URL: https://tstec.com/ [129.232.251.87] Started: Sun Oct 13 04:33:41 2024 Interesting Finding(s): Headers | Interesting Entry: Server: Apache | Found By: Headers (Passive Detection) | Confidence: 100% robots.txt found: https://tstec.com/robots.txt | Found By: Robots Txt (Aggressive Detection) | Confidence: 100% XML-RPC seems to be enabled: https://tstec.com/xmlrpc.php | Found By: Direct Access (Aggressive Detection) | Confidence: 100% | References: | - http://codex.wordpress.org/XML-RPC_Pingback_API | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_ghost_scanner/ | - https://www.rapid7.com/db/modules/auxiliary/dos/http/wordpress_xmlrpc_dos/ | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_xmlrpc_login/ | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_pingback_access/ The external WP-Cron seems to be enabled: https://tstec.com/wp-cron.php | Found By: Direct Access (Aggressive Detection) | Confidence: 60% | References: | - https://www.iplocation.net/defend-wordpress-from-ddos | - https://github.com/wpscanteam/wpscan/issues/1299 WordPress version 6.3.5 identified (Outdated, released on 2024-06-24). | Found By: Style Etag (Aggressive Detection) | - https://tstec.com/wp-admin/load-styles.php, Match: '6.3.5' | Confirmed By: Query Parameter In Install Page (Aggressive Detection) | - https://tstec.com/wp-includes/css/dashicons.min.css?ver=6.3.5 | - https://tstec.com/wp-includes/css/buttons.min.css?ver=6.3.5 | - https://tstec.com/wp-admin/css/forms.min.css?ver=6.3.5 | - https://tstec.com/wp-admin/css/l10n.min.css?ver=6.3.5 | - https://tstec.com/wp-admin/css/install.min.css?ver=6.3.5 WordPress theme in use: Avada | Location: https://tstec.com/wp-content/themes/Avada/ | Last Updated: 2024-09-04T00:30:50.000Z | The version is out of date, the latest version is 7.11.10 | Style URL: https://tstec.com/wp-content/themes/Avada/style.css | Style Name: Avada | Style URI: http://avada.theme-fusion.com/ | Description: The #1 selling theme of all time that allows you to build virtually any design style.... | Author: ThemeFusion | Author URI: http://themeforest.net/user/ThemeFusion | | Found By: Urls In Homepage (Passive Detection) | | Version: 6.2.3 (80% confidence) | Found By: Style (Passive Detection) | - https://tstec.com/wp-content/themes/Avada/style.css, Match: 'Version: 6.2.3' Enumerating Users (via Passive and Aggressive Methods) Brute Forcing Author IDs -: |=================================================| No Users Found. No WPScan API Token given, as a result vulnerability data has not been output. You can get a free API token with 25 daily requests by registering at https://wpscan.com/register Finished: Sun Oct 13 04:34:20 2024 Requests Done: 61 Cached Requests: 12 Data Sent: 16.518 KB Data Received: 533.179 KB Memory used: 193.324 MB Elapsed time: 00:00:38