Activity Log
Keep track of all your executed commands in one place. View pending, in-progress, and completed tasks — and review the results of each execution for full transparency and control.
-
#9a6f~$ nmap --script "exploit" 158.160.30.101 completed Task ID: ***a966
Starting Nmap 7.95 ( https://nmap.org ) at 2025-10-15 16:38 UTC Nmap scan report for 158.160.30.101 Host is up (0.14s latency). Not shown: 985 filtered tcp ports (no-response) PORT STATE SERVICE 20/tcp closed ftp-data 21/tcp closed ftp 22/tcp open ssh 80/tcp closed http 81/tcp closed hosts2-ns 443/tcp closed https 3000/tcp open ppp 5432/tcp closed postgresql 8000/tcp closed http-alt 8080/tcp closed http-proxy 8200/tcp closed trivnet1 9000/tcp closed cslistener 9001/tcp closed tor-orport 9090/tcp open zeus-admin 9200/tcp closed wap-wsp Nmap done: 1 IP address (1 host up) scanned in 7.73 seconds
-
#eacf~$ wpscan --url https://автосервисрязани.рф/ -e ap completed Task ID: ***1f17
_______________________________________________________________ __ _______ _____ \ \ / / __ \ / ____| \ \ /\ / /| |__) | (___ ___ __ _ _ __ ® \ \/ \/ / | ___/ \___ \ / __|/ _` | '_ \ \ /\ / | | ____) | (__| (_| | | | | \/ \/ |_| |_____/ \___|\__,_|_| |_| WordPress Security Scanner by the WPScan Team Version 3.8.28 Sponsored by Automattic - https://automattic.com/ @_WPScan_, @ethicalhack3r, @erwan_lr, @firefart _______________________________________________________________ [32m[+][0m URL: https://xn--80aafaongc8bexciei0t.xn--p1ai/ [46.254.18.79] [32m[+][0m Started: Tue Oct 14 07:35:20 2025 Interesting Finding(s): [32m[+][0m Headers | Interesting Entries: | - Server: nginx/1.20.2 | - X-Powered-By: PHP/7.4.28 | - WPO-Cache-Status: cached | Found By: Headers (Passive Detection) | Confidence: 100% [32m[+][0m robots.txt found: https://xn--80aafaongc8bexciei0t.xn--p1ai/robots.txt | Interesting Entries: | - /wp-admin/ | - /wp-admin/admin-ajax.php | - /wp-content/uploads/wpo/wpo-plugins-tables-list.json | Found By: Robots Txt (Aggressive Detection) | Confidence: 100% [32m[+][0m XML-RPC seems to be enabled: https://xn--80aafaongc8bexciei0t.xn--p1ai/xmlrpc.php | Found By: Direct Access (Aggressive Detection) | Confidence: 100% | References: | - http://codex.wordpress.org/XML-RPC_Pingback_API | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_ghost_scanner/ | - https://www.rapid7.com/db/modules/auxiliary/dos/http/wordpress_xmlrpc_dos/ | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_xmlrpc_login/ | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_pingback_access/ [32m[+][0m WordPress readme found: https://xn--80aafaongc8bexciei0t.xn--p1ai/readme.html | Found By: Direct Access (Aggressive Detection) | Confidence: 100% [32m[+][0m The external WP-Cron seems to be enabled: https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-cron.php | Found By: Direct Access (Aggressive Detection) | Confidence: 60% | References: | - https://www.iplocation.net/defend-wordpress-from-ddos | - https://github.com/wpscanteam/wpscan/issues/1299 [32m[+][0m WordPress version 6.7.4 identified (Outdated, released on 2025-09-30). | Found By: Rss Generator (Passive Detection) | - https://xn--80aafaongc8bexciei0t.xn--p1ai/feed/, <generator>https://wordpress.org/?v=6.7.4</generator> | - https://xn--80aafaongc8bexciei0t.xn--p1ai/comments/feed/, <generator>https://wordpress.org/?v=6.7.4</generator> [32m[+][0m WordPress theme in use: astra | Location: https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/themes/astra/ | Last Updated: 2025-10-07T00:00:00.000Z | Readme: https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/themes/astra/readme.txt | [33m[!][0m The version is out of date, the latest version is 4.11.13 | Style URL: https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/themes/astra/style.css | Style Name: Astra | Style URI: https://wpastra.com/ | Description: Astra is fast, fully customizable & beautiful WordPress theme suitable for blog, personal portfolio,... | Author: Brainstorm Force | Author URI: https://wpastra.com/about/?utm_source=theme_preview&utm_medium=author_link&utm_campaign=astra_theme | | Found By: Urls In Homepage (Passive Detection) | Confirmed By: Urls In 404 Page (Passive Detection) | | Version: 4.8.7 (80% confidence) | Found By: Style (Passive Detection) | - https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/themes/astra/style.css, Match: 'Version: 4.8.7' [32m[+][0m Enumerating All Plugins (via Passive Methods) [32m[+][0m Checking Plugin Versions (via Passive and Aggressive Methods) [34m[i][0m Plugin(s) Identified: [32m[+][0m chaty | Location: https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/plugins/chaty/ | Last Updated: 2025-10-06T05:49:00.000Z | [33m[!][0m The version is out of date, the latest version is 3.4.8 | | Found By: Urls In Homepage (Passive Detection) | Confirmed By: Urls In 404 Page (Passive Detection) | | Version: 3.3.3 (80% confidence) | Found By: Readme - Stable Tag (Aggressive Detection) | - https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/plugins/chaty/readme.txt [32m[+][0m contact-form-7 | Location: https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/plugins/contact-form-7/ | Last Updated: 2025-09-30T02:16:00.000Z | [33m[!][0m The version is out of date, the latest version is 6.1.2 | | Found By: Urls In Homepage (Passive Detection) | Confirmed By: | Urls In 404 Page (Passive Detection) | Hidden Input (Passive Detection) | | Version: 6.0.1 (100% confidence) | Found By: Query Parameter (Passive Detection) | - https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.0.1 | Confirmed By: | Hidden Input (Passive Detection) | - https://xn--80aafaongc8bexciei0t.xn--p1ai/, Match: '6.0.1' | Readme - Stable Tag (Aggressive Detection) | - https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/plugins/contact-form-7/readme.txt [32m[+][0m elementor | Location: https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/plugins/elementor/ | Last Updated: 2025-10-05T13:55:00.000Z | [33m[!][0m The version is out of date, the latest version is 3.32.4 | | Found By: Urls In Homepage (Passive Detection) | Confirmed By: Urls In 404 Page (Passive Detection) | | Version: 3.25.11 (100% confidence) | Found By: Query Parameter (Passive Detection) | - https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.25.11 | - https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.25.11 | Confirmed By: | Readme - Stable Tag (Aggressive Detection) | - https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/plugins/elementor/readme.txt | Readme - ChangeLog Section (Aggressive Detection) | - https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/plugins/elementor/readme.txt [32m[+][0m elementor-pro | Location: https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/plugins/elementor-pro/ | | Found By: Urls In Homepage (Passive Detection) | Confirmed By: Urls In 404 Page (Passive Detection) | | Version: 3.23.1 (90% confidence) | Found By: Query Parameter (Passive Detection) | - https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.23.1 | - https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.23.1 | - https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.23.1 | Confirmed By: Change Log (Aggressive Detection) | - https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/plugins/elementor-pro/changelog.txt, Match: '#### 3.23.1 -' [32m[+][0m header-footer-elementor | Location: https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/plugins/header-footer-elementor/ | Last Updated: 2025-09-19T07:30:00.000Z | [33m[!][0m The version is out of date, the latest version is 2.5.2 | | Found By: Urls In Homepage (Passive Detection) | Confirmed By: Urls In 404 Page (Passive Detection) | | Version: 2.0.3 (100% confidence) | Found By: Readme - Stable Tag (Aggressive Detection) | - https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/plugins/header-footer-elementor/readme.txt | Confirmed By: Readme - ChangeLog Section (Aggressive Detection) | - https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/plugins/header-footer-elementor/readme.txt [33m[!][0m No WPScan API Token given, as a result vulnerability data has not been output. [33m[!][0m You can get a free API token with 25 daily requests by registering at https://wpscan.com/register [32m[+][0m Finished: Tue Oct 14 07:35:40 2025 [32m[+][0m Requests Done: 2 [32m[+][0m Cached Requests: 51 [32m[+][0m Data Sent: 700 B [32m[+][0m Data Received: 122.127 KB [32m[+][0m Memory used: 269.621 MB [32m[+][0m Elapsed time: 00:00:19
-
#eacf~$ wpscan --url https://автосервисрязани.рф/ -e ap timeout Task ID: ***6957
_______________________________________________________________ __ _______ _____ \ \ / / __ \ / ____| \ \ /\ / /| |__) | (___ ___ __ _ _ __ ® \ \/ \/ / | ___/ \___ \ / __|/ _` | '_ \ \ /\ / | | ____) | (__| (_| | | | | \/ \/ |_| |_____/ \___|\__,_|_| |_| WordPress Security Scanner by the WPScan Team Version 3.8.28 Sponsored by Automattic - https://automattic.com/ @_WPScan_, @ethicalhack3r, @erwan_lr, @firefart _______________________________________________________________ [32m[+][0m URL: https://xn--80aafaongc8bexciei0t.xn--p1ai/ [46.254.18.79] [32m[+][0m Started: Tue Oct 14 07:31:02 2025 [!] Task timed out and was killed inside container. Interesting Finding(s): [32m[+][0m Headers | Interesting Entries: | - Server: nginx/1.20.2 | - X-Powered-By: PHP/7.4.28 | - WPO-Cache-Status: cached | Found By: Headers (Passive Detection) | Confidence: 100% [32m[+][0m robots.txt found: https://xn--80aafaongc8bexciei0t.xn--p1ai/robots.txt | Interesting Entries: | - /wp-admin/ | - /wp-admin/admin-ajax.php | - /wp-content/uploads/wpo/wpo-plugins-tables-list.json | Found By: Robots Txt (Aggressive Detection) | Confidence: 100% [32m[+][0m XML-RPC seems to be enabled: https://xn--80aafaongc8bexciei0t.xn--p1ai/xmlrpc.php | Found By: Direct Access (Aggressive Detection) | Confidence: 100% | References: | - http://codex.wordpress.org/XML-RPC_Pingback_API | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_ghost_scanner/ | - https://www.rapid7.com/db/modules/auxiliary/dos/http/wordpress_xmlrpc_dos/ | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_xmlrpc_login/ | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_pingback_access/ [32m[+][0m WordPress readme found: https://xn--80aafaongc8bexciei0t.xn--p1ai/readme.html | Found By: Direct Access (Aggressive Detection) | Confidence: 100% [32m[+][0m The external WP-Cron seems to be enabled: https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-cron.php | Found By: Direct Access (Aggressive Detection) | Confidence: 60% | References: | - https://www.iplocation.net/defend-wordpress-from-ddos | - https://github.com/wpscanteam/wpscan/issues/1299 [32m[+][0m WordPress version 6.7.4 identified (Outdated, released on 2025-09-30). | Found By: Rss Generator (Passive Detection) | - https://xn--80aafaongc8bexciei0t.xn--p1ai/feed/, <generator>https://wordpress.org/?v=6.7.4</generator> | - https://xn--80aafaongc8bexciei0t.xn--p1ai/comments/feed/, <generator>https://wordpress.org/?v=6.7.4</generator> [32m[+][0m WordPress theme in use: astra | Location: https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/themes/astra/ | Last Updated: 2025-10-07T00:00:00.000Z | Readme: https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/themes/astra/readme.txt | [33m[!][0m The version is out of date, the latest version is 4.11.13 | Style URL: https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/themes/astra/style.css | Style Name: Astra | Style URI: https://wpastra.com/ | Description: Astra is fast, fully customizable & beautiful WordPress theme suitable for blog, personal portfolio,... | Author: Brainstorm Force | Author URI: https://wpastra.com/about/?utm_source=theme_preview&utm_medium=author_link&utm_campaign=astra_theme | | Found By: Urls In Homepage (Passive Detection) | Confirmed By: Urls In 404 Page (Passive Detection) | | Version: 4.8.7 (80% confidence) | Found By: Style (Passive Detection) | - https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/themes/astra/style.css, Match: 'Version: 4.8.7' [32m[+][0m Enumerating All Plugins (via Passive Methods) [32m[+][0m Checking Plugin Versions (via Passive and Aggressive Methods) [34m[i][0m Plugin(s) Identified: [32m[+][0m chaty | Location: https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/plugins/chaty/ | Last Updated: 2025-10-06T05:49:00.000Z | [33m[!][0m The version is out of date, the latest version is 3.4.8 | | Found By: Urls In Homepage (Passive Detection) | Confirmed By: Urls In 404 Page (Passive Detection) | | Version: 3.3.3 (80% confidence) | Found By: Readme - Stable Tag (Aggressive Detection) | - https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/plugins/chaty/readme.txt [32m[+][0m contact-form-7 | Location: https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/plugins/contact-form-7/ | Last Updated: 2025-09-30T02:16:00.000Z | [33m[!][0m The version is out of date, the latest version is 6.1.2 | | Found By: Urls In Homepage (Passive Detection) | Confirmed By: | Urls In 404 Page (Passive Detection) | Hidden Input (Passive Detection) | | Version: 6.0.1 (100% confidence) | Found By: Query Parameter (Passive Detection) | - https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.0.1 | Confirmed By: | Hidden Input (Passive Detection) | - https://xn--80aafaongc8bexciei0t.xn--p1ai/, Match: '6.0.1' | Readme - Stable Tag (Aggressive Detection) | - https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/plugins/contact-form-7/readme.txt [32m[+][0m elementor | Location: https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/plugins/elementor/ | Last Updated: 2025-10-05T13:55:00.000Z | [33m[!][0m The version is out of date, the latest version is 3.32.4 | | Found By: Urls In Homepage (Passive Detection) | Confirmed By: Urls In 404 Page (Passive Detection) | | Version: 3.25.11 (100% confidence) | Found By: Query Parameter (Passive Detection) | - https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.25.11 | - https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.25.11 | Confirmed By: | Readme - Stable Tag (Aggressive Detection) | - https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/plugins/elementor/readme.txt | Readme - ChangeLog Section (Aggressive Detection) | - https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/plugins/elementor/readme.txt [32m[+][0m elementor-pro | Location: https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/plugins/elementor-pro/ | | Found By: Urls In Homepage (Passive Detection) | Confirmed By: Urls In 404 Page (Passive Detection) | | Version: 3.23.1 (90% confidence) | Found By: Query Parameter (Passive Detection) | - https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.23.1 | - https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.23.1 | - https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.23.1 | Confirmed By: Change Log (Aggressive Detection) | - https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/plugins/elementor-pro/changelog.txt, Match: '#### 3.23.1 -' [32m[+][0m header-footer-elementor | Location: https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/plugins/header-footer-elementor/ | Last Updated: 2025-09-19T07:30:00.000Z | [33m[!][0m The version is out of date, the latest version is 2.5.2 | | Found By: Urls In Homepage (Passive Detection) | Confirmed By: Urls In 404 Page (Passive Detection) | | Version: 2.0.3 (100% confidence) | Found By: Readme - Stable Tag (Aggressive Detection) | - https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/plugins/header-footer-elementor/readme.txt | Confirmed By: Readme - ChangeLog Section (Aggressive Detection) | - https://xn--80aafaongc8bexciei0t.xn--p1ai/wp-content/plugins/header-footer-elementor/readme.txt [33m[!][0m No WPScan API Token given, as a result vulnerability data has not been output. [33m[!][0m You can get a free API token with 25 daily requests by registering at https://wpscan.com/register [32m[+][0m Finished: Tue Oct 14 07:34:48 2025 [32m[+][0m Requests Done: 46 [32m[+][0m Cached Requests: 7 [32m[+][0m Data Sent: 14.559 KB [32m[+][0m Data Received: 887.617 KB [32m[+][0m Memory used: 269.445 MB [32m[+][0m Elapsed time: 00:03:46
-
#f8ee~$ theHarvester -d rgsl.ru completed Task ID: ***7fee
Read proxies.yaml from /etc/theHarvester/proxies.yaml ******************************************************************* * _ _ _ * * | |_| |__ ___ /\ /\__ _ _ ____ _____ ___| |_ ___ _ __ * * | __| _ \ / _ \ / /_/ / _` | '__\ \ / / _ \/ __| __/ _ \ '__| * * | |_| | | | __/ / __ / (_| | | \ V / __/\__ \ || __/ | * * \__|_| |_|\___| \/ /_/ \__,_|_| \_/ \___||___/\__\___|_| * * * * theHarvester 4.8.2 * * Coded by Christian Martorella * * Edge-Security Research * * [email protected] * * * ******************************************************************* [*] No IPs found. [*] No emails found. [*] No people found. [*] No hosts found.
-
#eacf~$ wpscan --update completed Task ID: ***26c0
_______________________________________________________________ __ _______ _____ \ \ / / __ \ / ____| \ \ /\ / /| |__) | (___ ___ __ _ _ __ ® \ \/ \/ / | ___/ \___ \ / __|/ _` | '_ \ \ /\ / | | ____) | (__| (_| | | | | \/ \/ |_| |_____/ \___|\__,_|_| |_| WordPress Security Scanner by the WPScan Team Version 3.8.28 Sponsored by Automattic - https://automattic.com/ @_WPScan_, @ethicalhack3r, @erwan_lr, @firefart _______________________________________________________________ [34m[i][0m Updating the Database ... [34m[i][0m Update completed.
-
#eacf~$ wpscan completed Task ID: ***ce6f
One of the following options is required: --url, --update, --help, --hh, --version Please use --help/-h for the list of available options.
-
#f8ee~$ nmap -A -F metrostroy.com completed Task ID: ***5e4a
Starting Nmap 7.95 ( https://nmap.org ) at 2025-10-09 08:19 UTC Nmap scan report for metrostroy.com (77.244.216.3) Host is up (0.13s latency). Not shown: 89 filtered tcp ports (no-response), 8 filtered tcp ports (host-prohibited) PORT STATE SERVICE VERSION 21/tcp open ftp vsftpd 3.0.2 80/tcp open http nginx 1.24.0 |_http-server-header: nginx/1.24.0 |_http-title: Did not follow redirect to https://www.metrostroy.ru/ 443/tcp open ssl/http nginx 1.24.0 |_http-server-header: nginx/1.24.0 |_http-title: Did not follow redirect to https://www.metrostroy.ru/ | ssl-cert: Subject: commonName=metrostroy.com | Subject Alternative Name: DNS:metrostroy.com, DNS:metrostroy.ru, DNS:www.metrostroy.com, DNS:www.metrostroy.ru | Not valid before: 2025-08-21T18:23:57 |_Not valid after: 2025-11-19T18:23:56 |_ssl-date: TLS randomness does not represent time Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Aggressive OS guesses: Linux 3.10 - 4.11 (97%), Linux 3.2 - 4.14 (97%), Linux 5.1 - 5.15 (97%), Linux 3.13 - 4.4 (91%), Linux 3.16 - 4.6 (91%), Linux 3.8 - 3.16 (91%), Linux 4.10 (91%), Linux 4.4 (91%), OpenWrt 19.07 (Linux 4.14) (91%), Linux 2.6.32 (91%) No exact OS matches for host (test conditions non-ideal). Network Distance: 6 hops Service Info: OS: Unix TRACEROUTE (using port 80/tcp) HOP RTT ADDRESS 1 0.02 ms 172.17.0.1 2 132.17 ms 64.233.175.122 3 133.07 ms 74.125.244.134 4 128.29 ms 92.53.93.152 5 128.66 ms 92.53.93.34 6 128.88 ms 77.244.216.3 OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 28.07 seconds
-
#f8ee~$ nmap \-A -F metrostroy.com completed Task ID: ***686c
Starting Nmap 7.95 ( https://nmap.org ) at 2025-10-09 08:15 UTC Failed to resolve "\-A". Nmap scan report for metrostroy.com (77.244.216.3) Host is up (0.13s latency). Not shown: 89 filtered tcp ports (no-response), 8 filtered tcp ports (host-prohibited) PORT STATE SERVICE 21/tcp open ftp 80/tcp open http 443/tcp open https Nmap done: 1 IP address (1 host up) scanned in 3.29 seconds
-
#f8ee~$ theHarvester -d metrostroy.com completed Task ID: ***57b4
Read proxies.yaml from /etc/theHarvester/proxies.yaml ******************************************************************* * _ _ _ * * | |_| |__ ___ /\ /\__ _ _ ____ _____ ___| |_ ___ _ __ * * | __| _ \ / _ \ / /_/ / _` | '__\ \ / / _ \/ __| __/ _ \ '__| * * | |_| | | | __/ / __ / (_| | | \ V / __/\__ \ || __/ | * * \__|_| |_|\___| \/ /_/ \__,_|_| \_/ \___||___/\__\___|_| * * * * theHarvester 4.8.2 * * Coded by Christian Martorella * * Edge-Security Research * * [email protected] * * * ******************************************************************* [*] No IPs found. [*] No emails found. [*] No people found. [*] No hosts found.
