root@HACK:~# rustscan -a 10.10.227.21 .----. .-. .-. .----..---. .----. .---. .--. .-. .-. | {} }| { } |{ {__ {_ _}{ {__ / ___} / {} \ | `| | | .-. \| {_} |.-._} } | | .-._} }\ }/ /\ \| |\ | `-' `-'`-----'`----' `-' `----' `---' `-' `-'`-' `-' The Modern Day Port Scanner. ________________________________________ : http://discord.skerritt.blog : : https://github.com/RustScan/RustScan : -------------------------------------- Scanning ports faster than you can say 'SYN ACK' [~] The config file is expected to be at "/root/.rustscan.toml" [!] File limit is lower than default batch size. Consider upping with --ulimit. May cause harm to sensitive servers [!] Your file limit is very small, which negatively impacts RustScan's speed. Use the Docker image, or up the Ulimit with '--ulimit 5000'. Open 10.10.227.21:22 Open 10.10.227.21:80 [~] Starting Script(s) [~] Starting Nmap 7.80 ( https://nmap.org ) at 2024-11-16 00:33 HKT Initiating Ping Scan at 00:33 Scanning 10.10.227.21 [4 ports] Completed Ping Scan at 00:33, 0.28s elapsed (1 total hosts) Initiating Parallel DNS resolution of 1 host. at 00:33 Completed Parallel DNS resolution of 1 host. at 00:33, 5.50s elapsed DNS resolution of 1 IPs took 5.50s. Mode: Async [#: 3, OK: 0, NX: 1, DR: 0, SF: 0, TR: 3, CN: 0] Initiating SYN Stealth Scan at 00:33 Scanning 10.10.227.21 [2 ports] Discovered open port 22/tcp on 10.10.227.21 Discovered open port 80/tcp on 10.10.227.21 Completed SYN Stealth Scan at 00:33, 0.28s elapsed (2 total ports) Nmap scan report for 10.10.227.21 Host is up, received timestamp-reply ttl 60 (0.27s latency). Scanned at 2024-11-16 00:33:47 HKT for 6s
PORT STATE SERVICE REASON 22/tcp open ssh syn-ack ttl 60 80/tcp open http syn-ack ttl 60
Read data files from: /usr/bin/../share/nmap Nmap done: 1 IP address (1 host up) scanned in 6.16 seconds Raw packets sent: 6 (240B) | Rcvd: 3 (128B)
┌──(kali㉿kali)-[~/Documents/thm] └─$ dirsearch -u http://10.10.227.21/ /usr/lib/python3/dist-packages/dirsearch/dirsearch.py:23: DeprecationWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html from pkg_resources import DistributionNotFound, VersionConflict
[!] No WPScan API Token given, as a result vulnerability data has not been output. [!] You can get a free API token with 25 daily requests by registering at https://wpscan.com/register
[+] WordPress theme in use: twentytwentyfour | Location: http://10.10.227.21/wordpress/wp-content/themes/twentytwentyfour/ | Last Updated: 2024-07-16T00:00:00.000Z | Readme: http://10.10.227.21/wordpress/wp-content/themes/twentytwentyfour/readme.txt | [!] The version is out of date, the latest version is 1.2 | Style URL: http://10.10.227.21/wordpress/wp-content/themes/twentytwentyfour/style.css | Style Name: Twenty Twenty-Four | Style URI: https://wordpress.org/themes/twentytwentyfour/ | Description: Twenty Twenty-Four is designed to be flexible, versatile and applicable to any website. Its collecti... | Author: the WordPress team | Author URI: https://wordpress.org | | Found By: Urls In Homepage (Passive Detection) | | Version: 1.0 (80% confidence) | Found By: Style (Passive Detection) | - http://10.10.227.21/wordpress/wp-content/themes/twentytwentyfour/style.css, Match: 'Version: 1.0'
[+] Enumerating All Plugins (via Passive Methods) [+] Checking Plugin Versions (via Passive and Aggressive Methods)
[i] Plugin(s) Identified:
[+] wp-data-access | Location: http://10.10.227.21/wordpress/wp-content/plugins/wp-data-access/ | Last Updated: 2024-10-17T00:01:00.000Z | [!] The version is out of date, the latest version is 5.5.16 | | Found By: Urls In Homepage (Passive Detection) | | Version: 5.3.5 (80% confidence) | Found By: Readme - Stable Tag (Aggressive Detection) | - http://10.10.227.21/wordpress/wp-content/plugins/wp-data-access/readme.txt
