百度一下，你就知道

HTTPS

타겟 분석

www.baidu.com

IP: 103.235.46.102

ASN: AS55967

www.baidu.com에 대한 포괄적인 보안 및 네트워크 분석 보고서. 서버: BWS/1.1. CN에서 호스팅됨.

주요 포트: 443
스캔 시간: 9/14/2025, 11:08:15 PM
공유 가능한 보고서 링크: https://sechttp.com/scan/www.baidu.com

상세 보안 분석

공격 경로 및 DDoS 방어 분석

공격자

L4 트래픽

L7 트래픽

AS55967 (BWS/1.1 POP)

L4 방어됨

L7 우회됨

L4 차단됨

L7 트래픽

귀하의 서버

방어 요약

BWS/1.1는 레이어 4(네트워크 수준) 공격에 대해 강력한 보호를 제공하지만, 표준 CDN 방어를 우회할 수 있는 정교한 레이어 7(애플리케이션 수준) 공격에 대해 서버가 여전히 취약할 수 있습니다. 추가 WAF 규칙과 애플리케이션 측 보안 조치가 권장됩니다.

레이어 4 방어

BWS/1.1 네트워크 엣지에서 SYN 플러드, UDP 증폭 및 대규모 공격에 대한 강력한 보호를 제공합니다.

레이어 7 취약점

3의 노출된 API 엔드포인트를 대상으로 하는 애플리케이션 레벨 공격은 추가 WAF 규칙과 속도 제한이 필요합니다.

서버 정보 노출

LOW

INFO-001

설명

서버가 소프트웨어 유형을 공개하고 있습니다: BWS/1.1. 이는 공격자가 잠재적 취약점을 식별하는 데 도움이 될 수 있습니다.

권장 사항

정보 노출을 방지하기 위해 서버 헤더를 숨기거나 수정하도록 웹 서버를 구성하십시오.

X-Frame-Options 헤더 누락

MEDIUM

SEC-002

설명

이 사이트는 클릭재킹 공격으로부터 보호되지 않습니다.

권장 사항

클릭재킹을 방지하기 위해 X-Frame-Options 헤더에 'DENY' 또는 'SAMEORIGIN' 값을 추가하십시오.

JavaScript에서 민감 정보 노출

HIGH

JS-001

설명

클라이언트 측 JavaScript 코드에서 193개의 잠재적으로 민감한 변수가 노출되었습니다.

권장 사항

클라이언트 측 코드에서 민감한 정보를 검토하고 제거하십시오. 민감한 데이터에는 환경 변수와 서버 측 처리를 사용하십시오.

root@sechttp: /var/log/fuzz

 root@sechttp : ~ $ 
 >  [Code: 200]  
http://opendata.baidu.com/api.php [민감 정보 유출]  
 >  [Code: 403]  
http://j.br.baidu.com/v1/t/ui/p/browser/tn/10105001/ch_dl_url  [금지됨] 
 >  [Code: 404]  
https://passport.baidu.com/v2/?login&tpl=mn&u=   
 [+] 스캔 완료. 발견된 항목: 1 잠재적 유출. 
root@sechttp:~$

포트 스캔 결과

   포트 서비스 상태 버전 
HTTP  닫힘   -  
HTTPS  오픈   TLS 1.3  
SSH  필터링됨   -  
MySQL  닫힘   -  
  

포트	서비스	상태	버전
80	HTTP	닫힘	-
443	HTTPS	오픈	TLS 1.3
22	SSH	필터링됨	-
3306	MySQL	닫힘	-

HTTP 헤더 분석

p3p: CP=" OTI DSP COR IVA OUR IND COM ", CP=" OTI DSP COR IVA OUR IND COM " 
date: Sun, 14 Sep 2025 23:07:59 GMT 
vary: Accept-Encoding 
bdqid: 0xc509d0dd020acb24 
tr_id: super_0xc509d0dd020acb24 
server: BWS/1.1 
traceid: 1757891279256834535414198108947902810916 
bdpagetype: 1 
connection: keep-alive 
set-cookie:BAIDUID=9E8ABA6581E1FA24816F19F062B4AE51:FG=1; expires=Thu, 31-Dec-37 23:55:55 GMT; max-age=2147483647; path=/; domain=.baidu.com
BIDUPSID=9E8ABA6581E1FA24816F19F062B4AE51; expires=Thu, 31-Dec-37 23:55:55 GMT; max-age=2147483647; path=/; domain=.baidu.com
PSTM=1757891279; expires=Thu, 31-Dec-37 23:55:55 GMT; max-age=2147483647; path=/; domain=.baidu.com
BAIDUID=9E8ABA6581E1FA24F5169361E865D131:FG=1; max-age=31536000; expires=Mon, 14-Sep-26 23:07:59 GMT; domain=.baidu.com; path=/; version=1; comment=bd
BDSVRTM=2; path=/
BD_HOME=1; path=/
content-type: text/html; charset=utf-8 
content-length: 658175 
x-ua-compatible: IE=Edge,chrome=1 
x-xss-protection: 1;mode=block 
strict-transport-security: max-age=172800 

