Skip to content

Commit

Permalink
update README.md with instructions on --cms option
Browse files Browse the repository at this point in the history
  • Loading branch information
milo2012 committed May 15, 2018
1 parent c2621a1 commit 9d29345
Showing 1 changed file with 21 additions and 20 deletions.
41 changes: 21 additions & 20 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -93,29 +93,30 @@ http://xxxx.com/ADS-EJB [200] [482] []
[Found] https://127.0.0.1/.htaccess [200] [1164] []
```

#Example using the --cms option
#Example using the --cms option
Below is a sample output when using the --cms option to fingerprint the CMS on the target hosts. It also returns the Metasploit modules based on the version of the CMS software.

```
$ /git/pathbrute/pathBrute -U urls.txt --cms -i -v
[...redacted for brevity...]
[*] Testing URI Paths
http://xxxx.com/CHANGELOG.txt [404] [1118] [404 Not Found] [59 of 68]
http://yyyy.com/wp-links-opml.php [404] [2139] [404 - Error: 404] [61 of 68]
http://zzzz.com/wp-links-opml.php [200] [5930] [] [64 of 68]
http://zzzz.com/administrator/manifests/files/joomla.xml [200] [6154] [] [65 of 68]
http://zzzz.com/CHANGELOG.txt [200] [5898] [] [66 of 68]
http://zzzz.com/administrator/language/en-GB/en-GB.xml [200] [6139] [] [67 of 68]
[Found] https://[redacted] [Wordpress 4.8.6]
[Found] https://[redacted] [Wordpress 3.0]
Wordpress XML-RPC system.multicall Credential Collector [auxiliary/scanner/http/wordpress_multicall_creds]
WordPress Traversal Directory DoS [auxiliary/dos/http/wordpress_directory_traversal_dos]
-- redacted for brevity ---
[Found] https://[redacted] [Wordpress 3.8.26]
Wordpress XMLRPC DoS [auxiliary/dos/http/wordpress_xmlrpc_dos]
Wordpress XML-RPC system.multicall Credential Collector [auxiliary/scanner/http/wordpress_multicall_creds]
WordPress Traversal Directory DoS [auxiliary/dos/http/wordpress_directory_traversal_dos]
[*] Processing results. Please wait...
http://ffff.com [Joomla 3.8.6]
http://eeee.com/web [Wordpress 4.9.2]
http://xxxx.com [Joomla 2.5.28]
http://yyyy.com [Joomla 1.7.1]
http://gggg.com [Drupal 7.21]
http://hhhh.com [Wordpress 4.6.11]
http://iiii.com [Wordpress 4.9.5]
https://jjjj.com [Wordpress 4.9.3]
https://kkkk.com [Wordpress 4.9.5]
https://llll.com [Wordpress 4.9.5]
[Found] https://[redacted] [Wordpress 3.9.9]
Wordpress XML-RPC system.multicall Credential Collector [auxiliary/scanner/http/wordpress_multicall_creds]
WordPress Traversal Directory DoS [auxiliary/dos/http/wordpress_directory_traversal_dos]
[Found] https://[redacted] [Wordpress 3.3]
Wordpress XML-RPC system.multicall Credential Collector [auxiliary/scanner/http/wordpress_multicall_creds]
WordPress Traversal Directory DoS [auxiliary/dos/http/wordpress_directory_traversal_dos]
```

0 comments on commit 9d29345

Please sign in to comment.