https://wiki.ixheim.de/index.php?action=history&feed=atom&title=Wordpress_hack_scan
Wordpress hack scan - Versionsgeschichte
2026-06-29T16:46:11Z
Versionsgeschichte dieser Seite in Xinux Wiki
MediaWiki 1.35.1
https://wiki.ixheim.de/index.php?title=Wordpress_hack_scan&diff=49037&oldid=prev
Thomas.will: /* WPSCAN (Plugin: simple-file-list) */
2023-09-01T09:00:59Z
<p><span dir="auto"><span class="autocomment">WPSCAN (Plugin: simple-file-list)</span></span></p>
<table class="diff diff-contentalign-left diff-editfont-monospace" data-mw="interface">
<col class="diff-marker" />
<col class="diff-content" />
<col class="diff-marker" />
<col class="diff-content" />
<tr class="diff-title" lang="de">
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Nächstältere Version</td>
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Version vom 1. September 2023, 09:00 Uhr</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l1" >Zeile 1:</td>
<td colspan="2" class="diff-lineno">Zeile 1:</td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>=WPSCAN (Plugin: simple-file-list)=</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>=WPSCAN (Plugin: simple-file-list)=</div></td></tr>
<tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>*wpscan --url http://opfer.secure.local <del class="diffchange diffchange-inline"> 4 ⨯</del></div></td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>*wpscan --url http://opfer.secure.local <ins class="diffchange diffchange-inline"> </ins></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div><pre>_______________________________________________________________</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div><pre>_______________________________________________________________</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div> __ _______ _____</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div> __ _______ _____</div></td></tr>
<!-- diff cache key my_wiki:diff::1.12:old-49036:rev-49037 -->
</table>
Thomas.will
https://wiki.ixheim.de/index.php?title=Wordpress_hack_scan&diff=49036&oldid=prev
Thomas.will am 1. September 2023 um 09:00 Uhr
2023-09-01T09:00:48Z
<p></p>
<table class="diff diff-contentalign-left diff-editfont-monospace" data-mw="interface">
<col class="diff-marker" />
<col class="diff-content" />
<col class="diff-marker" />
<col class="diff-content" />
<tr class="diff-title" lang="de">
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Nächstältere Version</td>
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Version vom 1. September 2023, 09:00 Uhr</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l1" >Zeile 1:</td>
<td colspan="2" class="diff-lineno">Zeile 1:</td></tr>
<tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>=WPSCAN=</div></td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>=WPSCAN <ins class="diffchange diffchange-inline">(Plugin: simple-file-list)</ins>=</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>*wpscan --url http://opfer.secure.local 4 ⨯</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>*wpscan --url http://opfer.secure.local 4 ⨯</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div><pre>_______________________________________________________________</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div><pre>_______________________________________________________________</div></td></tr>
</table>
Thomas.will
https://wiki.ixheim.de/index.php?title=Wordpress_hack_scan&diff=49035&oldid=prev
Thomas.will am 1. September 2023 um 08:59 Uhr
2023-09-01T08:59:00Z
<p></p>
<a href="//wiki.ixheim.de/index.php?title=Wordpress_hack_scan&diff=49035&oldid=40442">Änderungen zeigen</a>
Thomas.will
https://wiki.ixheim.de/index.php?title=Wordpress_hack_scan&diff=40442&oldid=prev
Thomas.will: /* WPSCAN */
2023-01-27T10:08:37Z
<p><span dir="auto"><span class="autocomment">WPSCAN</span></span></p>
<table class="diff diff-contentalign-left diff-editfont-monospace" data-mw="interface">
<col class="diff-marker" />
<col class="diff-content" />
<col class="diff-marker" />
<col class="diff-content" />
<tr class="diff-title" lang="de">
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Nächstältere Version</td>
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Version vom 27. Januar 2023, 10:08 Uhr</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l3" >Zeile 3:</td>
