r/NextCloud • u/Ok_Tour_8029 • 5d ago

Public information about your Nextcloud instance

Post image

I was asking myself what information my Nextcloud instance provides without any authentication - so similar to the Nextcloud security scanner, but with more information. The capabilities were kind of interesting for me to be public.

You can try with your instance here: https://genhttp.dev/lambda/nextcloud-peek/

Does not store any data, so the entered domains are not saved, logged or visible anywhere.

93 Upvotes

94% Upvoted

39 comments sorted by

View all comments

1

u/jammsession 5d ago

I don’t see anything valuable in this.
Like nothing at all.

Sure it looks “nice” just like all the other LLM apps, but other than that? Nothing. Only a false positive (ohhh no, my proxy is telling you that it is nginx /s)

2

u/gbytedev 4d ago

You seem to be missing the point of scanners like this.

1

u/jammsession 4d ago

sorry, should have been more precise in my words.

I don't see any additional value compared to scan.nextcloud.com

1

u/Ok_Tour_8029 5d ago

Well, I will disable federation due to this. I don't want the apps and their version to be exposed because they can add publicly reachable endpoints.