ASN 정보

ASN: AS55967

IP 주소: 103.235.46.102

네트워크 접두사: 103.235.46.0/24

조직: Baidu

국가:

🇨🇳 CN

이름: Baidu

업스트림 제공자 (7)

AS6453

TATA COMMUNICATIONS (AMERICA) INC

🇺🇸 US

upstream

AS3491

CONSOLE-CONNECT-ASN

PCCW Global, Inc.

🇺🇸 US

upstream

AS6939

HURRICANE

Hurricane Electric LLC

🇺🇸 US

upstream

AS2914

NTT-DATA-2914

NTT America, Inc.

🇺🇸 US

upstream

AS6762

SEABONE-NET

TELECOM ITALIA SPARKLE S.p.A.

🇮🇹 IT

upstream

AS6453

TATA COMMUNICATIONS (AMERICA) INC

🇺🇸 US

upstream

AS6939

HURRICANE

Hurricane Electric LLC

🇺🇸 US

upstream

인터넷 교환 지점 (11)

🇸🇬

Equinix Singapore

10 Gbps

Bandwidth

🇸🇬

BBIX Singapore

10 Gbps

Bandwidth

🇸🇬

Equinix Singapore

10 Gbps

Bandwidth

🇯🇵

BBIX Tokyo

10 Gbps

Bandwidth

🇯🇵

BBIX Tokyo

10 Gbps

Bandwidth

🇺🇸

Any2East

10 Gbps

Bandwidth

🇩🇪

DE-CIX Frankfurt

10 Gbps

Bandwidth

🇭🇰

HKIX

10 Gbps

Bandwidth

🇭🇰

HKIX

10 Gbps

Bandwidth

🇭🇰

Equinix Hong Kong

100 Gbps

Bandwidth

🇭🇰

Equinix Hong Kong

100 Gbps

Bandwidth

JavaScript 분석

Security Analysis Alert

Client-side code analysis has identified potential security vulnerabilities and information disclosure risks.

노출된 JavaScript 변수

193 Found

Variables exposed in client-side code that may contain sensitive information

# Security Assessment: Variable Exposure Analysis
 
LEAK
 
URL
 _e 

Risk: Information disclosure via client-side exposure
 
LEAK
 
api
 [XSS working] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
env
 pc 

Risk: Information disclosure via client-side exposure
 
LEAK
 
key
 destroy 

Risk: Information disclosure via client-side exposure
 
LEAK
 
sid
 s_session 

Risk: Information disclosure via client-side exposure
 
LEAK
 
url
 e 

Risk: Information disclosure via client-side exposure
 
LEAK
 
URLS
 [XSS working] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
code
 e 

Risk: Information disclosure via client-side exposure
 
LEAK
 
furl
 +encodeURIComponent(p.substring(0,p.length-1))),$.ajax({url: 

Risk: Information disclosure via client-side exposure
 
LEAK
 
isid
 +Rt+ 

Risk: Information disclosure via client-side exposure
 
LEAK
 
keys
 [XSS working] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
osid
 <empty_value> 

Risk: Information disclosure via client-side exposure
 
LEAK
 
ssid
 s_session 

Risk: Information disclosure via client-side exposure
 
LEAK
 
urls
 +l.join( 

Risk: Information disclosure via client-side exposure
 
LEAK
 
absId
 absId 

Risk: Information disclosure via client-side exposure
 
LEAK
 
addEV
 [sechttp] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
appid
 12133 

