---

C:\>python apy.py

    ←[94m
    =========================================
    Attendance System Security Assessment
    Target: 172.140.140.79
    =========================================
    ←[0m
    WARNING: This script is for authorized security testing only!
    Unauthorized access to computer systems is illegal.

←[94m[*] Checking network reachability...←[0m
←[92m[+] Port 22 is OPEN←[0m
←[92m[+] Port 80 is OPEN←[0m
←[91m[!] VULNERABILITY: Application uses unencrypted HTTP without TLS/SSL encryption←[0m
←[94m[*] Analyzing HTTP security headers...←[0m
←[91m[!] VULNERABILITY: Missing header: Strict-Transport-Security - HSTS missing - vulnerable to SSL stripping←[0m
←[91m[!] VULNERABILITY: Missing header: X-Frame-Options - Clickjacking protection missing←[0m
←[91m[!] VULNERABILITY: Missing header: X-Content-Type-Options - MIME-sniffing protection missing←[0m
←[91m[!] VULNERABILITY: Missing header: X-XSS-Protection - XSS filter not enabled←[0m
←[91m[!] VULNERABILITY: Missing header: Content-Security-Policy - CSP missing - vulnerable to XSS/injection←[0m
←[91m[!] VULNERABILITY: Missing header: Referrer-Policy - Referrer policy not set←[0m
←[91m[!] VULNERABILITY: Missing header: Permissions-Policy - Permissions policy missing←[0m
←[91m[!] VULNERABILITY: Server banner exposed: nginx←[0m
←[94m[*] Enumerating directories and files...←[0m
←[92m[+] Found: /assets/ (200 OK)←[0m
←[92m[+] Found: /fonts/ (200 OK)←[0m
←[92m[+] Found: /api/ (200 OK)←[0m
←[92m[+] Found: /static/ (200 OK)←[0m
←[92m[+] Found: /admin (200 OK)←[0m
←[92m[+] Found: /api/auth (200 OK)←[0m
←[92m[+] Found: /dashboard (200 OK)←[0m
←[92m[+] Found: /login (200 OK)←[0m
←[92m[+] Found: /graphql (200 OK)←[0m
←[92m[+] Found: /.git/ (200 OK)←[0m
←[91m[!] VULNERABILITY: Potentially sensitive file exposed: /.git/←[0m
←[92m[+] Found: /swagger (200 OK)←[0m
←[92m[+] Found: /health (200 OK)←[0m
←[92m[+] Found: /metrics (200 OK)←[0m
←[92m[+] Found: /site.webmanifest (200 OK)←[0m
←[92m[+] Found: /api-docs (200 OK)←[0m
←[92m[+] Found: /favicon.ico (200 OK)←[0m
←[92m[+] Found: /apple-touch-icon.png (200 OK)←[0m
←[94m[*] Analyzing React application structure...←[0m
←[92m[+] Found 5 JavaScript files←[0m
←[94m[*] Testing authentication mechanisms...←[0m
←[91m[!] VULNERABILITY: Login form may lack CSRF protection←[0m
←[94m[*] Testing common default credentials...←[0m
←[94m[*] Testing CORS configuration...←[0m
←[91m[!] VULNERABILITY: CORS allows origin: https://evil.com←[0m
←[91m[!] VULNERABILITY: CORS allows origin: http://localhost←[0m
←[91m[!] VULNERABILITY: CORS allows origin: http://127.0.0.1←[0m
←[91m[!] VULNERABILITY: CORS allows origin: https://attacker.com←[0m
←[91m[!] VULNERABILITY: CORS allows origin: null←[0m

============================================================
←[93mSECURITY ASSESSMENT REPORT←[0m
============================================================
Target: http://172.140.140.79
System: Attendance Management System (Davamiyyət sistemi)
Assessment Date: 2026-09-25 16:07:50
============================================================

←[91m[HIGH] HTTP without HTTPS←[0m
   Application runs on unencrypted HTTP (port 80) without HTTPS redirect

←[93m[LOW] Information Disclosure←[0m
   Server version exposed: nginx

←[91m[CRITICAL] Sensitive File Exposure←[0m
   /.git/ is accessible without authentication

←[93m[MEDIUM] Missing CSRF Protection←[0m
   Login form does not appear to have CSRF tokens

←[91m[HIGH] CORS Misconfiguration←[0m
   CORS policy allows arbitrary origins to make authenticated requests

============================================================
SUMMARY:
←[91mCRITICAL: 1←[0m
←[91mHIGH: 2←[0m
←[93mMEDIUM: 1←[0m
←[93mLOW: 1←[0m

Detailed report saved to: pentest_report_172_140_140_79.json

{
  "target": "http://172.140.140.79",
  "timestamp": "2026-09-25 16:07:50",
  "findings": [
    {
      "severity": "HIGH",
      "issue": "HTTP without HTTPS",
      "description": "Application runs on unencrypted HTTP (port 80) without HTTPS redirect"
    },
    {
      "severity": "LOW",
      "issue": "Information Disclosure",
      "description": "Server version exposed: nginx"
    },
    {
      "severity": "CRITICAL",
      "issue": "Sensitive File Exposure",
      "description": "/.git/ is accessible without authentication"
    },
    {
      "severity": "MEDIUM",
      "issue": "Missing CSRF Protection",
      "description": "Login form does not appear to have CSRF tokens"
    },
    {
      "severity": "HIGH",
      "issue": "CORS Misconfiguration",
      "description": "CORS policy allows arbitrary origins to make authenticated requests"
    }
  ]
}