<td colspan="2" class="diff-lineno">Zeile 3:</td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>=WPSCAN=</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>=WPSCAN=</div></td></tr>
<tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>*wpscan --url https://<del class="diffchange diffchange-inline">10</del>.<del class="diffchange diffchange-inline">0</del>.<del class="diffchange diffchange-inline">10.109 4 ⨯</del></div></td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>*wpscan --url https://<ins class="diffchange diffchange-inline">wordpress</ins>.<ins class="diffchange diffchange-inline">secure</ins>.<ins class="diffchange diffchange-inline">local </ins></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div><pre></div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div><pre></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>_______________________________________________________________</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>_______________________________________________________________</div></td></tr>
<!-- diff cache key my_wiki:diff::1.12:old-40441:rev-40442 -->
</table>
Thomas.will
https://wiki.ixheim.de/index.php?title=Wordpress_hack_scan&diff=40441&oldid=prev
Thomas.will: /* WPSCAN */
2023-01-27T10:06:16Z
<p><span dir="auto"><span class="autocomment">WPSCAN</span></span></p>
<table class="diff diff-contentalign-left diff-editfont-monospace" data-mw="interface">
<col class="diff-marker" />
<col class="diff-content" />
<col class="diff-marker" />
<col class="diff-content" />
<tr class="diff-title" lang="de">
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Nächstältere Version</td>
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Version vom 27. Januar 2023, 10:06 Uhr</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l3" >Zeile 3:</td>
<td colspan="2" class="diff-lineno">Zeile 3:</td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>=WPSCAN=</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>=WPSCAN=</div></td></tr>
<tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>*wpscan --url https://<del class="diffchange diffchange-inline">www</del>.<del class="diffchange diffchange-inline">taribo</del>.<del class="diffchange diffchange-inline">de </del> 4 ⨯</div></td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>*wpscan --url https://<ins class="diffchange diffchange-inline">10</ins>.<ins class="diffchange diffchange-inline">0</ins>.<ins class="diffchange diffchange-inline">10.109 </ins> 4 ⨯</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div><pre></div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div><pre></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>_______________________________________________________________</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>_______________________________________________________________</div></td></tr>
</table>
Thomas.will
https://wiki.ixheim.de/index.php?title=Wordpress_hack_scan&diff=37506&oldid=prev
Thomas.will: Die Seite wurde neu angelegt: „ =WPSCAN= *wpscan --url https://www.taribo.de…“
2022-10-19T17:44:00Z
<p>Die Seite wurde neu angelegt: „ =WPSCAN= *wpscan --url https://www.taribo.de…“</p>
<p><b>Neue Seite</b></p><div><br />
<br />
<br />
=WPSCAN=<br />
*wpscan --url https://www.taribo.de 4 ⨯<br />
<pre><br />
_______________________________________________________________<br />
__ _______ _____<br />
\ \ / / __ \ / ____|<br />
\ \ /\ / /| |__) | (___ ___ __ _ _ __ ®<br />
\ \/ \/ / | ___/ \___ \ / __|/ _` | '_ \<br />
\ /\ / | | ____) | (__| (_| | | | |<br />
\/ \/ |_| |_____/ \___|\__,_|_| |_|<br />
<br />
WordPress Security Scanner by the WPScan Team<br />
Version 3.8.22<br />
Sponsored by Automattic - https://automattic.com/<br />
@_WPScan_, @ethicalhack3r, @erwan_lr, @firefart<br />
_______________________________________________________________<br />
<br />
[+] URL: https://www.taribo.de/ [167.235.68.168]<br />
[+] Started: Wed Oct 19 19:35:11 2022<br />
<br />
Interesting Finding(s):<br />
<br />
[+] Headers<br />
| Interesting Entry: Server: Apache/2.4.54 (Debian)<br />
| Found By: Headers (Passive Detection)<br />
| Confidence: 100%<br />
<br />
[+] XML-RPC seems to be enabled: https://www.taribo.de/xmlrpc.php<br />
