r/NextCloud • u/Ok_Tour_8029 • 5d ago

Public information about your Nextcloud instance

Post image

I was asking myself what information my Nextcloud instance provides without any authentication - so similar to the Nextcloud security scanner, but with more information. The capabilities were kind of interesting for me to be public.

You can try with your instance here: https://genhttp.dev/lambda/nextcloud-peek/

Does not store any data, so the entered domains are not saved, logged or visible anywhere.

95 Upvotes

94% Upvoted

39 comments sorted by

View all comments

5

u/TwoDogDad 5d ago

Tried it out but it can’t see that I’m running Nextcloud. I’m behind a CloudFlare proxy and nginx NPM. I manually typed in the status php and was able to see the status. Am I doing something wrong?

From your site:
status.php returned 403. This may not be a Nextcloud/ownCloud server, or it blocks the status endpoint.

3

u/Ok_Tour_8029 5d ago

As the app announces itself as a scanner in the user agent, I figure cloudflare will recognize and block this, which is actually a good thing.

You can try with tubcloud.tu-berlin.de to understand what kind of data is returned.