ZAP Full Scan Report

[github-actions[bot]]

• Site: https://youngowl13.github.io New Alerts
  • CORS Misconfiguration [40040] total: 2:
    • https://youngowl13.github.io/zap
    • https://youngowl13.github.io/zap/
  • CSP: Wildcard Directive [10055] total: 6:
    • https://youngowl13.github.io/
    • https://youngowl13.github.io/
    • https://youngowl13.github.io/robots.txt
    • https://youngowl13.github.io/robots.txt
    • https://youngowl13.github.io/sitemap.xml
    • ..
  • CSP: style-src unsafe-inline [10055] total: 3:
    • https://youngowl13.github.io/
    • https://youngowl13.github.io/robots.txt
    • https://youngowl13.github.io/sitemap.xml
  • Content Security Policy (CSP) Header Not Set [10038] total: 1:
    • https://youngowl13.github.io/zap/
  • Cross-Domain Misconfiguration [10098] total: 1:
    • https://youngowl13.github.io/zap/
  • Missing Anti-clickjacking Header [10020] total: 1:
    • https://youngowl13.github.io/zap/
  • Relative Path Confusion [10051] total: 2:
    • https://youngowl13.github.io/robots.txt
    • https://youngowl13.github.io/sitemap.xml
  • Sub Resource Integrity Attribute Missing [90003] total: 1:
    • https://youngowl13.github.io/zap/
  • Strict-Transport-Security Header Not Set [10035] total: 3:
    • https://youngowl13.github.io/
    • https://youngowl13.github.io/robots.txt
    • https://youngowl13.github.io/sitemap.xml
  • X-Content-Type-Options Header Missing [10021] total: 1:
    • https://youngowl13.github.io/zap/
  • Base64 Disclosure [10094] total: 3:
    • https://youngowl13.github.io/
    • https://youngowl13.github.io/robots.txt
    • https://youngowl13.github.io/sitemap.xml
  • CSP: Header & Meta [10055] total: 3:
    • https://youngowl13.github.io/
    • https://youngowl13.github.io/robots.txt
    • https://youngowl13.github.io/sitemap.xml
  • Modern Web Application [10109] total: 1:
    • https://youngowl13.github.io/zap/
  • Re-examine Cache-control Directives [10015] total: 1:
    • https://youngowl13.github.io/zap/
  • Retrieved from Cache [10050] total: 4:
    • https://youngowl13.github.io/
    • https://youngowl13.github.io/robots.txt
    • https://youngowl13.github.io/sitemap.xml
    • https://youngowl13.github.io/zap/
  • Storable and Cacheable Content [10049] total: 4:
    • https://youngowl13.github.io/
    • https://youngowl13.github.io/robots.txt
    • https://youngowl13.github.io/sitemap.xml
    • https://youngowl13.github.io/zap/
  • User Agent Fuzzer [10104] total: 12:
    • https://youngowl13.github.io/zap
    • https://youngowl13.github.io/zap
    • https://youngowl13.github.io/zap
    • https://youngowl13.github.io/zap
    • https://youngowl13.github.io/zap
    • ..

View the following link to download the report. RunnerID:4815156221

[github-actions[bot]]

• Site: https://youngowl13.github.io Resolved Alerts
  • CORS Misconfiguration [40040] total: 2:
  • Content Security Policy (CSP) Header Not Set [10038] total: 1:
  • Cross-Domain Misconfiguration [10098] total: 1:
  • Missing Anti-clickjacking Header [10020] total: 1:
  • Sub Resource Integrity Attribute Missing [90003] total: 1:
  • X-Content-Type-Options Header Missing [10021] total: 1:
  • Modern Web Application [10109] total: 1:
  • Re-examine Cache-control Directives [10015] total: 1:
  • User Agent Fuzzer [10104] total: 12:

View the following link to download the report. RunnerID:4997654991

[github-actions[bot]]

