Jardin remarquable en Bretagne - Le Jardin de Pellinec
HTTPS
目标分析
le-jardin-de-pellinec.fr
IP： 0.0.0.0
ASN： AS0
针对le-jardin-de-pellinec.fr的全面安全与网络分析报告。服务器：Apache。
- 主要端口
- 443
- 扫描时间
- 可分享的报告链接
- https://sechttp.com/scan/le-jardin-de-pellinec.fr
详细安全分析
攻击路径与DDoS防御分析
攻击者
L4流量
L7流量
AS0 (Apache POP节点)
L4已防御
L7已绕过
L4已阻止
L7流量
您的服务器
防御摘要
虽然Apache对第4层（网络层）攻击提供了强大的保护，但您的服务器仍可能容易受到绕过标准CDN防御的复杂第7层（应用层）攻击。建议添加额外的WAF规则和应用端安全措施。
第4层防御
Apache 在网络边缘提供强大的SYN洪泛、UDP放大和容量攻击保护。
第7层漏洞
针对1暴露的API端点的应用层攻击需要额外的WAF规则和速率限制。
服务器信息泄露
LOWINFO-001
描述
服务器正在泄露其软件类型：Apache。这可能帮助攻击者识别潜在漏洞。
建议
配置您的Web服务器以隐藏或修改Server头，以防止信息泄露。
缺少X-Frame-Options头
MEDIUMSEC-002
描述
网站未受到点击劫持攻击的保护。
建议
添加值为'DENY'或'SAMEORIGIN'的X-Frame-Options头，以防止点击劫持。
JavaScript中的敏感信息暴露
HIGHJS-001
描述
在客户端JavaScript代码中发现46个潜在敏感变量暴露。
建议
审查并移除客户端代码中的敏感信息。使用环境变量和服务器端处理敏感数据。
root@sechttp: /var/log/fuzz
root@sechttp : ~ $
> [Code: 200]
https://player.vimeo.com/api/player.js [敏感信息泄露]
[+] 扫描完成。发现 1 个潜在泄露。
root@sechttp : ~ $
端口扫描结果
| 端口 | 服务 | 状态 | 版本 |
|---|---|---|---|
| 80 | HTTP | 关闭 | - |
| 443 | HTTPS | 开放 | TLS 1.3 |
| 22 | SSH | 过滤 | - |
| 3306 | MySQL | 关闭 | - |
HTTP头分析
date:
Sun, 12 Apr 2026 17:45:45 GMT
etag:
"19841-64f46686220ca"
vary:
Accept-Encoding,Cookie
server:
Apache
expires:
Sun, 12 Apr 2026 17:45:48 GMT
upgrade:
h2
connection:
Upgrade
content-type:
text/html; charset=UTF-8
accept-ranges:
bytes
cache-control:
max-age=3, must-revalidate
last-modified:
Sun, 12 Apr 2026 17:07:57 GMT
content-length:
104513
strict-transport-security:
max-age=16000000
正在测试
对等连接信息正在分析。
正在测试
互联网交换点数据正在收集。
JavaScript分析
Security Analysis Alert
Client-side code analysis has identified potential security vulnerabilities and information disclosure risks.
