GO TO DOXBIN.COM FOR THE FULL PASTE:
═══════════════════════════════════════════════════════
Target: https://www.drejtesia.gov.al/
Status: 200 | Time: 1213ms | Issues: 12
🟠 [HIGH] MITM / Downgrade: Missing HSTS header (HTTPS downgrade possible)
🟡 [MEDIUM] Clickjacking: Missing X-Frame-Options header
🟡 [MEDIUM] XSS / Injection: Missing Content-Security-Policy header
🟡 [MEDIUM] Cookie: Cookie 'visid_incap_2808661' missing Secure flag
🟡 [MEDIUM] Cookie: Cookie 'incap_ses_2109_2808661' missing Secure flag
🟡 [MEDIUM] Cookie: Cookie 'incap_ses_2109_2808661' missing HttpOnly flag
🔵 [LOW] MIME Sniffing: Missing X-Content-Type-Options header
🔵 [LOW] Privacy: Missing Referrer-Policy header
🔵 [LOW] Feature Policy: Missing Permissions-Policy header
🔵 [LOW] XSS: Missing X-XSS-Protection header (legacy browsers)
🔵 [LOW] Cookie: Cookie 'visid_incap_2808661' missing SameSite attribute
🔵 [LOW] Cookie: Cookie 'incap_ses_2109_2808661' missing SameSite attribute
═══════════════════════════════════════════════════════
Target: https://financa.gov.al/
Status: 200 | Time: 1199ms | Issues: 12
🟠 [HIGH] MITM / Downgrade: Missing HSTS header (HTTPS downgrade possible)
🟡 [MEDIUM] Clickjacking: Missing X-Frame-Options header
🟡 [MEDIUM] XSS / Injection: Missing Content-Security-Policy header
🟡 [MEDIUM] Cookie: Cookie 'visid_incap_2808662' missing Secure flag
🟡 [MEDIUM] Cookie: Cookie 'incap_ses_79_2808662' missing Secure flag
🟡 [MEDIUM] Cookie: Cookie 'incap_ses_79_2808662' missing HttpOnly flag
🔵 [LOW] MIME Sniffing: Missing X-Content-Type-Options header
🔵 [LOW] Privacy: Missing Referrer-Policy header
🔵 [LOW] Feature Policy: Missing Permissions-Policy header
🔵 [LOW] XSS: Missing X-XSS-Protection header (legacy browsers)
🔵 [LOW] Cookie: Cookie 'visid_incap_2808662' missing SameSite attribute
🔵 [LOW] Cookie: Cookie 'incap_ses_79_2808662' missing SameSite attribute
═══════════════════════════════════════════════════════
Target: https://arsimi.gov.al/
Status: 200 | Time: 1501ms | Issues: 12
🟠 [HIGH] MITM / Downgrade: Missing HSTS header (HTTPS downgrade possible)
🟡 [MEDIUM] Clickjacking: Missing X-Frame-Options header
🟡 [MEDIUM] XSS / Injection: Missing Content-Security-Policy header
🟡 [MEDIUM] Cookie: Cookie 'visid_incap_2808659' missing Secure flag
🟡 [MEDIUM] Cookie: Cookie 'incap_ses_577_2808659' missing Secure flag
🟡 [MEDIUM] Cookie: Cookie 'incap_ses_577_2808659' missing HttpOnly flag
🔵 [LOW] MIME Sniffing: Missing X-Content-Type-Options header
🔵 [LOW] Privacy: Missing Referrer-Policy header
🔵 [LOW] Feature Policy: Missing Permissions-Policy header
🔵 [LOW] XSS: Missing X-XSS-Protection header (legacy browsers)
🔵 [LOW] Cookie: Cookie 'visid_incap_2808659' missing SameSite attribute
🔵 [LOW] Cookie: Cookie 'incap_ses_577_2808659' missing SameSite attribute
═══════════════════════════════════════════════════════
Target: https://akshi.gov.al
Status: 200 | Time: 2569ms | Issues: 7
Redirected to: https://akshi.gov.al/
🟡 [MEDIUM] Clickjacking: Missing X-Frame-Options header
🟡 [MEDIUM] XSS / Injection: Missing Content-Security-Policy header
🔵 [LOW] MIME Sniffing: Missing X-Content-Type-Options header
🔵 [LOW] Privacy: Missing Referrer-Policy header
🔵 [LOW] Feature Policy: Missing Permissions-Policy header
🔵 [LOW] XSS: Missing X-XSS-Protection header (legacy browsers)
🔵 [LOW] Info Disclosure: Server header exposed: nginx/1.19.10
═══════════════════════════════════════════════════════
Target: https://www.infrastruktura.gov.al/
Status: 200 | Time: 1151ms | Issues: 12
🟠 [HIGH] MITM / Downgrade: Missing HSTS header (HTTPS downgrade possible)
