Nessus Essentials

Nessus Report

Report generated by Nessus™

Digilocker Scan

Tue, 08 Dec 2020 21:06:50 India Standard Time

TABLE OF CONTENTS
Vulnerabilities by HostExpand All | Collapse All
164.100.94.76
0
0
0
0
7
Critical
High
Medium
Low
Info
Scan Information
Start time: Sun Dec 6 22:52:11 2020
End time: Sun Dec 6 23:48:49 2020
Host Information
IP: 164.100.94.76
OS: Ubuntu 16.04 Linux Kernel 4.4
Vulnerabilities

43111 - HTTP Methods Allowed (per directory)
-
Synopsis
This plugin determines which HTTP methods are allowed on various CGI directories.
Description
By calling the OPTIONS method, it is possible to determine which HTTP methods are allowed on each directory.

The following HTTP methods are considered insecure:
PUT, DELETE, CONNECT, TRACE, HEAD

Many frameworks and languages treat 'HEAD' as a 'GET' request, albeit one without any body in the response. If a security constraint was set on 'GET' requests such that only 'authenticatedUsers' could access GET requests for a particular servlet or resource, it would be bypassed for the 'HEAD' version. This allowed unauthorized blind submission of any privileged GET request.

As this list may be incomplete, the plugin also tests - if 'Thorough tests' are enabled or 'Enable web applications tests' is set to 'yes'
in the scan policy - various known HTTP methods on each directory and considers them as unsupported if it receives a response code of 400, 403, 405, or 501.

Note that the plugin output is only informational and does not necessarily indicate the presence of any security vulnerabilities.
See Also
Solution
n/a
Risk Factor
None
Plugin Information
Published: 2009/12/10, Modified: 2019/03/19
Plugin Output

tcp/80/www


Based on tests of each method :

- HTTP methods ACL BASELINE-CONTROL BCOPY BDELETE BMOVE BPROPFIND
BPROPPATCH CHECKIN CHECKOUT CONNECT COPY DEBUG DELETE GET HEAD
LABEL LOCK MERGE MKACTIVITY MKCOL MKWORKSPACE MOVE NOTIFY OPTIONS
ORDERPATCH PATCH POLL POST PROPFIND PROPPATCH PUT REPORT
RPC_IN_DATA RPC_OUT_DATA SEARCH SUBSCRIBE UNCHECKOUT UNLOCK
UNSUBSCRIBE UPDATE VERSION-CONTROL X-MS-ENUMATTS are allowed on :

/

- Invalid/unknown HTTP methods are allowed on :

/
24260 - HyperText Transfer Protocol (HTTP) Information
-
Synopsis
Some information about the remote HTTP configuration can be extracted.
Description
This test gives some information about the remote HTTP protocol - the version used, whether HTTP Keep-Alive and HTTP pipelining are enabled, etc...

This test is informational only and does not denote any security problem.
Solution
n/a
Risk Factor
None
Plugin Information
Published: 2007/01/30, Modified: 2019/11/22
Plugin Output

tcp/80/www


Response Code : HTTP/1.1 301 Moved Permanently

Protocol version : HTTP/1.1
SSL : no
Keep-Alive : no
Options allowed : (Not implemented)
Headers :

Content-length: 0
Location: https://164.100.94.76/
Connection: close

Response Body :
91634 - HyperText Transfer Protocol (HTTP) Redirect Information
-
Synopsis
The remote web server redirects requests to the root directory.
Description
The remote web server issues an HTTP redirect when requesting the root directory of the web server.

This plugin is informational only and does not denote a security problem.
Solution
Analyze the redirect(s) to verify that this is valid operation for your web server and/or application.
Risk Factor
None
Plugin Information
Published: 2016/06/16, Modified: 2017/10/12
Plugin Output

tcp/80/www


Request : http://164.100.94.76/
HTTP response : HTTP/1.1 301 Moved Permanently
Redirect to : https://164.100.94.76/
Redirect type : 30x redirect


Note that Nessus did not receive a 200 OK response from the
last examined redirect.
11219 - Nessus SYN scanner
-
Synopsis
It is possible to determine which TCP ports are open.
Description
This plugin is a SYN 'half-open' port scanner. It shall be reasonably quick even against a firewalled target.

Note that SYN scans are less intrusive than TCP (full connect) scans against broken services, but they might cause problems for less robust firewalls and also leave unclosed connections on the remote target, if the network is loaded.
Solution
Protect your target with an IP filter.
Risk Factor
None
Plugin Information
Published: 2009/02/04, Modified: 2020/09/14
Plugin Output

tcp/80/www

Port 80/tcp was found to be open

11219 - Nessus SYN scanner
-
Synopsis
It is possible to determine which TCP ports are open.
Description
This plugin is a SYN 'half-open' port scanner. It shall be reasonably quick even against a firewalled target.

Note that SYN scans are less intrusive than TCP (full connect) scans against broken services, but they might cause problems for less robust firewalls and also leave unclosed connections on the remote target, if the network is loaded.
Solution
Protect your target with an IP filter.
Risk Factor
None
Plugin Information
Published: 2009/02/04, Modified: 2020/09/14
Plugin Output

tcp/443

Port 443/tcp was found to be open

19506 - Nessus Scan Information
-
Synopsis
This plugin displays information about the Nessus scan.
Description
This plugin displays, for each tested host, information about the scan itself :

- The version of the plugin set.
- The type of scanner (Nessus or Nessus Home).
- The version of the Nessus Engine.
- The port scanner(s) used.
- The port range scanned.
- Whether credentialed or third-party patch management checks are possible.
- Whether the display of superseded patches is enabled
- The date of the scan.
- The duration of the scan.
- The number of hosts scanned in parallel.
- The number of checks done in parallel.
Solution
n/a
Risk Factor
None
Plugin Information
Published: 2005/08/26, Modified: 2020/08/27
Plugin Output

tcp/0

Information about this scan :

Nessus version : 8.12.1
Plugin feed version : 202012050544
Scanner edition used : Nessus Home
Scan type : Normal
Scan policy used : Web Application Tests
Scanner IP : 192.168.1.8
Port scanner(s) : nessus_syn_scanner
Port range : default
Thorough tests : yes
Experimental tests : no
Paranoia level : 1
Report verbosity : 1
Safe checks : yes
Optimize the test : yes
Credentialed checks : no
Patch management checks : None
Display superseded patches : yes (supersedence plugin did not launch)
CGI scanning : enabled
Web application tests : enabled
Web app tests - Test mode : all_pairs
Web app tests - Try all HTTP methods : yes
Web app tests - Maximum run time : 10 minutes.
Web app tests - Stop at first flaw : param
Max hosts : 30
Max checks : 4
Recv timeout : 5
Backports : None
Allow post-scan editing: Yes
Scan Start Date : 2020/12/6 22:52 India Standard Time
Scan duration : 3389 sec

10386 - Web Server No 404 Error Code Check
-
Synopsis
The remote web server does not return 404 error codes.
Description
The remote web server is configured such that it does not return '404 Not Found' error codes when a nonexistent file is requested, perhaps returning instead a site map, search page or authentication page.

Nessus has enabled some counter measures for this. However, they might be insufficient. If a great number of security holes are produced for this port, they might not all be accurate.
Solution
n/a
Risk Factor
None
Plugin Information
Published: 2000/04/28, Modified: 2020/06/12
Plugin Output

tcp/80/www



CGI scanning will be disabled for this host because the host responds
to requests for non-existent URLs with HTTP code 301
rather than 404. The requested URL was :

http://164.100.94.76/4W3O20J9VlLJ.html
164.100.94.130
0
0
0
0
10
Critical
High
Medium
Low
Info
Scan Information
Start time: Sun Dec 6 22:52:11 2020
End time: Sun Dec 6 23:56:20 2020
Host Information
IP: 164.100.94.130
OS: Linux Kernel 2.6
Vulnerabilities

84502 - HSTS Missing From HTTPS Server
-
Synopsis
The remote web server is not enforcing HSTS.
Description
The remote HTTPS server is not enforcing HTTP Strict Transport Security (HSTS). HSTS is an optional response header that can be configured on the server to instruct the browser to only communicate via HTTPS. The lack of HSTS allows downgrade attacks, SSL-stripping man-in-the-middle attacks, and weakens cookie-hijacking protections.
See Also
Solution
Configure the remote web server to use HSTS.
Risk Factor
None
Plugin Information
Published: 2015/07/02, Modified: 2020/11/06
Plugin Output

tcp/443/www


The remote HTTPS server does not send the HTTP
"Strict-Transport-Security" header.
43111 - HTTP Methods Allowed (per directory)
-
Synopsis
This plugin determines which HTTP methods are allowed on various CGI directories.
Description
By calling the OPTIONS method, it is possible to determine which HTTP methods are allowed on each directory.

The following HTTP methods are considered insecure:
PUT, DELETE, CONNECT, TRACE, HEAD

Many frameworks and languages treat 'HEAD' as a 'GET' request, albeit one without any body in the response. If a security constraint was set on 'GET' requests such that only 'authenticatedUsers' could access GET requests for a particular servlet or resource, it would be bypassed for the 'HEAD' version. This allowed unauthorized blind submission of any privileged GET request.

As this list may be incomplete, the plugin also tests - if 'Thorough tests' are enabled or 'Enable web applications tests' is set to 'yes'
in the scan policy - various known HTTP methods on each directory and considers them as unsupported if it receives a response code of 400, 403, 405, or 501.

Note that the plugin output is only informational and does not necessarily indicate the presence of any security vulnerabilities.
See Also
Solution
n/a
Risk Factor
None
Plugin Information
Published: 2009/12/10, Modified: 2019/03/19
Plugin Output

tcp/443/www


Based on tests of each method :

- HTTP methods ACL CHECKOUT COPY DELETE GET HEAD LOCK MERGE
MKACTIVITY MKCOL MOVE NOTIFY OPTIONS PATCH POST PROPFIND
PROPPATCH PUT REPORT SEARCH SUBSCRIBE UNLOCK UNSUBSCRIBE
are allowed on :

/

10107 - HTTP Server Type and Version
-
Synopsis
A web server is running on the remote host.
Description
This plugin attempts to determine the type and the version of the remote web server.
Solution
n/a
Risk Factor
None
References
XREF IAVT:0001-T-0931
Plugin Information
Published: 2000/01/04, Modified: 2020/10/30
Plugin Output

tcp/80/www

The remote web server type is :

envoy

10107 - HTTP Server Type and Version
-
Synopsis
A web server is running on the remote host.
Description
This plugin attempts to determine the type and the version of the remote web server.
Solution
n/a
Risk Factor
None
References
XREF IAVT:0001-T-0931
Plugin Information
Published: 2000/01/04, Modified: 2020/10/30
Plugin Output

tcp/443/www

The remote web server type is :

envoy

85805 - HTTP/2 Cleartext Detection
-
Synopsis
An HTTP/2 server is listening on the remote host.
Description
The remote host is running an HTTP server that supports HTTP/2 running over cleartext TCP (h2c).
See Also
Solution
Limit incoming traffic to this port if desired.
Risk Factor
None
Plugin Information
Published: 2015/09/04, Modified: 2019/11/22
Plugin Output

tcp/80/www


The server supports direct HTTP/2 connections
without encryption.
24260 - HyperText Transfer Protocol (HTTP) Information
-
Synopsis
Some information about the remote HTTP configuration can be extracted.
Description
This test gives some information about the remote HTTP protocol - the version used, whether HTTP Keep-Alive and HTTP pipelining are enabled, etc...