暴露的JavaScript变量
Variables exposed in client-side code that may contain sensitive information
# Security Assessment: Variable Exposure Analysis
LEAK
URL
,e.message),
Risk: Information disclosure via client-side exposure
LEAK
key
a
Risk: Information disclosure via client-side exposure
LEAK
url
localize
Risk: Information disclosure via client-side exposure
LEAK
keys
o
Risk: Information disclosure via client-side exposure
LEAK
side
e
Risk: Information disclosure via client-side exposure
LEAK
access
function
Risk: Information disclosure via client-side exposure
LEAK
device
r
Risk: Information disclosure via client-side exposure
LEAK
mailto
,
Risk: Information disclosure via client-side exposure
LEAK
mobile
1
Risk: Information disclosure via client-side exposure
LEAK
clientX
touchstart
Risk: Information disclosure via client-side exposure
LEAK
clientY
e
Risk: Information disclosure via client-side exposure
LEAK
ownKeys
[sechttp]
Risk: Information disclosure via client-side exposure
LEAK
vimeourl
//vimeo.com/144598279
Risk: Information disclosure via client-side exposure
LEAK
nodeValue
n
Risk: Information disclosure via client-side exposure
LEAK
privateid
<empty_value>
Risk: Information disclosure via client-side exposure
LEAK
snapIndex
t
Risk: Information disclosure via client-side exposure
LEAK
wrapInner
function
Risk: Information disclosure via client-side exposure
LEAK
capitalize
function
Risk: Information disclosure via client-side exposure
LEAK
deviceMode
jQuery
Risk: Information disclosure via client-side exposure
LEAK
lastDevice
s
Risk: Information disclosure via client-side exposure
LEAK
statusCode
function
Risk: Information disclosure via client-side exposure
LEAK
urlActions
new
Risk: Information disclosure via client-side exposure
LEAK
youtubeurl
//www.youtube.com/watch?v=3PPtkRU7D74
Risk: Information disclosure via client-side exposure
LEAK
clientWidth
s
Risk: Information disclosure via client-side exposure
LEAK
enablejsapi
1
Risk: Information disclosure via client-side exposure
LEAK
environment
i
Risk: Information disclosure via client-side exposure
LEAK
youtubecode
3PPtkRU7D74
Risk: Information disclosure via client-side exposure
LEAK
checkingTest
<div class=
Risk: Information disclosure via client-side exposure
LEAK
isTouchDevice
ontouchstart
Risk: Information disclosure via client-side exposure
LEAK
mobilePortrait
mobile
Risk: Information disclosure via client-side exposure
LEAK
mobileportrait
6
Risk: Information disclosure via client-side exposure
LEAK
sessionStorage
localStorage
Risk: Information disclosure via client-side exposure
LEAK
maintainSession
0
Risk: Information disclosure via client-side exposure
LEAK
mobileLandscape
mobile
Risk: Information disclosure via client-side exposure
LEAK
mobilelandscape
5
Risk: Information disclosure via client-side exposure
LEAK
playWhenVisible
1
Risk: Information disclosure via client-side exposure
LEAK
devicePixelRatio
i
Risk: Information disclosure via client-side exposure
LEAK
considerScrollbar
elementorFrontend
Risk: Information disclosure via client-side exposure
LEAK
slideVisibleClass
swiper-slide-visible
Risk: Information disclosure via client-side exposure
LEAK
wpa_add_test_block
[sechttp]
Risk: Information disclosure via client-side exposure
LEAK
touchReleaseOnEdges
i
Risk: Information disclosure via client-side exposure
LEAK
lightboxMobileNewTab
1
Risk: Information disclosure via client-side exposure
LEAK
DeviceMode.mobileportrait
6
Risk: Information disclosure via client-side exposure
LEAK
DeviceMode.mobilelandscape
5
Risk: Information disclosure via client-side exposure
LEAK
_DeviceGroup.mobilePortrait
mobile
Risk: Information disclosure via client-side exposure
LEAK
_DeviceGroup.mobileLandscape
mobile
Risk: Information disclosure via client-side exposure
Total: 46 exposed variables found
API域名分析
External API domains discovered in client-side code
EXTERNAL_API_DOMAIN
schema.org
Reachable
HTTPS Enabled
Security Note:
External API domains should be validated for proper authentication and rate limiting
EXTERNAL_API_DOMAIN
le-jardin-de-pellinec.fr
Reachable
HTTPS Enabled
Security Note:
External API domains should be validated for proper authentication and rate limiting
EXTERNAL_API_DOMAIN
pellinec.agence-equodesign.fr
Reachable
HTTPS Enabled
Security Note:
External API domains should be validated for proper authentication and rate limiting
EXTERNAL_API_DOMAIN
player.vimeo.com
Reachable
HTTPS Enabled
Security Note:
External API domains should be validated for proper authentication and rate limiting
EXTERNAL_API_DOMAIN
www.youtube.com
Reachable
HTTPS Enabled
Security Note:
External API domains should be validated for proper authentication and rate limiting
EXTERNAL_API_DOMAIN
www.youtube-nocookie.com
Reachable
HTTPS Enabled
Security Note:
External API domains should be validated for proper authentication and rate limiting
EXTERNAL_API_DOMAIN
vimeo.com
Reachable
HTTPS Enabled
Security Note:
