primumterminus.com

primumterminus.com:443  ·  2026-05-19  ·  Pentest WEB
2 Critical

Executive Summary

12
Total Findings
230
Risk Score
2 Critical 7 High 1 Medium 2 Low

Web Application Findings

CRITICAL Sensitive Path Exposed: /.env

The path https://primumterminus.com/.env returned HTTP 200. This may expose configuration files, secrets, or API documentation to unauthorized users.

Remediation: Block public access to /.env. If this is intentional (e.g., robots.txt), ensure no sensitive data is exposed.
AC-3SC-7CM-7 AC.1.004SC.3.177 T1190T1592
CRITICAL Sensitive Path Exposed: /.git/config

The path https://primumterminus.com/.git/config returned HTTP 200. This may expose configuration files, secrets, or API documentation to unauthorized users.

Remediation: Block public access to /.git/config. If this is intentional (e.g., robots.txt), ensure no sensitive data is exposed.
AC-3SC-7CM-7 AC.1.004SC.3.177 T1190T1592
HIGH Missing Content-Security-Policy Header

No CSP header found. The application is vulnerable to cross-site scripting (XSS) and data injection attacks.

Remediation: Implement a strict Content-Security-Policy header. Start with default-src 'self' and progressively allow required sources.
SI-10SC-18 SI.2.216 T1059.007
HIGH Missing HSTS Header

No Strict-Transport-Security header found. Users can be downgraded from HTTPS to HTTP via man-in-the-middle attacks.

Remediation: Add Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
SC-8SC-23 SC.3.177 T1557
HIGH Sensitive Path Exposed: /backup

The path https://primumterminus.com/backup returned HTTP 200. This may expose configuration files, secrets, or API documentation to unauthorized users.

Remediation: Block public access to /backup. If this is intentional (e.g., robots.txt), ensure no sensitive data is exposed.
AC-3SC-7CM-7 AC.1.004SC.3.177 T1190T1592
HIGH Sensitive Path Exposed: /api/docs

The path https://primumterminus.com/api/docs returned HTTP 200. This may expose configuration files, secrets, or API documentation to unauthorized users.

Remediation: Block public access to /api/docs. If this is intentional (e.g., robots.txt), ensure no sensitive data is exposed.
AC-3SC-7CM-7 AC.1.004SC.3.177 T1190T1592
HIGH Sensitive Path Exposed: /swagger.json

The path https://primumterminus.com/swagger.json returned HTTP 200. This may expose configuration files, secrets, or API documentation to unauthorized users.

Remediation: Block public access to /swagger.json. If this is intentional (e.g., robots.txt), ensure no sensitive data is exposed.
AC-3SC-7CM-7 AC.1.004SC.3.177 T1190T1592
HIGH Sensitive Path Exposed: /openapi.json

The path https://primumterminus.com/openapi.json returned HTTP 200. This may expose configuration files, secrets, or API documentation to unauthorized users.

Remediation: Block public access to /openapi.json. If this is intentional (e.g., robots.txt), ensure no sensitive data is exposed.
AC-3SC-7CM-7 AC.1.004SC.3.177 T1190T1592
HIGH Sensitive Path Exposed: /robots.txt

The path https://primumterminus.com/robots.txt returned HTTP 200. This may expose configuration files, secrets, or API documentation to unauthorized users.

Remediation: Block public access to /robots.txt. If this is intentional (e.g., robots.txt), ensure no sensitive data is exposed.
AC-3SC-7CM-7 AC.1.004SC.3.177 T1190T1592
MEDIUM Missing X-Frame-Options Header

No X-Frame-Options header found. The application may be vulnerable to clickjacking attacks.

Remediation: Add X-Frame-Options: DENY or SAMEORIGIN header.
SI-10SC-18 SI.2.216 T1189
LOW Missing Permissions-Policy Header

No Permissions-Policy header found. Browser features like camera, microphone, and geolocation are not explicitly restricted.

Remediation: Add a Permissions-Policy header restricting unused browser features.
SC-7AC-4 SC.3.177 T1592
LOW SSL Certificate Expires in 48 Days

The SSL certificate for primumterminus.com expires on 2026-07-06. Plan renewal to avoid disruption.

Remediation: Schedule certificate renewal. Consider ACME-based auto-renewal.
SC-17 SC.3.177

MITRE ATT&CK Mapping

5 techniques identified across 4 tactics

TechniqueNameTacticFindingsMitigation
T1059.007 Command and Scripting Interpreter: JavaScript Execution 1 M1038 - Execution Prevention; M1040 - Behavior Prevention on Endpoint
T1189 Drive-by Compromise Initial Access 1 M1048 - Application Isolation and Sandboxing; M1050 - Exploit Protection
T1190 Exploit Public-Facing Application Initial Access 11 M1048 - Application Isolation and Sandboxing; M1030 - Network Segmentation; M101...
T1557 Adversary-in-the-Middle Credential Access / Collection 2 M1041 - Encrypt Sensitive Information; M1035 - Limit Access to Resource Over Net...
T1592 Gather Victim Host Information Reconnaissance 11 M1056 - Pre-compromise; minimize public information disclosure
← All Engagements