This test is informational only and does not denote any security problem.
Solution
n/a
Risk Factor
None
Plugin Information
Published: 2007/01/30, Modified: 2019/11/22
Plugin Output

tcp/80/www


Response Code : HTTP/1.1 301 Moved Permanently

Protocol version : HTTP/1.1
SSL : no
Keep-Alive : no
Options allowed : (Not implemented)
Headers :

location: https://164.100.94.130/
date: Sun, 06 Dec 2020 17:50:07 GMT
server: envoy
connection: close
content-length: 0

Response Body :

24260 - HyperText Transfer Protocol (HTTP) Information
-
Synopsis
Some information about the remote HTTP configuration can be extracted.
Description
This test gives some information about the remote HTTP protocol - the version used, whether HTTP Keep-Alive and HTTP pipelining are enabled, etc...

This test is informational only and does not denote any security problem.
Solution
n/a
Risk Factor
None
Plugin Information
Published: 2007/01/30, Modified: 2019/11/22
Plugin Output

tcp/443/www


Response Code : HTTP/1.1 200 OK

Protocol version : HTTP/1.1
SSL : yes
Keep-Alive : no
Options allowed : (Not implemented)
Headers :

date: Sun, 06 Dec 2020 17:50:09 GMT
server: envoy
x-frame-options: SAMEORIGIN
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: max-age=1, private, must-revalidate
pragma: no-cache
vary: Accept-Encoding,User-Agent
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-max-age: 1000
access-control-allow-headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token, requesttoken, XMLHttpRequest
x-xss-protection: 1; mode=block
content-type: text/html; charset=UTF-8
x-envoy-upstream-service-time: 189
connection: close
transfer-encoding: chunked

Response Body :


<div class="hidden-xs">
<!DOCTYPE html SYSTEM "http://evolvis.org/DTD/xhtml10t-rdfa10.dtd">
<html xml:lang="en" lang="en">

<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=0.5 maximum-scale=1.0">
<title>DigiLocker | Free, Secure, Flexible and easy-to-use application</title>

<meta name="description" content="DigiLocker is the national Digital Locker System launched by Govt. of India. 1GB of free space in the locker to securely store resident documents and store links (URI) of Govt. Free, flexible, and easy-to-use application">
<meta name="keywords" content="DigiLocker, Digital Locker, 1GB of free space, secure, e-documents, eSign online, Sharing of e-documents online, upload e-documents, SSC Certificate, HSC Certificate, PANcard, Voter ID card, Department Issued Documents, digital India, digital India initiative, Indian Government’s flagship program, paperless governance, cloud storage space, Govt. of India’s cloud based platform">
<meta property="og:locale" content="en_IN">
<meta property="og:type" content="service">
<meta property="og:title" content="DigiLocker:Towards Paperless Governance">
<meta property="og:description" content="Just started using DigiLocker, Govt. of India’s cloud based platform for storage, sharing and verification of documents and certificates. You can signup also https://digilocker.gov.in">
<meta property="og:url" content="https://digilocker.gov.in/">
<meta property="og:site_name" content="DigiLocker">
<meta property="publisher" content="https://www.facebook.com/OfficialDigiLocker/">
<meta property="tag" content="DigiLocker, Digital Locker, 1GB of free space, secure, e-documents, eSign online, Sharing of e-documents online, upload e-documents, SSC Certificate, HSC Certificate, PANcard, Voter ID card, Department Issued Documents, digital India, digital India initiative, Indian Government’s flagship program, paperless governance, cloud storage space, Govt. of India’s cloud based platform">
<meta property="og:image" content="https://img1.digitallocker.gov.in/assets/img/digiLocker_fb.png">
<meta name="twitter:card" content="summary_large_image">
<meta name="twitter:url" content="https://digilocker.gov.in/">
<meta name="twitter:description" content="DigiLocker Govt. of India’s cloud based platform for storage, sharing and verification of documents and certificates.">
<meta name="twitter:title" content="DigiLocker:Towards Paperless Governance">
<meta name="twitter:site" content="@digilocker_ind">
<meta name="twitter:image" content="https://img1.digitallocker.gov.in/assets/img/digiLocker_fb.png">
<meta itemprop="name" content="DigiLocker:Towards Paperless Governance">
<meta itemprop="description" content="DigiLocker Govt. of India’s cloud based platform for storage, sharing and verification of documents and certificates.">
<meta itemprop="alternativeHeadline" content="DigiLocker:Towards Paperless Governance">
<link rel="shortcut icon" type="image/png" href="https://img1.digitallocker.gov.in/core/img/favicon.png" />
<link rel="apple-touch-icon-precomposed" href="https://img1.digitallocker.gov.in/core/img/favicon-touch.png" />
<link rel="stylesheet" href="https://img1.digitallocker.gov.in/assets/css/bootstrap.css"/>
<link rel="stylesheet" href="https://img1.digitallocker.gov.in/assets/css/font-awesome.css"/>
<link rel="stylesheet" href="https://img1.digitallocker.gov.in/assets/css/landing_v4.css"/>
<style>
.credit-active{
padding: 10px;}
.imgabout {
margin:0px;
padding-top: 30px;
text-align:center;}
.imgcredits {
float:left;
margin: 0px 30px 0px 0px;
width: 67px;}
.top-massage{
margin-bottom: -6px;
margin-top: 14px;
border-radius: 4px;}
.signup_box{
padding-left: 28px;
padding-right: 80px;}
.MainCntFAQ {
padding-top: 10px;
padding-bottom: 30px;}

.signup_msg_box{
padding-left: 80px;
padding-right: 28px;}
.bgfooter {
background-color: #000;
font-size: 13px;}
.footerlable {
color: #dedcdc;
text-align: right;
line-height: 15px;}
.ftrlists {
display: inline-flex;
color: #fff;
list-style: none;
margin-left: -40px;}
.foot_margin{
padding: 18px 0px 0px 0px;}
.nav-tabs > li.active > a, .nav-tabs > li.active > a:hover, .nav-tabs > li.active > a:focus {
color: #555555;
background-color: #ffffff;
border: 1px solid #dddddd;
border-bottom-color: transparent;
cursor: default;font-weight: bolder;}
.top_header_text{
color: #fff !important;
font-size: 13px;
text-decoration: none !important;}
.top_header{
background-color: #303030;
display: block;
border-bottom: 1px solid #ebebeb;
height: 30px;
font-size: 1.2em;}
.headerhght {
height: 100px;}
.panelsrow {
background-color: #FFFFFF;
padding-bottom: 60px;
padding-top: 60px;}
.bg-statis {
padding-top: 60px;
padding-bottom: 60px;}
.panel-primary > .panel-heading {
border-color: transparent;}
.section-header {
font-size: 3rem!important;
border-bottom: 0px solid rgba(103, 61, 255, 0.3)!important;}

@media screen and (max-width: 480px){
.headerhght {
background: #673ffd none repeat scroll 0 0 !important;
color: rgba(255, 255, 255, 1);
font: 16px/130% "ABeeZee",Helvetica,sans-serif;
text-overflow: ellipsis;
text-shadow: 1px 1px 2px rgba(0, 0, 0, 0.5);
padding: 18px;height: 65px;}
.top-massage{
margin-bottom: -6px;
margin-top: 0px;
border-radius: 0px;
background-color: #673ffd;}
.signup_box{
padding-left: 0px;padding-right: 0px;}
.MainCntFAQ{
padding-top: 0px;}
.section-header{
display: block;
font-size: 2.4rem;
margin-bottom: 10px;
border-bottom: 1px solid rgba(103, 61, 255, 0.3);}

}
</style>

</head>
<body>

<style>
@media screen and (max-width: 480px){
.headerhght {
background: #fff none repeat scroll 0 0 !important;
color: #707070;

text-overflow: ellipsis;
text-shadow: 1px 1px 2px rgba(0, 0, 0, 0.5);
padding: 18px;

}
body{background-color:#fff; }
}
body{background-color:#f5f5f5; }
.header_commonsticky-top {
width: 100%;
display: block;
}
.header_common {
border-bottom: 1px solid #eeeeee;
box-shadow: 0 1px 6px rgba(0,0,0,.35);
background-color: #fff;
z-index: 99;
}
.mb_30 {
margin-bottom: 30px;
}
.header_common nav.navbar {
padding: 0;
}
.navbar-brand {

margin: 9px 0px 3px 0px;
padding: 0px;
}
.navbar {
margin-bottom: 0px;
}
.arrow {
position: absolute;
top: 28px;
width: 5%;
height: 3px;

background-color: #707070;
}

.arrow::after {
content: '';
position: absolute;
width: 46%;
height: 3px;
top: -2px;
right: 11px;
background-color: #707070;
transform: rotate(-45deg);
}

.arrow::before {
content: '';
position: absolute;
width: 46%;
height: 3px;
top: 2px;
right: 11px;
background-color: #707070;
/* box-shadow: 0 3px 5px rgba(0, 0, 0, .2); */
transform: rotate(45deg);
}
</style>

<header class="bg_f8f fire_header3 header_commonsticky-top sticky-offset header_common mb_30 ">
<div class="container">
<div >
<div class="">
<nav class="navbar navbar-expand-lg navbar-light">
<a class="navbar-brand order-1 order-lg-1 " href="#" onclick="javascript:window.history.back();" style="padding-right:5px; margin-right: 5px; width: 30px;">
<img class="hidden-xs" src="https://img1.digitallocker.gov.in/public/smart/images/nationalemblemindia.png" alt="logo" style="padding-right:5px; border-right: 1px solid #eee;">

<div class="icon d-inline visible-xs">
<a href="#" onClick="goBack()"><div class="arrow"></div></a>
</div>
</a> <span style="width: 100%; margin-top: -6px; text-align: center;">
<a class="navbar-brand order-1 order-lg-1" href="#" onclick="javascript:window.history.back();"><img src="https://img1.digitallocker.gov.in/public/smart/images/digiLocker_logo_19.png" alt="logo"></a></span>
<button class="order-3" type="button" data-toggle="collapse" data-target="#navbar3" aria-controls="navbar1" aria-expanded="false" aria-label="Toggle navigation" style="
border: 0px;display: none;
"></button>

</nav>
</div>
</div>
</div>
</header>


<script
src="https://img1.digitallocker.gov.in/core/vendor/jquery/jquery.min.js"></script>


<script>
function goBack() {
window.history.go(-2);
}
</script>

<style>
.carousel-control {
width: 7%!important;
}
.know-button{color: #21058e; background-color: #ffffff; border-color: #21058e;border-radius: 6px; margin-left: 0px; margin-top: 10px; box-shadow: 0 2px 5px rgba(0, 0, 0, 0.4);}
.know-button:hover {color: #21058e; background-color: #F7F7F5; border-color: #21058e;border-radius: 6px; margin-left: 0px; margin-top: 10px; box-shadow: 0 2px 5px rgba(0, 0, 0, 0.4);}
.know-button-col{color: #ffffff; background-color:#21058e ; border-color: #21058e;border-radius: 6px; margin-left: 0px; margin-top: 10px; box-shadow: 0 2px 5px rgba(0, 0, 0, 0.4);}
.know-button-col:hover {color: #ffffff!important; background-color: #371AA3!important; border-color: #21058e;border-radius: 6px; margin-left: 0px; margin-top: 10px; box-shadow: 0 2px 5px rgba(0, 0, 0, 0.4);}
.modal-dialog {
width: 865px;
}