External API domains should be validated for proper authentication and rate limiting
EXTERNAL_API_DOMAIN
github.com
Reachable
HTTPS Enabled
Security Note:
External API domains should be validated for proper authentication and rate limiting
EXTERNAL_API_DOMAIN
jqueryui.com
Reachable
HTTPS Enabled
Security Note:
External API domains should be validated for proper authentication and rate limiting
EXTERNAL_API_DOMAIN
jquery.org
Reachable
HTTPS Enabled
Security Note:
External API domains should be validated for proper authentication and rate limiting
EXTERNAL_API_DOMAIN
api.jqueryui.com
Reachable
HTTPS Enabled
Security Note:
External API domains should be validated for proper authentication and rate limiting
EXTERNAL_API_DOMAIN
swiperjs.com
Reachable
HTTPS Enabled
Security Note:
External API domains should be validated for proper authentication and rate limiting
发现的API端点
API endpoints identified through static analysis of client-side code
GET
https://player.vimeo.com/api/player.js
Active
Endpoint discovered via client-side code analysis
JavaScript资源
JavaScript files loaded by the application
JS
https://le-jardin-de-pellinec.fr/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/n2.min.js?ver=a019cc0d
JS
https://le-jardin-de-pellinec.fr/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/smartslider-frontend.min.js?ver=a019cc0d
JS
https://le-jardin-de-pellinec.fr/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Slider/SliderType/Simple/Assets/dist/ss-simple.min.js?ver=a019cc0d
JS
https://le-jardin-de-pellinec.fr/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Arrow/ArrowImage/Assets/dist/w-arrow-image.min.js?ver=a019cc0d
JS
https://le-jardin-de-pellinec.fr/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
JS
https://le-jardin-de-pellinec.fr/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
JS
https://www.googletagmanager.com/gtag/js?id=GT-P3FCBV7
JS
https://le-jardin-de-pellinec.fr/wp-content/plugins/honeypot/includes/js/wpa.js?ver=2.3.04
JS
https://le-jardin-de-pellinec.fr/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=4.0.1
JS
https://le-jardin-de-pellinec.fr/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=4.0.1
JS
https://le-jardin-de-pellinec.fr/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3
JS
https://le-jardin-de-pellinec.fr/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=4.0.1
JS
https://le-jardin-de-pellinec.fr/wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js?ver=8.4.5
JS
https://le-jardin-de-pellinec.fr/wp-content/themes/generatepress/assets/js/back-to-top.min.js?ver=3.6.0
JS
https://le-jardin-de-pellinec.fr/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=6.6.0
JS
https://le-jardin-de-pellinec.fr/wp-content/plugins/header-footer-elementor/inc/js/frontend.js?ver=2.8.6
JS
"https://le-jardin-de-pellinec.fr/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/n2.min.js?ver=a019cc0d"
JS
"https://le-jardin-de-pellinec.fr/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/smartslider-frontend.min.js?ver=a019cc0d"
JS
"https://le-jardin-de-pellinec.fr/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Slider/SliderType/Simple/Assets/dist/ss-simple.min.js?ver=a019cc0d"
JS
"https://le-jardin-de-pellinec.fr/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Arrow/ArrowImage/Assets/dist/w-arrow-image.min.js?ver=a019cc0d"
JS
"https://le-jardin-de-pellinec.fr/wp-includes/js/jquery/jquery.min.js?ver=3.7.1"
JS
"https://le-jardin-de-pellinec.fr/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1"
JS
"https://www.googletagmanager.com/gtag/js?id=GT-P3FCBV7"
JS
"https://le-jardin-de-pellinec.fr/wp-content/plugins/honeypot/includes/js/wpa.js?ver=2.3.04"
JS
"https://le-jardin-de-pellinec.fr/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=4.0.1"
JS
"https://le-jardin-de-pellinec.fr/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=4.0.1"
JS
"https://le-jardin-de-pellinec.fr/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3"
JS
"https://le-jardin-de-pellinec.fr/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=4.0.1"
JS
"https://le-jardin-de-pellinec.fr/wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js?ver=8.4.5"
JS
"https://le-jardin-de-pellinec.fr/wp-content/themes/generatepress/assets/js/back-to-top.min.js?ver=3.6.0"
JS
"https://le-jardin-de-pellinec.fr/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=6.6.0"
JS
"https://le-jardin-de-pellinec.fr/wp-content/plugins/header-footer-elementor/inc/js/frontend.js?ver=2.8.6"
安全建议
- • Avoid exposing sensitive variables in client-side code
- • Implement proper API authentication and rate limiting
- • Use environment variables for sensitive configuration
- • Regularly audit client-side code for information leaks
- • Minimize the amount of sensitive data processed on the client side
历史扫描记录 (1)
Jardin remarquable en Bretagne, le Jardin de Pellinec à Penvénan fait partie des plus beaux jardins de France.
65/100
4 issues