• Site: https://accounts.teachmint.qa New Alerts
  • CORS Misconfiguration [40040] total: 14:
    • https://accounts.teachmint.qa
    • https://accounts.teachmint.qa/
    • https://accounts.teachmint.qa/bundle
    • https://accounts.teachmint.qa/bundle/module
    • https://accounts.teachmint.qa/bundle/module/index.js
    • ..
  • Cloud Metadata Potentially Exposed [90034] total: 1:
    • https://accounts.teachmint.qa/latest/meta-data/
  • .htaccess Information Leak [40032] total: 5:
    • https://accounts.teachmint.qa/.htaccess
    • https://accounts.teachmint.qa/bundle/.htaccess
    • https://accounts.teachmint.qa/bundle/module/.htaccess
    • https://accounts.teachmint.qa/css/.htaccess
    • https://accounts.teachmint.qa/img/.htaccess
  • Content Security Policy (CSP) Header Not Set [10038] total: 4:
    • https://accounts.teachmint.qa
    • https://accounts.teachmint.qa/
    • https://accounts.teachmint.qa/robots.txt
    • https://accounts.teachmint.qa/sitemap.xml
  • Missing Anti-clickjacking Header [10020] total: 4:
    • https://accounts.teachmint.qa
    • https://accounts.teachmint.qa/
    • https://accounts.teachmint.qa/robots.txt
    • https://accounts.teachmint.qa/sitemap.xml
  • Proxy Disclosure [40025] total: 14:
    • https://accounts.teachmint.qa
    • https://accounts.teachmint.qa/
    • https://accounts.teachmint.qa/bundle
    • https://accounts.teachmint.qa/bundle/module
    • https://accounts.teachmint.qa/bundle/module/index.js
    • ..
  • Sub Resource Integrity Attribute Missing [90003] total: 14:
    • https://accounts.teachmint.qa
    • https://accounts.teachmint.qa
    • https://accounts.teachmint.qa
    • https://accounts.teachmint.qa
    • https://accounts.teachmint.qa
    • ..
  • Cross-Domain JavaScript Source File Inclusion [10017] total: 6:
    • https://accounts.teachmint.qa
    • https://accounts.teachmint.qa
    • https://accounts.teachmint.qa
    • https://accounts.teachmint.qa/
    • https://accounts.teachmint.qa/
    • ..
  • Permissions Policy Header Not Set [10063] total: 5:
    • https://accounts.teachmint.qa
    • https://accounts.teachmint.qa/
    • https://accounts.teachmint.qa/bundle/module/index.js
    • https://accounts.teachmint.qa/robots.txt
    • https://accounts.teachmint.qa/sitemap.xml
  • Strict-Transport-Security Header Not Set [10035] total: 10:
    • https://accounts.teachmint.qa
    • https://accounts.teachmint.qa/
    • https://accounts.teachmint.qa/bundle/module/index.js
    • https://accounts.teachmint.qa/css/loader.css
    • https://accounts.teachmint.qa/css/login.css
    • ..
  • Timestamp Disclosure - Unix [10096] total: 8:
    • https://accounts.teachmint.qa/bundle/module/index.js
    • https://accounts.teachmint.qa/bundle/module/index.js
    • https://accounts.teachmint.qa/bundle/module/index.js
    • https://accounts.teachmint.qa/bundle/module/index.js
    • https://accounts.teachmint.qa/bundle/module/index.js
    • ..
  • X-Content-Type-Options Header Missing [10021] total: 10:
    • https://accounts.teachmint.qa
    • https://accounts.teachmint.qa/
    • https://accounts.teachmint.qa/bundle/module/index.js
    • https://accounts.teachmint.qa/css/loader.css
    • https://accounts.teachmint.qa/css/login.css
    • ..
  • Base64 Disclosure [10094] total: 3:
    • https://accounts.teachmint.qa
    • https://accounts.teachmint.qa/
    • https://accounts.teachmint.qa/bundle/module/index.js
  • Information Disclosure - Suspicious Comments [10027] total: 4:
    • https://accounts.teachmint.qa
    • https://accounts.teachmint.qa/
    • https://accounts.teachmint.qa/bundle/module/index.js
    • https://accounts.teachmint.qa/bundle/module/index.js
  • Modern Web Application [10109] total: 2:
    • https://accounts.teachmint.qa
    • https://accounts.teachmint.qa/
  • Re-examine Cache-control Directives [10015] total: 4:
    • https://accounts.teachmint.qa
    • https://accounts.teachmint.qa/
    • https://accounts.teachmint.qa/robots.txt
    • https://accounts.teachmint.qa/sitemap.xml
  • Storable and Cacheable Content [10049] total: 4:
    • https://accounts.teachmint.qa
    • https://accounts.teachmint.qa/
    • https://accounts.teachmint.qa/robots.txt
    • https://accounts.teachmint.qa/sitemap.xml
  • Storable but Non-Cacheable Content [10049] total: 6:
    • https://accounts.teachmint.qa/bundle/module/index.js
    • https://accounts.teachmint.qa/css/loader.css
    • https://accounts.teachmint.qa/css/login.css
    • https://accounts.teachmint.qa/css/modal.css
    • https://accounts.teachmint.qa/img/ic-cross-primary.svg
    • ..

View the following link to download the report. RunnerID:5021668353

[github-actions[bot]]

• Site: http://accounts.teachmint.qa

• Site: https://accounts.teachmint.qa New Alerts

  • HTTPS Content Available via HTTP [10047] total: 4:
    • https://accounts.teachmint.qa/cdn-cgi/l/email-protection
    • https://accounts.teachmint.qa/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
    • https://accounts.teachmint.qa/cdn-cgi/styles/cf.errors.css
    • https://accounts.teachmint.qa/cdn-cgi/styles/cf.errors.ie.css

  • User Agent Fuzzer [10104] total: 46:

    • https://accounts.teachmint.qa
    • https://accounts.teachmint.qa
    • https://accounts.teachmint.qa
    • https://accounts.teachmint.qa
    • https://accounts.teachmint.qa
    • ..

    Resolved Alerts

  • Cloud Metadata Potentially Exposed [90034] total: 1:

View the following link to download the report. RunnerID:5361361889

[github-actions[bot]]

• Site: http://accounts.teachmint.qa

• Site: https://accounts.teachmint.qa New Alerts

  • PII Disclosure [10062] total: 1:
    • https://accounts.teachmint.qa/

View the following link to download the report. RunnerID:5548885934

[github-actions[bot]]

• Site: http://accounts.teachmint.qa

• Site: https://accounts.teachmint.qa Resolved Alerts

  • PII Disclosure [10062] total: 1:

View the following link to download the report. RunnerID:5559185846

[github-actions[bot]]

• Site: http://accounts.teachmint.qa

• Site: https://accounts.teachmint.qa New Alerts

  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
    • https://accounts.teachmint.qa/
    • https://accounts.teachmint.qa/robots.txt
    • https://accounts.teachmint.qa/sitemap.xml
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
    • https://accounts.teachmint.qa/
    • https://accounts.teachmint.qa/robots.txt
    • https://accounts.teachmint.qa/sitemap.xml
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
    • https://accounts.teachmint.qa/
    • https://accounts.teachmint.qa/robots.txt
    • https://accounts.teachmint.qa/sitemap.xml
  • Sec-Fetch-User Header is Missing [90005] total: 3:
    • https://accounts.teachmint.qa/
    • https://accounts.teachmint.qa/robots.txt
    • https://accounts.teachmint.qa/sitemap.xml

View the following link to download the report. RunnerID:5616905301

[github-actions[bot]]

