Activity Log
Keep track of all your executed commands in one place. View pending, in-progress, and completed tasks — and review the results of each execution for full transparency and control.
-
#9ff9~$ theHarvester -d vulnweb.com -l 100 -b google,duckduckgo completed Task ID: ***c98c
Read proxies.yaml from /etc/theHarvester/proxies.yaml ******************************************************************* * _ _ _ * * | |_| |__ ___ /\ /\__ _ _ ____ _____ ___| |_ ___ _ __ * * | __| _ \ / _ \ / /_/ / _` | '__\ \ / / _ \/ __| __/ _ \ '__| * * | |_| | | | __/ / __ / (_| | | \ V / __/\__ \ || __/ | * * \__|_| |_|\___| \/ /_/ \__,_|_| \_/ \___||___/\__\___|_| * * * * theHarvester 4.8.2 * * Coded by Christian Martorella * * Edge-Security Research * * [email protected] * * * ******************************************************************* The following engines are not supported: {'google'} [!] Invalid source.
-
#9ff9~$ theHarvester -d company.com -b yahoo,bing -l 100 completed Task ID: ***69a8
Read proxies.yaml from /etc/theHarvester/proxies.yaml ******************************************************************* * _ _ _ * * | |_| |__ ___ /\ /\__ _ _ ____ _____ ___| |_ ___ _ __ * * | __| _ \ / _ \ / /_/ / _` | '__\ \ / / _ \/ __| __/ _ \ '__| * * | |_| | | | __/ / __ / (_| | | \ V / __/\__ \ || __/ | * * \__|_| |_|\___| \/ /_/ \__,_|_| \_/ \___||___/\__\___|_| * * * * theHarvester 4.8.2 * * Coded by Christian Martorella * * Edge-Security Research * * [email protected] * * * ******************************************************************* [*] Target: company.com Read api-keys.yaml from /etc/theHarvester/api-keys.yaml Searching 0 results. [*] Searching Bing. [*] Searching Yahoo. [*] No IPs found. [*] No emails found. [*] No people found. [*] Hosts found: 0 ---------------------
-
#9ff9~$ theHarvester -d company.com -b yahoo,bing -l 100 completed Task ID: ***c307
Read proxies.yaml from /etc/theHarvester/proxies.yaml ******************************************************************* * _ _ _ * * | |_| |__ ___ /\ /\__ _ _ ____ _____ ___| |_ ___ _ __ * * | __| _ \ / _ \ / /_/ / _` | '__\ \ / / _ \/ __| __/ _ \ '__| * * | |_| | | | __/ / __ / (_| | | \ V / __/\__ \ || __/ | * * \__|_| |_|\___| \/ /_/ \__,_|_| \_/ \___||___/\__\___|_| * * * * theHarvester 4.8.2 * * Coded by Christian Martorella * * Edge-Security Research * * [email protected] * * * ******************************************************************* [*] Target: company.com Read api-keys.yaml from /etc/theHarvester/api-keys.yaml Searching 0 results. [*] Searching Bing. [*] Searching Yahoo. [*] No IPs found. [*] No emails found. [*] No people found. [*] Hosts found: 0 ---------------------
-
#9ff9~$ theHarvester -d company.com -b yahoo,bing -l 100 completed Task ID: ***945c
Read proxies.yaml from /etc/theHarvester/proxies.yaml ******************************************************************* * _ _ _ * * | |_| |__ ___ /\ /\__ _ _ ____ _____ ___| |_ ___ _ __ * * | __| _ \ / _ \ / /_/ / _` | '__\ \ / / _ \/ __| __/ _ \ '__| * * | |_| | | | __/ / __ / (_| | | \ V / __/\__ \ || __/ | * * \__|_| |_|\___| \/ /_/ \__,_|_| \_/ \___||___/\__\___|_| * * * * theHarvester 4.8.2 * * Coded by Christian Martorella * * Edge-Security Research * * [email protected] * * * ******************************************************************* [*] Target: company.com Read api-keys.yaml from /etc/theHarvester/api-keys.yaml Searching 0 results. [*] Searching Bing. [*] Searching Yahoo. [*] No IPs found. [*] No emails found. [*] No people found. [*] Hosts found: 0 ---------------------
-
#9ff9~$ theHarvester -h completed Task ID: ***af5f