.panel-body hr {
margin-top: 10px;
margin-bottom: 10px;
width: 114%;
border: 0;
border-top: 1px solid #eeeeee;
margin-left: -15px;
}

.panel-heading-video {
padding: 0px 0px;
border-bottom: 1px solid transparent;
border-top-right-radius: 3px;
border-top-left-radius: 3px;
}

.trbtn {}

.profile-circle.arrow-next:after {
content: '\f061';
font-size: 20px;
color: #4776c6;
font-family: 'FontAwesome';
display: block;
position: absolute;
right: -6px;
top: 23%;
}

.icon_border {
display: inline-block;
border-radius: 60px;
box-shadow: 0px 0px 2px #888;
padding: .5em .5em;
width: 100px;
height: 100px;
font-size: 50px!important;
text-align: center;
border: 2px solid #4776c6;
color: #4776c6;
}

.quote {
color: rgb(39, 76, 164);
text-align: center;
margin-bottom: 30px;
font-size: 25px;
}

#fade-quote-carousel.carousel {
padding-bottom: 60px;
}

#fade-quote-carousel.carousel .carousel-indicators {
bottom: 10px;
}

#fade-quote-carousel.carousel .carousel-indicators> li {
text-indent: 0;
margin: 0 2px;
width: 20px;
height: 20px;
border: none;
border-radius: 100%;
line-height: 20px;
color: #fff;
background-color: #999;
transition: all 0.25s ease;
font-size: 10px;
}

#fade-quote-carousel.carousel .carousel-indicators> .active {
margin: 0 2px;
width: 20px;
height: 20px;
background-color: #337ab7;
}

#fade-quote-carousel blockquote {
text-align: center;
border: none;
}

#fade-quote-carousel .profile-circle {
width: 100px;
height: 100px;
margin: 0 auto;
border-radius: 100px;
}

#wrapper {
min-height: 100%;
position: relative;
background-repeat: no-repeat;
background-size: cover;
-webkit-background-size: cover;
-moz-background-size: cover;
-o-background-size: cover;
}

#loginbutton {
text-align: -webkit-center;
width: 100%;
height: 80px;
bottom: 0;
left: 0;
}

.rotate-16 {
-webkit-transform: rotate(-16deg);
-moz-transform: rotate(-16deg);
-o-transform: rotate(-16deg);
-ms-transform: rotate(-16deg);
transform: rotate(-16deg);
}

@media screen and (max-width: 480px) {}

.header_res {
width: 100%;
height: 56px;
color: #FFF;
display: flex;
flex-direction: row;
align-items: center;
padding: 0 16px;
background-color: #fff;
box-shadow: 0 1px 6px rgba(0, 0, 0, .35);
}

.header__menu-toggle {
background: none;
border: none;
width: 50px;
height: 24px;
padding: 0;
margin: 0;
color: #707070;
}

.side-nav {
position: fixed;
top: 0;
left: 0;
width: 100%;
height: 100%;
overflow: hidden;
pointer-events: none;
z-index: 99999;
}

.side-nav--visible {
pointer-events: auto;
}

.side-nav::before {
content: '';
display: block;
position: absolute;
top: 0;
left: 0;
width: 100%;
height: 100%;
background: rgba(0, 0, 0, 0.4);
opacity: 0;
transition: opacity 0.3s cubic-bezier(0, 0, 0.3, 1);
}

.side-nav__container {
position: relative;
width: 90%;
max-width: 400px;
background: #FFF;
height: 100%;
box-shadow: 2px 0 12px rgba(0, 0, 0, 0.4);
transform: translateX(-102%);
display: flex;
flex-direction: column;
}

.side-nav--visible .side-nav__container {
transition: transform 0.13s cubic-bezier(0, 0, 0.3, 1);
}

.side-nav--visible .side-nav--animatable .side-nav__container {
transition: transform 0.33s cubic-bezier(0, 0, 0.3, 1);
}

.side-nav--visible::before {
opacity: 1;
}

.side-nav--visible .side-nav__container {
transform: none;
}

.side-nav__hide {
position: absolute;
left: 16px;
top: 16px;
background: none;
border: none;
color: #FFF;
}

.side-nav__header {
height: 52px;
background: #330099;
color: #FFF;
display: flex;
padding: 16px;
align-items: flex-end;
}

.side-nav__content {
flex: 1;
list-style: none;
padding: 0;
margin: 0;
overflow-x: hidden;
overflow-y: auto;
-webkit-overflow-scrolling: touch;
}

.side-nav__content li {
height: 40px;
line-height: 40px;
padding: 0 23px;
border-bottom: 1px solid #f9f5f5;
}

.side-nav__content li:hover {
background: #CCC;
}

.side-nav__content a {
color: #330099;
text-decoration: none;
}
</style>
<div class="col-md-12 col-sm-12 hidden-xs" style="background-color:#fff; padding:0px;">
<div id="myCarousel" class="carousel slide bnrhght" data-ride="carousel">
<ol class="carousel-indicators circlelists">
<li data-target="#myCarousel" data-slide-to="0" class="active"></li>
<li data-target="#myCarousel" data-slide-to="1"></li>
<li data-target="#myCarousel" data-slide-to="2"></li>
<li data-target="#myCarousel" data-slide-to="3"></li>
</ol>
<div class="carousel-inner" role="listbox">
<div class="item active"> <img class="cbsenewbanner" alt="Digilocker issued document" src="https://img1.digitallocker.gov.in//assets/img/bannerctet.jpg" style="width:100%; margin:auto;">
<div class="carousel-caption" style="padding: 4px;padding-bottom: 8px; background: rgba(0, 0, 0, 0) none repeat scroll 0 0;">
<div class="row" style="margin-top: -28%; text-align: left; padding-right: 10%; padding-left: 55%">