• Site: https://35.244.30.147 New Alerts
  • CORS Misconfiguration [40040] total: 1:
    • https://35.244.30.147/realms/vunet
  • Absence of Anti-CSRF Tokens [10202] total: 1:
    • https://35.244.30.147/realms/vunet/protocol/openid-connect/auth?client_id=nairobi&redirect_uri=%2Fvui%2Flogin%2Fgeneric_oauth&response_type=code&scope=openid+email+offline_access&state=dfBEE3zxAJR2lwik31fVFEO-6feaSfWFZbnJHMOyxac%3D
  • Anti-CSRF Tokens Check [20012] total: 1:
    • https://35.244.30.147/realms/vunet/protocol/openid-connect/auth?client_id=nairobi&redirect_uri=%2Fvui%2Flogin%2Fgeneric_oauth&response_type=code&scope=openid+email+offline_access&state=dfBEE3zxAJR2lwik31fVFEO-6feaSfWFZbnJHMOyxac%3D
  • CSP: Wildcard Directive [10055] total: 1:
    • https://35.244.30.147/realms/vunet/protocol/openid-connect/auth?client_id=nairobi&redirect_uri=%2Fvui%2Flogin%2Fgeneric_oauth&response_type=code&scope=openid+email+offline_access&state=dfBEE3zxAJR2lwik31fVFEO-6feaSfWFZbnJHMOyxac%3D
  • CSP: script-src unsafe-inline [10055] total: 1:
    • https://35.244.30.147/realms/vunet/protocol/openid-connect/auth?client_id=nairobi&redirect_uri=%2Fvui%2Flogin%2Fgeneric_oauth&response_type=code&scope=openid+email+offline_access&state=dfBEE3zxAJR2lwik31fVFEO-6feaSfWFZbnJHMOyxac%3D
  • CSP: style-src unsafe-inline [10055] total: 1:
    • https://35.244.30.147/realms/vunet/protocol/openid-connect/auth?client_id=nairobi&redirect_uri=%2Fvui%2Flogin%2Fgeneric_oauth&response_type=code&scope=openid+email+offline_access&state=dfBEE3zxAJR2lwik31fVFEO-6feaSfWFZbnJHMOyxac%3D
  • Integer Overflow Error [30003] total: 1:
    • https://35.244.30.147/realms/vunet/protocol/openid-connect/auth?client_id=nairobi&redirect_uri=%2Fvui%2Flogin%2Fgeneric_oauth&response_type=code&scope=openid+email+offline_access&state=dfBEE3zxAJR2lwik31fVFEO-6feaSfWFZbnJHMOyxac%3D
  • Cookie Slack Detector [90027] total: 1:
    • https://35.244.30.147/realms/vunet/protocol/openid-connect/auth?client_id=nairobi&redirect_uri=%2Fvui%2Flogin%2Fgeneric_oauth&response_type=code&scope=openid+email+offline_access&state=dfBEE3zxAJR2lwik31fVFEO-6feaSfWFZbnJHMOyxac%3D
  • Cookie Without Secure Flag [10011] total: 2:
    • https://35.244.30.147/vui
    • https://35.244.30.147/vui/login/generic_oauth
  • Cookie with SameSite Attribute None [10054] total: 1:
    • https://35.244.30.147/realms/vunet/protocol/openid-connect/auth?client_id=nairobi&redirect_uri=%2Fvui%2Flogin%2Fgeneric_oauth&response_type=code&scope=openid+email+offline_access&state=dfBEE3zxAJR2lwik31fVFEO-6feaSfWFZbnJHMOyxac%3D
  • Cookie without SameSite Attribute [10054] total: 2:
    • https://35.244.30.147/realms/vunet/protocol/openid-connect/auth?client_id=nairobi&redirect_uri=%2Fvui%2Flogin%2Fgeneric_oauth&response_type=code&scope=openid+email+offline_access&state=dfBEE3zxAJR2lwik31fVFEO-6feaSfWFZbnJHMOyxac%3D
    • https://35.244.30.147/realms/vunet/protocol/openid-connect/auth?client_id=nairobi&redirect_uri=%2Fvui%2Flogin%2Fgeneric_oauth&response_type=code&scope=openid+email+offline_access&state=dfBEE3zxAJR2lwik31fVFEO-6feaSfWFZbnJHMOyxac%3D
  • Permissions Policy Header Not Set [10063] total: 1:
    • https://35.244.30.147/realms/vunet/protocol/openid-connect/auth?client_id=nairobi&redirect_uri=%2Fvui%2Flogin%2Fgeneric_oauth&response_type=code&scope=openid+email+offline_access&state=dfBEE3zxAJR2lwik31fVFEO-6feaSfWFZbnJHMOyxac%3D
  • Private IP Disclosure [2] total: 1:
    • https://35.244.30.147/
  • Strict-Transport-Security Header Not Set [10035] total: 3:
    • https://35.244.30.147/
    • https://35.244.30.147/robots.txt
    • https://35.244.30.147/sitemap.xml
  • Base64 Disclosure [10094] total: 2:
    • https://35.244.30.147/realms/vunet/protocol/openid-connect/auth?client_id=nairobi&redirect_uri=%2Fvui%2Flogin%2Fgeneric_oauth&response_type=code&scope=openid+email+offline_access&state=dfBEE3zxAJR2lwik31fVFEO-6feaSfWFZbnJHMOyxac%3D
    • https://35.244.30.147/vui/login/generic_oauth
  • Cookie Slack Detector [90027] total: 3:
    • https://35.244.30.147/vui
    • https://35.244.30.147/vui/login
    • https://35.244.30.147/vui/login/generic_oauth
  • Modern Web Application [10109] total: 1:
    • https://35.244.30.147/realms/vunet/protocol/openid-connect/auth?client_id=nairobi&redirect_uri=%2Fvui%2Flogin%2Fgeneric_oauth&response_type=code&scope=openid+email+offline_access&state=dfBEE3zxAJR2lwik31fVFEO-6feaSfWFZbnJHMOyxac%3D
  • Non-Storable Content [10049] total: 5:
    • https://35.244.30.147/
    • https://35.244.30.147/realms/vunet/protocol/openid-connect/auth?client_id=nairobi&redirect_uri=%2Fvui%2Flogin%2Fgeneric_oauth&response_type=code&scope=openid+email+offline_access&state=dfBEE3zxAJR2lwik31fVFEO-6feaSfWFZbnJHMOyxac%3D
    • https://35.244.30.147/vui
    • https://35.244.30.147/vui/login
    • https://35.244.30.147/vui/login/generic_oauth
  • Re-examine Cache-control Directives [10015] total: 1:
    • https://35.244.30.147/realms/vunet/protocol/openid-connect/auth?client_id=nairobi&redirect_uri=%2Fvui%2Flogin%2Fgeneric_oauth&response_type=code&scope=openid+email+offline_access&state=dfBEE3zxAJR2lwik31fVFEO-6feaSfWFZbnJHMOyxac%3D
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
    • https://35.244.30.147/vui
    • https://35.244.30.147/vui/login
    • https://35.244.30.147/vui/login/generic_oauth
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
    • https://35.244.30.147/vui
    • https://35.244.30.147/vui/login
    • https://35.244.30.147/vui/login/generic_oauth
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
    • https://35.244.30.147/vui
    • https://35.244.30.147/vui/login
    • https://35.244.30.147/vui/login/generic_oauth
  • Sec-Fetch-User Header is Missing [90005] total: 3:
    • https://35.244.30.147/vui
    • https://35.244.30.147/vui/login
    • https://35.244.30.147/vui/login/generic_oauth
  • Session Management Response Identified [10112] total: 2:
    • https://35.244.30.147/realms/vunet/protocol/openid-connect/auth?client_id=nairobi&redirect_uri=%2Fvui%2Flogin%2Fgeneric_oauth&response_type=code&scope=openid+email+offline_access&state=dfBEE3zxAJR2lwik31fVFEO-6feaSfWFZbnJHMOyxac%3D
    • https://35.244.30.147/vui/login/generic_oauth
  • Storable and Cacheable Content [10049] total: 2:
    • https://35.244.30.147/robots.txt
    • https://35.244.30.147/sitemap.xml
  • User Agent Fuzzer [10104] total: 48:
    • https://35.244.30.147/realms/vunet/protocol/openid-connect/auth?client_id=nairobi&redirect_uri=%2Fvui%2Flogin%2Fgeneric_oauth&response_type=code&scope=openid+email+offline_access&state=dfBEE3zxAJR2lwik31fVFEO-6feaSfWFZbnJHMOyxac%3D
    • https://35.244.30.147/realms/vunet/protocol/openid-connect/auth?client_id=nairobi&redirect_uri=%2Fvui%2Flogin%2Fgeneric_oauth&response_type=code&scope=openid+email+offline_access&state=dfBEE3zxAJR2lwik31fVFEO-6feaSfWFZbnJHMOyxac%3D
    • https://35.244.30.147/realms/vunet/protocol/openid-connect/auth?client_id=nairobi&redirect_uri=%2Fvui%2Flogin%2Fgeneric_oauth&response_type=code&scope=openid+email+offline_access&state=dfBEE3zxAJR2lwik31fVFEO-6feaSfWFZbnJHMOyxac%3D
    • https://35.244.30.147/realms/vunet/protocol/openid-connect/auth?client_id=nairobi&redirect_uri=%2Fvui%2Flogin%2Fgeneric_oauth&response_type=code&scope=openid+email+offline_access&state=dfBEE3zxAJR2lwik31fVFEO-6feaSfWFZbnJHMOyxac%3D
    • https://35.244.30.147/realms/vunet/protocol/openid-connect/auth?client_id=nairobi&redirect_uri=%2Fvui%2Flogin%2Fgeneric_oauth&response_type=code&scope=openid+email+offline_access&state=dfBEE3zxAJR2lwik31fVFEO-6feaSfWFZbnJHMOyxac%3D
    • ..