Read proxies.yaml from /etc/theHarvester/proxies.yaml ******************************************************************* * _ _ _ * * | |_| |__ ___ /\ /\__ _ _ ____ _____ ___| |_ ___ _ __ * * | __| _ \ / _ \ / /_/ / _` | '__\ \ / / _ \/ __| __/ _ \ '__| * * | |_| | | | __/ / __ / (_| | | \ V / __/\__ \ || __/ | * * \__|_| |_|\___| \/ /_/ \__,_|_| \_/ \___||___/\__\___|_| * * * * theHarvester 4.8.2 * * Coded by Christian Martorella * * Edge-Security Research * * [email protected] * * * ******************************************************************* usage: theHarvester [-h] -d DOMAIN [-l LIMIT] [-S START] [-p] [-s] [--screenshot SCREENSHOT] [-v] [-e DNS_SERVER] [-t] [-r [DNS_RESOLVE]] [-n] [-c] [-f FILENAME] [-w WORDLIST] [-a] [-q] [-b SOURCE] theHarvester is used to gather open source intelligence (OSINT) on a company or domain. options: -h, --help show this help message and exit -d, --domain DOMAIN Company name or domain to search. -l, --limit LIMIT Limit the number of search results, default=500. -S, --start START Start with result number X, default=0. -p, --proxies Use proxies for requests, enter proxies in proxies.yaml. -s, --shodan Use Shodan to query discovered hosts. --screenshot SCREENSHOT Take screenshots of resolved domains specify output directory: --screenshot output_directory -v, --virtual-host Verify host name via DNS resolution and search for virtual hosts. -e, --dns-server DNS_SERVER DNS server to use for lookup. -t, --take-over Check for takeovers. -r, --dns-resolve [DNS_RESOLVE] Perform DNS resolution on subdomains with a resolver list or passed in resolvers, default False. -n, --dns-lookup Enable DNS server lookup, default False. -c, --dns-brute Perform a DNS brute force on the domain. -f, --filename FILENAME Save the results to an XML and JSON file. -w, --wordlist WORDLIST Specify a wordlist for API endpoint scanning. -a, --api-scan Scan for API endpoints. -q, --quiet Suppress missing API key warnings. -b, --source SOURCE baidu, bevigil, bing, bingapi, brave, bufferoverun, builtwith, censys, certspotter, criminalip, crtsh, dehashed, dnsdumpster, duckduckgo, fullhunt, github- code, hackertarget, haveibeenpwned, hunter, hunterhow, intelx, leaklookup, netlas, onyphe, otx, pentesttools, projectdiscovery, rapiddns, rocketreach, securityscorecard, securityTrails, shodan, sitedossier, subdomaincenter, subdomainfinderc99, threatminer, tomba, urlscan, venacus, virustotal, whoisxml, yahoo, zoomeye
-
#9ff9~$ theHarvester -d company.com -b google,bing -l 100 completed Task ID: ***3771
Read proxies.yaml from /etc/theHarvester/proxies.yaml ******************************************************************* * _ _ _ * * | |_| |__ ___ /\ /\__ _ _ ____ _____ ___| |_ ___ _ __ * * | __| _ \ / _ \ / /_/ / _` | '__\ \ / / _ \/ __| __/ _ \ '__| * * | |_| | | | __/ / __ / (_| | | \ V / __/\__ \ || __/ | * * \__|_| |_|\___| \/ /_/ \__,_|_| \_/ \___||___/\__\___|_| * * * * theHarvester 4.8.2 * * Coded by Christian Martorella * * Edge-Security Research * * [email protected] * * * ******************************************************************* The following engines are not supported: {'google'} [!] Invalid source.
-
#9ff9~$ theHarvester -d company.com -b yandex,bing -l 100 completed Task ID: ***84f7
Read proxies.yaml from /etc/theHarvester/proxies.yaml ******************************************************************* * _ _ _ * * | |_| |__ ___ /\ /\__ _ _ ____ _____ ___| |_ ___ _ __ * * | __| _ \ / _ \ / /_/ / _` | '__\ \ / / _ \/ __| __/ _ \ '__| * * | |_| | | | __/ / __ / (_| | | \ V / __/\__ \ || __/ | * * \__|_| |_|\___| \/ /_/ \__,_|_| \_/ \___||___/\__\___|_| * * * * theHarvester 4.8.2 * * Coded by Christian Martorella * * Edge-Security Research * * [email protected] * * * ******************************************************************* The following engines are not supported: {'yandex'} [!] Invalid source.
-
#9ff9~$ theHarvester -d company.com -b google,bing -l 100 completed Task ID: ***ea90
Read proxies.yaml from /etc/theHarvester/proxies.yaml ******************************************************************* * _ _ _ * * | |_| |__ ___ /\ /\__ _ _ ____ _____ ___| |_ ___ _ __ * * | __| _ \ / _ \ / /_/ / _` | '__\ \ / / _ \/ __| __/ _ \ '__| * * | |_| | | | __/ / __ / (_| | | \ V / __/\__ \ || __/ | * * \__|_| |_|\___| \/ /_/ \__,_|_| \_/ \___||___/\__\___|_| * * * * theHarvester 4.8.2 * * Coded by Christian Martorella * * Edge-Security Research * * [email protected] * * * ******************************************************************* The following engines are not supported: {'google'} [!] Invalid source.
