@kinosec/cli 0.3.2 → 0.3.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +28 -1
- package/dist/cli.js +934 -220
- package/dist/cli.js.map +1 -1
- package/package.json +3 -2
package/README.md
CHANGED
|
@@ -82,7 +82,34 @@ a1b2c3d4-0000-0000-0000-000000000001 example.com full Completed 5/1/2026
|
|
|
82
82
|
|
|
83
83
|
$ kinosec finding list a1b2c3d4-0000-0000-0000-000000000001
|
|
84
84
|
ID Name Severity Status
|
|
85
|
-
b2c3d4e5-0000-0000-0000-000000000001
|
|
85
|
+
b2c3d4e5-0000-0000-0000-000000000001 Server Version Disclosure Low open
|
|
86
|
+
|
|
87
|
+
$ kinosec finding get b2c3d4e5-0000-0000-0000-000000000001
|
|
88
|
+
ID: b2c3d4e5-0000-0000-0000-000000000001
|
|
89
|
+
Name: Server Version Disclosure
|
|
90
|
+
Severity: Low
|
|
91
|
+
Status: open
|
|
92
|
+
Verification: confirmed
|
|
93
|
+
Phase: active_scanning
|
|
94
|
+
Created: 2026-05-01T00:00:00Z
|
|
95
|
+
|
|
96
|
+
Description
|
|
97
|
+
───────────
|
|
98
|
+
The server exposes version information in HTTP responses,
|
|
99
|
+
which may aid attackers in identifying known vulnerabilities...
|
|
100
|
+
|
|
101
|
+
Solution
|
|
102
|
+
────────
|
|
103
|
+
Remove or suppress server version headers in production...
|
|
104
|
+
|
|
105
|
+
Proof of Concept
|
|
106
|
+
────────────────
|
|
107
|
+
GET /api/health HTTP/1.1
|
|
108
|
+
Response: {"version": "3.2.1", "server": "nginx/1.24.0", "debug": true}
|
|
109
|
+
|
|
110
|
+
$ kinosec report list
|
|
111
|
+
ID Target Mode Findings Completed
|
|
112
|
+
a1b2c3d4-0000-0000-0000-000000000001 example.com full 2C 5H 3M 1L 0I 5/1/2026
|
|
86
113
|
```
|
|
87
114
|
|
|
88
115
|
## Requirements
|