-
#0848~$ wpscan --url https://c-ens.by --api-token shoknTRahbNxaozPsES8MaXCVa7AFhkSUNSYJqikXU0 completed Task ID: ***54d9
_______________________________________________________________ __ _______ _____ \ \ / / __ \ / ____| \ \ /\ / /| |__) | (___ ___ __ _ _ __ ® \ \/ \/ / | ___/ \___ \ / __|/ _` | '_ \ \ /\ / | | ____) | (__| (_| | | | | \/ \/ |_| |_____/ \___|\__,_|_| |_| WordPress Security Scanner by the WPScan Team Version 3.8.28 Sponsored by Automattic - https://automattic.com/ @_WPScan_, @ethicalhack3r, @erwan_lr, @firefart _______________________________________________________________ [32m[+][0m URL: https://c-ens.by/ [31.130.202.240] [32m[+][0m Started: Sun Sep 28 19:37:44 2025 Interesting Finding(s): [32m[+][0m Headers | Interesting Entries: | - server: nginx/1.20.2 | - x-powered-by: PHP/7.4.33 | Found By: Headers (Passive Detection) | Confidence: 100% [32m[+][0m robots.txt found: https://c-ens.by/robots.txt | Interesting Entries: | - /wp-admin | - /wp-includes | - /wp-content/plugins | - /wp-content/cache | - /wp-json/ | - /xmlrpc.php | - /readme.html | - /*? | - /?s= | - /chart # | - /*account/ | - /*node | - /*tag | - /*content | - /*vavya | - /*calendar | - /*fdsasa | - /*ttttt | - /*dsfsfs | - /*sdfsdfsd | - /*agencies | - /*analitycs | - /*test | - /*% | - /*href | - /*pvpvvpv | - /*+ | - /*tracker | - /*_kvartira | - *term | - *apapv | - *rshlold | - *accountn | - *auth | - /*.css | - /*.js | - /wp-content/themes/ | - /wp-content/uploads/ | Found By: Robots Txt (Aggressive Detection) | Confidence: 100% [32m[+][0m XML-RPC seems to be enabled: https://c-ens.by/xmlrpc.php | Found By: Direct Access (Aggressive Detection) | Confidence: 100% | References: | - http://codex.wordpress.org/XML-RPC_Pingback_API | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_ghost_scanner/ | - https://www.rapid7.com/db/modules/auxiliary/dos/http/wordpress_xmlrpc_dos/ | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_xmlrpc_login/ | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_pingback_access/ [32m[+][0m WordPress readme found: https://c-ens.by/readme.html | Found By: Direct Access (Aggressive Detection) | Confidence: 100% [32m[+][0m This site has 'Must Use Plugins': https://c-ens.by/wp-content/mu-plugins/ | Found By: Direct Access (Aggressive Detection) | Confidence: 80% | Reference: http://codex.wordpress.org/Must_Use_Plugins [32m[+][0m The external WP-Cron seems to be enabled: https://c-ens.by/wp-cron.php | Found By: Direct Access (Aggressive Detection) | Confidence: 60% | References: | - https://www.iplocation.net/defend-wordpress-from-ddos | - https://github.com/wpscanteam/wpscan/issues/1299 [32m[+][0m WordPress version 6.8.2 identified (Latest, released on 2025-07-15). | Found By: Rss Generator (Aggressive Detection) | - https://c-ens.by/feed/, <generator>https://wordpress.org/?v=6.8.2</generator> | - https://c-ens.by/comments/feed/, <generator>https://wordpress.org/?v=6.8.2</generator> [32m[+][0m WordPress theme in use: c-ens | Location: https://c-ens.by/wp-content/themes/c-ens/ | Style URL: https://c-ens.by/wp-content/themes/c-ens/style.css | | Found By: Urls In Homepage (Passive Detection) | Confirmed By: Urls In 404 Page (Passive Detection) | | The version could not be determined. [32m[+][0m Enumerating All Plugins (via Passive Methods) [32m[+][0m Checking Plugin Versions (via Passive and Aggressive Methods) [34m[i][0m Plugin(s) Identified: [32m[+][0m * | Location: https://c-ens.by/wp-content/plugins/*/ | | Found By: Urls In Homepage (Passive Detection) | Confirmed By: Urls In 404 Page (Passive Detection) | | The version could not be determined. [32m[+][0m easy-fancybox | Location: https://c-ens.by/wp-content/plugins/easy-fancybox/ | Latest Version: 2.3.17 (up to date) | Last Updated: 2025-06-13T19:21:00.000Z | | Found By: Urls In Homepage (Passive Detection) | Confirmed By: Urls In 404 Page (Passive Detection) | | Version: 2.3.17 (80% confidence) | Found By: Readme - Stable Tag (Aggressive Detection) | - https://c-ens.by/wp-content/plugins/easy-fancybox/readme.txt [32m[+][0m Enumerating Config Backups (via Passive and Aggressive Methods) Checking Config Backups - Time: 00:00:00 < > (0 / 137) 0.00% ETA: ??:??:?? Checking Config Backups - Time: 00:00:00 < > (1 / 137) 0.72% ETA: 00:01:21 Checking Config Backups - Time: 00:00:00 < > (2 / 137) 1.45% ETA: 00:00:39 Checking Config Backups - Time: 00:00:00 < > (4 / 137) 2.91% ETA: 00:00:19 Checking Config Backups - Time: 00:00:00 < > (6 / 137) 4.37% ETA: 00:00:15 Checking Config Backups - Time: 00:00:00 < > (7 / 137) 5.10% ETA: 00:00:13 Checking Config Backups - Time: 00:00:00 < > (9 / 137) 6.56% ETA: 00:00:10 Checking Config Backups - Time: 00:00:00 < > (11 / 137) 8.02% ETA: 00:00:09 Checking Config Backups - Time: 00:00:00 < > (12 / 137) 8.75% ETA: 00:00:09 Checking Config Backups - Time: 00:00:00 < > (14 / 137) 10.21% ETA: 00:00:07 Checking Config Backups - Time: 00:00:00 < > (16 / 137) 11.67% ETA: 00:00:07 Checking Config Backups - Time: 00:00:00 < > (18 / 137) 13.13% ETA: 00:00:06 Checking Config Backups - Time: 00:00:01 < > (20 / 137) 14.59% ETA: 00:00:06 Checking Config Backups - Time: 00:00:01 < > (21 / 137) 15.32% ETA: 00:00:06 Checking Config Backups - Time: 00:00:01 < > (23 / 137) 16.78% ETA: 00:00:06 Checking Config Backups - Time: 00:00:01 < > (25 / 137) 18.24% ETA: 00:00:05 Checking Config Backups - Time: 00:00:01 < > (26 / 137) 18.97% ETA: 00:00:05 Checking Config Backups - Time: 00:00:01 < > (28 / 137) 20.43% ETA: 00:00:05 Checking Config Backups - Time: 00:00:01 < > (30 / 137) 21.89% ETA: 00:00:05 Checking Config Backups - Time: 00:00:01 < > (31 / 137) 22.62% ETA: 00:00:05 Checking Config Backups - Time: 00:00:01 < > (33 / 137) 24.08% ETA: 00:00:04 Checking Config Backups - Time: 00:00:01 < > (35 / 137) 25.54% ETA: 00:00:04 Checking Config Backups - Time: 00:00:01 < > (36 / 137) 26.27% ETA: 00:00:04 Checking Config Backups - Time: 00:00:01 < > (38 / 137) 27.73% ETA: 00:00:04 Checking Config Backups - Time: 00:00:01 < > (40 / 137) 29.19% ETA: 00:00:04 Checking Config Backups - Time: 00:00:01 < > (41 / 137) 29.92% ETA: 00:00:04 Checking Config Backups - Time: 00:00:01 < > (44 / 137) 32.11% ETA: 00:00:04 Checking Config Backups - Time: 00:00:01 < > (45 / 137) 32.84% ETA: 00:00:03 Checking Config Backups - Time: 00:00:01 < > (46 / 137) 33.57% ETA: 00:00:04 Checking Config Backups - Time: 00:00:01 <= > (49 / 137) 35.76% ETA: 00:00:03 Checking Config Backups - Time: 00:00:01 <= > (50 / 137) 36.49% ETA: 00:00:03 Checking Config Backups - Time: 00:00:01 <= > (51 / 137) 37.22% ETA: 00:00:03 Checking Config Backups - Time: 00:00:01 <= > (54 / 137) 39.41% ETA: 00:00:03 Checking Config Backups - Time: 00:00:01 <= > (55 / 137) 40.14% ETA: 00:00:03 Checking Config Backups - Time: 00:00:02 <= > (56 / 137) 40.87% ETA: 00:00:03 Checking Config Backups - Time: 00:00:02 <= > (60 / 137) 43.79% ETA: 00:00:03 Checking Config Backups - Time: 00:00:02 <= > (61 / 137) 44.52% ETA: 00:00:03 Checking Config Backups - Time: 00:00:02 <= > (65 / 137) 47.44% ETA: 00:00:02 Checking Config Backups - Time: 00:00:02 <= > (66 / 137) 48.17% ETA: 00:00:03 Checking Config Backups - Time: 00:00:02 <= > (70 / 137) 51.09% ETA: 00:00:02 Checking Config Backups - Time: 00:00:02 <= > (71 / 137) 51.82% ETA: 00:00:02 Checking Config Backups - Time: 00:00:02 <= > (75 / 137) 54.74% ETA: 00:00:02 Checking Config Backups - Time: 00:00:02 <= > (76 / 137) 55.47% ETA: 00:00:02 Checking Config Backups - Time: 00:00:02 <= > (80 / 137) 58.39% ETA: 00:00:02 Checking Config Backups - Time: 00:00:02 <= > (81 / 137) 59.12% ETA: 00:00:02 Checking Config Backups - Time: 00:00:02 <= > (85 / 137) 62.04% ETA: 00:00:02 Checking Config Backups - Time: 00:00:02 <= > (86 / 137) 62.77% ETA: 00:00:02 Checking Config Backups - Time: 00:00:02 <= > (90 / 137) 65.69% ETA: 00:00:02 Checking Config Backups - Time: 00:00:03 <= > (91 / 137) 66.42% ETA: 00:00:02 Checking Config Backups - Time: 00:00:03 <== > (95 / 137) 69.34% ETA: 00:00:01 Checking Config Backups - Time: 00:00:03 <== > (96 / 137) 70.07% ETA: 00:00:01 Checking Config Backups - Time: 00:00:03 <= > (100 / 137) 72.99% ETA: 00:00:01 Checking Config Backups - Time: 00:00:03 <= > (101 / 137) 73.72% ETA: 00:00:01 Checking Config Backups - Time: 00:00:03 <= > (105 / 137) 76.64% ETA: 00:00:01 Checking Config Backups - Time: 00:00:03 <= > (106 / 137) 77.37% ETA: 00:00:01 Checking Config Backups - Time: 00:00:03 <= > (110 / 137) 80.29% ETA: 00:00:01 Checking Config Backups - Time: 00:00:03 <= > (111 / 137) 81.02% ETA: 00:00:01 Checking Config Backups - Time: 00:00:03 <= > (115 / 137) 83.94% ETA: 00:00:01 Checking Config Backups - Time: 00:00:03 <= > (116 / 137) 84.67% ETA: 00:00:01 Checking Config Backups - Time: 00:00:03 <= > (120 / 137) 87.59% ETA: 00:00:01 Checking Config Backups - Time: 00:00:03 <= > (121 / 137) 88.32% ETA: 00:00:01 Checking Config Backups - Time: 00:00:03 <= > (125 / 137) 91.24% ETA: 00:00:00 Checking Config Backups - Time: 00:00:03 <= > (126 / 137) 91.97% ETA: 00:00:00 Checking Config Backups - Time: 00:00:04 <= > (130 / 137) 94.89% ETA: 00:00:00 Checking Config Backups - Time: 00:00:04 <= > (131 / 137) 95.62% ETA: 00:00:00 Checking Config Backups - Time: 00:00:04 <= > (135 / 137) 98.54% ETA: 00:00:00 Checking Config Backups - Time: 00:00:04 <= > (136 / 137) 99.27% ETA: 00:00:00 Checking Config Backups - Time: 00:00:04 <=> (137 / 137) 100.00% Time: 00:00:04 [34m[i][0m No Config Backups Found. [32m[+][0m WPScan DB API OK | Plan: free | Requests Done (during the scan): 4 | Requests Remaining: 21 [32m[+][0m Finished: Sun Sep 28 19:37:58 2025 [32m[+][0m Requests Done: 145 [32m[+][0m Cached Requests: 50 [32m[+][0m Data Sent: 35.566 KB [32m[+][0m Data Received: 127.482 KB [32m[+][0m Memory used: 270.305 MB [32m[+][0m Elapsed time: 00:00:13
-