-
#9ff9~$ theHarvester [-h] -d geoscan.lan [-l LIMIT] [-S START] [-p] [-s] [--screenshot SCREENSHOT] [-v] [-e DNS_SERVER] [-t] [-r [DNS_RESOLVE]] [-n] [-c] [-f FILENAME] [-b SOURCE] completed Task ID: ***d47a
Read proxies.yaml from /etc/theHarvester/proxies.yaml ******************************************************************* * _ _ _ * * | |_| |__ ___ /\ /\__ _ _ ____ _____ ___| |_ ___ _ __ * * | __| _ \ / _ \ / /_/ / _` | '__\ \ / / _ \/ __| __/ _ \ '__| * * | |_| | | | __/ / __ / (_| | | \ V / __/\__ \ || __/ | * * \__|_| |_|\___| \/ /_/ \__,_|_| \_/ \___||___/\__\___|_| * * * * theHarvester 4.8.2 * * Coded by Christian Martorella * * Edge-Security Research * * [email protected] * * * ******************************************************************* usage: theHarvester [-h] -d DOMAIN [-l LIMIT] [-S START] [-p] [-s] [--screenshot SCREENSHOT] [-v] [-e DNS_SERVER] [-t] [-r [DNS_RESOLVE]] [-n] [-c] [-f FILENAME] [-w WORDLIST] [-a] [-q] [-b SOURCE] theHarvester: error: unrecognized arguments: [-h] [-l LIMIT] [-S START] [-p] [-s] [--screenshot SCREENSHOT] [-v] [-e DNS_SERVER] [-t] [-r [DNS_RESOLVE]] [-n] [-c] [-f FILENAME] [-b SOURCE]
-
#9ff9~$ theHarvester [-h] -d DOMAIN [-l LIMIT] [-S START] [-p] [-s] [--screenshot SCREENSHOT] [-v] [-e DNS_SERVER] [-t] [-r [DNS_RESOLVE]] [-n] [-c] [-f FILENAME] [-b SOURCE] completed Task ID: ***79ee
Read proxies.yaml from /etc/theHarvester/proxies.yaml ******************************************************************* * _ _ _ * * | |_| |__ ___ /\ /\__ _ _ ____ _____ ___| |_ ___ _ __ * * | __| _ \ / _ \ / /_/ / _` | '__\ \ / / _ \/ __| __/ _ \ '__| * * | |_| | | | __/ / __ / (_| | | \ V / __/\__ \ || __/ | * * \__|_| |_|\___| \/ /_/ \__,_|_| \_/ \___||___/\__\___|_| * * * * theHarvester 4.8.2 * * Coded by Christian Martorella * * Edge-Security Research * * [email protected] * * * ******************************************************************* usage: theHarvester [-h] -d DOMAIN [-l LIMIT] [-S START] [-p] [-s] [--screenshot SCREENSHOT] [-v] [-e DNS_SERVER] [-t] [-r [DNS_RESOLVE]] [-n] [-c] [-f FILENAME] [-w WORDLIST] [-a] [-q] [-b SOURCE] theHarvester: error: unrecognized arguments: [-h] [-l LIMIT] [-S START] [-p] [-s] [--screenshot SCREENSHOT] [-v] [-e DNS_SERVER] [-t] [-r [DNS_RESOLVE]] [-n] [-c] [-f FILENAME] [-b SOURCE]
-
#9ff9~$ theHarvester –d blahblah.su –b urlscan completed Task ID: ***dbba
Read proxies.yaml from /etc/theHarvester/proxies.yaml ******************************************************************* * _ _ _ * * | |_| |__ ___ /\ /\__ _ _ ____ _____ ___| |_ ___ _ __ * * | __| _ \ / _ \ / /_/ / _` | '__\ \ / / _ \/ __| __/ _ \ '__| * * | |_| | | | __/ / __ / (_| | | \ V / __/\__ \ || __/ | * * \__|_| |_|\___| \/ /_/ \__,_|_| \_/ \___||___/\__\___|_| * * * * theHarvester 4.8.2 * * Coded by Christian Martorella * * Edge-Security Research * * [email protected] * * * ******************************************************************* usage: theHarvester [-h] -d DOMAIN [-l LIMIT] [-S START] [-p] [-s] [--screenshot SCREENSHOT] [-v] [-e DNS_SERVER] [-t] [-r [DNS_RESOLVE]] [-n] [-c] [-f FILENAME] [-w WORDLIST] [-a] [-q] [-b SOURCE] theHarvester: error: the following arguments are required: -d/--domain
