - https://www.hackthissite.org/missions/realistic/16/index.php?module=contact
  - ..
- Loosely Scoped Cookie [90033] total: 12:
  - https://www.hackthissite.org/forums/ucp.php?i=pm
  - https://www.hackthissite.org/forums/viewforum.php?f&sid=fc7062d44c0b45c3fbf8ac0137f78c42
  - https://www.hackthissite.org/forums/viewforum.php?f=14&sid=fc7062d44c0b45c3fbf8ac0137f78c42
  - https://www.hackthissite.org/forums/viewforum.php?f=147&sid=fc7062d44c0b45c3fbf8ac0137f78c42
  - https://www.hackthissite.org/forums/viewforum.php?f=15&sid=fc7062d44c0b45c3fbf8ac0137f78c42
  - ..
- Modern Web Application [10109] total: 11:
  - https://www.hackthissite.org/
  - https://www.hackthissite.org/advertise
  - https://www.hackthissite.org/killing/all/humans/
  - https://www.hackthissite.org/missions/
  - https://www.hackthissite.org/missions/application/
  - ..
- Non-Storable Content [10049] total: 4:
  - https://www.hackthissite.org/
  - https://www.hackthissite.org/killing/all/humans/
  - https://www.hackthissite.org/missions/
  - https://www.hackthissite.org/sitemap.xml
- Storable and Cacheable Content [10049] total: 2:
  - https://www.hackthissite.org/forums
  - https://www.hackthissite.org/robots.txt
- User Controllable HTML Element Attribute (Potential XSS) [10031] total: 12:
  - https://www.hackthissite.org/user/login
  - https://www.hackthissite.org/user/login
  - https://www.hackthissite.org/user/login
  - https://www.hackthissite.org/user/login
  - https://www.hackthissite.org/user/login
  - ..
- User Controllable JavaScript Event (XSS) [10043] total: 12:
  - https://www.hackthissite.org/pages/programs/programs.php?cat=2&class=1
  - https://www.hackthissite.org/pages/programs/programs.php?cat=2&class=1
  - https://www.hackthissite.org/pages/programs/programs.php?cat=2&os=1
  - https://www.hackthissite.org/pages/programs/programs.php?cat=2&os=1
  - https://www.hackthissite.org/pages/programs/programs.php?class=1
  - ..
Site: http://www.hackthissite.org New Alerts
- Cross Site Scripting (Reflected) [40012] total: 1:
  - http://www.hackthissite.org/pages/irc/stats.php?mode=words&nickname=javascript%3Aalert%281%29%3B&order=DESC&start=0
- Bypassing 403 [40038] total: 4:
- CORS Misconfiguration [40040] total: 39:
- Relative Path Confusion [10051] total: 2:
  - http://www.hackthissite.org/forums/viewforum.php?f=14
  - http://www.hackthissite.org/pages/showsource/viewhts.php?f=stats.php&g=pages/irc/
- Cookie Slack Detector [90027] total: 35:
- Storable and Cacheable Content [10049] total: 4:
- User Agent Fuzzer [10104] total: 273:

View the following link to download the report. RunnerID:1503427912

githubfoam / zap-full-githubactions

ZAP Full Scan Report #111