ZAP Scan Baseline Report

[github-actions[bot]]

• Site: https://heitorgouvea.me New Alerts
  • Cross-Domain Misconfiguration [10098] total: 20:
    • https://heitorgouvea.me/images/publications/pydio/pydio-upload-file-form.png
    • https://heitorgouvea.me/projects/nipe
    • https://heitorgouvea.me/about
    • https://heitorgouvea.me/SECURITY
    • https://heitorgouvea.me/2020/01/03/From-Open-Redirect-to-Session-Token-Leak
    • ..
  • Strict-Transport-Security Header Not Set [10035] total: 20:
    • https://heitorgouvea.me/cdn-cgi/scripts/cf.common.js
    • https://heitorgouvea.me/images/publications/pydio/pydio-ssrf-poc.png
    • https://heitorgouvea.me/projects/uranus
    • https://heitorgouvea.me/images/projects/uranus/logo.jpg
    • https://heitorgouvea.me/images/publications/pydio-research/pydio-error-handling-request.png
    • ..
  • X-Frame-Options Header Not Set [10020] total: 15:
    • https://heitorgouvea.me/projects/security-spellbook
    • https://heitorgouvea.me/projects/fukon
    • https://heitorgouvea.me/2019/09/17/CVE-2019-15033
    • https://heitorgouvea.me/projects/perl-style-guide
    • https://heitorgouvea.me/2019/09/17/CVE-2019-15032
    • ..
  • Incomplete or No Cache-control and Pragma HTTP Header Set [10015] total: 20:
    • https://heitorgouvea.me/cdn-cgi/styles/cf.errors.css
    • https://heitorgouvea.me/css/main.css
    • https://heitorgouvea.me/cdn-cgi/styles/cf.errors.ie.css
    • https://heitorgouvea.me/2019/09/17/CVE-2019-15033
    • https://heitorgouvea.me/sitemap.xml
    • ..
  • Timestamp Disclosure - Unix [10096] total: 20:
    • https://heitorgouvea.me/cdn-cgi/styles/cf.errors.css
    • https://heitorgouvea.me/404
    • https://heitorgouvea.me/2020/03/04/CVE-2020-9376
    • https://heitorgouvea.me/images/publications/pydio-research/pydio-error-handling-request.png
    • https://heitorgouvea.me/2020/03/04/CVE-2020-9377
    • ..
  • Content Security Policy (CSP) Header Not Set [10038] total: 19:
    • https://heitorgouvea.me
    • https://heitorgouvea.me/projects/uranus
    • https://heitorgouvea.me/projects
    • https://heitorgouvea.me/404
    • https://heitorgouvea.me/cdn-cgi/l/email-protection
    • ..
  • Reverse Tabnabbing [10108] total: 18:
    • https://heitorgouvea.me/about
    • https://heitorgouvea.me/2020/01/03/From-Open-Redirect-to-Session-Token-Leak
    • https://heitorgouvea.me/projects/nipe
    • https://heitorgouvea.me/
    • https://heitorgouvea.me/2020/03/04/CVE-2020-9377
    • ..
  • X-Content-Type-Options Header Missing [10021] total: 20:
    • https://heitorgouvea.me/2019/09/17/CVE-2019-15033
    • https://heitorgouvea.me/css/main.css
    • https://heitorgouvea.me/images/favicon.ico
    • https://heitorgouvea.me/projects/security-spellbook
    • https://heitorgouvea.me/images/publications/caixa/confidential-data-user.png
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 2:
    • https://heitorgouvea.me/cdn-cgi/scripts/cf.common.js
    • https://heitorgouvea.me/cdn-cgi/scripts/zepto.min.js
  • Private IP Disclosure [2] total: 1:
    • https://heitorgouvea.me/2019/09/17/CVE-2019-15033
  • Retrieved from Cache [10050] total: 1:
    • https://heitorgouvea.me/images/projects/nipe/logo.png
  • Hash Disclosure - Mac OSX salted SHA-1 [10097] total: 1:
    • https://heitorgouvea.me/public/perl-para-pentesters.pdf
  • Cookie Without Secure Flag [10011] total: 2:
    • https://heitorgouvea.me/robots.txt
    • https://heitorgouvea.me/