<div style="background-color: #ffffff59; padding: 25px; border-radius: 10px; box-shadow: 0 1px 2px rgba(0, 0, 0, 0.6)" >
<p style="font-size: 33px;line-height: 44px;font-weight: 500;color: #21058e; text-shadow: 0 0px 0px rgba(0, 0, 0, 0);"> CTET July 2019 <br> Mark Sheets and Certificates <br>are now available <br>in DigiLocker </p>
<a href="ctet-certificate.html">
<button class="btn btn-secondary know-button-col"> <strong>Get Your Certificates Now >> </strong> </button>
</a> </div>
</div>
</div>
</div>
<div class="item"> <a href="https://img1.digitallocker.gov.in/assets/img/circulars/CC_33_2018.pdf" target="_blank"> <img class="cbsenewbanner" alt="Digilocker issued document" src="https://img1.digitallocker.gov.in//assets/img/morth1.jpg" style="width:100%; margin:auto;">
<div class="carousel-caption" style="padding: 4px;padding-bottom: 8px; background: rgba(0, 0, 0, 0) none repeat scroll 0 0;">
<div class="container" >
<div class="row shadowtxt" style="margin-top: -20%;">
<div class="col-md-12">
<p style="font-size: 35px;line-height: 100px; font-weight: 500;"> </p>
<p style="font-size: 110px; padding-top: 20px;padding-bottom: 45px;"><strong></strong> </p>
<div style="padding: 55px 10px 15px 10px;"></div>
</div>
</div>
</div>
</div>
</a> </div>
<div class="item"><a href="https://img1.digitallocker.gov.in/assets/img/circulars/CC_33_2018.pdf" target="_blank"> <img class="cbsenewbanner" alt="Digilocker issued document" src="https://img1.digitallocker.gov.in//assets/img/indian-railwas.jpg" style="width:100%; margin:auto;">
<div class="carousel-caption" style="padding: 4px;padding-bottom: 8px; background: rgba(0, 0, 0, 0) none repeat scroll 0 0;">
<div class="row shadowtxt" style="margin-top: -21%;">
<p style="font-size: 35px;line-height: 100px; font-weight: 500;"> </p>
<p style="font-size: 110px; padding-top: 25px;padding-bottom: 52px;"><strong></strong> </p>
<p style="font-size:18px; padding-top: 10px; padding-bottom: 20px; line-height: 25px;"> <strong></strong><br> </p>
</div>
</div>
</a> </div>
<div class="item"> <img class="cbsenewbanner" alt="Digilocker issued document" src="https://img1.digitallocker.gov.in//assets/img/message_banner.jpg" style="width:100%; margin:auto;">
<div class="carousel-caption" style="padding: 4px;padding-bottom: 8px; background: rgba(0, 0, 0, 0) none repeat scroll 0 0;">
<div class="row shadowtxt" style="margin-top: -32%;">
<p style="font-size: 35px;line-height: 40px; font-weight: 500;"> DigiLocker now provides access to </p>
<p style="font-size: 110px;padding-top: 10px;padding-bottom: 5px;line-height: 130px;"><strong><span id="issue_document_1"></span></strong> </p>
<p style="font-size: 35px;line-height: 40px; font-weight: 500;"> Authentic Issued Digital Documents </p>
<p style="font-size:18px; padding-top: 2px; padding-bottom: 0px; line-height: 25px;"> (PAN Verification Record, Driving License, Vehicle RC, Aadhaar, Educational and Other Certificates)<br>
<span style='font-size:15px;'> This digital document is a legally valid document under the Indian IT Act 2000.</span> </p>
<a href="resource/digi_locker_rules_and_amendment.php" target="_blank">
<button class="btn btn-secondary know-button" style=""> <strong>Know More </strong> </button>
</a> </div>
</div>
</div>
</div>
<div class="carousel-caption" style="background:rgba(0, 0, 0, 0) none repeat scroll 0 0;text-align: right!important;padding-right: 30px;top: 85%;">
<h4 class="shadowtxt h4txt" style="font-size: 17px;margin-top: 0px; color: #000;"> Download DigiLocker Mobile App </h4>
<p style="font-size:12px; line-height: 20px;"> <a href="https://play.google.com/store/apps/details?id=com.digilocker.android" target="_blank" title="Download Androide App from Google Play Store"> <img src="https://img1.digitallocker.gov.in//assets/img/playstore_2.png" style="margin:auto; width: 120px;box-shadow: 0 2px 5px rgba(0, 0, 0, 0.4); outline:none!important;" alt="Android play Store"></a> <a href="https://itunes.apple.com/in/app/digilocker/id1320618078" target="_blank" title="Download iOs App from App Store"> <img src="https://img1.digitallocker.gov.in//assets/img/ios_1.png" style=" margin:auto; width: 120px; margin-left: 15px; box-shadow: 0 2px 5px rgba(0, 0, 0, 0.4); outline:none!important;" alt="iOs store"></a> </p>
</div>
<a class="left carousel-control" href="#myCarousel" role="button" data-slide="prev"> <span class="glyphicon glyphicon-chevron-left" aria-hidden="true"></span> <span class="sr-only">Previous</span> </a> <a class="right carousel-control" href="#myCarousel" role="button" data-slide="next"> <span class="glyphicon glyphicon-chevron-right" aria-hidden="true"></span> <span class="sr-only">Next</span> </a> </div>
</div>
<div class="col-md-12 col-sm-12 hidden-xs panelsrow ">
<div class="container">
<p class="section-header" style="text-align: center;"> How It Works? </p>
<div>
<div class="col-md-1 col-sm-1"></div>
<div class="col-md-2 col-sm-2 text-center">
<div class="profile-circle arrow-next" style="background-color: rgba(0,0,0,0);"><i class="fa fa-mobile icon_border " aria-hidden="true"></i> </div>
<p>SignUp <br>
with Mobile</p>
</div>
<div class="col-md-2 col-sm-2 text-center">
<div class="profile-circle arrow-next" style="background-color: rgba(0,0,0,0);"><img src="https://img1.digitallocker.gov.in//assets/img/aadhar_icon.png" class="icon_border" style=" padding: .4em .2em;"> </i> </div>
<p>Sync <br>
your Aadhaar</p>
</div>
<div class="col-md-2 col-sm-2 text-center">
<div class="profile-circle arrow-next" style="background-color: rgba(0,0,0,0);"><i class="fa fa-file-text icon_border" aria-hidden="true"></i> </div>
<p>Get documents<br>
from Issuers</p>
</div>
<div class="col-md-2 col-sm-2 text-center">
<div class="profile-circle arrow-next" style="background-color: rgba(0,0,0,0);"><i class="fa fa-share-alt icon_border " aria-hidden="true"></i> </div>
<p>Share documents<br>
with Requesters</p>
</div>
<div class="col-md-2 col-sm-2 text-center">
<div class="profile-circle" style="background-color: rgba(0,0,0,0);"><i class="fa fa-check icon_border " aria-hidden="true"></i> </div>
<p>Documents verified <br>
by Requesters</p>
</div>
<div class="col-md-1 col-sm-1 col-xs-1"></div>
</div>
</div>
</div>
<div class="col-md-12 col-sm-12 hidden-xs bg-statis">
<div class="container">
<p class="section-header" style="text-align: center;"> DigiLocker National Statistics </p>
<div class="row"> <a href="/public/dashboard" style="text-decoration: none;">
<div class="col-md-6 col-sm-6">
<div style="text-align:center; color:#fd5f42; ">
<h2 class="stathead"><span id="users"></span></h2>
<h4> REGISTERED USERS </h4>
<i class="fa fa-users fa-2x" style="color:#807F7F;"></i> </div>
</div>
<div class="col-md-6 col-sm-6">
<div style="text-align:center; color:#a9cf6a;">
<h2 class="stathead"><span id="issue_document"></span></strong></h2>
<h4> ISSUED DOCUMENTS </h4>
<i class="fa fa-files-o fa-2x" style="color:#807F7F;"></i> </div>
</div>
</a> </div>
</div>
</div>
<div class="col-md-12 col-sm-12 hidden-xs bgsignup">
<div class="container">
<div class="row bgsignuppartner dwn">
<div class="col-md-8 col-md-offset-1 col-sm-12" style="margin-bottom: 30px; margin-top: 30px;">
<p class="section-header" style="margin-bottom: 0px;"> Become a DigiLocker Partner Organization </p>
<p> Get registered as a DigiLocker Issuer or Requester! </p>
<a href="https://partners.digitallocker.gov.in" target="_blank">
<button class="btn btn-secondary ovalbtn hvrblck" style="border-radius: 3px; margin-left: 0px;">Explore More</button>
</a> </div>
</div>
</div>
</div>
<div class="col-md-12 col-sm-12 hidden-xs">
<div class="container" style="margin-top: 30px; margin-bottom: 30px;">
<div class="col-md-4">
<div class="panel panel-primary nobdr nheight" style="min-height: 385px!important; height: auto!important;">
<div class="panel-heading">DigiLocker in News</div>
<div class="panel-body" style="padding-bottom: 0px;">
<div class="row">
<div class="col-xs-12">
<ul id="demo3" style="margin-left: -33px;margin-bottom: -40px; list-style-type: none; height:250px!important;">
<li class="news-item">
<div class="innerSinglenews"> <span class="newsText"><a href="https://www.firstpost.com/tech/news-analysis/railways-to-accept-soft-copies-of-aadhaar-and-driving-license-in-your-digilocker-4676971.html" class="newsTitle" target="_blank" style="text-decoration:none;">[Firstpost] Railways to Accept Soft Copies Of Aadhaar And DL In Your Digilocker... <img title="External website that opens in a new window"class="ext-link-icon-red" alt="External website that opens in a new window" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAkAAAAJAQMAAADaX5RTAAAAA1BMVEX///+nxBvIAAAAAXRSTlMAQObYZgAAAAtJREFUeNpjYMAJAAAbAAFZmD3qAAAAAElFTkSuQmCC"></a> </span> </div>
</li>
<li class="news-item">
<div class="innerSinglenews"> <span class="newsText"><a href="https://www.ndtv.com/business/travelling-by-train-irctc-show-aadhaar-driving-licence-saved-in-digilocker-as-identity-id-proofs-1878965" class="newsTitle" target="_blank" style="text-decoration:none;">[NDTV] Indian Railways Allows Aadhaar, Licence Saved In DigiLocker... <img title="External website that opens in a new window"class="ext-link-icon-red" alt="External website that opens in a new window" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAkAAAAJAQMAAADaX5RTAAAAA1BMVEX///+nxBvIAAAAAXRSTlMAQObYZgAAAAtJREFUeNpjYMAJAAAbAAFZmD3qAAAAAElFTkSuQmCC"></a> </span> </div>
</li>
<li class="news-item">
<div class="innerSinglenews"> <span class="newsText"><a href="https://www.newsheads.in/education/news/cbse-opens-80-lakh-digital-lockers-for-class-10-12-students-article-17462.html" class="newsTitle" target="_blank" style="text-decoration:none;">[Newsheads] CBSE opens 80 lakh digital lockers for class 10, 12 students... <img title="External website that opens in a new window"class="ext-link-icon-red" alt="External website that opens in a new window" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAkAAAAJAQMAAADaX5RTAAAAA1BMVEX///+nxBvIAAAAAXRSTlMAQObYZgAAAAtJREFUeNpjYMAJAAAbAAFZmD3qAAAAAElFTkSuQmCC"></a> </span> </div>
</li>
<li class="news-item">
<div class="innerSinglenews"> <span class="newsText"><a href="http://telecom.economictimes.indiatimes.com/news/icici-bank-integrates-digilocker-with-its-net-banking-platform/57987041" class="newsTitle" target="_blank" style="text-decoration:none;">[India Times] ICICI Bank integrates ‘DigiLocker’ with its net-banking platform... <img title="External website that opens in a new window"class="ext-link-icon-red" alt="External website that opens in a new window" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAkAAAAJAQMAAADaX5RTAAAAA1BMVEX///+nxBvIAAAAAXRSTlMAQObYZgAAAAtJREFUeNpjYMAJAAAbAAFZmD3qAAAAAElFTkSuQmCC"></a> </span> </div>
</li>
<li class="news-item">
<div class="innerSinglenews"> <span class="newsText"><a href="http://www.newindianexpress.com/states/kerala/2017/apr/17/digilocker-attracts-attention-of-nine-varsities-1594342.html" class="newsTitle" target="_blank" style="text-decoration:none;">[New Indian Express] DigiLocker attracts attention of nine varsities... <img title="External website that opens in a new window"class="ext-link-icon-red" alt="External website that opens in a new window" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAkAAAAJAQMAAADaX5RTAAAAA1BMVEX///+nxBvIAAAAAXRSTlMAQObYZgAAAAtJREFUeNpjYMAJAAAbAAFZmD3qAAAAAElFTkSuQmCC"></a> </span> </div>
</li>
<li class="news-item">
<div class="innerSinglenews"> <span class="newsText"><a href="http://zeenews.india.com/personal-finance/kotak-mahindra-bank-launches-digilocker-to-eliminate-use-of-physical-documents_1984210.html" class="newsTitle" target="_blank" style="text-decoration:none;">[Zee News] Kotak Mahindra Bank launches DigiLocker to eliminate use of physical documents... <img title="External website that opens in a new window"class="ext-link-icon-red" alt="External website that opens in a new window" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAkAAAAJAQMAAADaX5RTAAAAA1BMVEX///+nxBvIAAAAAXRSTlMAQObYZgAAAAtJREFUeNpjYMAJAAAbAAFZmD3qAAAAAElFTkSuQmCC"></a> </span> </div>
</li>
<li class="news-item">
<div class="innerSinglenews"> <span class="newsText"><a href="http://indianexpress.com/article/business/business-others/digital-lockers-govt-starts-licensing-private-players-govt-agencies-4569457/" class="newsTitle" target="_blank" style="text-decoration:none;">[Indian Express] Govt starts licensing private players, govt agencies... <img title="External website that opens in a new window"class="ext-link-icon-red" alt="External website that opens in a new window" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAkAAAAJAQMAAADaX5RTAAAAA1BMVEX///+nxBvIAAAAAXRSTlMAQObYZgAAAAtJREFUeNpjYMAJAAAbAAFZmD3qAAAAAElFTkSuQmCC"></a> </span> </div>
</li>
<li class="news-item">
<div class="innerSinglenews"> <span class="newsText"><a href="http://maximumgovernance.com/change-leaders/mr-debabrata-nayak/" class="newsTitle" target="_blank" style="text-decoration:none;">[Maximum Governance] DigiLocker is envisioned as a documents highway to... <img title="External website that opens in a new window"class="ext-link-icon-red" alt="External website that opens in a new window" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAkAAAAJAQMAAADaX5RTAAAAA1BMVEX///+nxBvIAAAAAXRSTlMAQObYZgAAAAtJREFUeNpjYMAJAAAbAAFZmD3qAAAAAElFTkSuQmCC"></a> </span> </div>
</li>
<li class="news-item">
<div class="innerSinglenews"> <span class="newsText"> <a href="http://www.vccircle.com/infracircle/india-set-digital-locker-authority-e-governance/" class="newsTitle" target="_blank">[Vccircle] India to set up digital locker authority for e-governance...<img title="External website that opens in a new window"class="ext-link-icon-red" alt="External website that opens in a new window" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAkAAAAJAQMAAADaX5RTAAAAA1BMVEX///+nxBvIAAAAAXRSTlMAQObYZgAAAAtJREFUeNpjYMAJAAAbAAFZmD3qAAAAAElFTkSuQmCC"></a> </span> </div>
</li>
<li class="news-item">
<div class="innerSinglenews"> <span class="newsText"> <a href="http://www.dnaindia.com/scitech/report-you-can-now-access-your-driving-licence-on-your-smartphone-using-digilocker-2252782" class="newsTitle" target="_blank">[DNA India] You can now access your driving licence on your smartphone using DigiLocker...<img title="External website that opens in a new window"class="ext-link-icon-red" alt="External website that opens in a new window" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAkAAAAJAQMAAADaX5RTAAAAA1BMVEX///+nxBvIAAAAAXRSTlMAQObYZgAAAAtJREFUeNpjYMAJAAAbAAFZmD3qAAAAAElFTkSuQmCC"></a> </span> </div>
</li>
</ul>
</div>
</div>
</div>
<div class="panel-footer" style="background-color:transparent;border-top:hidden;padding-top: 0px;"></div>
</div>
</div>
<div class="col-md-4 hidden-xs">
<div class="panel panel-primary nobdr nheight">
<div class="panel-heading"> How can I get a DigiLocker account? </div>
<div class="panel-body pnlhght" style="line-height: 24px;"> <strong> Signing up for DigiLocker is easy -<br />
all you need is your mobile number.</strong>
<div class="panel-body">
<ul class="bulleted">
<li>Your <strong>mobile number</strong> will be authenticated by sending an <strong>OTP</strong> (one-time password) followed by selecting a username & password. This will create your DigiLocker account.</li>
<li> After your DigiLocker account is successfully created, you can voluntarily provide your <strong> Aadhaar number</strong> (issued by UIDAI) to avail additional services.</li>
</ul>
</div>
</div>
</div>
</div>
<div class="col-md-4 hidden-sm hidden-xs">
<div class="panel panel-primary nobdr nheight">
<div class="panel-body pnlhght" style="text-align: center;padding-top: 25px; padding-bottom: 0px;"> <img src="https://img1.digitallocker.gov.in//assets/img/digiLocker-mobileinhand.png" alt="DigiLocker Mobile App"> </div>
<div class="panel-heading" style=" background-color:#4776c6; margin-top: 2px; padding-top: 0px; text-align: center;">
<p>Access your important documents anytime anywhere from your mobile devices.</p>
<a href="https://play.google.com/store/apps/details?id=com.digilocker.android" target="_blank" class="links "><img style=" box-shadow: 0 2px 5px rgba(0, 0, 0, 0.4); width: 30%;"src="https://img1.digitallocker.gov.in/assets/img/playstore_1.png"> </a> &nbsp;&nbsp; &nbsp;&nbsp;&nbsp; <a href="https://itunes.apple.com/in/app/digilocker/id1320618078" target="_blank" class="links"><img style=" box-shadow: 0 2px 5px rgba(0, 0, 0, 0.4);width: 30%;"src="https://img1.digitallocker.gov.in/assets/img/ios.png"> </a> </div>
</div>
</div>
</div>
</div>
<div class="col-md-12 col-sm-12 hidden-xs bgsignup">
<div class="container">
<div class="bgsignuplanding"> <strong>
<p class="text-center dwn"> DigiLocker is a secure cloud based platform for storage, sharing and verification of documents & certificates. <a href="/public/signup_v2/signup/">
<button class="btn ovalbtn1 trbtn" style="font-size: 16px;margin-top: 0px;background-color: #fff;color: #2980B9;border-radius: 22px;border: 1px solid #707070;box-shadow: 0 2px 5px rgba(0, 0, 0, 0.4);"> Sign Up Now </button>
</a> </p>
</strong> </div>
</div>
</div>
</div>
<div class="hidden-md hidden-sm hidden-lg" style="background-color: #3466DB;">
<div>
<div class="header_res navbar-fixed-top">
<div class="col-xs-2" style="padding-left: 0px;">
<button class="js-menu-show header__menu-toggle " style=" font-size: 20px; float: left!important;"><i class="fa fa-bars" aria-hidden="true"></i></button>
</div>
<div class="col-xs-7"> <a href="https://betaaccounts.digitallocker.gov.in/signin" style="text-decoration: none;"><img src="https://img1.digitallocker.gov.in//assets/img/logodg.png" class="img-responsive" /></a> </div>
<div class="col-xs-3" style="padding-right: 0px;"> <a href="https://betaaccounts.digitallocker.gov.in/signin" style=" float: right!important;">Sign In</a> </div>
</div>
<aside class="js-side-nav side-nav">
<nav class="js-side-nav__container side-nav__container">
<button class="js-menu-hide side-nav__hide material-icons"><i class="fa fa-arrow-left" aria-hidden="true" style="margin-right: 10px;"></i> DigiLocker</button>
<header class="side-nav__header"> </header>
<ul class="side-nav__content">
<li> <a href="/about.php"> About </a> </li>
<li> <a href="/public/dashboard"> Statistics </a> </li>
<li> <a href="/faq.php"> FAQs </a> </li>
<li> <a href="/resource-center.php"> Resources </a> </li>
<li> <a href="/credits.php"> Credits </a> </li>
<li> <a href="https://blog.digitallocker.gov.in/" target="_blank"> Blog </a> </li>
<li> <a href="/resource/departmental_circulars.php"> Circulars </a> </li>
<li> <a href="/privacypolicy.php">Privacy Policy</a> </li>
<li> <a href="/jobs.php">Careers</a> </li>
<li> <a href="/contactus.php"> Contact </a>
<li> <a href="https://www.facebook.com/OfficialDigiLocker" target="_blank"><i class="fa fa-facebook-square fa-2x" style="color: #3b5998;" aria-hidden="true"></i></a> &nbsp; &nbsp; <a href="https://twitter.com/digilocker_ind" target="_blank"><i class="fa fa-twitter-square fa-2x" style="color: #0084b4;
"aria-hidden="true"></i></a> &nbsp; &nbsp; <a href="https://plus.google.com/111850842069869647595?hl=en" target="_blank"><i class="fa fa-google-plus-square fa-2x" style="color: #d34836;" aria-hidden="true"></i></a> &nbsp; &nbsp; <a href="https://www.youtube.com/channel/UCHVbXM4OexDUKyGBtdvmfmg" target="_blank"><i class="fa fa-youtube-square fa-2x" style="color: #cc181e;" aria-hidden="true"></i></a> </li>
<li><a href="https://play.google.com/store/apps/details?id=com.digilocker.android" target="_blank"><img class="playstore" style="width: 41%;"alt="play store" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAIQAAAAoAQMAAAAFVMBxAAAAA1BMVEX///+nxBvIAAAAAXRSTlMAQObYZgAAAA9JREFUeNpjYBgFo2D4AAAC0AAB4tdONAAAAABJRU5ErkJggg=="></li>
</a>
</ul>
</nav>
</aside>
<div id="carousel-a" class="carousel slide carousel-sync" data-ride="carousel" data-pause="false" style="margin-top:-43px;">
<ol class="carousel-indicators circlelists" style="margin-bottom: 0px;">
</ol>
<div class="carousel-inner">
<div class="item active" style="background-color: #0e305c;height: 500px;">
<div class="carousel-caption" style="padding: 4px 5px 8px 5px; background: rgba(0, 0, 0, 0) none repeat scroll 0 0;"> <img src="https://img1.digitallocker.gov.in/assets/img/cbse-logo-website.png" width="30%" style="margin-bottom: 26px;">
<h4 class="shadowtxt h4txt" style="margin-bottom: 10px; font-size:30px; ">
CTET July 2019 Mark Sheets and Certificates are now available in DigiLocker
</p>
<a href="ctet-certificate.html">
<button class="btn ovalbtn1 trbtn" style=" font-size: 15px;margin-top: 11px;background-color: #fff;color: #2980B9;border-radius: 22px;box-shadow: 0 2px 5px rgba(0, 0, 0, 0.4); outline:none!important;"> Get Your Certificates Now >> </button>
</a> </div>
</div>
<div class="item" style="background-color: #5d28fa;height: 500px;">
<div class="carousel-caption" style="padding: 4px 5px 8px 5px; background: rgba(0, 0, 0, 0) none repeat scroll 0 0;">
<h4 class="shadowtxt h4txt" style="margin-bottom: 10px; font-size:44px; "> Now Drive<br>
Hassle Free<br>
With DigiLocker</h4>
<p>No need to carry Original Driving License and Vehicle RC any more!</p>
<a href="http://morth.nic.in/showfile.asp?lid=3305" target="_blank">
<button class="btn ovalbtn1 trbtn" style=" font-size: 15px;margin-top: 11px;background-color: #fff;color: #2980B9;border-radius: 22px;box-shadow: 0 2px 5px rgba(0, 0, 0, 0.4); outline:none!important;"> Know More </button>
</a> </div>
</div>
<div class="item" style="background-color: #064b49;height: 500px;">
<div class="carousel-caption" style="padding: 4px 5px 8px 5px; background: rgba(0, 0, 0, 0) none repeat scroll 0 0;"> <img src="https://img1.digitallocker.gov.in/assets/img/indian_rail_1.png" width="40%" style="margin-bottom: 26px;">
<h4 class="shadowtxt h4txt" style="margin-bottom: 10px; font-size: 23px; "> Indian Railways now accepts <br>
Digital Aadhaar and Driving Licence <br>
from DigiLocker as Valid ID Proof </h4>
<a href="https://img1.digitallocker.gov.in/assets/circulars/img/CC_33_2018.pdf" target="_blank">
<button class="btn ovalbtn1 trbtn" style=" font-size: 15px;margin-top: 11px;background-color: #fff;color: #2980B9;border-radius: 22px;box-shadow: 0 2px 5px rgba(0, 0, 0, 0.4); outline:none!important;"> Know More </button>
</a> </div>
</div>
</div>
<a class="left carousel-control" href="#carousel-a" data-slide="prev"> <span class="glyphicon glyphicon-chevron-left"></span> </a> <a class="right carousel-control" href="#carousel-a" data-slide="next"> <span class="glyphicon glyphicon-chevron-right"></span> </a> </div>
<div>
<div style="text-align: center; color: #fff; ">
<h4 class="shadowtxt h4txt" style="font-size: 17px;"> Download DigiLocker Mobile App </h4>
<p style="font-size:12px; line-height: 20px;"> <a href="https://play.google.com/store/apps/details?id=com.digilocker.android" target="_blank" title="Download Androide App from Google Play Store"> <img src="https://img1.digitallocker.gov.in//assets/img/playstore_2.png" style="margin:auto; width: 120px;box-shadow: 0 2px 5px rgba(0, 0, 0, 0.4); outline:none!important;" alt="Android play Store"></a> <a href="https://itunes.apple.com/in/app/digilocker/id1320618078" target="_blank" title="Download iOs App from App Store"> <img src="https://img1.digitallocker.gov.in//assets/img/ios_1.png" style=" margin:auto; width: 120px; margin-left: 15px; box-shadow: 0 2px 5px rgba(0, 0, 0, 0.4); outline:none!important;" alt="iOs store"></a> </p>
</div>
</div>
<div style="background-color: #3466DB; display: block;">
<div class="carousel-caption" style="padding: 25px 15px; position: relative!important; ">
<div class="shadowtxt">
<p style="font-size: 15px;">DigiLocker is Govt. of India's cloud based platform for storage, sharing and verification of documents & certificates.</p>
<p style=" margin-bottom: -5px; font-size: 12px;">Not yet on DigiLocker?</p>
<a href="https://betaaccounts.digitallocker.gov.in/signup">
<button class="btn ovalbtn1 trbtn" style=" font-size: 22px;margin-top: 11px;background-color: #fff;color: #2980B9;border-radius: 22px;border: 1px solid #707070;box-shadow: 0 2px 5px rgba(0, 0, 0, 0.4);"> Sign Up for Free </button>
</a> </div>
</div>
</div>
<div style="background-color: #ecf0f1; display: block;">
<div class="carousel-caption" style="padding: 15px 15px; position: relative!important;text-shadow: 0 0px 0px rgba(0, 0, 0, 0.6); ">
<div style="color: #6A6B6B!important;">
<p style="font-size: 20px; font-weight: normal;">DigiLocker National Statistics</p>
<a href="/public/dashboard">
<div style="text-align:center;color: #fff;">
<h2 class="stathead"><span id="issue_document_m"></span></strong></h2>
<h4> ISSUED DOCUMENTS </h4>
<i class="fa fa-files-o fa-2x" style="color:#807F7F;"></i> </div>
</a> </div>
</div>
</div>
<div style="background-color: #fff; padding: 25px 15px;">
<section id="carousel">
<div class="container">
<div class="row">
<div class="col-md-8 col-md-offset-2">
<div class="quote">How It Works?</div>
<div class="carousel slide" id="fade-quote-carousel" data-ride="carousel" data-interval="6000">
<!-- Carousel indicators -->
<ol class="carousel-indicators ">
<li data-target="#fade-quote-carousel" data-slide-to="0" class="active">1</li>
<li data-target="#fade-quote-carousel" data-slide-to="1">2</li>
<li data-target="#fade-quote-carousel" data-slide-to="2">3</li>
<li data-target="#fade-quote-carousel" data-slide-to="3">4</li>
<li data-target="#fade-quote-carousel" data-slide-to="4">5</li>
</ol>
<!-- Carousel items -->
<div class="carousel-inner">
<div class="active item">
<div class="profile-circle" style="background-color: rgba(0,0,0,0);"><i class="fa fa-mobile icon_border " aria-hidden="true"></i> </div>
<blockquote>
<p>SignUp <br>
with Mobile</p>
</blockquote>
</div>
<div class="item">
<div class="profile-circle" style="background-color: rgba(0,0,0,0);"><i class="fa fa-refresh icon_border " aria-hidden="true"></i> </div>
<blockquote>
<p>Sync <br>
your Aadhaar</p>
</blockquote>
</div>
<div class=" item">
<div class="profile-circle" style="background-color: rgba(0,0,0,0);"><i class="fa fa-file-text icon_border " aria-hidden="true"></i> </div>
<blockquote>
<p>Get documents<br>
from Issuers</p>
</blockquote>
</div>
<div class="item">
<div class="profile-circle" style="background-color: rgba(0,0,0,0);"><i class="fa fa-share-alt icon_border " aria-hidden="true"></i> </div>
<blockquote>
<p>Share documents<br>
with Requesters</p>
</blockquote>
</div>
<div class="item">
<div class="profile-circle" style="background-color: rgba(0,0,0,0);"><i class="fa fa-check icon_border " aria-hidden="true"></i> </div>
<blockquote>
<p>Documents verified <br>
by Requesters</p>
</blockquote>
</div>
</div>
</div>
</div>
</div>
</div>
</section>
</div>
<div style="background-color: #ecf0f1; display: block;">
<div class="carousel-caption" style="padding: 15px 15px; position: relative!important;text-shadow: 0 0px 0px rgba(0, 0, 0, 0.6); ">
<div style="color: #6A6B6B!important;">
<p style="font-size: 20px; font-weight: normal;">Become a DigiLocker Partner Organization</p>
<p style=" margin-bottom: -5px; font-size: 12px;">Get registered as a DigiLocker Issuer or Requester!</p>
<a href="https://partners.digitallocker.gov.in" target="_blank">
<button class="btn ovalbtn1 trbtn" style=" font-size: 22px;margin-top: 11px;background-color: #fff;color: #2980B9;border-radius: 22px;box-shadow: 0 2px 5px rgba(0, 0, 0, 0.4);"> Explore More </button>
</a> </div>
</div>
</div>
<div style="background-color: #3466DB; display: block;">
<div class="carousel-caption" style="padding: 15px 15px; position: relative!important; ">
<div class="shadowtxt">
<p style="font-size: 15px;">Download the DigiLocker app (Android and iOs)! </p>
<a href="https://play.google.com/store/apps/details?id=com.digilocker.android" target="_blank"> <img style=" box-shadow: 0 2px 5px rgba(0, 0, 0, 0.4);"src="https://img1.digitallocker.gov.in/assets/img/playstore_1.png"> </a> &nbsp;&nbsp; <a href="https://itunes.apple.com/in/app/digilocker/id1320618078" target="_blank" class="links hvr-grow"><img style=" box-shadow: 0 2px 5px rgba(0, 0, 0, 0.4);"src="https://img1.digitallocker.gov.in/assets/img/ios.png"> </a> </div>
</div>
</div>
</div>
</div>