-
#9ff9~$ theHarvester –d blahblah.su –b dnsdumpster completed Task ID: ***8e7f
Read proxies.yaml from /etc/theHarvester/proxies.yaml ******************************************************************* * _ _ _ * * | |_| |__ ___ /\ /\__ _ _ ____ _____ ___| |_ ___ _ __ * * | __| _ \ / _ \ / /_/ / _` | '__\ \ / / _ \/ __| __/ _ \ '__| * * | |_| | | | __/ / __ / (_| | | \ V / __/\__ \ || __/ | * * \__|_| |_|\___| \/ /_/ \__,_|_| \_/ \___||___/\__\___|_| * * * * theHarvester 4.8.2 * * Coded by Christian Martorella * * Edge-Security Research * * [email protected] * * * ******************************************************************* usage: theHarvester [-h] -d DOMAIN [-l LIMIT] [-S START] [-p] [-s] [--screenshot SCREENSHOT] [-v] [-e DNS_SERVER] [-t] [-r [DNS_RESOLVE]] [-n] [-c] [-f FILENAME] [-w WORDLIST] [-a] [-q] [-b SOURCE] theHarvester: error: the following arguments are required: -d/--domain
-
#9ff9~$ theHarvester -d geoscan.lan completed Task ID: ***3cd8
Read proxies.yaml from /etc/theHarvester/proxies.yaml ******************************************************************* * _ _ _ * * | |_| |__ ___ /\ /\__ _ _ ____ _____ ___| |_ ___ _ __ * * | __| _ \ / _ \ / /_/ / _` | '__\ \ / / _ \/ __| __/ _ \ '__| * * | |_| | | | __/ / __ / (_| | | \ V / __/\__ \ || __/ | * * \__|_| |_|\___| \/ /_/ \__,_|_| \_/ \___||___/\__\___|_| * * * * theHarvester 4.8.2 * * Coded by Christian Martorella * * Edge-Security Research * * [email protected] * * * ******************************************************************* [*] No IPs found. [*] No emails found. [*] No people found. [*] No hosts found.
-
#9ff9~$ theHarvester -d kali.org completed Task ID: ***4220
Read proxies.yaml from /etc/theHarvester/proxies.yaml ******************************************************************* * _ _ _ * * | |_| |__ ___ /\ /\__ _ _ ____ _____ ___| |_ ___ _ __ * * | __| _ \ / _ \ / /_/ / _` | '__\ \ / / _ \/ __| __/ _ \ '__| * * | |_| | | | __/ / __ / (_| | | \ V / __/\__ \ || __/ | * * \__|_| |_|\___| \/ /_/ \__,_|_| \_/ \___||___/\__\___|_| * * * * theHarvester 4.8.2 * * Coded by Christian Martorella * * Edge-Security Research * * [email protected] * * * ******************************************************************* [*] No IPs found. [*] No emails found. [*] No people found. [*] No hosts found.
-
#9ff9~$ theHarvester -d company.com -b google,bing -l 100 completed Task ID: ***4c02
Read proxies.yaml from /etc/theHarvester/proxies.yaml ******************************************************************* * _ _ _ * * | |_| |__ ___ /\ /\__ _ _ ____ _____ ___| |_ ___ _ __ * * | __| _ \ / _ \ / /_/ / _` | '__\ \ / / _ \/ __| __/ _ \ '__| * * | |_| | | | __/ / __ / (_| | | \ V / __/\__ \ || __/ | * * \__|_| |_|\___| \/ /_/ \__,_|_| \_/ \___||___/\__\___|_| * * * * theHarvester 4.8.2 * * Coded by Christian Martorella * * Edge-Security Research * * [email protected] * * * ******************************************************************* The following engines are not supported: {'google'} [!] Invalid source.
