diff --git a/README.md b/README.md index 776a71a..778b679 100755 --- a/README.md +++ b/README.md @@ -93,29 +93,30 @@ http://xxxx.com/ADS-EJB [200] [482] [] [Found] https://127.0.0.1/.htaccess [200] [1164] [] ``` -#Example using the --cms option +#Example using the --cms option +Below is a sample output when using the --cms option to fingerprint the CMS on the target hosts. It also returns the Metasploit modules based on the version of the CMS software. + ``` $ /git/pathbrute/pathBrute -U urls.txt --cms -i -v +[...redacted for brevity...] -[*] Testing URI Paths -http://xxxx.com/CHANGELOG.txt [404] [1118] [404 Not Found] [59 of 68] -http://yyyy.com/wp-links-opml.php [404] [2139] [404 - Error: 404] [61 of 68] -http://zzzz.com/wp-links-opml.php [200] [5930] [] [64 of 68] -http://zzzz.com/administrator/manifests/files/joomla.xml [200] [6154] [] [65 of 68] -http://zzzz.com/CHANGELOG.txt [200] [5898] [] [66 of 68] -http://zzzz.com/administrator/language/en-GB/en-GB.xml [200] [6139] [] [67 of 68] +[Found] https://[redacted] [Wordpress 4.8.6] + +[Found] https://[redacted] [Wordpress 3.0] +Wordpress XML-RPC system.multicall Credential Collector [auxiliary/scanner/http/wordpress_multicall_creds] +WordPress Traversal Directory DoS [auxiliary/dos/http/wordpress_directory_traversal_dos] --- redacted for brevity --- +[Found] https://[redacted] [Wordpress 3.8.26] +Wordpress XMLRPC DoS [auxiliary/dos/http/wordpress_xmlrpc_dos] +Wordpress XML-RPC system.multicall Credential Collector [auxiliary/scanner/http/wordpress_multicall_creds] +WordPress Traversal Directory DoS [auxiliary/dos/http/wordpress_directory_traversal_dos] -[*] Processing results. Please wait... -http://ffff.com [Joomla 3.8.6] -http://eeee.com/web [Wordpress 4.9.2] -http://xxxx.com [Joomla 2.5.28] -http://yyyy.com [Joomla 1.7.1] -http://gggg.com [Drupal 7.21] -http://hhhh.com [Wordpress 4.6.11] -http://iiii.com [Wordpress 4.9.5] -https://jjjj.com [Wordpress 4.9.3] -https://kkkk.com [Wordpress 4.9.5] -https://llll.com [Wordpress 4.9.5] +[Found] https://[redacted] [Wordpress 3.9.9] +Wordpress XML-RPC system.multicall Credential Collector [auxiliary/scanner/http/wordpress_multicall_creds] +WordPress Traversal Directory DoS [auxiliary/dos/http/wordpress_directory_traversal_dos] + +[Found] https://[redacted] [Wordpress 3.3] +Wordpress XML-RPC system.multicall Credential Collector [auxiliary/scanner/http/wordpress_multicall_creds] +WordPress Traversal Directory DoS [auxiliary/dos/http/wordpress_directory_traversal_dos] ``` +