View the following link to download the report. RunnerID:6002465896

[github-actions[bot]]

• Site: https://35.244.30.147 Resolved Alerts
  • CORS Misconfiguration [40040] total: 1:
  • Absence of Anti-CSRF Tokens [10202] total: 1:
  • Anti-CSRF Tokens Check [20012] total: 1:
  • CSP: Wildcard Directive [10055] total: 1:
  • CSP: script-src unsafe-inline [10055] total: 1:
  • CSP: style-src unsafe-inline [10055] total: 1:
  • Integer Overflow Error [30003] total: 1:
  • Cookie Slack Detector [90027] total: 1:
  • Cookie Without Secure Flag [10011] total: 2:
  • Cookie with SameSite Attribute None [10054] total: 1:
  • Cookie without SameSite Attribute [10054] total: 2:
  • Permissions Policy Header Not Set [10063] total: 1:
  • Private IP Disclosure [2] total: 1:
  • Strict-Transport-Security Header Not Set [10035] total: 3:
  • Base64 Disclosure [10094] total: 2:
  • Cookie Slack Detector [90027] total: 3:
  • Modern Web Application [10109] total: 1:
  • Non-Storable Content [10049] total: 5:
  • Re-examine Cache-control Directives [10015] total: 1:
  • Session Management Response Identified [10112] total: 2:
  • Storable and Cacheable Content [10049] total: 2:
  • User Agent Fuzzer [10104] total: 48:

View the following link to download the report. RunnerID:6043503222

[github-actions[bot]]