🟡 [MEDIUM] Clickjacking: Missing X-Frame-Options header
🟡 [MEDIUM] XSS / Injection: Missing Content-Security-Policy header
🟡 [MEDIUM] Cookie: Cookie 'visid_incap_2808663' missing Secure flag
🟡 [MEDIUM] Cookie: Cookie 'incap_ses_2109_2808663' missing Secure flag
🟡 [MEDIUM] Cookie: Cookie 'incap_ses_2109_2808663' missing HttpOnly flag
🔵 [LOW] MIME Sniffing: Missing X-Content-Type-Options header
🔵 [LOW] Privacy: Missing Referrer-Policy header
🔵 [LOW] Feature Policy: Missing Permissions-Policy header
🔵 [LOW] XSS: Missing X-XSS-Protection header (legacy browsers)
🔵 [LOW] Cookie: Cookie 'visid_incap_2808663' missing SameSite attribute
🔵 [LOW] Cookie: Cookie 'incap_ses_2109_2808663' missing SameSite attribute
═══════════════════════════════════════════════════════
Target: https://mapa.gov.al/
Status: 200 | Time: 1918ms | Issues: 11
🟠 [HIGH] MITM / Downgrade: Missing HSTS header (HTTPS downgrade possible)
🟡 [MEDIUM] XSS / Injection: Missing Content-Security-Policy header
🟡 [MEDIUM] Cookie: Cookie 'visid_incap_3161924' missing Secure flag
🟡 [MEDIUM] Cookie: Cookie 'incap_ses_79_3161924' missing Secure flag
🟡 [MEDIUM] Cookie: Cookie 'incap_ses_79_3161924' missing HttpOnly flag
🔵 [LOW] Privacy: Missing Referrer-Policy header
🔵 [LOW] Feature Policy: Missing Permissions-Policy header
🔵 [LOW] XSS: Missing X-XSS-Protection header (legacy browsers)
🔵 [LOW] Info Disclosure: Server header exposed: nginx
🔵 [LOW] Cookie: Cookie 'visid_incap_3161924' missing SameSite attribute
🔵 [LOW] Cookie: Cookie 'incap_ses_79_3161924' missing SameSite attribute
═══════════════════════════════════════════════════════
Target: https://www.mod.gov.al/
Status: 200 | Time: 3505ms | Issues: 13
🟠 [HIGH] MITM / Downgrade: Missing HSTS header (HTTPS downgrade possible)
🟡 [MEDIUM] Clickjacking: Missing X-Frame-Options header
🟡 [MEDIUM] XSS / Injection: Missing Content-Security-Policy header
🟡 [MEDIUM] Cookie: Cookie 'a3c18a1c35d02e7a37c5886b45f8bfa6' missing Secure flag
🟡 [MEDIUM] Info Disclosure: Exception message in response
🟡 [MEDIUM] Info Disclosure: Syntax error in response — possible code leak
🔵 [LOW] MIME Sniffing: Missing X-Content-Type-Options header
🔵 [LOW] Privacy: Missing Referrer-Policy header
🔵 [LOW] Feature Policy: Missing Permissions-Policy header
🔵 [LOW] XSS: Missing X-XSS-Protection header (legacy browsers)
🔵 [LOW] Info Disclosure: Server header exposed: Apache
🔵 [LOW] Cookie: Cookie 'a3c18a1c35d02e7a37c5886b45f8bfa6' missing SameSite attribute
🔵 [LOW] Info Disclosure: Keyword 'password' found in response body
═══════════════════════════════════════════════════════
Target: https://asp.gov.al/
Status: 200 | Time: 1985ms | Issues: 9
🟠 [HIGH] MITM / Downgrade: Missing HSTS header (HTTPS downgrade possible)
🟡 [MEDIUM] Clickjacking: Missing X-Frame-Options header
🟡 [MEDIUM] XSS / Injection: Missing Content-Security-Policy header
🟡 [MEDIUM] SSL: Certificate expires in 19 days
🔵 [LOW] MIME Sniffing: Missing X-Content-Type-Options header
🔵 [LOW] Privacy: Missing Referrer-Policy header
🔵 [LOW] Feature Policy: Missing Permissions-Policy header
🔵 [LOW] XSS: Missing X-XSS-Protection header (legacy browsers)
🔵 [LOW] Info Disclosure: Server header exposed: Apache
═══════════════════════════════════════════════════════
Target: https://shendetesia.gov.al/
Status: 200 | Time: 1088ms | Issues: 12
🟠 [HIGH] MITM / Downgrade: Missing HSTS header (HTTPS downgrade possible)
🟡 [MEDIUM] Clickjacking: Missing X-Frame-Options header
🟡 [MEDIUM] XSS / Injection: Missing Content-Security-Policy header
🟡 [MEDIUM] Cookie: Cookie 'visid_incap_2808671' missing Secure flag