Risk: Information disclosure via client-side exposure
 
LEAK
 
aside
 1 

Risk: Information disclosure via client-side exposure
 
LEAK
 
b.url
 1 

Risk: Information disclosure via client-side exposure
 
LEAK
 
c_url
 +encodeURIComponent(t),n=new Image,a= 

Risk: Information disclosure via client-side exposure
 
LEAK
 
cburl
 .concat(encodeURIComponent(t), 

Risk: Information disclosure via client-side exposure
 
LEAK
 
codes
 null 

Risk: Information disclosure via client-side exposure
 
LEAK
 
email
 e 

Risk: Information disclosure via client-side exposure
 
LEAK
 
furls
 encodeURIComponent 

Risk: Information disclosure via client-side exposure
 
LEAK
 
keyOf
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
keyup
 [sechttp] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
posId
 e 

Risk: Information disclosure via client-side exposure
 
LEAK
 
posid
 +r+ 

Risk: Information disclosure via client-side exposure
 
LEAK
 
resId
 [XSS working] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
resid
 n 

Risk: Information disclosure via client-side exposure
 
LEAK
 
toUrl
 [sechttp] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
token
 n 

Risk: Information disclosure via client-side exposure
 
LEAK
 
Ah.sid
 <empty_value> 

Risk: Information disclosure via client-side exposure
 
LEAK
 
Cookie
 [XSS working] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
NUMBER
 2 

Risk: Information disclosure via client-side exposure
 
LEAK
 
access
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
apkUrl
 m 

Risk: Information disclosure via client-side exposure
 
LEAK
 
appUrl
 e 

Risk: Information disclosure via client-side exposure
 
LEAK
 
assign
 ft 

Risk: Information disclosure via client-side exposure
 
LEAK
 
author
 Ronen Ness 

Risk: Information disclosure via client-side exposure
 
LEAK
 
codeAt
 cp 

Risk: Information disclosure via client-side exposure
 
LEAK
 
codecs
 vorbis 

Risk: Information disclosure via client-side exposure
 
LEAK
 
cookie
 [XSS working] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
design
 paramtypes 

Risk: Information disclosure via client-side exposure
 
LEAK
 
domain
 +o: 

Risk: Information disclosure via client-side exposure
 
LEAK
 
encode
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
fb_url
 e 

Risk: Information disclosure via client-side exposure
 
LEAK
 
gitUrl
 https://github.com/RonenNess/ExpiredStorage 

Risk: Information disclosure via client-side exposure
 
LEAK
 
gpsApi
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
keyFor
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
keyMap
 [XSS working] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
mapapi
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
modEvt
 evt 

Risk: Information disclosure via client-side exposure
 
LEAK
 
newKey
 [XSS working] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
number
 u 

Risk: Information disclosure via client-side exposure
 
LEAK
 
qrcode
 2 

Risk: Information disclosure via client-side exposure
 
LEAK
 
sslurl
 [XSS working] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
stoken
 o 

Risk: Information disclosure via client-side exposure
 
LEAK
 
tmpurl
 [XSS working] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
API_URL
 bds 

Risk: Information disclosure via client-side exposure
 
LEAK
 
ERR_URL
 bds 

Risk: Information disclosure via client-side exposure
 
LEAK
 
_getKey
 [sechttp] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
apiType
 100 

Risk: Information disclosure via client-side exposure
 
LEAK
 
baseURL
 <empty_value> 

Risk: Information disclosure via client-side exposure
 
LEAK
 
baseUrl
 [XSS working] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
bsToken
 +r,type: 

Risk: Information disclosure via client-side exposure
 
LEAK
 
downUrl
 http://j.br.baidu.com/v1/t/ui/p/browser/tn/10105001/ch_dl_url 

Risk: Information disclosure via client-side exposure
 
LEAK
 
fastKey
 a 

Risk: Information disclosure via client-side exposure
 
LEAK
 
findKey
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
hintUrl
 r 

Risk: Information disclosure via client-side exposure
 
LEAK
 
img_key
 "_WWW_BR_API_"+(new Date).getTime() 

Risk: Information disclosure via client-side exposure
 
LEAK
 
jumpUrl
 <empty_value> 

Risk: Information disclosure via client-side exposure
 
LEAK
 
keyPath
 key 

Risk: Information disclosure via client-side exposure
 
LEAK
 
keydown
 [sechttp] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
mapKeys
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
ownKeys
 [sechttp] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
pageUrl
 location 

Risk: Information disclosure via client-side exposure
 
LEAK
 
rsv_sid
 this 

Risk: Information disclosure via client-side exposure
 
LEAK
 
sendUrl
 [XSS working] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
session
 s_session 