• Site: http://teachmint.qa

• Site: https://teachmint.qa New Alerts

  • Cross Site Scripting (Reflected) [40012] total: 4:
    • https://teachmint.qa/cbse-result-analyser?FirstName=%3Balert%281%29&Phone=9999999999
    • https://teachmint.qa/cbse-result-analyser?FirstName=ZAP&Phone=%3Balert%281%29
    • https://teachmint.qa/plans?FirstName=%3Balert%281%29&Phone=9999999999
    • https://teachmint.qa/plans?FirstName=ZAP&Phone=%3Balert%281%29
  • PII Disclosure [10062] total: 3:
    • https://teachmint.qa/sitemap/sitemap-collection/Test_Tfile1_sitemap.xml
    • https://teachmint.qa/sitemap/sitemap-collection/Test_Tfile1_sitemap.xml
    • https://teachmint.qa/sitemap/sitemap-collection/Test_Tfile2_sitemap.xml
  • Absence of Anti-CSRF Tokens [10202] total: 9:
    • https://teachmint.qa/cbse-result-analyser
    • https://teachmint.qa/cbse-result-analyser
    • https://teachmint.qa/cbse-result-analyser
    • https://teachmint.qa/cbse-result-analyser?FirstName=ZAP&Phone=9999999999
    • https://teachmint.qa/cbse-result-analyser?FirstName=ZAP&Phone=9999999999
    • ..
  • Anti-CSRF Tokens Check [20012] total: 9:
    • https://teachmint.qa/cbse-result-analyser
    • https://teachmint.qa/cbse-result-analyser
    • https://teachmint.qa/cbse-result-analyser
    • https://teachmint.qa/cbse-result-analyser?FirstName=ZAP&Phone=9999999999
    • https://teachmint.qa/cbse-result-analyser?FirstName=ZAP&Phone=9999999999
    • ..
  • Backup File Disclosure [10095] total: 105:
    • https://teachmint.qa/dashboard%20-%20Copy
    • https://teachmint.qa/dashboard%20-%20Copy%20(2)
    • https://teachmint.qa/dashboard%20-%20Copy%20(3)
    • https://teachmint.qa/dashboard.bac
    • https://teachmint.qa/dashboard.backup
    • ..
  • Bypassing 403 [40038] total: 1:
    • https://teachmint.qa/anything
  • Content Security Policy (CSP) Header Not Set [10038] total: 11:
    • https://teachmint.qa/
    • https://teachmint.qa/admission-management
    • https://teachmint.qa/features
    • https://teachmint.qa/features/exam-planner
    • https://teachmint.qa/features/student-report-card
    • ..
  • Hidden File Found [40035] total: 4:
    • https://teachmint.qa/._darcs
    • https://teachmint.qa/.bzr
    • https://teachmint.qa/.hg
    • https://teachmint.qa/BitKeeper
  • Missing Anti-clickjacking Header [10020] total: 11:
    • https://teachmint.qa/
    • https://teachmint.qa/admission-management
    • https://teachmint.qa/features
    • https://teachmint.qa/features/exam-planner
    • https://teachmint.qa/features/student-report-card
    • ..
  • Proxy Disclosure [40025] total: 726:
    • https://teachmint.qa
    • https://teachmint.qa/
    • https://teachmint.qa/*
    • https://teachmint.qa/*/feed
    • https://teachmint.qa/*/feed/
    • ..
  • Relative Path Confusion [10051] total: 4:
    • https://teachmint.qa/static/css/25.edf35962.chunk.css
    • https://teachmint.qa/static/css/main.0a91921f.chunk.css
    • https://teachmint.qa/static/js/25.9c177fe8.chunk.js
    • https://teachmint.qa/static/js/main.43e3f5f0.chunk.js
  • Source Code Disclosure - SQL [10099] total: 1:
    • https://teachmint.qa/features/parent-app
  • Sub Resource Integrity Attribute Missing [90003] total: 23:
    • https://teachmint.qa/
    • https://teachmint.qa/
    • https://teachmint.qa/
    • https://teachmint.qa/
    • https://teachmint.qa/
    • ..
  • Web Cache Deception [40039] total: 1:
    • https://teachmint.qa/*/feed/
  • Big Redirect Detected (Potential Sensitive Information Leak) [10044] total: 1:
    • https://teachmint.qa/share/tfile/url
  • Cookie No HttpOnly Flag [10010] total: 10:
    • https://teachmint.qa/
    • https://teachmint.qa/
    • https://teachmint.qa/admission-management
    • https://teachmint.qa/admission-management
    • https://teachmint.qa/fee-management
    • ..
  • Cookie Without Secure Flag [10011] total: 10:
    • https://teachmint.qa/
    • https://teachmint.qa/
    • https://teachmint.qa/admission-management
    • https://teachmint.qa/admission-management
    • https://teachmint.qa/fee-management
    • ..
  • Cookie without SameSite Attribute [10054] total: 10:
    • https://teachmint.qa/
    • https://teachmint.qa/
    • https://teachmint.qa/admission-management
    • https://teachmint.qa/admission-management
    • https://teachmint.qa/fee-management
    • ..
  • Cross-Domain JavaScript Source File Inclusion [10017] total: 10:
    • https://teachmint.qa/
    • https://teachmint.qa/
    • https://teachmint.qa/
    • https://teachmint.qa/
    • https://teachmint.qa/
    • ..
  • Dangerous JS Functions [10110] total: 2:
    • https://teachmint.qa/static2/js/partner/webflow.js
    • https://teachmint.qa/static2/js/pdfjs/pdf.js
  • In Page Banner Information Leak [10009] total: 5:
    • https://teachmint.qa/*/feed
    • https://teachmint.qa/static2/images/new-landing/mordern-learning-1.svg
    • https://teachmint.qa/static2/images/partner/webclip.png
    • https://teachmint.qa/cbse-result-analyser
    • https://teachmint.qa/partner
