Diagnostics

Metrics

http

A CAA record was discovered. A CAA record is used to specify which certificate authorities (CAs) are allowed to issue certificates for a domain.

CAA Record

An NS record was detected. An NS record delegates a subdomain to a set of name servers.

NS Record Detection

Setting the XSS-Protection header is deprecated. Setting the header to anything other than `0` can actually introduce an XSS vulnerability.

XSS-Protection Header - Cross-Site Scripting

Detect websites using AWS bucket storage

Detect websites using AWS cloudfront service

AWS Cloudfront service detection

This template searches for missing HTTP security headers. The impact of these missing headers can vary.


HTTP Missing Security Headers

Detect if AWS is being used in the application.

AWS Service - Detect

Detect Amazon-S3 Bucket

WAF Detection

Extract the issuer's organization from the target's certificate. Issuers are entities which sign and distribute certificates.


Detect SSL Certificate Issuer

Extract the Subject Alternative Name (SAN) from the target's certificate. SAN facilitates the usage of additional hostnames with the same certificate.


SSL DNS Names

TLS version detection is a security process used to determine the version of the Transport Layer Security (TLS) protocol used by a computer or server.
It is important to detect the TLS version in order to ensure secure communication between two computers or servers.


TLS Version - Detect

Checks a sites certificate to see if there are wildcard CN or SAN entries.


Wildcard TLS Certificate

Websites that have a shopping cart or checkout page, either using a known ecommerce platform or a custom solution.

Cart Functionality

TYPO3 is a free and open-source Web content management system written in PHP.

TYPO3 CMS

TypeScript is an open-source language which builds on JavaScript  by adding static type definitions.

TypeScript

PHP is a general-purpose scripting language used for web development.

Zone.js

Angular is a TypeScript-based open-source web application framework led by the Angular Team at Google.

Angular

Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.

Amazon Web Services

Matomo Analytics is a free and open-source web analytics application, that runs on a PHP/MySQL web-server.

Matomo Analytics

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

HSTS

Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.

Amazon S3

Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.

Amazon CloudFront

AWS Certificate Manager is a service that lets you easily provision, manage, and deploy public and private Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificates for use with AWS services and your internal connected resources.

AWS Certificate Manager

Webpack is an open-source JavaScript module bundler.

Webpack

Progressive Web Apps (PWAs) are web apps built and enhanced with modern APIs to deliver enhanced capabilities, reliability, and installability while reaching anyone, anywhere, on any device, all with a single codebase.

Module Federation is a webpack technology for dynamically loading parts of other independently deployed builds.

https://cartographie.societenumerique.gouv.fr

Nmap

SSL

Expiration : 29/06/2025

Nucleienviron 1 mois

severity	service	vulnerability
info	http (port:80)
info	http (port:443)

Séverité	Name	Matcher
info	CAA Record	caa-fingerprint
info	NS Record Detection	nameserver-fingerprint
info	XSS-Protection Header - Cross-Site Scripting	xss-deprecated-header
info	Detect websites using AWS bucket storage	aws-bucket-service
info	AWS Cloudfront service detection	aws-cloudfront-service
info	HTTP Missing Security Headers	x-permitted-cross-domain-policies
info	HTTP Missing Security Headers	clear-site-data
info	HTTP Missing Security Headers	cross-origin-embedder-policy
info	HTTP Missing Security Headers	cross-origin-opener-policy
info	HTTP Missing Security Headers	cross-origin-resource-policy
info	AWS Service - Detect	aws-cloudfront
info	AWS Service - Detect	aws-kms
info	Detect Amazon-S3 Bucket	s3-detect
info	WAF Detection	cloudfront
info	Detect SSL Certificate Issuer	ssl-issuer
info	SSL DNS Names	ssl-dns-names
info	TLS Version - Detect	tls-version
info	Wildcard TLS Certificate	wildcard-tls
info	TLS Version - Detect	tls-version