<div style="clear:both"></div>
<div class="bgfooter" style="display: none;">
<div class="container hidden-xs">
<div class="row foot_margin">
<div class="col-md-8 col-sm-8">
<ul class="ftrlists">
<li>&nbsp;<a class="whitetext" href="/about.html">About</a> | </li>
<li>&nbsp;<a class="whitetext" href="/public/dashboard">Statistics</a> | </li>
<li>&nbsp;<a class="whitetext" href="/faq.html">FAQs</a> | </li>
<li>&nbsp;<a class="whitetext" href="/resource-center.html">Resources</a> | </li>
<li>&nbsp;<a class="whitetext" href="/credits.html">Credits</a> | </li>
<li>&nbsp;<a class="whitetext" href="https://blog.digitallocker.gov.in/" target="_blank">Blog</a> | </li>
<li>&nbsp;<a class="whitetext" href="/resource/departmental_circulars.html">Circulars</a> | </li>
<li>&nbsp;<a class="whitetext" href="https://partners.digitallocker.gov.in" target="_blank">Partners</a> | </li>
<li>&nbsp;<a class="whitetext" href="/privacypolicy.html">Privacy Policy</a> | </li>
<li>&nbsp;<a class="whitetext" href="/jobs.html">Careers</a> | </li>
<li>&nbsp;<a class="whitetext" href="/contributions.html">Internship</a> | </li>
<li>&nbsp;<a class="whitetext" href="/contactus.html">Contact</a></li>
</ul>
<div class="footersec">