🟡 [MEDIUM] Cookie: Cookie 'incap_ses_79_2808671' missing Secure flag
🟡 [MEDIUM] Cookie: Cookie 'incap_ses_79_2808671' missing HttpOnly flag
🔵 [LOW] MIME Sniffing: Missing X-Content-Type-Options header
🔵 [LOW] Privacy: Missing Referrer-Policy header
🔵 [LOW] Feature Policy: Missing Permissions-Policy header
🔵 [LOW] XSS: Missing X-XSS-Protection header (legacy browsers)
🔵 [LOW] Cookie: Cookie 'visid_incap_2808671' missing SameSite attribute
🔵 [LOW] Cookie: Cookie 'incap_ses_79_2808671' missing SameSite attribute
═══════════════════════════════════════════════════════
Target: https://arkiva.shendetesia.gov.al
✗ Error: SSL Error: HTTPSConnectionPool(host='arkiva.shendetesia.gov.al', port=443): Max retries exceeded with url: / (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1000)')))
═══════════════════════════════════════════════════════
Target: https://mjedisi.gov.al/
Status: 200 | Time: 1921ms | Issues: 13
🟠 [HIGH] MITM / Downgrade: Missing HSTS header (HTTPS downgrade possible)
🟡 [MEDIUM] Clickjacking: Missing X-Frame-Options header
🟡 [MEDIUM] XSS / Injection: Missing Content-Security-Policy header
🟡 [MEDIUM] Cookie: Cookie 'visid_incap_3261576' missing Secure flag
🟡 [MEDIUM] Cookie: Cookie 'incap_ses_79_3261576' missing Secure flag
🟡 [MEDIUM] Cookie: Cookie 'incap_ses_79_3261576' missing HttpOnly flag
🔵 [LOW] MIME Sniffing: Missing X-Content-Type-Options header
🔵 [LOW] Privacy: Missing Referrer-Policy header
🔵 [LOW] Feature Policy: Missing Permissions-Policy header
🔵 [LOW] XSS: Missing X-XSS-Protection header (legacy browsers)
🔵 [LOW] Info Disclosure: Server header exposed: nginx
🔵 [LOW] Cookie: Cookie 'visid_incap_3261576' missing SameSite attribute
🔵 [LOW] Cookie: Cookie 'incap_ses_79_3261576' missing SameSite attribute
═══════════════════════════════════════════════════════
Target: https://mash.rks-gov.net/
Status: 200 | Time: 2337ms | Issues: 5
🟡 [MEDIUM] Info Disclosure: Exception message in response
🔵 [LOW] XSS: Missing X-XSS-Protection header (legacy browsers)
🔵 [LOW] Info Disclosure: Server header exposed: nginx
🔵 [LOW] Info Disclosure: X-Powered-By header exposed: PHP/8.3.30, PleskLin
🔵 [LOW] Info Disclosure: Keyword 'password' found in response body
═══════════════════════════════════════════════════════
Target: https://www.mod.gov.al/
Status: 200 | Time: 3436ms | Issues: 13
🟠 [HIGH] MITM / Downgrade: Missing HSTS header (HTTPS downgrade possible)
🟡 [MEDIUM] Clickjacking: Missing X-Frame-Options header
🟡 [MEDIUM] XSS / Injection: Missing Content-Security-Policy header
🟡 [MEDIUM] Cookie: Cookie 'a3c18a1c35d02e7a37c5886b45f8bfa6' missing Secure flag
🟡 [MEDIUM] Info Disclosure: Exception message in response
🟡 [MEDIUM] Info Disclosure: Syntax error in response — possible code leak
🔵 [LOW] MIME Sniffing: Missing X-Content-Type-Options header
🔵 [LOW] Privacy: Missing Referrer-Policy header
🔵 [LOW] Feature Policy: Missing Permissions-Policy header
🔵 [LOW] XSS: Missing X-XSS-Protection header (legacy browsers)
🔵 [LOW] Info Disclosure: Server header exposed: Apache
🔵 [LOW] Cookie: Cookie 'a3c18a1c35d02e7a37c5886b45f8bfa6' missing SameSite attribute
🔵 [LOW] Info Disclosure: Keyword 'password' found in response body
═══════════════════════════════════════════════════════
Target: https://e-albania.al/
✗ Error: ('Connection aborted.', ConnectionResetError(104, 'Connection reset by peer'))
═══════════════════════════════════════════════════════
Scan Summary
Targets scanned : 14
Errors : 2
Total issues : 131
CRITICAL : 0
HIGH : 10
MEDIUM : 50
LOW : 71
INFO : 0
cia@nsa:~/Desktop$