ZAP Full Scan Report

[github-actions]

• Site: https://hack23.com
  New Alerts
  • Bypassing 403 [40038] total: 7:
    • https://hack23.com/
    • https://hack23.com/
    • https://hack23.com/
    • https://hack23.com/
    • https://hack23.com/
    • ..
  • CSP: Failure to Define Directive with No Fallback [10055] total: 4:
    • https://hack23.com/
    • https://hack23.com/black-trigram-features.html
    • https://hack23.com/cia-compliance-manager-docs.html
    • https://hack23.com/cia-features.html
  • CSP: script-src unsafe-inline [10055] total: 4:
    • https://hack23.com/
    • https://hack23.com/black-trigram-features.html
    • https://hack23.com/cia-compliance-manager-docs.html
    • https://hack23.com/cia-features.html
  • CSP: style-src unsafe-inline [10055] total: 4:
    • https://hack23.com/
    • https://hack23.com/black-trigram-features.html
    • https://hack23.com/cia-compliance-manager-docs.html
    • https://hack23.com/cia-features.html
  • Source Code Disclosure - SQL [10099] total: 2:
    • https://hack23.com/cia-docs.html
    • https://hack23.com/cia-docs_sv.html
  • Sub Resource Integrity Attribute Missing [90003] total: 11:
    • https://hack23.com/
    • https://hack23.com/black-trigram-features.html
    • https://hack23.com/black-trigram-features_ko.html
    • https://hack23.com/cia-compliance-manager-docs.html
    • https://hack23.com/cia-compliance-manager-docs_sv.html
    • ..
  • Insufficient Site Isolation Against Spectre Vulnerability [90004] total: 10:
    • https://hack23.com/
    • https://hack23.com/black-trigram-features.html
    • https://hack23.com/robots.txt
    • https://hack23.com/sitemap.xml
    • https://hack23.com/
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 1:
    • https://hack23.com/index_ko.html
  • Re-examine Cache-control Directives [10015] total: 11:
    • https://hack23.com/
    • https://hack23.com/black-trigram-docs.html
    • https://hack23.com/black-trigram-features.html
    • https://hack23.com/blog.html
    • https://hack23.com/cia-compliance-manager-docs.html
    • ..
  • Retrieved from Cache [10050] total: 2:
    • https://hack23.com/
    • https://hack23.com/index.html
  • Storable and Cacheable Content [10049] total: 11:
    • https://hack23.com/
    • https://hack23.com/black-trigram-docs.html
    • https://hack23.com/black-trigram-features.html
    • https://hack23.com/blog.html
    • https://hack23.com/cia-compliance-manager-docs.html
    • ..

View the following link to download the report.
RunnerID:19428517743

---

ZAP by Checkmarx

[github-actions]

• Site: https://hack23.com
  Resolved Alerts
  • Bypassing 403 [40038] total: 7:
  • Source Code Disclosure - SQL [10099] total: 2:
  • Sub Resource Integrity Attribute Missing [90003] total: 11:
  • Insufficient Site Isolation Against Spectre Vulnerability [90004] total: 10:
  • Storable and Cacheable Content [10049] total: 11:

View the following link to download the report.
RunnerID:19466279893

[github-actions]

• Site: https://hack23.com
  New Alerts
  • Bypassing 403 [40038] total: 7:
    • https://hack23.com/
    • https://hack23.com/
    • https://hack23.com/
    • https://hack23.com/
    • https://hack23.com/
    • ..
  • Source Code Disclosure - SQL [10099] total: 2:
    • https://hack23.com/cia-docs.html
    • https://hack23.com/cia-docs_sv.html
  • Sub Resource Integrity Attribute Missing [90003] total: 11:
    • https://hack23.com/
    • https://hack23.com/black-trigram-features.html
    • https://hack23.com/black-trigram-features_ko.html
    • https://hack23.com/cia-compliance-manager-docs.html
    • https://hack23.com/cia-compliance-manager-docs_sv.html
    • ..
  • Insufficient Site Isolation Against Spectre Vulnerability [90004] total: 10:
    • https://hack23.com/
    • https://hack23.com/black-trigram-features.html
    • https://hack23.com/robots.txt
    • https://hack23.com/sitemap.xml
    • https://hack23.com/
    • ..
  • Storable and Cacheable Content [10049] total: 11:
    • https://hack23.com/
    • https://hack23.com/black-trigram-docs.html
    • https://hack23.com/black-trigram-features.html
    • https://hack23.com/blog.html
    • https://hack23.com/cia-compliance-manager-docs.html
    • ..
  • User Agent Fuzzer [10104] total: 24:
    • https://hack23.com/blog.html
    • https://hack23.com/blog.html
    • https://hack23.com/blog.html
    • https://hack23.com/blog.html
    • https://hack23.com/blog.html
    • ..

View the following link to download the report.
RunnerID:19469767744

[github-actions]

• Site: https://hack23.com
  Resolved Alerts
  • User Agent Fuzzer [10104] total: 24:

View the following link to download the report.
RunnerID:19470018417

[github-actions]

• Site: https://hack23.com
  New Alerts
  • User Agent Fuzzer [10104] total: 12:
    • https://hack23.com/blog.html
    • https://hack23.com/blog.html
    • https://hack23.com/blog.html
    • https://hack23.com/blog.html
    • https://hack23.com/blog.html
    • ..

View the following link to download the report.
RunnerID:19486395862

[github-actions]

• Site: https://hack23.com
  Resolved Alerts
  • User Agent Fuzzer [10104] total: 12:

View the following link to download the report.
RunnerID:19486507648

[github-actions]

• Site: https://hack23.com
  New Alerts
  • User Agent Fuzzer [10104] total: 132:
    • https://hack23.com/black-trigram-docs.html
    • https://hack23.com/black-trigram-docs.html
    • https://hack23.com/black-trigram-docs.html
    • https://hack23.com/black-trigram-docs.html
    • https://hack23.com/black-trigram-docs.html
    • ..

View the following link to download the report.
RunnerID:19530381176

[github-actions]

• Site: https://hack23.com
  Resolved Alerts
  • User Agent Fuzzer [10104] total: 132:

View the following link to download the report.
RunnerID:19530468850

[github-actions]

• Site: https://hack23.com
  New Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 1:
    • https://hack23.com/security-assessment-checklist.html

View the following link to download the report.
RunnerID:19574310854