#0848~$ wpscan --url https://c-ens.by --enumerate vp completed Task ID: ***9ac5
_______________________________________________________________ __ _______ _____ \ \ / / __ \ / ____| \ \ /\ / /| |__) | (___ ___ __ _ _ __ ® \ \/ \/ / | ___/ \___ \ / __|/ _` | '_ \ \ /\ / | | ____) | (__| (_| | | | | \/ \/ |_| |_____/ \___|\__,_|_| |_| WordPress Security Scanner by the WPScan Team Version 3.8.28 Sponsored by Automattic - https://automattic.com/ @_WPScan_, @ethicalhack3r, @erwan_lr, @firefart _______________________________________________________________ [32m[+][0m URL: https://c-ens.by/ [31.130.202.240] [32m[+][0m Started: Sun Sep 28 19:35:25 2025 Interesting Finding(s): [32m[+][0m Headers | Interesting Entries: | - server: nginx/1.20.2 | - x-powered-by: PHP/7.4.33 | Found By: Headers (Passive Detection) | Confidence: 100% [32m[+][0m robots.txt found: https://c-ens.by/robots.txt | Interesting Entries: | - /wp-admin | - /wp-includes | - /wp-content/plugins | - /wp-content/cache | - /wp-json/ | - /xmlrpc.php | - /readme.html | - /*? | - /?s= | - /chart # | - /*account/ | - /*node | - /*tag | - /*content | - /*vavya | - /*calendar | - /*fdsasa | - /*ttttt | - /*dsfsfs | - /*sdfsdfsd | - /*agencies | - /*analitycs | - /*test | - /*% | - /*href | - /*pvpvvpv | - /*+ | - /*tracker | - /*_kvartira | - *term | - *apapv | - *rshlold | - *accountn | - *auth | - /*.css | - /*.js | - /wp-content/themes/ | - /wp-content/uploads/ | Found By: Robots Txt (Aggressive Detection) | Confidence: 100% [32m[+][0m XML-RPC seems to be enabled: https://c-ens.by/xmlrpc.php | Found By: Direct Access (Aggressive Detection) | Confidence: 100% | References: | - http://codex.wordpress.org/XML-RPC_Pingback_API | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_ghost_scanner/ | - https://www.rapid7.com/db/modules/auxiliary/dos/http/wordpress_xmlrpc_dos/ | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_xmlrpc_login/ | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_pingback_access/ [32m[+][0m WordPress readme found: https://c-ens.by/readme.html | Found By: Direct Access (Aggressive Detection) | Confidence: 100% [32m[+][0m This site has 'Must Use Plugins': https://c-ens.by/wp-content/mu-plugins/ | Found By: Direct Access (Aggressive Detection) | Confidence: 80% | Reference: http://codex.wordpress.org/Must_Use_Plugins [32m[+][0m The external WP-Cron seems to be enabled: https://c-ens.by/wp-cron.php | Found By: Direct Access (Aggressive Detection) | Confidence: 60% | References: | - https://www.iplocation.net/defend-wordpress-from-ddos | - https://github.com/wpscanteam/wpscan/issues/1299 [32m[+][0m WordPress version 6.8.2 identified (Latest, released on 2025-07-15). | Found By: Rss Generator (Aggressive Detection) | - https://c-ens.by/feed/, <generator>https://wordpress.org/?v=6.8.2</generator> | - https://c-ens.by/comments/feed/, <generator>https://wordpress.org/?v=6.8.2</generator> [32m[+][0m WordPress theme in use: c-ens | Location: https://c-ens.by/wp-content/themes/c-ens/ | Style URL: https://c-ens.by/wp-content/themes/c-ens/style.css | | Found By: Urls In Homepage (Passive Detection) | Confirmed By: Urls In 404 Page (Passive Detection) | | The version could not be determined. [32m[+][0m Enumerating Vulnerable Plugins (via Passive Methods) [32m[+][0m Checking Plugin Versions (via Passive and Aggressive Methods) [34m[i][0m No plugins Found. [33m[!][0m No WPScan API Token given, as a result vulnerability data has not been output. [33m[!][0m You can get a free API token with 25 daily requests by registering at https://wpscan.com/register [32m[+][0m Finished: Sun Sep 28 19:35:50 2025 [32m[+][0m Requests Done: 45 [32m[+][0m Cached Requests: 7 [32m[+][0m Data Sent: 11.175 KB [32m[+][0m Data Received: 722.019 KB [32m[+][0m Memory used: 267.91 MB [32m[+][0m Elapsed time: 00:00:25
-
#0848~$ wpscan https://c-ens.by completed Task ID: ***c205
One of the following options is required: --url, --update, --help, --hh, --version Please use --help/-h for the list of available options.
-
#76f0~$ wpscan -h completed Task ID: ***c1df
_______________________________________________________________ __ _______ _____ \ \ / / __ \ / ____| \ \ /\ / /| |__) | (___ ___ __ _ _ __ ® \ \/ \/ / | ___/ \___ \ / __|/ _` | '_ \ \ /\ / | | ____) | (__| (_| | | | | \/ \/ |_| |_____/ \___|\__,_|_| |_| WordPress Security Scanner by the WPScan Team Version 3.8.28 Sponsored by Automattic - https://automattic.com/ @_WPScan_, @ethicalhack3r, @erwan_lr, @firefart _______________________________________________________________ Usage: wpscan [options] --url URL The URL of the blog to scan Allowed Protocols: http, https Default Protocol if none provided: http This option is mandatory unless update or help or hh or version is/are supplied -h, --help Display the simple help and exit --hh Display the full help and exit --version Display the version and exit -v, --verbose Verbose mode --[no-]banner Whether or not to display the banner Default: true -o, --output FILE Output to FILE -f, --format FORMAT Output results in the format supplied Available choices: cli-no-colour, cli-no-color, json, cli --detection-mode MODE Default: mixed Available choices: mixed, passive, aggressive --user-agent, --ua VALUE --random-user-agent, --rua Use a random user-agent for each scan --http-auth login:password -t, --max-threads VALUE The max threads to use Default: 5 --throttle MilliSeconds Milliseconds to wait before doing another web request. If used, the max threads will be set to 1. --request-timeout SECONDS The request timeout in seconds Default: 60 --connect-timeout SECONDS The connection timeout in seconds Default: 30 --disable-tls-checks Disables SSL/TLS certificate verification, and downgrade to TLS1.0+ (requires cURL 7.66 for the latter) --proxy protocol://IP:port Supported protocols depend on the cURL installed --proxy-auth login:password --cookie-string COOKIE Cookie string to use in requests, format: cookie1=value1[; cookie2=value2] --cookie-jar FILE-PATH File to read and write cookies Default: /tmp/wpscan/cookie_jar.txt --force Do not check if the target is running WordPress or returns a 403 --[no-]update Whether or not to update the Database --api-token TOKEN The WPScan API Token to display vulnerability data, available at https://wpscan.com/profile --wp-content-dir DIR The wp-content directory if custom or not detected, such as "wp-content" --wp-plugins-dir DIR The plugins directory if custom or not detected, such as "wp-content/plugins" -e, --enumerate [OPTS] Enumeration Process Available Choices: vp Vulnerable plugins ap All plugins p Popular plugins vt Vulnerable themes at All themes t Popular themes tt Timthumbs cb Config backups dbe Db exports u User IDs range. e.g: u1-5 Range separator to use: '-' Value if no argument supplied: 1-10 m Media IDs range. e.g m1-15 Note: Permalink setting must be set to "Plain" for those to be detected Range separator to use: '-' Value if no argument supplied: 1-100 Separator to use between the values: ',' Default: All Plugins, Config Backups Value if no argument supplied: vp,vt,tt,cb,dbe,u,m Incompatible choices (only one of each group/s can be used): - vp, ap, p - vt, at, t --exclude-content-based REGEXP_OR_STRING Exclude all responses matching the Regexp (case insensitive) during parts of the enumeration. Both the headers and body are checked. Regexp delimiters are not required. --plugins-detection MODE Use the supplied mode to enumerate Plugins. Default: passive Available choices: mixed, passive, aggressive --plugins-version-detection MODE Use the supplied mode to check plugins' versions. Default: mixed Available choices: mixed, passive, aggressive --exclude-usernames REGEXP_OR_STRING Exclude usernames matching the Regexp/string (case insensitive). Regexp delimiters are not required. -P, --passwords FILE-PATH List of passwords to use during the password attack. If no --username/s option supplied, user enumeration will be run. -U, --usernames LIST List of usernames to use during the password attack. Examples: 'a1', 'a1,a2,a3', '/tmp/a.txt' --multicall-max-passwords MAX_PWD Maximum number of passwords to send by request with XMLRPC multicall Default: 500 --password-attack ATTACK Force the supplied attack to be used rather than automatically determining one. Multicall will only work against WP < 4.4 Available choices: wp-login, xmlrpc, xmlrpc-multicall --login-uri URI The URI of the login page if different from /wp-login.php --stealthy Alias for --random-user-agent --detection-mode passive --plugins-version-detection passive [!] To see full list of options use --hh.