<a href="https://www.facebook.com/OfficialDigiLocker" target="_blank" class="links hvr-grow" ><img class="facebook" alt="facebook" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACgAAAAoAQMAAAC2MCouAAAAA1BMVEX///+nxBvIAAAAAXRSTlMAQObYZgAAAAxJREFUeNpjYBhZAAAA8AABOGlaUQAAAABJRU5ErkJggg=="></a> &nbsp;
&nbsp;<a href="https://twitter.com/digilocker_ind" target="_blank" class="links hvr-grow"><img class="twitter" alt="twitter" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACgAAAAoAQMAAAC2MCouAAAAA1BMVEX///+nxBvIAAAAAXRSTlMAQObYZgAAAAxJREFUeNpjYBhZAAAA8AABOGlaUQAAAABJRU5ErkJggg=="></a> &nbsp;
&nbsp;<a href="https://plus.google.com/111850842069869647595?hl=en" target="_blank" class="links hvr-grow"><img class="googleplus" alt="plus.google" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACgAAAAoAQMAAAC2MCouAAAAA1BMVEX///+nxBvIAAAAAXRSTlMAQObYZgAAAAxJREFUeNpjYBhZAAAA8AABOGlaUQAAAABJRU5ErkJggg=="></a> &nbsp;
&nbsp;<a href="https://www.youtube.com/channel/UCHVbXM4OexDUKyGBtdvmfmg" target="_blank" class="links hvr-grow"><img class="youtube" alt="youtube" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACgAAAAoAQMAAAC2MCouAAAAA1BMVEX///+nxBvIAAAAAXRSTlMAQObYZgAAAAxJREFUeNpjYBhZAAAA8AABOGlaUQAAAABJRU5ErkJggg=="> </a>&nbsp;
&nbsp;&nbsp;&nbsp;<a href="https://play.google.com/store/apps/details?id=com.digilocker.android" target="_blank" class="links hvr-grow" ><img style=" box-shadow: 0 2px 5px rgba(0, 0, 0, 0.4);"src="https://img1.digitallocker.gov.in/assets/img/playstore_2.png"> </a> &nbsp;&nbsp;
&nbsp;&nbsp;&nbsp;<a href="https://itunes.apple.com/in/app/digilocker/id1320618078" target="_blank" class="links hvr-grow" ><img style=" box-shadow: 0 2px 5px rgba(0, 0, 0, 0.4);"src="https://img1.digitallocker.gov.in/assets/img/ios_1.png"> </a> &nbsp;
</div>
<div class="footersec">
&nbsp; <img class="getseal" alt="getseal" src= "https://img1.digitallocker.gov.in//assets/img/geotrust-secured-seal-115x55.png" style=" width: 59px; margin-bottom: 6px;"> &nbsp;
&nbsp;<img class="img-256sll" alt="img-256sll" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAIcAAABBAQMAAADBmCXgAAAAA1BMVEX///+nxBvIAAAAAXRSTlMAQObYZgAAABJJREFUeNpjYBgFo2AUjILBAgAEkgABCoK5SwAAAABJRU5ErkJggg==" width="90px" height="43px" style="margin-top: -13px;">&nbsp;
</div>
</div>
<div class="col-md-4 col-sm-4">

<div class="footerlable">
<img class="negd-logo" alt="negd-logo" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAHUAAAAtAQMAAACqF7ZlAAAAA1BMVEX///+nxBvIAAAAAXRSTlMAQObYZgAAAA9JREFUeNpjYBgFo2D4AAAC0AAB4tdONAAAAABJRU5ErkJggg=="><br>

National eGovernance Division <br>
Ministry of Electronics & Information Technology (MeitY) <br>
Government of India<br>
Copyright @ 2020, Version 1.5 </div>
</div>
</div>
</div>
</div>

<div class="hidden-lg hidden-md hidden-sm col-xs-12 bgfooter" style="display: none;">
<div class="container">
<div class="footerlable ftrgap" style="font-size: 11px; text-align: center;">
<img class="negd-logo" alt="negd-logo" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAHUAAAAtAQMAAACqF7ZlAAAAA1BMVEX///+nxBvIAAAAAXRSTlMAQObYZgAAAA9JREFUeNpjYBgFo2D4AAAC0AAB4tdONAAAAABJRU5ErkJggg=="><br>
National eGovernance Division<br>
A Digital India Initiative <br>
Government of India, Copyright @ 2020<br>
<div>
<img class="getseal" alt="getseal" src= "https://img1.digitallocker.gov.in//assets/img/geotrust-secured-seal-115x55.png" style="margin-top: 0px;width: 10%;">&nbsp; &nbsp;
<img class="img-256sll" alt="img-256sll" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAIcAAABBAQMAAADBmCXgAAAAA1BMVEX///+nxBvIAAAAAXRSTlMAQObYZgAAABJJREFUeNpjYBgFo2AUjILBAgAEkgABCoK5SwAAAABJRU5ErkJggg==" style="margin-top: -5px;width: 14%;">
</div>
</div>
</div>
</div>
<script>

var $affectedElements = $("p, h4, .btn, h2, .panel, ol, .MainCntFAQ, h1, h3, h4"); // Can be extended, ex. $("div, p, span.someClass")


// Storing the original size in a data attribute so size can be reset
$affectedElements.each( function(){
var $this = $(this);
$this.data("orig-size", $this.css("font-size") );
});

$("#btn-increase").click(function(){
changeFontSize(1);
})

$("#btn-decrease").click(function(){
changeFontSize(-1);
})

$("#btn-orig").click(function(){
$affectedElements.each( function(){
var $this = $(this);
$this.css( "font-size" , $this.data("orig-size") );
});
})

function changeFontSize(direction){
$affectedElements.each( function(){
var $this = $(this);
$this.css( "font-size" , parseInt($this.css("font-size"))+direction );
});
}
</script>
<!-- The core Firebase JS SDK is always required and must be listed first -->
<script src="https://www.gstatic.com/firebasejs/7.7.0/firebase-app.js"></script>

<!-- TODO: Add SDKs for Firebase products that you want to use
https://firebase.google.com/docs/web/setup#available-libraries -->
<script src="https://www.gstatic.com/firebasejs/7.7.0/firebase-analytics.js"></script>

<script>
// Your web app's Firebase configuration
var firebaseConfig = {
apiKey: "AIzaSyCJMkIPPcxXl20lQ1A9KYsMiyBriRpQd9c",
authDomain: "digilocker-1032.firebaseapp.com",
databaseURL: "https://digilocker-1032.firebaseio.com",
projectId: "digilocker-1032",
storageBucket: "digilocker-1032.appspot.com",
messagingSenderId: "621720315069",
appId: "1:621720315069:web:5148b3f0a1b8854dd383d4",
measurementId: "G-9V79XYGXM9"
};
// Initialize Firebase
firebase.initializeApp(firebaseConfig);
firebase.analytics();
</script>
<!--<script>
(function (i, s, o, g, r, a, m) {
i['GoogleAnalyticsObject'] = r;
i[r] = i[r] || function () {
(i[r].q = i[r].q || []).push(arguments)
}, i[r].l = 1 * new Date();
a = s.createElement(o),
m = s.getElementsByTagName(o)[0];
a.async = 1;
a.src = g;
m.parentNode.insertBefore(a, m)
})(window, document, 'script', '//www.google-analytics.com/analytics.js', 'ga');

ga('create', 'UA-63185340-1', 'auto');
ga('send', 'pageview');

</script>--><script src="https://img1.digitallocker.gov.in/core/js/bootstrap.js"></script>
<script src="https://img1.digitallocker.gov.in/assets/js/side-nav.js" type="text/javascript"></script>
<script src="https://img1.digitallocker.gov.in/public//assets/js/site/statistic_v9.js" type="text/javascript"></script>
<script src="https://img1.digitallocker.gov.in//assets/js/jquery.bootstrap.newsbox.min.js" type="text/javascript"></script>
<script type="text/javascript">
$(function () {
$("#demo3").bootstrapNews({
newsPerPage: 4,
autoplay: true,
pauseOnHover: true,
direction: 'up',
newsTickerInterval: 4000,
});
});
</script>
<script type="text/javascript">
$('.carousel-sync').on('slide.bs.carousel', function (ev) {
var dir = ev.direction == 'right' ? 'prev' : 'next';
$('.carousel-sync').not('.sliding').addClass('sliding').carousel(dir);
});
$('.carousel-sync').on('slid.bs.carousel', function (ev) {
$('.carousel-sync').removeClass('sliding');
});
</script>
<script>
$(document).ready(function () {
$(document).delegate('.open', 'click', function (event) {
$(this).addClass('oppenned');
event.stopPropagation();
})
$(document).delegate('body', 'click', function (event) {
$('.open').removeClass('oppenned');
})
$(document).delegate('.cls', 'click', function (event) {
$('.open').removeClass('oppenned');
event.stopPropagation();
});
});
</script>
<script type="text/javascript">
var axel = Math.random() + "";
var a = axel * 10000000000000;
document.write('<iframe src="https://9056452.fls.doubleclick.net/activityi;src=9056452;type=invmedia;cat=landi0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=' + a + '?" width="1" height="1" frameborder="0" style="display:none"></iframe>');
</script>
<noscript>
<iframe src="https://9056452.fls.doubleclick.net/activityi;src=9056452;type=invmedia;cat=landi0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=1?" width="1" height="1" frameborder="0" style="display:none"></iframe>
</noscript>
<script>
!function (f, b, e, v, n, t, s) {
if (f.fbq)
return;
n = f.fbq = function () {
n.callMethod ?
n.callMethod.apply(n, arguments) : n.queue.push(arguments)
};
if (!f._fbq)
f._fbq = n;
n.push = n;
n.loaded = !0;
n.version = '2.0';
n.queue = [];
t = b.createElement(e);
t.async = !0;
t.src = v;
s = b.getElementsByTagName(e)[ 0 ];
s.parentNode.insertBefore(t, s)
}(window, document, 'script',
'https://connect.facebook.net/en_US/fbevents.js');
fbq('init', '1111718245657092');
fbq('track', 'PageView');
</script>
<noscript>
<img height="1" width="1" style="display:none"
src="https://www.facebook.com/tr?id=1111718245657092&ev=PageView&noscript=1"
/>
</noscript>
</body>

11219 - Nessus SYN scanner
-
Synopsis
It is possible to determine which TCP ports are open.
Description
This plugin is a SYN 'half-open' port scanner. It shall be reasonably quick even against a firewalled target.

Note that SYN scans are less intrusive than TCP (full connect) scans against broken services, but they might cause problems for less robust firewalls and also leave unclosed connections on the remote target, if the network is loaded.
Solution
Protect your target with an IP filter.
Risk Factor
None
Plugin Information
Published: 2009/02/04, Modified: 2020/09/14
Plugin Output

tcp/80/www

Port 80/tcp was found to be open

11219 - Nessus SYN scanner
-
Synopsis
It is possible to determine which TCP ports are open.
Description
This plugin is a SYN 'half-open' port scanner. It shall be reasonably quick even against a firewalled target.

Note that SYN scans are less intrusive than TCP (full connect) scans against broken services, but they might cause problems for less robust firewalls and also leave unclosed connections on the remote target, if the network is loaded.
Solution
Protect your target with an IP filter.
Risk Factor
None
Plugin Information
Published: 2009/02/04, Modified: 2020/09/14
Plugin Output

tcp/443/www

Port 443/tcp was found to be open

19506 - Nessus Scan Information
-
Synopsis
This plugin displays information about the Nessus scan.
Description
This plugin displays, for each tested host, information about the scan itself :

- The version of the plugin set.
- The type of scanner (Nessus or Nessus Home).
- The version of the Nessus Engine.
- The port scanner(s) used.
- The port range scanned.
- Whether credentialed or third-party patch management checks are possible.
- Whether the display of superseded patches is enabled
- The date of the scan.
- The duration of the scan.
- The number of hosts scanned in parallel.
- The number of checks done in parallel.
Solution
n/a
Risk Factor
None
Plugin Information
Published: 2005/08/26, Modified: 2020/08/27
Plugin Output

tcp/0

Information about this scan :

Nessus version : 8.12.1
Plugin feed version : 202012050544
Scanner edition used : Nessus Home
Scan type : Normal
Scan policy used : Web Application Tests
Scanner IP : 192.168.1.8
Port scanner(s) : nessus_syn_scanner
Port range : default
Thorough tests : yes
Experimental tests : no
Paranoia level : 1
Report verbosity : 1
Safe checks : yes
Optimize the test : yes
Credentialed checks : no
Patch management checks : None
Display superseded patches : yes (supersedence plugin did not launch)
CGI scanning : enabled
Web application tests : enabled
Web app tests - Test mode : all_pairs
Web app tests - Try all HTTP methods : yes
Web app tests - Maximum run time : 10 minutes.
Web app tests - Stop at first flaw : param
Max hosts : 30
Max checks : 4
Recv timeout : 5
Backports : None
Allow post-scan editing: Yes
Scan Start Date : 2020/12/6 22:52 India Standard Time
Scan duration : 3840 sec
164.100.94.220
0
0
0
0
7
Critical
High
Medium
Low
Info
Scan Information
Start time: Sun Dec 6 22:52:11 2020
End time: Sun Dec 6 23:30:50 2020
Host Information
IP: 164.100.94.220
OS: Ubuntu 16.04 Linux Kernel 4.4
Vulnerabilities

43111 - HTTP Methods Allowed (per directory)
-
Synopsis
This plugin determines which HTTP methods are allowed on various CGI directories.
Description
By calling the OPTIONS method, it is possible to determine which HTTP methods are allowed on each directory.

The following HTTP methods are considered insecure:
PUT, DELETE, CONNECT, TRACE, HEAD

Many frameworks and languages treat 'HEAD' as a 'GET' request, albeit one without any body in the response. If a security constraint was set on 'GET' requests such that only 'authenticatedUsers' could access GET requests for a particular servlet or resource, it would be bypassed for the 'HEAD' version. This allowed unauthorized blind submission of any privileged GET request.

As this list may be incomplete, the plugin also tests - if 'Thorough tests' are enabled or 'Enable web applications tests' is set to 'yes'
in the scan policy - various known HTTP methods on each directory and considers them as unsupported if it receives a response code of 400, 403, 405, or 501.

Note that the plugin output is only informational and does not necessarily indicate the presence of any security vulnerabilities.
See Also
Solution
n/a
Risk Factor
None
Plugin Information
Published: 2009/12/10, Modified: 2019/03/19
Plugin Output

tcp/80/www


Based on tests of each method :

- HTTP methods ACL BASELINE-CONTROL BCOPY BDELETE BMOVE BPROPFIND
BPROPPATCH CHECKIN CHECKOUT CONNECT COPY DEBUG DELETE GET HEAD
LABEL LOCK MERGE MKACTIVITY MKCOL MKWORKSPACE MOVE NOTIFY OPTIONS
ORDERPATCH PATCH POLL POST PROPFIND PROPPATCH PUT REPORT
RPC_IN_DATA RPC_OUT_DATA SEARCH SUBSCRIBE UNCHECKOUT UNLOCK
UNSUBSCRIBE UPDATE VERSION-CONTROL X-MS-ENUMATTS are allowed on :

/

- Invalid/unknown HTTP methods are allowed on :

/
24260 - HyperText Transfer Protocol (HTTP) Information
-
Synopsis
Some information about the remote HTTP configuration can be extracted.
Description
This test gives some information about the remote HTTP protocol - the version used, whether HTTP Keep-Alive and HTTP pipelining are enabled, etc...

This test is informational only and does not denote any security problem.
Solution
n/a
Risk Factor
None
Plugin Information
Published: 2007/01/30, Modified: 2019/11/22
Plugin Output

tcp/80/www


Response Code : HTTP/1.1 302 Found

Protocol version : HTTP/1.1
SSL : no
Keep-Alive : no
Options allowed : (Not implemented)
Headers :

Cache-Control: no-cache
Content-length: 0
Location: https://164.100.94.220/
Connection: close

Response Body :
91634 - HyperText Transfer Protocol (HTTP) Redirect Information
-
Synopsis
The remote web server redirects requests to the root directory.
Description
The remote web server issues an HTTP redirect when requesting the root directory of the web server.

This plugin is informational only and does not denote a security problem.
Solution
Analyze the redirect(s) to verify that this is valid operation for your web server and/or application.
Risk Factor
None
Plugin Information
Published: 2016/06/16, Modified: 2017/10/12
Plugin Output

tcp/80/www


Request : http://164.100.94.220/
HTTP response : HTTP/1.1 302 Found
Redirect to : https://164.100.94.220/
Redirect type : 30x redirect


Note that Nessus did not receive a 200 OK response from the
last examined redirect.
11219 - Nessus SYN scanner
-
Synopsis
It is possible to determine which TCP ports are open.
Description
This plugin is a SYN 'half-open' port scanner. It shall be reasonably quick even against a firewalled target.

Note that SYN scans are less intrusive than TCP (full connect) scans against broken services, but they might cause problems for less robust firewalls and also leave unclosed connections on the remote target, if the network is loaded.
Solution
Protect your target with an IP filter.
Risk Factor
None
Plugin Information
Published: 2009/02/04, Modified: 2020/09/14
Plugin Output

tcp/80/www

Port 80/tcp was found to be open

11219 - Nessus SYN scanner
-
Synopsis
It is possible to determine which TCP ports are open.
Description
This plugin is a SYN 'half-open' port scanner. It shall be reasonably quick even against a firewalled target.

Note that SYN scans are less intrusive than TCP (full connect) scans against broken services, but they might cause problems for less robust firewalls and also leave unclosed connections on the remote target, if the network is loaded.
Solution
Protect your target with an IP filter.
Risk Factor
None
Plugin Information
Published: 2009/02/04, Modified: 2020/09/14
Plugin Output

tcp/443/www

Port 443/tcp was found to be open

19506 - Nessus Scan Information
-
Synopsis
This plugin displays information about the Nessus scan.
Description
This plugin displays, for each tested host, information about the scan itself :

- The version of the plugin set.
- The type of scanner (Nessus or Nessus Home).
- The version of the Nessus Engine.
- The port scanner(s) used.
- The port range scanned.
- Whether credentialed or third-party patch management checks are possible.
- Whether the display of superseded patches is enabled
- The date of the scan.
- The duration of the scan.
- The number of hosts scanned in parallel.
- The number of checks done in parallel.
Solution
n/a
Risk Factor
None
Plugin Information
Published: 2005/08/26, Modified: 2020/08/27
Plugin Output

tcp/0

Information about this scan :

Nessus version : 8.12.1
Plugin feed version : 202012050544
Scanner edition used : Nessus Home
Scan type : Normal
Scan policy used : Web Application Tests
Scanner IP : 192.168.1.8
Port scanner(s) : nessus_syn_scanner
Port range : default
Thorough tests : yes
Experimental tests : no
Paranoia level : 1
Report verbosity : 1
Safe checks : yes
Optimize the test : yes
Credentialed checks : no
Patch management checks : None
Display superseded patches : yes (supersedence plugin did not launch)
CGI scanning : enabled
Web application tests : enabled
Web app tests - Test mode : all_pairs
Web app tests - Try all HTTP methods : yes
Web app tests - Maximum run time : 10 minutes.
Web app tests - Stop at first flaw : param
Max hosts : 30
Max checks : 4
Recv timeout : 5
Backports : None
Allow post-scan editing: Yes
Scan Start Date : 2020/12/6 22:52 India Standard Time
Scan duration : 2310 sec

10386 - Web Server No 404 Error Code Check
-
Synopsis
The remote web server does not return 404 error codes.
Description
The remote web server is configured such that it does not return '404 Not Found' error codes when a nonexistent file is requested, perhaps returning instead a site map, search page or authentication page.

Nessus has enabled some counter measures for this. However, they might be insufficient. If a great number of security holes are produced for this port, they might not all be accurate.
Solution
n/a
Risk Factor
None
Plugin Information
Published: 2000/04/28, Modified: 2020/06/12
Plugin Output

tcp/80/www



CGI scanning will be disabled for this host because the host responds
to requests for non-existent URLs with HTTP code 302
rather than 404. The requested URL was :

http://164.100.94.220/C34yAjM_MVBN.html
164.100.161.225
0
0
0
0
7
Critical
High
Medium
Low
Info
Scan Information
Start time: Sun Dec 6 23:30:50 2020
End time: Mon Dec 7 00:03:43 2020
Host Information
IP: 164.100.161.225
OS: Ubuntu 16.04 Linux Kernel 4.4
Vulnerabilities

43111 - HTTP Methods Allowed (per directory)
-
Synopsis
This plugin determines which HTTP methods are allowed on various CGI directories.
Description
By calling the OPTIONS method, it is possible to determine which HTTP methods are allowed on each directory.

The following HTTP methods are considered insecure:
PUT, DELETE, CONNECT, TRACE, HEAD

Many frameworks and languages treat 'HEAD' as a 'GET' request, albeit one without any body in the response. If a security constraint was set on 'GET' requests such that only 'authenticatedUsers' could access GET requests for a particular servlet or resource, it would be bypassed for the 'HEAD' version. This allowed unauthorized blind submission of any privileged GET request.

As this list may be incomplete, the plugin also tests - if 'Thorough tests' are enabled or 'Enable web applications tests' is set to 'yes'
in the scan policy - various known HTTP methods on each directory and considers them as unsupported if it receives a response code of 400, 403, 405, or 501.

Note that the plugin output is only informational and does not necessarily indicate the presence of any security vulnerabilities.
See Also
Solution
n/a
Risk Factor
None
Plugin Information
Published: 2009/12/10, Modified: 2019/03/19
Plugin Output

tcp/80/www


Based on tests of each method :

- HTTP methods ACL BASELINE-CONTROL BCOPY BDELETE BMOVE BPROPFIND
BPROPPATCH CHECKIN CHECKOUT CONNECT COPY DEBUG DELETE GET HEAD
LABEL LOCK MERGE MKACTIVITY MKCOL MKWORKSPACE MOVE NOTIFY OPTIONS
ORDERPATCH PATCH POLL POST PROPFIND PROPPATCH PUT REPORT
RPC_IN_DATA RPC_OUT_DATA SEARCH SUBSCRIBE UNCHECKOUT UNLOCK
UNSUBSCRIBE UPDATE VERSION-CONTROL X-MS-ENUMATTS are allowed on :

/

- Invalid/unknown HTTP methods are allowed on :

/
24260 - HyperText Transfer Protocol (HTTP) Information
-
Synopsis
Some information about the remote HTTP configuration can be extracted.
Description
This test gives some information about the remote HTTP protocol - the version used, whether HTTP Keep-Alive and HTTP pipelining are enabled, etc...

This test is informational only and does not denote any security problem.
Solution
n/a
Risk Factor
None
Plugin Information
Published: 2007/01/30, Modified: 2019/11/22
Plugin Output

tcp/80/www


Response Code : HTTP/1.1 301 Moved Permanently

Protocol version : HTTP/1.1
SSL : no
Keep-Alive : no
Options allowed : (Not implemented)
Headers :

Content-length: 0
Location: https://164.100.161.225/
Connection: close

Response Body :
91634 - HyperText Transfer Protocol (HTTP) Redirect Information
-
Synopsis
The remote web server redirects requests to the root directory.
Description
The remote web server issues an HTTP redirect when requesting the root directory of the web server.

This plugin is informational only and does not denote a security problem.
Solution
Analyze the redirect(s) to verify that this is valid operation for your web server and/or application.
Risk Factor
None
Plugin Information
Published: 2016/06/16, Modified: 2017/10/12
Plugin Output

tcp/80/www


Request : http://164.100.161.225/
HTTP response : HTTP/1.1 301 Moved Permanently
Redirect to : https://164.100.161.225/
Redirect type : 30x redirect


Note that Nessus did not receive a 200 OK response from the
last examined redirect.
11219 - Nessus SYN scanner
-
Synopsis
It is possible to determine which TCP ports are open.
Description
This plugin is a SYN 'half-open' port scanner. It shall be reasonably quick even against a firewalled target.

Note that SYN scans are less intrusive than TCP (full connect) scans against broken services, but they might cause problems for less robust firewalls and also leave unclosed connections on the remote target, if the network is loaded.
Solution
Protect your target with an IP filter.
Risk Factor
None
Plugin Information
Published: 2009/02/04, Modified: 2020/09/14
Plugin Output

tcp/80/www

Port 80/tcp was found to be open

11219 - Nessus SYN scanner
-
Synopsis
It is possible to determine which TCP ports are open.
Description
This plugin is a SYN 'half-open' port scanner. It shall be reasonably quick even against a firewalled target.

Note that SYN scans are less intrusive than TCP (full connect) scans against broken services, but they might cause problems for less robust firewalls and also leave unclosed connections on the remote target, if the network is loaded.
Solution
Protect your target with an IP filter.
Risk Factor
None
Plugin Information
Published: 2009/02/04, Modified: 2020/09/14
Plugin Output

tcp/443/www

Port 443/tcp was found to be open

19506 - Nessus Scan Information
-
Synopsis
This plugin displays information about the Nessus scan.
Description
This plugin displays, for each tested host, information about the scan itself :

- The version of the plugin set.
- The type of scanner (Nessus or Nessus Home).
- The version of the Nessus Engine.
- The port scanner(s) used.
- The port range scanned.
- Whether credentialed or third-party patch management checks are possible.
- Whether the display of superseded patches is enabled
- The date of the scan.
- The duration of the scan.
- The number of hosts scanned in parallel.
- The number of checks done in parallel.
Solution
n/a
Risk Factor
None
Plugin Information
Published: 2005/08/26, Modified: 2020/08/27
Plugin Output

tcp/0

Information about this scan :

Nessus version : 8.12.1
Plugin feed version : 202012050544
Scanner edition used : Nessus Home
Scan type : Normal
Scan policy used : Web Application Tests
Scanner IP : 192.168.1.8
Port scanner(s) : nessus_syn_scanner
Port range : default
Thorough tests : yes
Experimental tests : no
Paranoia level : 1
Report verbosity : 1
Safe checks : yes
Optimize the test : yes
Credentialed checks : no
Patch management checks : None
Display superseded patches : yes (supersedence plugin did not launch)
CGI scanning : enabled
Web application tests : enabled
Web app tests - Test mode : all_pairs
Web app tests - Try all HTTP methods : yes
Web app tests - Maximum run time : 10 minutes.
Web app tests - Stop at first flaw : param
Max hosts : 30
Max checks : 4
Recv timeout : 5
Backports : None
Allow post-scan editing: Yes
Scan Start Date : 2020/12/6 23:31 India Standard Time
Scan duration : 1963 sec

10386 - Web Server No 404 Error Code Check
-
Synopsis
The remote web server does not return 404 error codes.
Description
The remote web server is configured such that it does not return '404 Not Found' error codes when a nonexistent file is requested, perhaps returning instead a site map, search page or authentication page.

Nessus has enabled some counter measures for this. However, they might be insufficient. If a great number of security holes are produced for this port, they might not all be accurate.
Solution
n/a
Risk Factor
None
Plugin Information
Published: 2000/04/28, Modified: 2020/06/12
Plugin Output

tcp/80/www



CGI scanning will be disabled for this host because the host responds
to requests for non-existent URLs with HTTP code 301
rather than 404. The requested URL was :

http://164.100.161.225/PezBLP0OEeg_.html
© 2020 Tenable™, Inc. All rights reserved.