  • Permissions Policy Header Not Set [10063] total: 11:
    • https://teachmint.qa/
    • https://teachmint.qa/admission-management
    • https://teachmint.qa/features
    • https://teachmint.qa/features/exam-planner
    • https://teachmint.qa/features/student-report-card
    • ..
  • Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 11:
    • https://teachmint.qa/
    • https://teachmint.qa/admission-management
    • https://teachmint.qa/features/exam-planner
    • https://teachmint.qa/features/student-report-card
    • https://teachmint.qa/fee-management
    • ..
  • Strict-Transport-Security Header Not Set [10035] total: 11:
    • https://teachmint.qa/
    • https://teachmint.qa/admission-management
    • https://teachmint.qa/features/exam-planner
    • https://teachmint.qa/features/student-report-card
    • https://teachmint.qa/fee-management
    • ..
  • Timestamp Disclosure - Unix [10096] total: 1:
    • https://teachmint.qa/static2/js/pdfjs/pdf.js
  • X-Content-Type-Options Header Missing [10021] total: 11:
    • https://teachmint.qa/
    • https://teachmint.qa/admission-management
    • https://teachmint.qa/features/exam-planner
    • https://teachmint.qa/features/student-report-card
    • https://teachmint.qa/fee-management
    • ..
  • Base64 Disclosure [10094] total: 11:
    • https://teachmint.qa/
    • https://teachmint.qa/admission-management
    • https://teachmint.qa/features
    • https://teachmint.qa/features/exam-planner
    • https://teachmint.qa/features/student-report-card
    • ..
  • Charset Mismatch [90011] total: 1:
    • https://teachmint.qa/static2/images/partner/email-svgrepo-com.svg
  • Cookie Slack Detector [90027] total: 726:
    • https://teachmint.qa
    • https://teachmint.qa/
    • https://teachmint.qa/*
    • https://teachmint.qa/*/feed
    • https://teachmint.qa/*/feed/
    • ..
  • HTTP Parameter Pollution [20014] total: 5:
    • https://teachmint.qa/
    • https://teachmint.qa/cbse-result-analyser
    • https://teachmint.qa/cbse-result-analyser?FirstName=ZAP&Phone=9999999999
    • https://teachmint.qa/plans
    • https://teachmint.qa/plans?FirstName=ZAP&Phone=9999999999
  • Information Disclosure - Suspicious Comments [10027] total: 11:
    • https://teachmint.qa/about
    • https://teachmint.qa/admission-management
    • https://teachmint.qa/features/student-report-card
    • https://teachmint.qa/features/timetable-maker
    • https://teachmint.qa/fee-management
    • ..
  • Modern Web Application [10109] total: 11:
    • https://teachmint.qa/
    • https://teachmint.qa/about
    • https://teachmint.qa/dashboard
    • https://teachmint.qa/features/exam-planner
    • https://teachmint.qa/features/student-report-card
    • ..
  • Re-examine Cache-control Directives [10015] total: 11:
    • https://teachmint.qa/
    • https://teachmint.qa/admission-management
    • https://teachmint.qa/features/exam-planner
    • https://teachmint.qa/features/student-report-card
    • https://teachmint.qa/fee-management
    • ..
  • Sec-Fetch-Dest Header is Missing [90005] total: 3:
    • https://teachmint.qa/
    • https://teachmint.qa/robots.txt
    • https://teachmint.qa/sitemap.xml
  • Sec-Fetch-Mode Header is Missing [90005] total: 3:
    • https://teachmint.qa/
    • https://teachmint.qa/robots.txt
    • https://teachmint.qa/sitemap.xml
  • Sec-Fetch-Site Header is Missing [90005] total: 3:
    • https://teachmint.qa/
    • https://teachmint.qa/robots.txt
    • https://teachmint.qa/sitemap.xml
  • Sec-Fetch-User Header is Missing [90005] total: 3:
    • https://teachmint.qa/
    • https://teachmint.qa/robots.txt
    • https://teachmint.qa/sitemap.xml
  • Storable and Cacheable Content [10049] total: 11:
    • https://teachmint.qa/
    • https://teachmint.qa/admission-management
    • https://teachmint.qa/features/exam-planner
    • https://teachmint.qa/features/student-report-card
    • https://teachmint.qa/fee-management
    • ..
  • User Agent Fuzzer [10104] total: 1108:
    • https://teachmint.qa
    • https://teachmint.qa
    • https://teachmint.qa
    • https://teachmint.qa
    • https://teachmint.qa
    • ..
  • User Controllable HTML Element Attribute (Potential XSS) [10031] total: 6:
    • https://teachmint.qa/login?btn_type=web_insti_login_header&referer=https://teachmint.qa/&utype=0&uuid=3beb8045-8693-4b10-9bef-fa2b0cac211c
    • https://teachmint.qa/login?btn_type=web_insti_login_header&referer=https://teachmint.qa/not-found&utype=0&uuid=f8d64b89-3911-4f0d-a23b-09062f3b3071
    • https://teachmint.qa/login?btn_type=web_insti_login_header&utype=0&uuid=2421c6cf-8bd2-408e-968b-400d5fd57fab
    • https://teachmint.qa/login?FirstName=ZAP&Phone=9999999999&btn_type=web_insti_login_header&referer=https://teachmint.qa/cbse-result-analyser&utype=0&uuid=983a9bc4-6dc7-4c01-8e4f-b136cd12a2a1
    • https://teachmint.qa/login?FirstName=ZAP&Phone=9999999999&btn_type=web_insti_login_header&referer=https://teachmint.qa/plans&utype=0&uuid=3406d7f1-6dbc-490f-9fcf-9de8b4ed2586
    • ..