-
#2169~$ wpscan --url https://decorhomium.com --enumerate p --api-token cLsFadanRvNssXHit6OjfMoMICPvom0ahisdPCV0Zwg completed Task ID: ***d951
_______________________________________________________________ __ _______ _____ \ \ / / __ \ / ____| \ \ /\ / /| |__) | (___ ___ __ _ _ __ ® \ \/ \/ / | ___/ \___ \ / __|/ _` | '_ \ \ /\ / | | ____) | (__| (_| | | | | \/ \/ |_| |_____/ \___|\__,_|_| |_| WordPress Security Scanner by the WPScan Team Version 3.8.28 Sponsored by Automattic - https://automattic.com/ @_WPScan_, @ethicalhack3r, @erwan_lr, @firefart _______________________________________________________________ [32m[+][0m URL: https://decorhomium.com/ [160.187.68.134] [32m[+][0m Started: Sun Nov 16 10:05:35 2025 Interesting Finding(s): [32m[+][0m Headers | Interesting Entries: | - server: LiteSpeed | - alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" | Found By: Headers (Passive Detection) | Confidence: 100% [32m[+][0m robots.txt found: https://decorhomium.com/robots.txt | Interesting Entries: | - /wp-admin/ | - /wp-admin/admin-ajax.php | Found By: Robots Txt (Aggressive Detection) | Confidence: 100% [32m[+][0m XML-RPC seems to be enabled: https://decorhomium.com/xmlrpc.php | Found By: Direct Access (Aggressive Detection) | Confidence: 100% | References: | - http://codex.wordpress.org/XML-RPC_Pingback_API | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_ghost_scanner/ | - https://www.rapid7.com/db/modules/auxiliary/dos/http/wordpress_xmlrpc_dos/ | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_xmlrpc_login/ | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_pingback_access/ [32m[+][0m WordPress readme found: https://decorhomium.com/readme.html | Found By: Direct Access (Aggressive Detection) | Confidence: 100% [32m[+][0m The external WP-Cron seems to be enabled: https://decorhomium.com/wp-cron.php | Found By: Direct Access (Aggressive Detection) | Confidence: 60% | References: | - https://www.iplocation.net/defend-wordpress-from-ddos | - https://github.com/wpscanteam/wpscan/issues/1299 [32m[+][0m WordPress version 6.8.3 identified (Latest, released on 2025-09-30). | Found By: Rss Generator (Passive Detection) | - https://decorhomium.com/feed/, <generator>https://wordpress.org/?v=6.8.3</generator> | - https://decorhomium.com/comments/feed/, <generator>https://wordpress.org/?v=6.8.3</generator> [32m[+][0m WordPress theme in use: neo-magazine | Location: https://decorhomium.com/wp-content/themes/neo-magazine/ | Latest Version: 1.0.0 (up to date) | Last Updated: 2025-04-16T00:00:00.000Z | Readme: https://decorhomium.com/wp-content/themes/neo-magazine/readme.txt | Style URL: https://decorhomium.com/wp-content/themes/neo-magazine/style.css?ver=1.0.0 | Style Name: Neo Magazine | Style URI: https://ascendoor.com/themes/neo-magazine/ | Description: Neo Magazine is a WordPress theme designed for news, portal, and magazine websites. It boasts a clea... | Author: Ascendoor | Author URI: https://ascendoor.com/ | | Found By: Css Style In Homepage (Passive Detection) | | Version: 1.0.0 (80% confidence) | Found By: Style (Passive Detection) | - https://decorhomium.com/wp-content/themes/neo-magazine/style.css?ver=1.0.0, Match: 'Version: 1.0.0' [32m[+][0m Enumerating Most Popular Plugins (via Passive Methods) [32m[+][0m Checking Plugin Versions (via Passive and Aggressive Methods) [34m[i][0m Plugin(s) Identified: [32m[+][0m * | Location: https://decorhomium.com/wp-content/plugins/*/ | | Found By: Urls In Homepage (Passive Detection) | | The version could not be determined. [32m[+][0m WPScan DB API OK | Plan: free | Requests Done (during the scan): 3 | Requests Remaining: 18 [32m[+][0m Finished: Sun Nov 16 10:05:59 2025 [32m[+][0m Requests Done: 42 [32m[+][0m Cached Requests: 6 [32m[+][0m Data Sent: 10.51 KB [32m[+][0m Data Received: 595.555 KB [32m[+][0m Memory used: 255.242 MB [32m[+][0m Elapsed time: 00:00:23
-
#2169~$ wpscan --url https://veloxview.com --enumerate p --api-token cLsFadanRvNssXHit6OjfMoMICPvom0ahisdPCV0Zwg completed Task ID: ***8958
