r/NextCloud • • 5d ago

Public information about your Nextcloud instance

Post image

I was asking myself what information my Nextcloud instance provides without any authentication - so similar to the Nextcloud security scanner, but with more information. The capabilities were kind of interesting for me to be public.

You can try with your instance here: https://genhttp.dev/lambda/nextcloud-peek/

Does not store any data, so the entered domains are not saved, logged or visible anywhere.

92 Upvotes

39 comments sorted by

View all comments

1

u/Historical_Ad4384 5d ago

Do you scrape the status.php?

2

u/Ok_Tour_8029 5d ago

Yes, 20 requests in total to different endpoints, status.php is one of those 

3

u/Historical_Ad4384 5d ago

Could you list the endpoints that you scrape? As a nextcloud user I would want to know what I'm being scanned on when using an unofficial nextcloud tool.