View the following link to download the report. RunnerID:6399560045

[github-actions[bot]]

• Site: http://teachmint.qa

• Site: https://teachmint.qa New Alerts

  • Session Management Response Identified [10112] total: 3:
    • https://teachmint.qa/
    • https://teachmint.qa/
    • https://teachmint.qa/school-directory

View the following link to download the report. RunnerID:6514046552

[github-actions[bot]]

• Site: http://teachmint.qa

• Site: https://teachmint.qa Resolved Alerts

  • Session Management Response Identified [10112] total: 3:

View the following link to download the report. RunnerID:6520570226

[github-actions[bot]]

• Site: http://teachmint.qa

• Site: https://teachmint.qa New Alerts

  • Application Error Disclosure [90022] total: 5:
    • https://teachmint.qa/*/feed
    • https://teachmint.qa/static2/images/new-landing/mordern-learning-1.svg
    • https://teachmint.qa/static2/images/partner/webclip.png
    • https://teachmint.qa/cbse-result-analyser
    • https://teachmint.qa/partner
  • HTTPS Content Available via HTTP [10047] total: 4:
    • https://teachmint.qa/cdn-cgi/l/email-protection
    • https://teachmint.qa/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
    • https://teachmint.qa/cdn-cgi/styles/cf.errors.css
    • https://teachmint.qa/cdn-cgi/styles/cf.errors.ie.css

  • Information Disclosure - Debug Error Messages [10023] total: 5:

    • https://teachmint.qa/*/feed
    • https://teachmint.qa/static2/images/new-landing/mordern-learning-1.svg
    • https://teachmint.qa/static2/images/partner/webclip.png
    • https://teachmint.qa/cbse-result-analyser
    • https://teachmint.qa/partner

    Resolved Alerts

  • In Page Banner Information Leak [10009] total: 5:
  • Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 11:

View the following link to download the report. RunnerID:6567787860

[github-actions[bot]]

• Site: http://teachmint.qa

• Site: https://teachmint.qa New Alerts

  • NoSQL Injection - MongoDB [40033] total: 1:
    • https://teachmint.qa/plans?FirstName=ZAP&Phone=%27%3B+sleep%28100%29%3B+var+x%3D%27
  • SQL Injection - Hypersonic SQL - Time Based [40020] total: 1:
    • https://teachmint.qa/plans?FirstName=ZAP&Phone=9999999999
  • SQL Injection - MySQL [40019] total: 1:
    • https://teachmint.qa/plans?FirstName=ZAP&Phone=9999999999
  • SQL Injection - Oracle - Time Based [40021] total: 1:
    • https://teachmint.qa/cbse-result-analyser
  • SQL Injection - PostgreSQL - Time Based [40022] total: 1:
    • https://teachmint.qa/plans?FirstName=ZAP&Phone=9999999999
  • SQL Injection - SQLite [40024] total: 2:
    • https://teachmint.qa/login?btn_type=web_insti_login_header&referer=https://teachmint.qa/not-found&utype=0&uuid=9b4e93a3-4987-4828-9561-4a8f5709acad
    • https://teachmint.qa/partner

View the following link to download the report. RunnerID:6593707008

[github-actions[bot]]

• Site: http://teachmint.qa

• Site: https://teachmint.qa New Alerts

  • Session Management Response Identified [10112] total: 11:

    • https://teachmint.qa/
    • https://teachmint.qa/admission-management
    • https://teachmint.qa/features
    • https://teachmint.qa/features/exam-planner
    • https://teachmint.qa/features/student-report-card
    • ..

    Resolved Alerts

  • NoSQL Injection - MongoDB [40033] total: 1:
  • SQL Injection - Hypersonic SQL - Time Based [40020] total: 1:
  • SQL Injection - MySQL [40019] total: 1:
  • SQL Injection - Oracle - Time Based [40021] total: 1:
  • SQL Injection - PostgreSQL - Time Based [40022] total: 1:
  • SQL Injection - SQLite [40024] total: 2:

View the following link to download the report. RunnerID:6600291734

[github-actions[bot]]

• Site: http://teachmint.qa

• Site: https://teachmint.qa New Alerts

  • SQL Injection - SQLite [40024] total: 1:

    • https://teachmint.qa/partner

    Resolved Alerts

  • Session Management Response Identified [10112] total: 11:

View the following link to download the report. RunnerID:6606870701

[github-actions[bot]]

• Site: http://teachmint.qa

• Site: https://teachmint.qa New Alerts

  • Session Management Response Identified [10112] total: 11:

    • https://teachmint.qa/
    • https://teachmint.qa/admission-management
    • https://teachmint.qa/features
    • https://teachmint.qa/features/exam-planner
    • https://teachmint.qa/features/student-report-card
    • ..

    Resolved Alerts

  • SQL Injection - SQLite [40024] total: 1:

View the following link to download the report. RunnerID:6673240903

[github-actions[bot]]

• Site: http://teachmint.qa

• Site: https://teachmint.qa New Alerts

  • SQL Injection - SQLite [40024] total: 1:
    • https://teachmint.qa/partner

View the following link to download the report. RunnerID:6679831492

[github-actions[bot]]

• Site: http://teachmint.qa

• Site: https://teachmint.qa Resolved Alerts

  • SQL Injection - SQLite [40024] total: 1:
  • Session Management Response Identified [10112] total: 4:

View the following link to download the report. RunnerID:6686460506

[github-actions[bot]]

• Site: http://teachmint.qa

• Site: https://teachmint.qa New Alerts

  • SQL Injection - SQLite [40024] total: 1:
    • https://teachmint.qa/partner

View the following link to download the report. RunnerID:6726307010

[github-actions[bot]]

• Site: http://teachmint.qa

• Site: https://teachmint.qa New Alerts

  • Retrieved from Cache [10050] total: 3:
    • https://teachmint.qa/static2/images/feature/landing-page/icons/school-inventory-management.svg
    • https://teachmint.qa/static2/images/feature/landing-page/images/id-card-generator.svg
    • https://teachmint.qa/static2/images/feature/landing-page/images/timetable-maker.svg

View the following link to download the report. RunnerID:6757793909

[github-actions[bot]]

