rasptut.co.uk

HTML metadata

Technology

Server

LiteSpeed

jQuery

1.7.1 known XSS (<3.5)

Third-party hosts loaded (4)

• ajax.googleapis.com×1
• twitterjs.googlecode.com×1
• ws.assoc-amazon.co.uk×1
• www.assoc-amazon.co.uk×1

Social

• youtube

DNS records live

NS

• ns1.da.hostns.io
• ns2.da.hostns.io

MX

• 10 mx.enmail.co

Email authentication weak

SPF

v=spf1 a mx ip4:91.204.209.209 include:spf.hostns.io ~all

softfail (~all)

DMARC

not published

DKIM

no key found at common selectors

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://rasptut.co.uk/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (23)

• youtube.com×1
• wikipedia.org×1
• themagpi.com×1
• realvnc.com×1
• raspberrypi.org×1
• proant.se×1
• pimoroni.com×1
• pi-top.com×1
• netbsd.org×1
• mime.co.uk×1
• learntimelapse.com×1
• kickstarter.com×1
• jeffgeerling.com×1
• freebsd.org×1
• europe-nikon.com×1
• ethicalwebsites.com×1
• digital-photography-school.com×1
• digimakers.co.uk×1
• creativecommons.org×1
• clingo.com×1
• argon40.com×1
• amazon.co.uk×1
• adafruit.com×1

Linked from (1)

• raspberrypi-spy.co.uk×1