-
#76f0~$ wpscan --url vch-nomer.ru completed Task ID: ***b733
_______________________________________________________________ __ _______ _____ \ \ / / __ \ / ____| \ \ /\ / /| |__) | (___ ___ __ _ _ __ ® \ \/ \/ / | ___/ \___ \ / __|/ _` | '_ \ \ /\ / | | ____) | (__| (_| | | | | \/ \/ |_| |_____/ \___|\__,_|_| |_| WordPress Security Scanner by the WPScan Team Version 3.8.28 Sponsored by Automattic - https://automattic.com/ @_WPScan_, @ethicalhack3r, @erwan_lr, @firefart _______________________________________________________________ [32m[+][0m URL: https://vch-nomer.ru/ [185.114.247.139] [32m[+][0m Started: Thu Sep 25 09:05:57 2025 Interesting Finding(s): [32m[+][0m Headers | Interesting Entry: server: nginx/1.26.3 | Found By: Headers (Passive Detection) | Confidence: 100% [32m[+][0m robots.txt found: https://vch-nomer.ru/robots.txt | Interesting Entries: | - /wp-admin | - /wp-includes | - /wp-content/plugins | - /wp-content/cache | - /wp-json/ | - /xmlrpc.php | - /readme.html | - /*? | - /?s= | - /?customize_changeset_uuid= | - /wp-includes/*.css | - /wp-includes/*.js | - /wp-content/plugins/*.css | - /wp-content/plugins/*.js | - /*.css | - /*.js | Found By: Robots Txt (Aggressive Detection) | Confidence: 100% [32m[+][0m XML-RPC seems to be enabled: https://vch-nomer.ru/xmlrpc.php | Found By: Direct Access (Aggressive Detection) | Confidence: 100% | References: | - http://codex.wordpress.org/XML-RPC_Pingback_API | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_ghost_scanner/ | - https://www.rapid7.com/db/modules/auxiliary/dos/http/wordpress_xmlrpc_dos/ | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_xmlrpc_login/ | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_pingback_access/ [32m[+][0m WordPress readme found: https://vch-nomer.ru/readme.html | Found By: Direct Access (Aggressive Detection) | Confidence: 100% [32m[+][0m The external WP-Cron seems to be enabled: https://vch-nomer.ru/wp-cron.php | Found By: Direct Access (Aggressive Detection) | Confidence: 60% | References: | - https://www.iplocation.net/defend-wordpress-from-ddos | - https://github.com/wpscanteam/wpscan/issues/1299 [32m[+][0m WordPress version 6.8.2 identified (Latest, released on 2025-07-15). | Found By: Query Parameter In Install Page (Aggressive Detection) | - https://vch-nomer.ru/wp-includes/css/dashicons.min.css?ver=6.8.2 | - https://vch-nomer.ru/wp-includes/css/buttons.min.css?ver=6.8.2 | - https://vch-nomer.ru/wp-admin/css/forms.min.css?ver=6.8.2 | - https://vch-nomer.ru/wp-admin/css/l10n.min.css?ver=6.8.2 | - https://vch-nomer.ru/wp-admin/css/install.min.css?ver=6.8.2 [32m[+][0m WordPress theme in use: root | Location: https://vch-nomer.ru/wp-content/themes/root/ | Readme: https://vch-nomer.ru/wp-content/themes/root/readme.txt | Style URL: https://vch-nomer.ru/wp-content/themes/root/style.css | Style Name: Root | Style URI: https://wpshop.ru/themes/root | Description: The best premium eco-theme WP, SEO-optimized, adaptive, light and fast.... | Author: WPShop | Author URI: https://wpshop.ru/ | | Found By: Urls In Homepage (Passive Detection) | Confirmed By: Urls In 404 Page (Passive Detection) | | Version: 3.1.4 (80% confidence) | Found By: Style (Passive Detection) | - https://vch-nomer.ru/wp-content/themes/root/style.css, Match: 'Version: 3.1.4' [32m[+][0m Enumerating All Plugins (via Passive Methods) [32m[+][0m Checking Plugin Versions (via Passive and Aggressive Methods) [34m[i][0m Plugin(s) Identified: [32m[+][0m * | Location: https://vch-nomer.ru/wp-content/plugins/*/ | | Found By: Urls In Homepage (Passive Detection) | Confirmed By: Urls In 404 Page (Passive Detection) | | The version could not be determined. [32m[+][0m Enumerating Config Backups (via Passive and Aggressive Methods) Checking Config Backups - Time: 00:00:00 < > (0 / 137) 0.00% ETA: ??:??:?? Checking Config Backups - Time: 00:00:00 < > (1 / 137) 0.72% ETA: 00:01:41 Checking Config Backups - Time: 00:00:00 < > (2 / 137) 1.45% ETA: 00:00:54 Checking Config Backups - Time: 00:00:00 < > (3 / 137) 2.18% ETA: 00:00:36 Checking Config Backups - Time: 00:00:00 < > (4 / 137) 2.91% ETA: 00:00:29 Checking Config Backups - Time: 00:00:00 < > (5 / 137) 3.64% ETA: 00:00:24 Checking Config Backups - Time: 00:00:01 < > (6 / 137) 4.37% ETA: 00:00:26 Checking Config Backups - Time: 00:00:01 < > (8 / 137) 5.83% ETA: 00:00:23 Checking Config Backups - Time: 00:00:01 < > (9 / 137) 6.56% ETA: 00:00:26 Checking Config Backups - Time: 00:00:02 < > (10 / 137) 7.29% ETA: 00:00:26 Checking Config Backups - Time: 00:00:02 < > (11 / 137) 8.02% ETA: 00:00:26 Checking Config Backups - Time: 00:00:02 < > (12 / 137) 8.75% ETA: 00:00:26 Checking Config Backups - Time: 00:00:02 < > (13 / 137) 9.48% ETA: 00:00:27 Checking Config Backups - Time: 00:00:03 < > (14 / 137) 10.21% ETA: 00:00:27 Checking Config Backups - Time: 00:00:03 < > (15 / 137) 10.94% ETA: 00:00:25 Checking Config Backups - Time: 00:00:03 < > (16 / 137) 11.67% ETA: 00:00:24 Checking Config Backups - Time: 00:00:03 < > (17 / 137) 12.40% ETA: 00:00:24 Checking Config Backups - Time: 00:00:03 < > (18 / 137) 13.13% ETA: 00:00:26 Checking Config Backups - Time: 00:00:04 < > (19 / 137) 13.86% ETA: 00:00:25 Checking Config Backups - Time: 00:00:04 < > (20 / 137) 14.59% ETA: 00:00:25 Checking Config Backups - Time: 00:00:04 < > (21 / 137) 15.32% ETA: 00:00:26 Checking Config Backups - Time: 00:00:04 < > (22 / 137) 16.05% ETA: 00:00:25 Checking Config Backups - Time: 00:00:06 < > (23 / 137) 16.78% ETA: 00:00:30 Checking Config Backups - Time: 00:00:06 < > (24 / 137) 17.51% ETA: 00:00:29 Checking Config Backups - Time: 00:00:06 < > (25 / 137) 18.24% ETA: 00:00:28 Checking Config Backups - Time: 00:00:06 < > (26 / 137) 18.97% ETA: 00:00:28 Checking Config Backups - Time: 00:00:06 < > (27 / 137) 19.70% ETA: 00:00:27 Checking Config Backups - Time: 00:00:07 < > (28 / 137) 20.43% ETA: 00:00:30 Checking Config Backups - Time: 00:00:07 < > (29 / 137) 21.16% ETA: 00:00:30 Checking Config Backups - Time: 00:00:08 < > (30 / 137) 21.89% ETA: 00:00:29 Checking Config Backups - Time: 00:00:08 < > (31 / 137) 22.62% ETA: 00:00:29 Checking Config Backups - Time: 00:00:08 < > (32 / 137) 23.35% ETA: 00:00:29 Checking Config Backups - Time: 00:00:09 < > (33 / 137) 24.08% ETA: 00:00:29 Checking Config Backups - Time: 00:00:09 < > (34 / 137) 24.81% ETA: 00:00:28 Checking Config Backups - Time: 00:00:09 < > (35 / 137) 25.54% ETA: 00:00:27 Checking Config Backups - Time: 00:00:12 < > (36 / 137) 26.27% ETA: 00:00:34 Checking Config Backups - Time: 00:00:12 < > (40 / 137) 29.19% ETA: 00:00:30 Checking Config Backups - Time: 00:00:12 < > (42 / 137) 30.65% ETA: 00:00:29 Checking Config Backups - Time: 00:00:12 < > (43 / 137) 31.38% ETA: 00:00:28 Checking Config Backups - Time: 00:00:12 < > (44 / 137) 32.11% ETA: 00:00:27 Checking Config Backups - Time: 00:00:13 < > (45 / 137) 32.84% ETA: 00:00:27 Checking Config Backups - Time: 00:00:13 < > (46 / 137) 33.57% ETA: 00:00:26 Checking Config Backups - Time: 00:00:13 <= > (47 / 137) 34.30% ETA: 00:00:26 Checking Config Backups - Time: 00:00:13 <= > (48 / 137) 35.03% ETA: 00:00:25 Checking Config Backups - Time: 00:00:13 <= > (49 / 137) 35.76% ETA: 00:00:25 Checking Config Backups - Time: 00:00:13 <= > (50 / 137) 36.49% ETA: 00:00:24 Checking Config Backups - Time: 00:00:14 <= > (51 / 137) 37.22% ETA: 00:00:24 Checking Config Backups - Time: 00:00:14 <= > (52 / 137) 37.95% ETA: 00:00:23 Checking Config Backups - Time: 00:00:14 <= > (53 / 137) 38.68% ETA: 00:00:23 Checking Config Backups - Time: 00:00:14 <= > (54 / 137) 39.41% ETA: 00:00:23 Checking Config Backups - Time: 00:00:14 <= > (55 / 137) 40.14% ETA: 00:00:22 Checking Config Backups - Time: 00:00:14 <= > (56 / 137) 40.87% ETA: 00:00:21 Checking Config Backups - Time: 00:00:14 <= > (57 / 137) 41.60% ETA: 00:00:21 Checking Config Backups - Time: 00:00:15 <= > (59 / 137) 43.06% ETA: 00:00:20 Checking Config Backups - Time: 00:00:15 <= > (60 / 137) 43.79% ETA: 00:00:20 Checking Config Backups - Time: 00:00:15 <= > (61 / 137) 44.52% ETA: 00:00:19 Checking Config Backups - Time: 00:00:15 <= > (62 / 137) 45.25% ETA: 00:00:19 Checking Config Backups - Time: 00:00:15 <= > (63 / 137) 45.98% ETA: 00:00:18 Checking Config Backups - Time: 00:00:15 <= > (64 / 137) 46.71% ETA: 00:00:18 Checking Config Backups - Time: 00:00:15 <= > (65 / 137) 47.44% ETA: 00:00:17 Checking Config Backups - Time: 00:00:15 <= > (66 / 137) 48.17% ETA: 00:00:17 Checking Config Backups - Time: 00:00:15 <= > (67 / 137) 48.90% ETA: 00:00:16 Checking Config Backups - Time: 00:00:15 <= > (68 / 137) 49.63% ETA: 00:00:16 Checking Config Backups - Time: 00:00:15 <= > (69 / 137) 50.36% ETA: 00:00:16 Checking Config Backups - Time: 00:00:15 <= > (70 / 137) 51.09% ETA: 00:00:15 Checking Config Backups - Time: 00:00:16 <= > (71 / 137) 51.82% ETA: 00:00:15 Checking Config Backups - Time: 00:00:16 <= > (72 / 137) 52.55% ETA: 00:00:15 Checking Config Backups - Time: 00:00:16 <= > (74 / 137) 54.01% ETA: 00:00:14 Checking Config Backups - Time: 00:00:16 <= > (75 / 137) 54.74% ETA: 00:00:14 Checking Config Backups - Time: 00:00:16 <= > (76 / 137) 55.47% ETA: 00:00:13 Checking Config Backups - Time: 00:00:16 <= > (77 / 137) 56.20% ETA: 00:00:13 Checking Config Backups - Time: 00:00:16 <= > (78 / 137) 56.93% ETA: 00:00:13 Checking Config Backups - Time: 00:00:16 <= > (79 / 137) 57.66% ETA: 00:00:12 Checking Config Backups - Time: 00:00:16 <= > (80 / 137) 58.39% ETA: 00:00:12 Checking Config Backups - Time: 00:00:16 <= > (81 / 137) 59.12% ETA: 00:00:12 Checking Config Backups - Time: 00:00:16 <= > (82 / 137) 59.85% ETA: 00:00:11 Checking Config Backups - Time: 00:00:17 <= > (83 / 137) 60.58% ETA: 00:00:11 Checking Config Backups - Time: 00:00:17 <= > (84 / 137) 61.31% ETA: 00:00:11 Checking Config Backups - Time: 00:00:17 <= > (85 / 137) 62.04% ETA: 00:00:11 Checking Config Backups - Time: 00:00:17 <= > (86 / 137) 62.77% ETA: 00:00:10 Checking Config Backups - Time: 00:00:17 <= > (87 / 137) 63.50% ETA: 00:00:10 Checking Config Backups - Time: 00:00:17 <= > (88 / 137) 64.23% ETA: 00:00:10 Checking Config Backups - Time: 00:00:17 <= > (89 / 137) 64.96% ETA: 00:00:09 Checking Config Backups - Time: 00:00:17 <= > (90 / 137) 65.69% ETA: 00:00:09 Checking Config Backups - Time: 00:00:17 <= > (91 / 137) 66.42% ETA: 00:00:09 Checking Config Backups - Time: 00:00:18 <== > (92 / 137) 67.15% ETA: 00:00:09 Checking Config Backups - Time: 00:00:18 <== > (93 / 137) 67.88% ETA: 00:00:09 Checking Config Backups - Time: 00:00:18 <== > (94 / 137) 68.61% ETA: 00:00:08 Checking Config Backups - Time: 00:00:18 <== > (95 / 137) 69.34% ETA: 00:00:08 Checking Config Backups - Time: 00:00:18 <== > (96 / 137) 70.07% ETA: 00:00:08 Checking Config Backups - Time: 00:00:18 <== > (97 / 137) 70.80% ETA: 00:00:08 Checking Config Backups - Time: 00:00:18 <== > (98 / 137) 71.53% ETA: 00:00:08 Checking Config Backups - Time: 00:00:19 <== > (99 / 137) 72.26% ETA: 00:00:07 Checking Config Backups - Time: 00:00:19 <= > (100 / 137) 72.99% ETA: 00:00:07 Checking Config Backups - Time: 00:00:19 <= > (101 / 137) 73.72% ETA: 00:00:07 Checking Config Backups - Time: 00:00:19 <= > (102 / 137) 74.45% ETA: 00:00:07 Checking Config Backups - Time: 00:00:19 <= > (103 / 137) 75.18% ETA: 00:00:07 Checking Config Backups - Time: 00:00:19 <= > (104 / 137) 75.91% ETA: 00:00:06 Checking Config Backups - Time: 00:00:20 <= > (105 / 137) 76.64% ETA: 00:00:06 Checking Config Backups - Time: 00:00:20 <= > (106 / 137) 77.37% ETA: 00:00:06 Checking Config Backups - Time: 00:00:20 <= > (107 / 137) 78.10% ETA: 00:00:06 Checking Config Backups - Time: 00:00:21 <= > (108 / 137) 78.83% ETA: 00:00:06 Checking Config Backups - Time: 00:00:22 <= > (109 / 137) 79.56% ETA: 00:00:06 Checking Config Backups - Time: 00:00:22 <= > (110 / 137) 80.29% ETA: 00:00:06 Checking Config Backups - Time: 00:00:23 <= > (111 / 137) 81.02% ETA: 00:00:05 Checking Config Backups - Time: 00:00:23 <= > (112 / 137) 81.75% ETA: 00:00:05 Checking Config Backups - Time: 00:00:23 <= > (113 / 137) 82.48% ETA: 00:00:05 Checking Config Backups - Time: 00:00:25 <= > (114 / 137) 83.21% ETA: 00:00:05 Checking Config Backups - Time: 00:00:25 <= > (115 / 137) 83.94% ETA: 00:00:05 Checking Config Backups - Time: 00:00:25 <= > (116 / 137) 84.67% ETA: 00:00:05 Checking Config Backups - Time: 00:00:26 <= > (117 / 137) 85.40% ETA: 00:00:05 Checking Config Backups - Time: 00:00:27 <= > (118 / 137) 86.13% ETA: 00:00:04 Checking Config Backups - Time: 00:00:29 <= > (119 / 137) 86.86% ETA: 00:00:04 Checking Config Backups - Time: 00:00:29 <= > (120 / 137) 87.59% ETA: 00:00:04 Checking Config Backups - Time: 00:00:29 <= > (121 / 137) 88.32% ETA: 00:00:04 Checking Config Backups - Time: 00:00:30 <= > (122 / 137) 89.05% ETA: 00:00:04 Checking Config Backups - Time: 00:00:30 <= > (123 / 137) 89.78% ETA: 00:00:04 Checking Config Backups - Time: 00:00:33 <= > (124 / 137) 90.51% ETA: 00:00:03 Checking Config Backups - Time: 00:00:33 <= > (125 / 137) 91.24% ETA: 00:00:03 Checking Config Backups - Time: 00:00:33 <= > (126 / 137) 91.97% ETA: 00:00:03 Checking Config Backups - Time: 00:00:33 <= > (127 / 137) 92.70% ETA: 00:00:03 Checking Config Backups - Time: 00:00:33 <= > (128 / 137) 93.43% ETA: 00:00:02 Checking Config Backups - Time: 00:00:36 <= > (129 / 137) 94.16% ETA: 00:00:02 Checking Config Backups - Time: 00:00:37 <= > (130 / 137) 94.89% ETA: 00:00:02 Checking Config Backups - Time: 00:00:37 <= > (131 / 137) 95.62% ETA: 00:00:02 Checking Config Backups - Time: 00:00:38 <= > (133 / 137) 97.08% ETA: 00:00:01 Checking Config Backups - Time: 00:00:39 <= > (134 / 137) 97.81% ETA: 00:00:01 Checking Config Backups - Time: 00:00:39 <= > (135 / 137) 98.54% ETA: 00:00:01 Checking Config Backups - Time: 00:00:39 <= > (136 / 137) 99.27% ETA: 00:00:00 Checking Config Backups - Time: 00:00:39 <=> (137 / 137) 100.00% Time: 00:00:39 [34m[i][0m No Config Backups Found. [33m[!][0m No WPScan API Token given, as a result vulnerability data has not been output. [33m[!][0m You can get a free API token with 25 daily requests by registering at https://wpscan.com/register [32m[+][0m Finished: Thu Sep 25 09:08:14 2025 [32m[+][0m Requests Done: 184 [32m[+][0m Cached Requests: 6 [32m[+][0m Data Sent: 38.399 KB [32m[+][0m Data Received: 525.819 KB [32m[+][0m Memory used: 268.988 MB [32m[+][0m Elapsed time: 00:02:17
-
#76f0~$ wpscan --update completed Task ID: ***9690
_______________________________________________________________ __ _______ _____ \ \ / / __ \ / ____| \ \ /\ / /| |__) | (___ ___ __ _ _ __ ® \ \/ \/ / | ___/ \___ \ / __|/ _` | '_ \ \ /\ / | | ____) | (__| (_| | | | | \/ \/ |_| |_____/ \___|\__,_|_| |_| WordPress Security Scanner by the WPScan Team Version 3.8.28 Sponsored by Automattic - https://automattic.com/ @_WPScan_, @ethicalhack3r, @erwan_lr, @firefart _______________________________________________________________ [34m[i][0m Updating the Database ... [34m[i][0m Update completed.
-
#76f0~$ wpscan --url vch-nomer.ru timeout Task ID: ***eef2
_______________________________________________________________ __ _______ _____ \ \ / / __ \ / ____| \ \ /\ / /| |__) | (___ ___ __ _ _ __ ® \ \/ \/ / | ___/ \___ \ / __|/ _` | '_ \ \ /\ / | | ____) | (__| (_| | | | | \/ \/ |_| |_____/ \___|\__,_|_| |_| WordPress Security Scanner by the WPScan Team Version 3.8.28 Sponsored by Automattic - https://automattic.com/ @_WPScan_, @ethicalhack3r, @erwan_lr, @firefart _______________________________________________________________ [34m[i][0m It seems like you have not updated the database for some time. [!] Task timed out and was killed inside container. [?] Do you want to update now? [Y]es [N]o, default: [N][?2004h[1G▽[6n Scan Aborted: SIGTERM Trace: /usr/lib/ruby/3.3.0/reline/io/ansi.rb:256:in `getc' /usr/lib/ruby/3.3.0/reline/io/ansi.rb:256:in `block (2 levels) in cursor_pos' <internal:kernel>:187:in `loop' /usr/lib/ruby/3.3.0/reline/io/ansi.rb:255:in `block in cursor_pos' /usr/lib/ruby/3.3.0/reline/io/ansi.rb:252:in `raw' /usr/lib/ruby/3.3.0/reline/io/ansi.rb:252:in `cursor_pos' /usr/lib/ruby/3.3.0/reline.rb:424:in `may_req_ambiguous_char_width' /usr/lib/ruby/3.3.0/reline.rb:310:in `inner_readline' /usr/lib/ruby/3.3.0/reline.rb:280:in `block (2 levels) in readline' /usr/lib/ruby/3.3.0/reline/io/ansi.rb:164:in `block in with_raw_input' /usr/lib/ruby/3.3.0/reline/io/ansi.rb:164:in `raw' /usr/lib/ruby/3.3.0/reline/io/ansi.rb:164:in `with_raw_input' /usr/lib/ruby/3.3.0/reline.rb:279:in `block in readline' /usr/lib/ruby/3.3.0/reline.rb:278:in `synchronize' /usr/lib/ruby/3.3.0/reline.rb:278:in `readline' /usr/lib/ruby/3.3.0/forwardable.rb:240:in `readline' /usr/share/rubygems-integration/all/gems/wpscan-3.8.28/app/controllers/core.rb:42:in `update_db_required?' /usr/share/rubygems-integration/all/gems/wpscan-3.8.28/app/controllers/core.rb:57:in `before_scan' /usr/share/rubygems-integration/all/gems/cms_scanner-0.15.0/lib/cms_scanner/controllers.rb:46:in `each' /usr/share/rubygems-integration/all/gems/cms_scanner-0.15.0/lib/cms_scanner/controllers.rb:46:in `block in run' /usr/lib/ruby/3.3.0/timeout.rb:170:in `timeout' /usr/share/rubygems-integration/all/gems/cms_scanner-0.15.0/lib/cms_scanner/controllers.rb:45:in `run' /usr/share/rubygems-integration/all/gems/cms_scanner-0.15.0/lib/cms_scanner/scan.rb:24:in `run' /usr/share/rubygems-integration/all/gems/wpscan-3.8.28/bin/wpscan:17:in `block in <top (required)>' /usr/share/rubygems-integration/all/gems/cms_scanner-0.15.0/lib/cms_scanner/scan.rb:15:in `initialize' /usr/share/rubygems-integration/all/gems/wpscan-3.8.28/bin/wpscan:6:in `new' /usr/share/rubygems-integration/all/gems/wpscan-3.8.28/bin/wpscan:6:in `<top (required)>' /usr/bin/wpscan:25:in `load' /usr/bin/wpscan:25:in `<main>'
-
#a51c~$ wpscan --url https://convertex24.io completed Task ID: ***1409
_______________________________________________________________ __ _______ _____ \ \ / / __ \ / ____| \ \ /\ / /| |__) | (___ ___ __ _ _ __ ® \ \/ \/ / | ___/ \___ \ / __|/ _` | '_ \ \ /\ / | | ____) | (__| (_| | | | | \/ \/ |_| |_____/ \___|\__,_|_| |_| WordPress Security Scanner by the WPScan Team Version 3.8.28 Sponsored by Automattic - https://automattic.com/ @_WPScan_, @ethicalhack3r, @erwan_lr, @firefart _______________________________________________________________ Scan Aborted: The target is responding with a 403, this might be due to a WAF. Please re-try with --random-user-agent
-
#a51c~$ nikto -h https://convertex24.io completed Task ID: ***3ed3