Risk: Information disclosure via client-side exposure
 
LEAK
 
signNum
 [XSS working] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
t.appid
 12133 

Risk: Information disclosure via client-side exposure
 
LEAK
 
testUrl
 Th 

Risk: Information disclosure via client-side exposure
 
LEAK
 
wxAppid
 wx5f691c1d07b5b392 

Risk: Information disclosure via client-side exposure
 
LEAK
 
ACCESSOR
 4 

Risk: Information disclosure via client-side exposure
 
LEAK
 
_evalUrl
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
addEvent
 [sechttp] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
buildURL
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
charCode
 [XSS working] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
cityCode
 [XSS working] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
citycode
 +cityCode+ 

Risk: Information disclosure via client-side exposure
 
LEAK
 
data.sid
 <empty_value> 

Risk: Information disclosure via client-side exposure
 
LEAK
 
flashUrl
 <empty_value> 

Risk: Information disclosure via client-side exposure
 
LEAK
 
ieLibUrl
 //www.baidu.com/cache/fpid/ielib_1_1.js 

Risk: Information disclosure via client-side exposure
 
LEAK
 
indexSid
 bds 

Risk: Information disclosure via client-side exposure
 
LEAK
 
keyValue
 [XSS working] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
keyvalue
 [XSS working] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
libjsUrl
 //www.baidu.com/cache/fpid/lib_1_0.js 

Risk: Information disclosure via client-side exposure
 
LEAK
 
password
 Me 

Risk: Information disclosure via client-side exposure
 
LEAK
 
rsv_isid
 +bds.comm.indexSid),e.no_predict&&(s+= 

Risk: Information disclosure via client-side exposure
 
LEAK
 
startAPI
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
tokenize
 [sechttp] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
xn.aside
 1 

Risk: Information disclosure via client-side exposure
 
LEAK
 
_iterKeys
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
bindEvent
 [XSS working] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
data.osid
 <empty_value> 

Risk: Information disclosure via client-side exposure
 
LEAK
 
failedUrl
 <empty_value> 

Risk: Information disclosure via client-side exposure
 
LEAK
 
getCookie
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
isKeyDown
 [XSS working] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
loadEvent
 c 

Risk: Information disclosure via client-side exposure
 
LEAK
 
setCookie
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
staticUrl
 https://pss.bdstatic.com/r/www/cache/static/protocol/https 

Risk: Information disclosure via client-side exposure
 
LEAK
 
testAudio
 [XSS working] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
trueResId
 [XSS working] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
un.NUMBER
 2 

Risk: Information disclosure via client-side exposure
 
LEAK
 
updateURL
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
urlParams
 Lt 

Risk: Information disclosure via client-side exposure
 
LEAK
 
wrapInner
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
_bindEvent
 [sechttp] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
decodeHTML
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
encodeHTML
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
extend_url
 e 

Risk: Information disclosure via client-side exposure
 
LEAK
 
keywatched
 [XSS working] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
native_url
 .concat(encodeURIComponent(e))},appStoreUrl: 

Risk: Information disclosure via client-side exposure
 
LEAK
 
requestUrl
 [XSS working] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
statusCode
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
typeNumber
 +e+ 

Risk: Information disclosure via client-side exposure
 
LEAK
 
_isValidKey
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
appStoreUrl
 <empty_value> 

Risk: Information disclosure via client-side exposure
 
LEAK
 
buildInKeys
 [XSS working] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
clearCookie
 [sechttp] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
clientWidth
 f 

Risk: Information disclosure via client-side exposure
 
LEAK
 
encodeArray
 [sechttp] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
iosStoreUrl
 k 

Risk: Information disclosure via client-side exposure
 
LEAK
 
lastMapItem
 [XSS working] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
onurlchange
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
otherLibUrl
 //www.baidu.com/cache/fpid/chromelib_1_1.js 

Risk: Information disclosure via client-side exposure
 
LEAK
 
qrcodehover
 1100000007 

Risk: Information disclosure via client-side exposure
 
LEAK
 
responseURL
 r 

Risk: Information disclosure via client-side exposure
 
LEAK
 
rsv_clk_url
 h 

Risk: Information disclosure via client-side exposure
 
LEAK
 
successCode
 0 

Risk: Information disclosure via client-side exposure
 
LEAK
 
un.ACCESSOR
 4 

Risk: Information disclosure via client-side exposure
 
LEAK
 
writeCookie
 writeCookie 

Risk: Information disclosure via client-side exposure
 
LEAK
 
DOMTokenList
 1 

Risk: Information disclosure via client-side exposure
 
LEAK
 
advChangeUrl
 [sechttp] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
clientHeight
 m 