• Site: https://bikeboy-web.maas-diin.com New Alerts
  • Bypassing 403 [40038] total: 4:
    • https://bikeboy-web.maas-diin.com/
    • https://bikeboy-web.maas-diin.com/
    • https://bikeboy-web.maas-diin.com/
    • https://bikeboy-web.maas-diin.com/
  • Content Security Policy (CSP) Header Not Set [10038] total: 2:
    • https://bikeboy-web.maas-diin.com/
    • https://bikeboy-web.maas-diin.com/sitemap.xml
  • Missing Anti-clickjacking Header [10020] total: 1:
    • https://bikeboy-web.maas-diin.com/
  • Sub Resource Integrity Attribute Missing [90003] total: 4:
    • https://bikeboy-web.maas-diin.com/
    • https://bikeboy-web.maas-diin.com/
    • https://bikeboy-web.maas-diin.com/sitemap.xml
    • https://bikeboy-web.maas-diin.com/sitemap.xml
  • Cross-Domain JavaScript Source File Inclusion [10017] total: 4:
    • https://bikeboy-web.maas-diin.com/
    • https://bikeboy-web.maas-diin.com/
    • https://bikeboy-web.maas-diin.com/sitemap.xml
    • https://bikeboy-web.maas-diin.com/sitemap.xml
  • Permissions Policy Header Not Set [10063] total: 4:
    • https://bikeboy-web.maas-diin.com/
    • https://bikeboy-web.maas-diin.com/sitemap.xml
    • https://bikeboy-web.maas-diin.com/static/js/9.bb319fce.chunk.js
    • https://bikeboy-web.maas-diin.com/static/js/main.751a14c0.chunk.js
  • Server Leaks Version Information via "Server" HTTP Response Header Field [10036] total: 9:
    • https://bikeboy-web.maas-diin.com/
    • https://bikeboy-web.maas-diin.com/logo192.png
    • https://bikeboy-web.maas-diin.com/manifest.json
    • https://bikeboy-web.maas-diin.com/robots.txt
    • https://bikeboy-web.maas-diin.com/sitemap.xml
    • ..
  • Strict-Transport-Security Header Not Set [10035] total: 9:
    • https://bikeboy-web.maas-diin.com/
    • https://bikeboy-web.maas-diin.com/logo192.png
    • https://bikeboy-web.maas-diin.com/manifest.json
    • https://bikeboy-web.maas-diin.com/robots.txt
    • https://bikeboy-web.maas-diin.com/sitemap.xml
    • ..
  • Timestamp Disclosure - Unix [10096] total: 53:
    • https://bikeboy-web.maas-diin.com/static/js/9.bb319fce.chunk.js
    • https://bikeboy-web.maas-diin.com/static/js/9.bb319fce.chunk.js
    • https://bikeboy-web.maas-diin.com/static/js/9.bb319fce.chunk.js
    • https://bikeboy-web.maas-diin.com/static/js/9.bb319fce.chunk.js
    • https://bikeboy-web.maas-diin.com/static/js/9.bb319fce.chunk.js
    • ..
  • X-Content-Type-Options Header Missing [10021] total: 8:
    • https://bikeboy-web.maas-diin.com/
    • https://bikeboy-web.maas-diin.com/logo192.png
    • https://bikeboy-web.maas-diin.com/manifest.json
    • https://bikeboy-web.maas-diin.com/robots.txt
    • https://bikeboy-web.maas-diin.com/static/css/9.0b66619d.chunk.css
    • ..
  • Base64 Disclosure [10094] total: 10:
    • https://bikeboy-web.maas-diin.com/
    • https://bikeboy-web.maas-diin.com/
    • https://bikeboy-web.maas-diin.com/logo192.png
    • https://bikeboy-web.maas-diin.com/manifest.json
    • https://bikeboy-web.maas-diin.com/robots.txt
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 2:
    • https://bikeboy-web.maas-diin.com/static/js/9.bb319fce.chunk.js
    • https://bikeboy-web.maas-diin.com/static/js/main.751a14c0.chunk.js
  • Modern Web Application [10109] total: 2:
    • https://bikeboy-web.maas-diin.com/
    • https://bikeboy-web.maas-diin.com/sitemap.xml
  • Non-Storable Content [10049] total: 1:
    • https://bikeboy-web.maas-diin.com/sitemap.xml
  • Re-examine Cache-control Directives [10015] total: 3:
    • https://bikeboy-web.maas-diin.com/
    • https://bikeboy-web.maas-diin.com/manifest.json
    • https://bikeboy-web.maas-diin.com/robots.txt
  • Retrieved from Cache [10050] total: 2:
    • https://bikeboy-web.maas-diin.com/
    • https://bikeboy-web.maas-diin.com/sitemap.xml
  • Sec-Fetch-Dest Header is Missing [90005] total: 2:
    • https://bikeboy-web.maas-diin.com/
    • https://bikeboy-web.maas-diin.com/robots.txt
  • Sec-Fetch-Mode Header is Missing [90005] total: 2:
    • https://bikeboy-web.maas-diin.com/
    • https://bikeboy-web.maas-diin.com/robots.txt
  • Sec-Fetch-Site Header is Missing [90005] total: 2:
    • https://bikeboy-web.maas-diin.com/
    • https://bikeboy-web.maas-diin.com/robots.txt
  • Sec-Fetch-User Header is Missing [90005] total: 2:
    • https://bikeboy-web.maas-diin.com/
    • https://bikeboy-web.maas-diin.com/robots.txt
  • Storable and Cacheable Content [10049] total: 8:
    • https://bikeboy-web.maas-diin.com/
    • https://bikeboy-web.maas-diin.com/logo192.png
    • https://bikeboy-web.maas-diin.com/manifest.json
    • https://bikeboy-web.maas-diin.com/robots.txt
    • https://bikeboy-web.maas-diin.com/static/css/9.0b66619d.chunk.css
    • ..

View the following link to download the report. RunnerID:6976222741