esms.vn

Why it matters

Services such as SMB, NFS, and rsync can reveal or modify shared files and have a history of serious vulnerabilities. They rarely need to accept connections directly from the public Internet.

What to do

Limit file-sharing services to private networks or a tightly controlled VPN, and allow only the users and systems that require access.

Evidence and check scope

Complete:

Yes

Ports checked:

21, 22, 23, 25, 53, 80, 110, 111, 139, 143… and 48 more

Matching open services:

103.29.26.39:139, netbios-ssn, 103.29.26.39:445, smb

Services selected for identification:

4

Services identified:

3

Service identification complete:

Yes

Why it matters

The Secure attribute prevents a browser from sending a cookie over unencrypted HTTP. This bounded check scores cookies whose names look session- or authentication-related; other cookies are reported as context but do not by themselves prove that sensitive data is exposed.

What to do

Set Secure on every session, authentication, and other sensitive cookie served by the HTTPS application.

Why it matters

Content Security Policy (CSP) limits where scripts, styles, frames, and other browser content may come from. A strong policy reduces the impact if an attacker manages to inject content into a page.

What to do

Define only the sources the application needs, test the policy before activating it, and avoid broad wildcard (*) rules, unsafe-inline, and unsafe-eval where possible.