Risk: Information disclosure via client-side exposure
 
LEAK
 
cookieSwitch
 [XSS working] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
encodeString
 [sechttp] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
extChangeUrl
 [sechttp] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
getCheckCode
 [sechttp] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
getKeyRecord
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
getSearchUrl
 e 

Risk: Information disclosure via client-side exposure
 
LEAK
 
removeCookie
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
reverseIdKey
 data-reverse-id 

Risk: Information disclosure via client-side exposure
 
LEAK
 
toDateString
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
urlArgsIndex
 [XSS working] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
SVGNumberList
 0 

Risk: Information disclosure via client-side exposure
 
LEAK
 
_createCookie
 [sechttp] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
asideStyleTpl
 this 

Risk: Information disclosure via client-side exposure
 
LEAK
 
baseChangeUrl
 [sechttp] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
base_url_path
 http://f3.baidu.com 

Risk: Information disclosure via client-side exposure
 
LEAK
 
centerPageUrl
 r 

Risk: Information disclosure via client-side exposure
 
LEAK
 
dataAndEvents
 deepDataAndEvents 

Risk: Information disclosure via client-side exposure
 
LEAK
 
domainLookupT
 o 

Risk: Information disclosure via client-side exposure
 
LEAK
 
fileChangeUrl
 [sechttp] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
langChangeUrl
 [sechttp] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
m.MODE_NUMBER
 1 

Risk: Information disclosure via client-side exposure
 
LEAK
 
ClientRectList
 0 

Risk: Information disclosure via client-side exposure
 
LEAK
 
getCacheBySign
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
URLSearchParams
 z 

Risk: Information disclosure via client-side exposure
 
LEAK
 
config.flashUrl
 <empty_value> 

Risk: Information disclosure via client-side exposure
 
LEAK
 
newHectorCookie
 [XSS working] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
oldHectorCookie
 [XSS working] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
qp.DOMTokenList
 1 

Risk: Information disclosure via client-side exposure
 
LEAK
 
setupTypeNumber
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
checkTokenCopied
 _ 

Risk: Information disclosure via client-side exposure
 
LEAK
 
deleteCacheByEnv
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
getBCHTypeNumber
 function 

Risk: Information disclosure via client-side exposure
 
LEAK
 
qp.SVGNumberList
 <empty_value> 

Risk: Information disclosure via client-side exposure
 
LEAK
 
testLocalStorage
 [sechttp] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
FAILEDURL_SUCCESS
 10004 

Risk: Information disclosure via client-side exposure
 
LEAK
 
createStandardXHR
 [sechttp] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
matcherFromTokens
 [sechttp] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
qp.ClientRectList
 <empty_value> 

Risk: Information disclosure via client-side exposure
 
LEAK
 
setPositiveNumber
 [sechttp] 

Risk: Information disclosure via client-side exposure
 
LEAK
 
boundingClientRect
 s 

Risk: Information disclosure via client-side exposure
 
LEAK
 
Hm.FAILEDURL_SUCCESS
 10004 

Risk: Information disclosure via client-side exposure
 
LEAK
 
exports.DOMTokenList
 1 

Risk: Information disclosure via client-side exposure
 
LEAK
 
tabTimeClickInBucket
 7000100000 

Risk: Information disclosure via client-side exposure
 
LEAK
 
exports.SVGNumberList
 <empty_value> 

Risk: Information disclosure via client-side exposure
 
LEAK
 
_expiration_key_prefix
 __expired_storage_ts__ 

Risk: Information disclosure via client-side exposure
 
LEAK
 
exports.ClientRectList
 <empty_value> 

Risk: Information disclosure via client-side exposure
 
LEAK
 
ERR_ACCESSORS_NOT_SUPPORTED
 getters & setters can not be defined on this javascript engine 

Risk: Information disclosure via client-side exposure
 
Total: 193 exposed variables found

API 도메인 분석

82 Domains

External API domains discovered in client-side code

EXTERNAL_API_DOMAIN

sp1.baidu.com

Reachable

HTTPS Enabled

Security Note: