WPscan
wpscan --url 'http://192.168.135.105/'
_______________________________________________________________
__ _______ _____
\ \ / / __ \ / ____|
\ \ /\ / /| |__) | (___ ___ __ _ _ __ ®
\ \/ \/ / | ___/ \___ \ / __|/ _` | '_ \
\ /\ / | | ____) | (__| (_| | | | |
\/ \/ |_| |_____/ \___|\__,_|_| |_|
WordPress Security Scanner by the WPScan Team
Version 3.8.22
Sponsored by Automattic - https://automattic.com/
@_WPScan_, @ethicalhack3r, @erwan_lr, @firefart
_______________________________________________________________
[+] URL: http://192.168.135.105/ [192.168.135.105]
[+] Started: Thu Aug 4 18:51:43 2022
Interesting Finding(s):
[+] Headers
| Interesting Entries:
| - Server: Apache/2.4.46 (Unix) PHP/7.4.10
| - X-Powered-By: PHP/7.4.10
| Found By: Headers (Passive Detection)
| Confidence: 100%
[+] XML-RPC seems to be enabled: http://192.168.135.105/xmlrpc.php
| Found By: Direct Access (Aggressive Detection)
| Confidence: 100%
| References:
| - http://codex.wordpress.org/XML-RPC_Pingback_API
| - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_ghost_scanner/
| - https://www.rapid7.com/db/modules/auxiliary/dos/http/wordpress_xmlrpc_dos/
| - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_xmlrpc_login/
| - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_pingback_access/
[+] WordPress readme found: http://192.168.135.105/readme.html
| Found By: Direct Access (Aggressive Detection)
| Confidence: 100%
[+] Upload directory has listing enabled: http://192.168.135.105/wp-content/uploads/
| Found By: Direct Access (Aggressive Detection)
| Confidence: 100%
[+] The external WP-Cron seems to be enabled: http://192.168.135.105/wp-cron.php
| Found By: Direct Access (Aggressive Detection)
| Confidence: 60%
| References:
| - https://www.iplocation.net/defend-wordpress-from-ddos
| - https://github.com/wpscanteam/wpscan/issues/1299
[+] WordPress version 5.5.1 identified (Insecure, released on 2020-09-01).
| Found By: Rss Generator (Passive Detection)
| - http://192.168.135.105/index.php/feed/, <generator>https://wordpress.org/?v=5.5.1</generator>
| - http://192.168.135.105/index.php/comments/feed/, <generator>https://wordpress.org/?v=5.5.1</generator>
[+] WordPress theme in use: news-vibrant
| Location: http://192.168.135.105/wp-content/themes/news-vibrant/
| Last Updated: 2021-02-27T00:00:00.000Z
| Readme: http://192.168.135.105/wp-content/themes/news-vibrant/readme.txt
| [!] The version is out of date, the latest version is 1.0.13
| Style URL: http://192.168.135.105/wp-content/themes/news-vibrant/style.css?ver=1.0.1
| Style Name: News Vibrant
| Style URI: https://codevibrant.com/wpthemes/news-vibrant
| Description: News Vibrant is a modern magazine theme with creative design and powerful features that lets you wri...