_______________________________________________________________ __ _______ _____ \ \ / / __ \ / ____| \ \ /\ / /| |__) | (___ ___ __ _ _ __ ® \ \/ \/ / | ___/ \___ \ / __|/ _` | '_ \ \ /\ / | | ____) | (__| (_| | | | | \/ \/ |_| |_____/ \___|\__,_|_| |_| WordPress Security Scanner by the WPScan Team Version 3.8.28 Sponsored by Automattic - https://automattic.com/ @_WPScan_, @ethicalhack3r, @erwan_lr, @firefart _______________________________________________________________ [32m[+][0m URL: https://veloxview.com/ [104.21.3.232] [32m[+][0m Started: Sun Nov 16 10:01:24 2025 Interesting Finding(s): [32m[+][0m Headers | Interesting Entries: | - x-powered-by: PHP/8.2.28 | - nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800} | - x-litespeed-cache: hit | - report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Cy5qjtKRdbxwdMA4HDLPj1BxGek9pATVbftnd0A8NO%2FF0b3XPAsbeRZqlUKl1k5kg5btP44teqEdXXuYtAlkBDfzCvMmK%2FFEQg0V"}]} | - server: cloudflare | - platform: hostinger | - panel: hpanel | - content-security-policy: upgrade-insecure-requests | - alt-svc: h3=":443"; ma=86400 | - x-turbo-charged-by: LiteSpeed | - cf-cache-status: DYNAMIC | - cf-ray: 99f617ad4ac036a8-YYZ | Found By: Headers (Passive Detection) | Confidence: 100% [32m[+][0m robots.txt found: https://veloxview.com/robots.txt | Found By: Robots Txt (Aggressive Detection) | Confidence: 100% [32m[+][0m This site has 'Must Use Plugins': https://veloxview.com/wp-content/mu-plugins/ | Found By: Direct Access (Aggressive Detection) | Confidence: 80% | Reference: http://codex.wordpress.org/Must_Use_Plugins [32m[+][0m WordPress version 6.7.4 identified (Outdated, released on 2025-09-30). | Found By: Emoji Settings (Passive Detection) | - https://veloxview.com/, Match: 'wp-includes\/js\/wp-emoji-release.min.js?ver=6.7.4' | Confirmed By: Meta Generator (Passive Detection) | - https://veloxview.com/, Match: 'WordPress 6.7.4' [32m[+][0m WordPress theme in use: appointment-booking | Location: https://veloxview.com/wp-content/themes/appointment-booking/ | Latest Version: 1.2.4 | Last Updated: 2025-11-11T00:00:00.000Z | Style URL: https://veloxview.com/wp-content/themes/appointment-booking/style.css?ver=6.7.4 | | Found By: Css Style In Homepage (Passive Detection) | | The version could not be determined. [32m[+][0m Enumerating Most Popular Plugins (via Passive Methods) [32m[+][0m Checking Plugin Versions (via Passive and Aggressive Methods) [34m[i][0m Plugin(s) Identified: [32m[+][0m wordpress-seo | Location: https://veloxview.com/wp-content/plugins/wordpress-seo/ | Last Updated: 2025-11-04T09:30:00.000Z | [33m[!][0m The version is out of date, the latest version is 26.3 | | Found By: Comment (Passive Detection) | | Version: 23.9 (60% confidence) | Found By: Comment (Passive Detection) | - https://veloxview.com/, Match: 'optimized with the Yoast SEO plugin v23.9 -' [32m[+][0m wp-show-posts | Location: https://veloxview.com/wp-content/plugins/wp-show-posts/ | Latest Version: 1.1.6 (up to date) | Last Updated: 2024-04-16T19:12:00.000Z | | Found By: Urls In Homepage (Passive Detection) | | Version: 1.1.6 (10% confidence) | Found By: Query Parameter (Passive Detection) | - https://veloxview.com/wp-content/plugins/wp-show-posts/css/wp-show-posts-min.css?ver=1.1.6 [32m[+][0m WPScan DB API OK | Plan: free | Requests Done (during the scan): 4 | Requests Remaining: 21 [32m[+][0m Finished: Sun Nov 16 10:01:32 2025 [32m[+][0m Requests Done: 8 [32m[+][0m Cached Requests: 44 [32m[+][0m Data Sent: 1.985 KB [32m[+][0m Data Received: 15.813 KB [32m[+][0m Memory used: 261.57 MB [32m[+][0m Elapsed time: 00:00:08 -
#2169~$ wpscan -h completed Task ID: ***b94d
_______________________________________________________________ __ _______ _____ \ \ / / __ \ / ____| \ \ /\ / /| |__) | (___ ___ __ _ _ __ ® \ \/ \/ / | ___/ \___ \ / __|/ _` | '_ \ \ /\ / | | ____) | (__| (_| | | | | \/ \/ |_| |_____/ \___|\__,_|_| |_| WordPress Security Scanner by the WPScan Team Version 3.8.28 Sponsored by Automattic - https://automattic.com/ @_WPScan_, @ethicalhack3r, @erwan_lr, @firefart _______________________________________________________________ Usage: wpscan [options] --url URL The URL of the blog to scan Allowed Protocols: http, https Default Protocol if none provided: http This option is mandatory unless update or help or hh or version is/are supplied -h, --help Display the simple help and exit --hh Display the full help and exit --version Display the version and exit -v, --verbose Verbose mode --[no-]banner Whether or not to display the banner Default: true -o, --output FILE Output to FILE -f, --format FORMAT Output results in the format supplied Available choices: cli-no-colour, cli-no-color, json, cli --detection-mode MODE Default: mixed Available choices: mixed, passive, aggressive --user-agent, --ua