wordpress渗透测试系列（一）

libo

初步的信息收集
命令：

1. wpscan --url http://192.168.3.234:8081

复制代码

渗透结果

1. [+] robots.txt available under: 'http://192.168.3.234:8081/robots.txt'
   
2. [!] The WordPress 'http://192.168.3.234:8081/readme.html' file exists exposing a version number
   
3. [!] Full Path Disclosure (FPD) in 'http://192.168.3.234:8081/wp-includes/rss-functions.php':
   
4. [+] Interesting header: LINK: <http://127.0.0.1:8081/index.php/wp-json/>; rel="https://api.w.org/"
   
5. [+] Interesting header: SERVER: Apache/2.4.18 (Win32) OpenSSL/1.0.2e PHP/5.5.30
   
6. [+] Interesting header: X-POWERED-BY: PHP/5.5.30
   
7. [+] XML-RPC Interface available under: http://192.168.3.234:8081/xmlrpc.php
   
8. 
   
9. [+] WordPress version 4.9.5
   
10. 
    
11. [+] WordPress theme in use: twentyseventeen - v1.5
    
12. 
    
13. [+] Name: twentyseventeen - v1.5
    
14. |  Latest version: 1.3 (up to date)
    
15. |  Last updated: 2017-06-08T00:00:00.000Z
    
16. |  Location: http://192.168.3.234:8081/wp-content/themes/twentyseventeen/
    
17. |  Readme: http://192.168.3.234:8081/wp-content/themes/twentyseventeen/readme.txt
    
18. |  Style URL: http://192.168.3.234:8081/wp-content/themes/twentyseventeen/style.css
    
19. |  Referenced style.css: http://127.0.0.1:8081/wp-content/themes/twentyseventeen/style.css
    
20. |  Theme Name: Twenty Seventeen
    
21. |  Theme URI: https://wordpress.org/themes/twentyseventeen/
    
22. |  Description: Twenty Seventeen brings your site to life with header video and immersive featured images. With a...
    
23. |  Author: the WordPress team
    
24. |  Author URI: https://wordpress.org/
    
25. 
    
26. [+] Enumerating plugins from passive detection ...
    
27. [+] No plugins found
    
28. 
    
29. [+] Finished: Thu Apr 26 19:33:00 2018
    
30. [+] Requests Done: 68
    
31. [+] Memory used: 16.43 MB
    
32. [+] Elapsed time: 00:00:37
    

复制代码