| Found By: Direct Access (Aggressive Detection)<br />
| Confidence: 100%<br />
| References:<br />
| - http://codex.wordpress.org/XML-RPC_Pingback_API<br />
| - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_ghost_scanner/<br />
| - https://www.rapid7.com/db/modules/auxiliary/dos/http/wordpress_xmlrpc_dos/<br />
| - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_xmlrpc_login/<br />
| - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_pingback_access/<br />
<br />
[+] WordPress readme found: https://www.taribo.de/readme.html<br />
| Found By: Direct Access (Aggressive Detection)<br />
| Confidence: 100%<br />
<br />
[+] This site has 'Must Use Plugins': https://www.taribo.de/wp-content/mu-plugins/<br />
| Found By: Direct Access (Aggressive Detection)<br />
| Confidence: 80%<br />
| Reference: http://codex.wordpress.org/Must_Use_Plugins<br />
<br />
[+] Upload directory has listing enabled: https://www.taribo.de/wp-content/uploads/<br />
| Found By: Direct Access (Aggressive Detection)<br />
| Confidence: 100%<br />
<br />
[+] The external WP-Cron seems to be enabled: https://www.taribo.de/wp-cron.php<br />
| Found By: Direct Access (Aggressive Detection)<br />
| Confidence: 60%<br />
| References:<br />
| - https://www.iplocation.net/defend-wordpress-from-ddos<br />
| - https://github.com/wpscanteam/wpscan/issues/1299<br />
<br />
[+] WordPress version 5.9.3 identified (Insecure, released on 2022-04-05).<br />
| Found By: Emoji Settings (Passive Detection)<br />
| - https://www.taribo.de/, Match: 'wp-includes\/js\/wp-emoji-release.min.js?ver=5.9.3'<br />
| Confirmed By: Meta Generator (Passive Detection)<br />
| - https://www.taribo.de/, Match: 'WordPress 5.9.3'<br />
<br />
[+] WordPress theme in use: twentyseventeen<br />
| Location: https://www.taribo.de/wp-content/themes/twentyseventeen/<br />
| Last Updated: 2022-05-24T00:00:00.000Z<br />
| Readme: https://www.taribo.de/wp-content/themes/twentyseventeen/readme.txt<br />
| [!] The version is out of date, the latest version is 3.0<br />
| Style URL: https://www.taribo.de/wp-content/themes/twentyseventeen/style.css?ver=20201208<br />
| Style Name: Twenty Seventeen<br />
| Style URI: https://wordpress.org/themes/twentyseventeen/<br />
| Description: Twenty Seventeen brings your site to life with header video and immersive featured images. With a fo...<br />
| Author: the WordPress team<br />
| Author URI: https://wordpress.org/<br />
|<br />
| Found By: Css Style In Homepage (Passive Detection)<br />
|<br />
| Version: 2.9 (80% confidence)<br />
| Found By: Style (Passive Detection)<br />
| - https://www.taribo.de/wp-content/themes/twentyseventeen/style.css?ver=20201208, Match: 'Version: 2.9'<br />
<br />
[+] Enumerating All Plugins (via Passive Methods)<br />
[+] Checking Plugin Versions (via Passive and Aggressive Methods)<br />
<br />
[i] Plugin(s) Identified:<br />
<br />
[+] simple-file-list<br />
| Location: https://www.taribo.de/wp-content/plugins/simple-file-list/<br />
| Last Updated: 2022-09-08T17:07:00.000Z<br />
| [!] The version is out of date, the latest version is 4.4.13<br />
|<br />
| Found By: Urls In Homepage (Passive Detection)<br />
|<br />
| Version: 4.2.2 (100% confidence)<br />
| Found By: Readme - Stable Tag (Aggressive Detection)<br />
| - https://www.taribo.de/wp-content/plugins/simple-file-list/readme.txt<br />
| Confirmed By: Readme - ChangeLog Section (Aggressive Detection)<br />
| - https://www.taribo.de/wp-content/plugins/simple-file-list/readme.txt<br />
<br />
[+] Enumerating Config Backups (via Passive and Aggressive Methods)<br />
Checking Config Backups - Time: 00:00:02 <=============================================================================> (137 / 137) 100.00% Time: 00:00:02<br />
<br />
[i] No Config Backups Found.<br />
<br />
[!] No WPScan API Token given, as a result vulnerability data has not been output.<br />
[!] You can get a free API token with 25 daily requests by registering at https://wpscan.com/register<br />
<br />
[+] Finished: Wed Oct 19 19:35:21 2022<br />
[+] Requests Done: 172<br />
[+] Cached Requests: 5<br />
[+] Data Sent: 43.43 KB<br />
[+] Data Received: 442.947 KB<br />
[+] Memory used: 247.684 MB<br />
[+] Elapsed time: 00:00:10<br />
</pre></div>
Thomas.will