| Author: CodeVibrant
| Author URI: https://codevibrant.com
|
| Found By: Css Style In Homepage (Passive Detection)
|
| Version: 1.0.12 (80% confidence)
| Found By: Style (Passive Detection)
| - http://192.168.135.105/wp-content/themes/news-vibrant/style.css?ver=1.0.1, Match: 'Version: 1.0.12'
[+] Enumerating All Plugins (via Passive Methods)
[+] Checking Plugin Versions (via Passive and Aggressive Methods)
[i] Plugin(s) Identified:
[+] simple-file-list
| Location: http://192.168.135.105/wp-content/plugins/simple-file-list/
| Last Updated: 2022-06-01T21:24:00.000Z
| [!] The version is out of date, the latest version is 4.4.11
|
| Found By: Urls In Homepage (Passive Detection)
|
| Version: 4.2.2 (100% confidence)
| Found By: Readme - Stable Tag (Aggressive Detection)
| - http://192.168.135.105/wp-content/plugins/simple-file-list/readme.txt
| Confirmed By: Readme - ChangeLog Section (Aggressive Detection)
| - http://192.168.135.105/wp-content/plugins/simple-file-list/readme.txt
[+] tutor
| Location: http://192.168.135.105/wp-content/plugins/tutor/
| Last Updated: 2022-07-25T11:55:00.000Z
| [!] The version is out of date, the latest version is 2.0.8
|
| Found By: Urls In Homepage (Passive Detection)
|
| Version: 1.5.3 (100% confidence)
| Found By: Readme - Stable Tag (Aggressive Detection)
| - http://192.168.135.105/wp-content/plugins/tutor/readme.txt
| Confirmed By: Readme - ChangeLog Section (Aggressive Detection)
| - http://192.168.135.105/wp-content/plugins/tutor/readme.txt
[+] Enumerating Config Backups (via Passive and Aggressive Methods)
Checking Config Backups - Time: 00:00:00 <> ( Checking Config Backups - Time: 00:00:00 <> ( Checking Config Backups - Time: 00:00:00 <> ( Checking Config Backups - Time: 00:00:00 <> ( Checking Config Backups - Time: 00:00:00 <> ( Checking Config Backups - Time: 00:00:00 <> ( Checking Config Backups - Time: 00:00:00 <> ( Checking Config Backups - Time: 00:00:00 <> ( Checking Config Backups - Time: 00:00:00 <> ( Checking Config Backups - Time: 00:00:00 <> ( Checking Config Backups - Time: 00:00:00 <> ( Checking Config Backups - Time: 00:00:00 <> ( Checking Config Backups - Time: 00:00:00 <> ( Checking Config Backups - Time: 00:00:00 <> ( Checking Config Backups - Time: 00:00:00 <> ( Checking Config Backups - Time: 00:00:00 <> ( Checking Config Backups - Time: 00:00:00 <> ( Checking Config Backups - Time: 00:00:01 <> (45 / Checking Config Backups - Time: 00:00:01 <> (49 / Checking Config Backups - Time: 00:00:01 <> (54 / 1 Checking Config Backups - Time: 00:00:01 <> (59 / 13 Checking Config Backups - Time: 00:00:01 <> (64 / 13 Checking Config Backups - Time: 00:00:01 <> (67 / 13 Checking Config Backups - Time: 00:00:02 <> (69 / 13 Checking Config Backups - Time: 00:00:02 <> (72 / 13 Checking Config Backups - Time: 00:00:02 <> (73 / 13 Checking Config Backups - Time: 00:00:02 <> (76 / 13 Checking Config Backups - Time: 00:00:02 <> (77 / 13 Checking Config Backups - Checking Config Backups - Time: 00:00:02 <> (85 / 137 Checking Config Backups - Time: 00:00:02 <> (90 / 137 Checking Config Backups - Time: 00:00:02 <> (92 / 137 Checking Config Backups - Time: 00:00:02 <> (95 / 137 Checking Config Backups - Time: 00:00:02 <> (97 / 137 Checking Config Backups - Time: 00:00:02 <> (100 / 13 Checking Config Backups - Time: 00:00:02 <> (102 / 13 Checking Config Backups - Time: 00:00:02 <> (105 / 13 Checking Config Backups - Time: 00:00:02 <> (107 / 13 Checking Config Backups - Time: 00:00:02 <> (110 / 13 Checking Config Backups - Time: 00:00:02 <> (112 / 13 Checking Config Backups - Time: 00:00:02 <> (115 / 13 Checking Config Backups - Time: 00:00:02 <> (117 / 13 Checking Config Backups - Time: 00:00:02 <> (121 / 13 Checking Config Backups - Time: 00:00:02 <> (122 / 13 Checking Config Backups - Time: 00:00:02 <> (126 / 13 Checking Config Backups - Time: 00:00:02 <> (127 / 13 Checking Config Backups - Time: 00:00:02 <> (132 / 13 Checking Config Backups - Time: 00:00:02 <> (137 / 137) 100.00% Time: 00:00:02
[i] No Config Backups Found.
[!] No WPScan API Token given, as a result vulnerability data has not been output.
[!] You can get a free API token with 25 daily requests by registering at https://wpscan.com/register
[+] Finished: Thu Aug 4 18:52:23 2022
[+] Requests Done: 175
[+] Cached Requests: 5
[+] Data Sent: 44.713 KB
[+] Data Received: 289.286 KB
[+] Memory used: 236.328 MB
[+] Elapsed time: 00:00:40Last updated