- Nikto v2.5.0 --------------------------------------------------------------------------- + Multiple IPs found: 172.67.195.197, 104.21.60.102, 2606:4700:3037::ac43:c3c5, 2606:4700:3033::6815:3c66 + Target IP: 172.67.195.197 + Target Hostname: convertex24.io + Target Port: 443 --------------------------------------------------------------------------- + SSL Info: Subject: /CN=convertex24.io Altnames: convertex24.io, *.convertex24.io Ciphers: ECDHE-ECDSA-CHACHA20-POLY1305 Issuer: /C=US/O=Google Trust Services/CN=WE1 + Start Time: 2025-09-19 10:17:46 (GMT0) --------------------------------------------------------------------------- + Server: cloudflare + /: The site uses TLS and the Strict-Transport-Security HTTP header is not defined. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security + /: An alt-svc header was found which is advertising HTTP/3. The endpoint is: ':443'. Nikto cannot test HTTP/3 over QUIC. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/alt-svc + /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/ + All CGI directories 'found', use '-C none' to test none + /: The Content-Encoding header is set to "deflate" which may mean that the server is vulnerable to the BREACH attack. See: http://breachattack.com/ + ERROR: Error limit (20) reached for host, giving up. Last error: opening stream: ssl connect failed + Scan terminated: 20 error(s) and 4 item(s) reported on remote host + End Time: 2025-09-19 10:18:05 (GMT0) (19 seconds) --------------------------------------------------------------------------- + 1 host(s) tested
-
#a51c~$ wpscan --force --random-user-agent --url https://convertex24.io completed Task ID: ***65d7
_______________________________________________________________ __ _______ _____ \ \ / / __ \ / ____| \ \ /\ / /| |__) | (___ ___ __ _ _ __ ® \ \/ \/ / | ___/ \___ \ / __|/ _` | '_ \ \ /\ / | | ____) | (__| (_| | | | | \/ \/ |_| |_____/ \___|\__,_|_| |_| WordPress Security Scanner by the WPScan Team Version 3.8.28 Sponsored by Automattic - https://automattic.com/ @_WPScan_, @ethicalhack3r, @erwan_lr, @firefart _______________________________________________________________ [32m[+][0m URL: https://convertex24.io/ [104.21.60.102] [32m[+][0m Started: Fri Sep 19 10:15:58 2025 Interesting Finding(s): [32m[+][0m Headers | Interesting Entries: | - referrer-policy: same-origin | - report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=PLV04yDqtoNa6WWtPmGAzkw9qjyzR61%2BsMo5YbxdCxj3%2F8ChAe8UunejFz6wOLXef8EhR%2FA%2FWND%2BQJj3LTVMS1cTXZ%2BusK7vetHXyxWJ"}]} | - nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800} | - server: cloudflare | - cf-ray: 98185323fa216b84-ORD | - alt-svc: h3=":443"; ma=86400 | Found By: Headers (Passive Detection) | Confidence: 100% [32m[+][0m A backup directory has been found: https://convertex24.io/wp-content/backup-db/ | Found By: Direct Access (Aggressive Detection) | Confidence: 70% | Reference: https://github.com/wpscanteam/wpscan/issues/422 [32m[+][0m This site has 'Must Use Plugins': https://convertex24.io/wp-content/mu-plugins/ | Found By: Direct Access (Aggressive Detection) | Confidence: 80% | Reference: http://codex.wordpress.org/Must_Use_Plugins Fingerprinting the version - Time: 00:00:00 < > (0 / 702) 0.00% ETA: ??:??:?? Fingerprinting the version - Time: 00:00:00 < > (1 / 702) 0.14% ETA: 00:01:46 Fingerprinting the version - Time: 00:00:00 < > (4 / 702) 0.56% ETA: 00:00:28 Fingerprinting the version - Time: 00:00:00 < > (7 / 702) 0.99% ETA: 00:00:17 Fingerprinting the version - Time: 00:00:00 < > (12 / 702) 1.70% ETA: 00:00:11 Fingerprinting the version - Time: 00:00:00 < > (17 / 702) 2.42% ETA: 00:00:08 Fingerprinting the version - Time: 00:00:00 < > (22 / 702) 3.13% ETA: 00:00:07 Fingerprinting the version - Time: 00:00:00 < > (27 / 702) 3.84% ETA: 00:00:06 Fingerprinting the version - Time: 00:00:00 < > (29 / 702) 4.13% ETA: 00:00:08 Fingerprinting the version - Time: 00:00:00 < > (31 / 702) 4.41% ETA: 00:00:08 Fingerprinting the version - Time: 00:00:00 < > (34 / 702) 4.84% ETA: 00:00:08 Fingerprinting the version - Time: 00:00:00 < > (39 / 702) 5.55% ETA: 00:00:07 Fingerprinting the version - Time: 00:00:00 < > (44 / 702) 6.26% ETA: 00:00:06 Fingerprinting the version - Time: 00:00:00 < > (49 / 702) 6.98% ETA: 00:00:06 Fingerprinting the version - Time: 00:00:00 < > (50 / 702) 7.12% ETA: 00:00:06 Fingerprinting the version - Time: 00:00:00 < > (55 / 702) 7.83% ETA: 00:00:05 Fingerprinting the version - Time: 00:00:00 < > (60 / 702) 8.54% ETA: 00:00:05 Fingerprinting the version - Time: 00:00:00 < > (65 / 702) 9.25% ETA: 00:00:05 Fingerprinting the version - Time: 00:00:00 < > (70 / 702) 9.97% ETA: 00:00:05 Fingerprinting the version - Time: 00:00:00 < > (75 / 702) 10.68% ETA: 00:00:04 Fingerprinting the version - Time: 00:00:00 < > (80 / 702) 11.39% ETA: 00:00:04 Fingerprinting the version - Time: 00:00:00 < > (85 / 702) 12.10% ETA: 00:00:04 Fingerprinting the version - Time: 00:00:00 < > (90 / 702) 12.82% ETA: 00:00:04 Fingerprinting the version - Time: 00:00:00 < > (95 / 702) 13.53% ETA: 00:00:04 Fingerprinting the version - Time: 00:00:00 <> (100 / 702) 14.24% ETA: 00:00:04 Fingerprinting the version - Time: 00:00:00 <> (105 / 702) 14.95% ETA: 00:00:04 Fingerprinting the version - Time: 00:00:00 <> (110 / 702) 15.66% ETA: 00:00:03 Fingerprinting the version - Time: 00:00:00 <> (115 / 702) 16.38% ETA: 00:00:03 Fingerprinting the version - Time: 00:00:00 <> (120 / 702) 17.09% ETA: 00:00:03 Fingerprinting the version - Time: 00:00:00 <> (125 / 702) 17.80% ETA: 00:00:03 Fingerprinting the version - Time: 00:00:00 <> (130 / 702) 18.51% ETA: 00:00:03 Fingerprinting the version - Time: 00:00:00 <> (135 / 702) 19.23% ETA: 00:00:03 Fingerprinting the version - Time: 00:00:00 <> (139 / 702) 19.80% ETA: 00:00:03 Fingerprinting the version - Time: 00:00:00 <> (140 / 702) 19.94% ETA: 00:00:03 Fingerprinting the version - Time: 00:00:00 <> (145 / 702) 20.65% ETA: 00:00:03 Fingerprinting the version - Time: 00:00:00 <> (150 / 702) 21.36% ETA: 00:00:03 Fingerprinting the version - Time: 00:00:00 <> (155 / 702) 22.07% ETA: 00:00:03 Fingerprinting the version - Time: 00:00:00 <> (158 / 702) 22.50% ETA: 00:00:03 Fingerprinting the version - Time: 00:00:00 <> (161 / 702) 22.93% ETA: 00:00:03 Fingerprinting the version - Time: 00:00:00 <> (166 / 702) 23.64% ETA: 00:00:03 Fingerprinting the version - Time: 00:00:00 <> (171 / 702) 24.35% ETA: 00:00:03 Fingerprinting the version - Time: 00:00:00 <> (176 / 702) 25.07% ETA: 00:00:03 Fingerprinting the version - Time: 00:00:00 <> (181 / 702) 25.78% ETA: 00:00:02 Fingerprinting the version - Time: 00:00:00 <> (186 / 702) 26.49% ETA: 00:00:02 Fingerprinting the version - Time: 00:00:00 <> (189 / 702) 26.92% ETA: 00:00:02 Fingerprinting the version - Time: 00:00:00 <> (193 / 702) 27.49% ETA: 00:00:02 Fingerprinting the version - Time: 00:00:00 <> (198 / 702) 28.20% ETA: 00:00:02 Fingerprinting the version - Time: 00:00:00 <> (203 / 702) 28.91% ETA: 00:00:02 Fingerprinting the version - Time: 00:00:00 <> (208 / 702) 29.62% ETA: 00:00:02 Fingerprinting the version - Time: 00:00:00 <> (213 / 702) 30.34% ETA: 00:00:02 Fingerprinting the version - Time: 00:00:00 <> (218 / 702) 31.05% ETA: 00:00:02 Fingerprinting the version - Time: 00:00:00 <> (223 / 702) 31.76% ETA: 00:00:02 Fingerprinting the version - Time: 00:00:01 <> (228 / 702) 32.47% ETA: 00:00:02 Fingerprinting the version - Time: 00:00:01 <> (233 / 702) 33.19% ETA: 00:00:02 Fingerprinting the version - Time: 00:00:01 <> (238 / 702) 33.90% ETA: 00:00:02 Fingerprinting the version - Time: 00:00:01 <> (243 / 702) 34.61% ETA: 00:00:02 Fingerprinting the version - Time: 00:00:01 <> (247 / 702) 35.18% ETA: 00:00:02 Fingerprinting the version - Time: 00:00:01 <> (249 / 702) 35.47% ETA: 00:00:02 Fingerprinting the version - Time: 00:00:01 <> (250 / 702) 35.61% ETA: 00:00:02 Fingerprinting the version - Time: 00:00:01 <> (254 / 702) 36.18% ETA: 00:00:02 Fingerprinting the version - Time: 00:00:01 <> (259 / 702) 36.89% ETA: 00:00:02 Fingerprinting the version - Time: 00:00:01 <> (264 / 702) 37.60% ETA: 00:00:02 Fingerprinting the version - Time: 00:00:01 <> (269 / 702) 38.31% ETA: 00:00:02 Fingerprinting the version - Time: 00:00:01 <> (274 / 702) 39.03% ETA: 00:00:02 Fingerprinting the version - Time: 00:00:01 <> (279 / 702) 39.74% ETA: 00:00:02 Fingerprinting the version - Time: 00:00:01 <> (284 / 702) 40.45% ETA: 00:00:02 Fingerprinting the version - Time: 00:00:01 <> (287 / 702) 40.88% ETA: 00:00:02 Fingerprinting the version - Time: 00:00:01 <> (290 / 702) 41.31% ETA: 00:00:02 Fingerprinting the version - Time: 00:00:01 <> (295 / 702) 42.02% ETA: 00:00:02 Fingerprinting the version - Time: 00:00:01 <> (300 / 702) 42.73% ETA: 00:00:02 Fingerprinting the version - Time: 00:00:01 <> (305 / 702) 43.44% ETA: 00:00:02 Fingerprinting the version - Time: 00:00:01 <> (310 / 702) 44.15% ETA: 00:00:02 Fingerprinting the version - Time: 00:00:01 <> (315 / 702) 44.87% ETA: 00:00:02 Fingerprinting the version - Time: 00:00:01 <> (320 / 702) 45.58% ETA: 00:00:02 Fingerprinting the version - Time: 00:00:01 <> (325 / 702) 46.29% ETA: 00:00:02 Fingerprinting the version - Time: 00:00:01 <> (330 / 702) 47.00% ETA: 00:00:02 Fingerprinting the version - Time: 00:00:01 <> (335 / 702) 47.72% ETA: 00:00:02 Fingerprinting the version - Time: 00:00:01 <> (340 / 702) 48.43% ETA: 00:00:02 Fingerprinting the version - Time: 00:00:01 <> (345 / 702) 49.14% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (350 / 702) 49.85% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (355 / 702) 50.56% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (360 / 702) 51.28% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (365 / 702) 51.99% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (370 / 702) 52.70% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (375 / 702) 53.41% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (379 / 702) 53.98% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (383 / 702) 54.55% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (388 / 702) 55.27% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (393 / 702) 55.98% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (398 / 702) 56.69% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (403 / 702) 57.40% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (408 / 702) 58.11% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (413 / 702) 58.83% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (418 / 702) 59.54% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (423 / 702) 60.25% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (428 / 702) 60.96% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (433 / 702) 61.68% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (438 / 702) 62.39% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (442 / 702) 62.96% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (445 / 702) 63.39% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (450 / 702) 64.10% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (455 / 702) 64.81% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (460 / 702) 65.52% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (465 / 702) 66.23% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (470 / 702) 66.95% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (475 / 702) 67.66% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (480 / 702) 68.37% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (485 / 702) 69.08% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (490 / 702) 69.80% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (495 / 702) 70.51% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (500 / 702) 71.22% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (505 / 702) 71.93% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (510 / 702) 72.64% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (515 / 702) 73.36% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (520 / 702) 74.07% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (525 / 702) 74.78% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (530 / 702) 75.49% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (535 / 702) 76.21% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:01 <> (540 / 702) 76.92% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:02 <> (545 / 702) 77.63% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:02 <> (550 / 702) 78.34% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:02 <> (555 / 702) 79.05% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:02 <> (560 / 702) 79.77% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:02 <> (565 / 702) 80.48% ETA: 00:00:01 Fingerprinting the version - Time: 00:00:02 <> (570 / 702) 81.19% ETA: 00:00:00 Fingerprinting the version - Time: 00:00:02 <> (575 / 702) 81.90% ETA: 00:00:00 Fingerprinting the version - Time: 00:00:02 <> (580 / 702) 82.62% ETA: 00:00:00 Fingerprinting the version - Time: 00:00:02 <> (583 / 702) 83.04% ETA: 00:00:00 Fingerprinting the version - Time: 00:00:02 <> (587 / 702) 83.61% ETA: 00:00:00 Fingerprinting the version - Time: 00:00:02 <> (592 / 702) 84.33% ETA: 00:00:00 Fingerprinting the version - Time: 00:00:02 <> (597 / 702) 85.04% ETA: 00:00:00 Fingerprinting the version - Time: 00:00:02 <> (602 / 702) 85.75% ETA: 00:00:00 Fingerprinting the version - Time: 00:00:02 <> (607 / 702) 86.46% ETA: 00:00:00 Fingerprinting the version - Time: 00:00:02 <> (612 / 702) 87.17% ETA: 00:00:00 Fingerprinting the version - Time: 00:00:02 <> (617 / 702) 87.89% ETA: 00:00:00 Fingerprinting the version - Time: 00:00:02 <> (622 / 702) 88.60% ETA: 00:00:00 Fingerprinting the version - Time: 00:00:02 <> (627 / 702) 89.31% ETA: 00:00:00 Fingerprinting the version - Time: 00:00:02 <> (632 / 702) 90.02% ETA: 00:00:00 Fingerprinting the version - Time: 00:00:02 <> (636 / 702) 90.59% ETA: 00:00:00 Fingerprinting the version - Time: 00:00:02 <> (640 / 702) 91.16% ETA: 00:00:00 Fingerprinting the version - Time: 00:00:02 <> (645 / 702) 91.88% ETA: 00:00:00 Fingerprinting the version - Time: 00:00:02 <> (650 / 702) 92.59% ETA: 00:00:00 Fingerprinting the version - Time: 00:00:02 <> (655 / 702) 93.30% ETA: 00:00:00 Fingerprinting the version - Time: 00:00:02 <> (660 / 702) 94.01% ETA: 00:00:00 Fingerprinting the version - Time: 00:00:02 <> (665 / 702) 94.72% ETA: 00:00:00 Fingerprinting the version - Time: 00:00:02 <> (670 / 702) 95.44% ETA: 00:00:00 Fingerprinting the version - Time: 00:00:02 <> (675 / 702) 96.15% ETA: 00:00:00 Fingerprinting the version - Time: 00:00:02 <> (680 / 702) 96.86% ETA: 00:00:00 Fingerprinting the version - Time: 00:00:02 <> (685 / 702) 97.57% ETA: 00:00:00 Fingerprinting the version - Time: 00:00:02 <> (690 / 702) 98.29% ETA: 00:00:00 Fingerprinting the version - Time: 00:00:02 <> (695 / 702) 99.00% ETA: 00:00:00 Fingerprinting the version - Time: 00:00:02 <> (700 / 702) 99.71% ETA: 00:00:00 Fingerprinting the version - Time: 00:00:02 <> (702 / 702) 100.00% Time: 00:00:02 [34m[i][0m The WordPress version could not be detected. [34m[i][0m The main theme could not be detected. [32m[+][0m Enumerating All Plugins (via Passive Methods) [34m[i][0m No plugins Found. [32m[+][0m Enumerating Config Backups (via Passive and Aggressive Methods) Checking Config Backups - Time: 00:00:00 < > (0 / 137) 0.00% ETA: ??:??:?? Checking Config Backups - Time: 00:00:00 < > (1 / 137) 0.72% ETA: 00:00:03 Checking Config Backups - Time: 00:00:00 < > (6 / 137) 4.37% ETA: 00:00:01 Checking Config Backups - Time: 00:00:00 < > (11 / 137) 8.02% ETA: 00:00:01 Checking Config Backups - Time: 00:00:00 < > (16 / 137) 11.67% ETA: 00:00:01 Checking Config Backups - Time: 00:00:00 < > (21 / 137) 15.32% ETA: 00:00:01 Checking Config Backups - Time: 00:00:00 < > (26 / 137) 18.97% ETA: 00:00:00 Checking Config Backups - Time: 00:00:00 < > (31 / 137) 22.62% ETA: 00:00:00 Checking Config Backups - Time: 00:00:00 < > (36 / 137) 26.27% ETA: 00:00:00 Checking Config Backups - Time: 00:00:00 < > (41 / 137) 29.92% ETA: 00:00:00 Checking Config Backups - Time: 00:00:00 < > (46 / 137) 33.57% ETA: 00:00:00 Checking Config Backups - Time: 00:00:00 <= > (51 / 137) 37.22% ETA: 00:00:00 Checking Config Backups - Time: 00:00:00 <= > (56 / 137) 40.87% ETA: 00:00:00 Checking Config Backups - Time: 00:00:00 <= > (61 / 137) 44.52% ETA: 00:00:00 Checking Config Backups - Time: 00:00:00 <= > (66 / 137) 48.17% ETA: 00:00:00 Checking Config Backups - Time: 00:00:00 <= > (71 / 137) 51.82% ETA: 00:00:00 Checking Config Backups - Time: 00:00:00 <= > (76 / 137) 55.47% ETA: 00:00:00 Checking Config Backups - Time: 00:00:00 <= > (81 / 137) 59.12% ETA: 00:00:00 Checking Config Backups - Time: 00:00:00 <= > (86 / 137) 62.77% ETA: 00:00:00 Checking Config Backups - Time: 00:00:00 <= > (91 / 137) 66.42% ETA: 00:00:00 Checking Config Backups - Time: 00:00:00 <== > (96 / 137) 70.07% ETA: 00:00:00 Checking Config Backups - Time: 00:00:00 <= > (101 / 137) 73.72% ETA: 00:00:00 Checking Config Backups - Time: 00:00:00 <= > (106 / 137) 77.37% ETA: 00:00:00 Checking Config Backups - Time: 00:00:00 <= > (111 / 137) 81.02% ETA: 00:00:00 Checking Config Backups - Time: 00:00:00 <= > (116 / 137) 84.67% ETA: 00:00:00 Checking Config Backups - Time: 00:00:00 <= > (121 / 137) 88.32% ETA: 00:00:00 Checking Config Backups - Time: 00:00:00 <= > (126 / 137) 91.97% ETA: 00:00:00 Checking Config Backups - Time: 00:00:00 <= > (131 / 137) 95.62% ETA: 00:00:00 Checking Config Backups - Time: 00:00:00 <= > (136 / 137) 99.27% ETA: 00:00:00 Checking Config Backups - Time: 00:00:00 <=> (137 / 137) 100.00% Time: 00:00:00 [34m[i][0m No Config Backups Found. [33m[!][0m No WPScan API Token given, as a result vulnerability data has not been output. [33m[!][0m You can get a free API token with 25 daily requests by registering at https://wpscan.com/register [32m[+][0m Finished: Fri Sep 19 10:16:05 2025 [32m[+][0m Requests Done: 884 [32m[+][0m Cached Requests: 5 [32m[+][0m Data Sent: 197.031 KB [32m[+][0m Data Received: 748.441 KB [32m[+][0m Memory used: 226.199 MB [32m[+][0m Elapsed time: 00:00:07 -
#a51c~$ wpscan --random-user-agent --url https://convertex24.io completed Task ID: ***e93e
_______________________________________________________________ __ _______ _____ \ \ / / __ \ / ____| \ \ /\ / /| |__) | (___ ___ __ _ _ __ ® \ \/ \/ / | ___/ \___ \ / __|/ _` | '_ \ \ /\ / | | ____) | (__| (_| | | | | \/ \/ |_| |_____/ \___|\__,_|_| |_| WordPress Security Scanner by the WPScan Team Version 3.8.28 Sponsored by Automattic - https://automattic.com/ @_WPScan_, @ethicalhack3r, @erwan_lr, @firefart _______________________________________________________________ Scan Aborted: The target is responding with a 403, this might be due to a WAF. Well... --random-user-agent didn't work, use --force to skip this check if needed.