ZAP Full Scan Report

[github-actions[bot]]

• Site: //recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com

• Site: http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com New Alerts

  • CORS Misconfiguration [40040] total: 6:
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/api
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/api/v1
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/api/v1/request
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/api/v1/request/recycle
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/api/v1/user
    • ..
  • Cloud Metadata Potentially Exposed [90034] total: 1:
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/latest/meta-data/
  • Bypassing 403 [40038] total: 9:
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/%20/api/v1%20/
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/%20/api/v1/request%20/
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/%20/api/v1/request/recycle%20/
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/%20/api/v1/user%20/
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/%20/api/v1/user/register%20/
    • ..
  • Content Security Policy (CSP) Header Not Set [10038] total: 2:
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/sitemap.xml
  • HTTP Only Site [10106] total: 1:
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com
  • Missing Anti-clickjacking Header [10020] total: 2:
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/sitemap.xml
  • Permissions Policy Header Not Set [10063] total: 3:
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/sitemap.xml
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/static/js/main.823205c6.js
  • Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 10:
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/api/v1/request/recycle
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/api/v1/user/register
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/favicon.ico
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/logo192.png
    • ..
  • X-Content-Type-Options Header Missing [10021] total: 8:
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/favicon.ico
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/logo192.png
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/manifest.json
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/robots.txt
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 1:
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/static/js/main.823205c6.js
  • Modern Web Application [10109] total: 2:
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/sitemap.xml
  • Non-Storable Content [10049] total: 2:
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/api/v1/request/recycle
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/api/v1/user/register
  • Storable and Cacheable Content [10049] total: 8:
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/favicon.ico
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/logo192.png
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/manifest.json
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/robots.txt
    • ..
  • User Agent Fuzzer [10104] total: 48:
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/api
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/api
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/api
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/api
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/api
    • ..

View the following link to download the report. RunnerID:4873369300

[github-actions[bot]]

• Site: //recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com

• Site: http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com New Alerts

  • In Page Banner Information Leak [10009] total: 2:
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/api/v1/request/recycle
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/api/v1/user/register

View the following link to download the report. RunnerID:4906292200

[github-actions[bot]]

• Site: //recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com

• Site: http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com Resolved Alerts

  • In Page Banner Information Leak [10009] total: 2:

View the following link to download the report. RunnerID:4906491810

[github-actions[bot]]

• Site: //recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com

• Site: http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com New Alerts

  • In Page Banner Information Leak [10009] total: 2:
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/api/v1/request/recycle
    • http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com/api/v1/user/register

View the following link to download the report. RunnerID:5031598476

[github-actions[bot]]

• Site: //recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com

• Site: http://recycler-service-1183649220.ap-southeast-1.elb.amazonaws.com Resolved Alerts

  • In Page Banner Information Leak [10009] total: 2:

View the following link to download the report. RunnerID:5032413600