VALUE --random-user-agent, --rua Use a random user-agent for each scan --http-auth login:password -t, --max-threads VALUE The max threads to use Default: 5 --throttle MilliSeconds Milliseconds to wait before doing another web request. If used, the max threads will be set to 1. --request-timeout SECONDS The request timeout in seconds Default: 60 --connect-timeout SECONDS The connection timeout in seconds Default: 30 --disable-tls-checks Disables SSL/TLS certificate verification, and downgrade to TLS1.0+ (requires cURL 7.66 for the latter) --proxy protocol://IP:port Supported protocols depend on the cURL installed --proxy-auth login:password --cookie-string COOKIE Cookie string to use in requests, format: cookie1=value1[; cookie2=value2] --cookie-jar FILE-PATH File to read and write cookies Default: /tmp/wpscan/cookie_jar.txt --force Do not check if the target is running WordPress or returns a 403 --[no-]update Whether or not to update the Database --api-token TOKEN The WPScan API Token to display vulnerability data, available at https://wpscan.com/profile --wp-content-dir DIR The wp-content directory if custom or not detected, such as "wp-content" --wp-plugins-dir DIR The plugins directory if custom or not detected, such as "wp-content/plugins" -e, --enumerate [OPTS] Enumeration Process Available Choices: vp Vulnerable plugins ap All plugins p Popular plugins vt Vulnerable themes at All themes t Popular themes tt Timthumbs cb Config backups dbe Db exports u User IDs range. e.g: u1-5 Range separator to use: '-' Value if no argument supplied: 1-10 m Media IDs range. e.g m1-15 Note: Permalink setting must be set to "Plain" for those to be detected Range separator to use: '-' Value if no argument supplied: 1-100 Separator to use between the values: ',' Default: All Plugins, Config Backups Value if no argument supplied: vp,vt,tt,cb,dbe,u,m Incompatible choices (only one of each group/s can be used): - vp, ap, p - vt, at, t --exclude-content-based REGEXP_OR_STRING Exclude all responses matching the Regexp (case insensitive) during parts of the enumeration. Both the headers and body are checked. Regexp delimiters are not required. --plugins-detection MODE Use the supplied mode to enumerate Plugins. Default: passive Available choices: mixed, passive, aggressive --plugins-version-detection MODE Use the supplied mode to check plugins' versions. Default: mixed Available choices: mixed, passive, aggressive --exclude-usernames REGEXP_OR_STRING Exclude usernames matching the Regexp/string (case insensitive). Regexp delimiters are not required. -P, --passwords FILE-PATH List of passwords to use during the password attack. If no --username/s option supplied, user enumeration will be run. -U, --usernames LIST List of usernames to use during the password attack. Examples: 'a1', 'a1,a2,a3', '/tmp/a.txt' --multicall-max-passwords MAX_PWD Maximum number of passwords to send by request with XMLRPC multicall Default: 500 --password-attack ATTACK Force the supplied attack to be used rather than automatically determining one. Multicall will only work against WP < 4.4 Available choices: wp-login, xmlrpc, xmlrpc-multicall --login-uri URI The URI of the login page if different from /wp-login.php --stealthy Alias for --random-user-agent --detection-mode passive --plugins-version-detection passive [!] To see full list of options use --hh.
-
#2169~$ wpscan --url https://veloxview.com --enumerate p completed Task ID: ***502e
_______________________________________________________________ __ _______ _____ \ \ / / __ \ / ____| \ \ /\ / /| |__) | (___ ___ __ _ _ __ ® \ \/ \/ / | ___/ \___ \ / __|/ _` | '_ \ \ /\ / | | ____) | (__| (_| | | | | \/ \/ |_| |_____/ \___|\__,_|_| |_| WordPress Security Scanner by the WPScan Team Version 3.8.28 Sponsored by Automattic - https://automattic.com/ @_WPScan_, @ethicalhack3r, @erwan_lr, @firefart _______________________________________________________________ [32m[+][0m URL: https://veloxview.com/ [172.67.131.74] [32m[+][0m Started: Sun Nov 16 09:51:59 2025 Interesting Finding(s): [32m[+][0m Headers | Interesting Entries: | - x-powered-by: PHP/8.2.28 | - nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800} | - x-litespeed-cache: hit | - report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Cy5qjtKRdbxwdMA4HDLPj1BxGek9pATVbftnd0A8NO%2FF0b3XPAsbeRZqlUKl1k5kg5btP44teqEdXXuYtAlkBDfzCvMmK%2FFEQg0V"}]} | - server: cloudflare | - platform: hostinger | - panel: hpanel | - content-security-policy: upgrade-insecure-requests | - alt-svc: h3=":443"; ma=86400 | - x-turbo-charged-by: LiteSpeed | - cf-cache-status: DYNAMIC | - cf-ray: 99f617ad4ac036a8-YYZ | Found By: Headers (Passive Detection) | Confidence: 100% [32m[+][0m robots.txt found: https://veloxview.com/robots.txt | Found By: Robots Txt (Aggressive Detection) | Confidence: 100% [32m[+][0m This site has 'Must Use Plugins': https://veloxview.com/wp-content/mu-plugins/ | Found By: Direct Access (Aggressive Detection) | Confidence: 80% | Reference: http://codex.wordpress.org/Must_Use_Plugins [32m[+][0m WordPress version 6.7.4 identified (Outdated, released on 2025-09-30). | Found By: Emoji Settings (Passive Detection) | - https://veloxview.com/, Match: 'wp-includes\/js\/wp-emoji-release.min.js?ver=6.7.4' | Confirmed By: Meta Generator (Passive Detection) | - https://veloxview.com/, Match: 'WordPress 6.7.4' [32m[+][0m WordPress theme in use: appointment-booking | Location: https://veloxview.com/wp-content/themes/appointment-booking/ | Latest Version: 1.2.4 | Last Updated: 2025-11-11T00:00:00.000Z | Style URL: https://veloxview.com/wp-content/themes/appointment-booking/style.css?ver=6.7.4 | | Found By: Css Style In Homepage (Passive Detection) | | The version could not be determined. [32m[+][0m Enumerating Most Popular Plugins (via Passive Methods) [32m[+][0m Checking Plugin Versions (via Passive and Aggressive Methods) [34m[i][0m Plugin(s) Identified: [32m[+][0m wordpress-seo | Location: https://veloxview.com/wp-content/plugins/wordpress-seo/ | Last Updated: 2025-11-04T09:30:00.000Z | [33m[!][0m The version is out of date, the latest version is 26.3 | | Found By: Comment (Passive Detection) | | Version: 23.9 (60% confidence) | Found By: Comment (Passive Detection) | - https://veloxview.com/, Match: 'optimized with the Yoast SEO plugin v23.9 -' [32m[+][0m wp-show-posts | Location: https://veloxview.com/wp-content/plugins/wp-show-posts/ | Latest Version: 1.1.6 (up to date) | Last Updated: 2024-04-16T19:12:00.000Z | | Found By: Urls In Homepage (Passive Detection) | | Version: 1.1.6 (10% confidence) | Found By: Query Parameter (Passive Detection) | - https://veloxview.com/wp-content/plugins/wp-show-posts/css/wp-show-posts-min.css?ver=1.1.6 [33m[!][0m No WPScan API Token given, as a result vulnerability data has not been output. [33m[!][0m You can get a free API token with 25 daily requests by registering at https://wpscan.com/register [32m[+][0m Finished: Sun Nov 16 09:52:19 2025 [32m[+][0m Requests Done: 40 [32m[+][0m Cached Requests: 6 [32m[+][0m Data Sent: 8.484 KB [32m[+][0m Data Received: 3.399 MB [32m[+][0m Memory used: 281.551 MB [32m[+][0m Elapsed time: 00:00:20 -
#2169~$ nmap -v -sV veloxview.com completed Task ID: ***88d3
Starting Nmap 7.95 ( https://nmap.org ) at 2025-11-15 17:21 UTC NSE: Loaded 47 scripts for scanning. Initiating Ping Scan at 17:21 Scanning veloxview.com (172.67.131.74) [4 ports] Completed Ping Scan at 17:21, 0.02s elapsed (1 total hosts) Initiating Parallel DNS resolution of 1 host. at 17:21 Completed Parallel DNS resolution of 1 host. at 17:21, 0.02s elapsed Initiating SYN Stealth Scan at 17:21 Scanning veloxview.com (172.67.131.74) [1000 ports] Discovered open port 8080/tcp on 172.67.131.74 Discovered open port 80/tcp on 172.67.131.74 Discovered open port 443/tcp on 172.67.131.74 Discovered open port 8443/tcp on 172.67.131.74 Completed SYN Stealth Scan at 17:21, 4.76s elapsed (1000 total ports) Initiating Service scan at 17:21 Scanning 4 services on veloxview.com (172.67.131.74) Completed Service scan at 17:21, 12.14s elapsed (4 services on 1 host) NSE: Script scanning 172.67.131.74. Initiating NSE at 17:21 Completed NSE at 17:21, 14.30s elapsed Initiating NSE at 17:21 Completed NSE at 17:21, 7.40s elapsed Nmap scan report for veloxview.com (172.67.131.74) Host is up (0.018s latency). Other addresses for veloxview.com (not scanned): 104.21.3.232 2606:4700:3030::ac43:834a 2606:4700:3035::6815:3e8 Not shown: 996 filtered tcp ports (no-response) PORT STATE SERVICE VERSION 80/tcp open http Cloudflare http proxy 443/tcp open ssl/http Cloudflare http proxy 8080/tcp open http Cloudflare http proxy 8443/tcp open ssl/http Cloudflare http proxy Read data files from: /usr/share/nmap Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 38.98 seconds Raw packets sent: 2002 (88.064KB) | Rcvd: 7 (292B)