View the following link to download the report. RunnerID:81156737

[github-actions[bot]]

• Site: https://heitorgouvea.me Resolved Alerts
  • Retrieved from Cache [10050] total: 1:
  • Hash Disclosure - Mac OSX salted SHA-1 [10097] total: 1:

View the following link to download the report. RunnerID:92647719

[github-actions[bot]]

• Site: https://heitorgouvea.me New Alerts
  • Application Error Disclosure [90022] total: 1:
    • https://heitorgouvea.me/2019/09/17/CVE-2019-15032
  • Retrieved from Cache [10050] total: 1:
    • https://heitorgouvea.me/images/projects/nipe/logo.png

View the following link to download the report. RunnerID:120934436

[github-actions[bot]]

• Site: https://heitorgouvea.me New Alerts
  • Modern Web Application [10109] total: 3:
    • https://heitorgouvea.me/images/publications/research/faceapp/first-app-open.png
    • https://heitorgouvea.me/public/payloads/cookiebomb.html
    • https://heitorgouvea.me/public/

View the following link to download the report. RunnerID:153427106

[github-actions[bot]]

• Site: https://heitorgouvea.me Resolved Alerts
  • Retrieved from Cache [10050] total: 2:

View the following link to download the report. RunnerID:157797123

[github-actions[bot]]

• Site: https://heitorgouvea.me New Alerts
  • Retrieved from Cache [10050] total: 2:
    • https://heitorgouvea.me/images/projects/nipe/demo.gif
    • https://heitorgouvea.me/images/projects/nipe/logo.png

View the following link to download the report. RunnerID:157806137

[github-actions[bot]]

• Site: https://heitorgouvea.me Resolved Alerts
  • Retrieved from Cache [10050] total: 2:

View the following link to download the report. RunnerID:157965829

[github-actions[bot]]

• Site: https://heitorgouvea.me New Alerts
  • Retrieved from Cache [10050] total: 4:
    • https://heitorgouvea.me/images/projects/nipe/demo.gif
    • https://heitorgouvea.me/images/projects/spellbook/logo.png
    • https://heitorgouvea.me/images/projects/nipe/logo.png
    • https://heitorgouvea.me/images/projects/spellbook/example_packages-json.png

View the following link to download the report. RunnerID:174859679

[github-actions[bot]]

• Site: https://heitorgouvea.me Resolved Alerts
  • Retrieved from Cache [10050] total: 4:

View the following link to download the report. RunnerID:180379773

[github-actions[bot]]

• Site: https://heitorgouvea.me New Alerts
  • Retrieved from Cache [10050] total: 20:
    • https://heitorgouvea.me/images/favicon.ico
    • https://heitorgouvea.me/js/main.js
    • https://heitorgouvea.me/images/publications/faceapp-analysis/logs-android.png
    • https://heitorgouvea.me/images/publications/nubank-scraping/whatsapp-shared-link.png
    • https://heitorgouvea.me/images/publications/caixa-account-takeover/confidential-data-user.png
    • ..

View the following link to download the report. RunnerID:191208205

[github-actions[bot]]

• Site: https://heitorgouvea.me Resolved Alerts
  • Retrieved from Cache [10050] total: 20:

View the following link to download the report. RunnerID:196334433

[github-actions[bot]]

• Site: https://heitorgouvea.me New Alerts
  • Retrieved from Cache [10050] total: 20:
    • https://heitorgouvea.me/images/publications/faceapp-analysis/androidmanifest.png
    • https://heitorgouvea.me/images/publications/nubank-scraping/personal-infos.png
    • https://heitorgouvea.me/images/projects/uranus/architecture.png
    • https://heitorgouvea.me/images/projects/spellbook/list-modules.png
    • https://heitorgouvea.me/images/publications/nubank-scraping/whatsapp-shared-link.png
    • ..

View the following link to download the report. RunnerID:196336000