URL: https://bloodycase.com/ [2606:4700:20::681a:30e]
Started: Wed May 28 00:31:32 2025

Interesting Finding(s):

Headers
 | Interesting Entries:
 |  - x-powered-by: Express
 |  - cf-cache-status: DYNAMIC
 |  - Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gl9am%2FQAJLVKOXRdUC9QVMn%2B5qhTtjb7MaBmzN0Aq%2Bji8AtL3XL9RR1Olp9%2BS0IZhHt6Wk%2Bx4mByJSXcxyeaYfw7J%2FBRO7xyhczUWyRd4mf4x%2BVkrKTwqAtJFoJ8sKKiz4824PGRF7FVv2%2F4"}],"group":"cf-nel","max_age":604800}
 |  - NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
 |  - Access-Control-Allow-Methods: *
 |  - Access-Control-Allow-Origin: *
 |  - Access-Control-Max-Age: 600
 |  - Server: cloudflare
 |  - CF-RAY: 946c0d3e9df3ccc8-LAX
 |  - alt-svc: h3=":443"; ma=86400
 |  - server-timing: cfL4;desc="?proto=TCP&rtt=1429&min_rtt=1410&rtt_var=566&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2853&recv_bytes=858&delivery_rate=2588988&cwnd=252&unsent_bytes=0&cid=b367cc6b3ff9ca75&ts=1499&x=0"
 | Found By: Headers (Passive Detection)
 | Confidence: 100%

robots.txt found: https://bloodycase.com/robots.txt
 | Interesting Entries:
 |  - /cgi-bin
 |  - */null
 |  - */nullblank
 |  - /wp-admin/
 |  - *?s=
 |  - *&s=
 |  - /search
 |  - /author/
 |  - */embed
 |  - */xmlrpc.php
 |  - *utm*=
 |  - *openstat=
 |  - */uncategorized/
 |  - */category/
 |  - */feed/
 |  - */sample-page/
 |  - */comments/
 |  - /login
 |  - */history/
 |  - */sniper-battle/
 |  - */container
 |  - */tool
 |  - */patch
 |  - */gift
 |  - */tag
 |  - */reef-case
 |  - */undefined
 |  - */sticker/sticker
 |  - */rust/leaderboard
 |  - */dota2/leaderboard
 |  - */skins/agent/
 |  - */ru/skins/agent/
 |  - */pl/skins/agent/
 |  - */tr/skins/agent/
 |  - */de/skins/agent/
 |  - */pt/skins/agent/
 |  - */ro/skins/agent/
 |  - */ua/skins/agent/
 |  - */es/skins/agent/
 |  - */dota2/giveaways/
 |  - */*/dota2/giveaways/
 |  - */dota2/skins/tool
 |  - */*/dota2/skins/tool
 |  - */dota2/cs2-sticker-capsules
 |  - */rust/cs2-sticker-capsules
 |  - */rust/skin-exchanger
 |  - */dota2/skin-exchanger
 |  - */rust/giveaways/
 |  - */*/rust/giveaways/
 |  - /skins/agent
 |  - /ru/skins/agent
 |  - /pl/skins/agent
 |  - /tr/skins/agent
 |  - /de/skins/agent
 |  - /pt/skins/agent
 |  - /ro/skins/agent
 |  - /ua/skins/agent
 |  - /es/skins/agent
 |  - / 
 | Found By: Robots Txt (Aggressive Detection)
 | Confidence: 100%

Upload directory has listing enabled: https://bloodycase.com/wp-content/uploads/
 | Found By: Direct Access (Aggressive Detection)
 | Confidence: 100%

WordPress version 6.7.2 identified (Outdated, released on 2025-02-11).
 | Found By: Query Parameter In Install Page (Aggressive Detection)
 |  - https://bloodycase.com/wp-includes/css/dashicons.min.css?ver=6.7.2
 |  - https://bloodycase.com/wp-includes/css/buttons.min.css?ver=6.7.2
 |  - https://bloodycase.com/wp-admin/css/forms.min.css?ver=6.7.2
 |  - https://bloodycase.com/wp-admin/css/l10n.min.css?ver=6.7.2
 |  - https://bloodycase.com/wp-admin/css/install.min.css?ver=6.7.2

 The main theme could not be detected.

Enumerating Users (via Passive and Aggressive Methods)

 Brute Forcing Author IDs -: |=================================================|

 User(s) Identified:

pradmin
 | Found By: Wp Json Api (Aggressive Detection)
 |  - https://bloodycase.com/wp-json/wp/v2/users/?per_page=100&page=1
 | Confirmed By: Oembed API - Author URL (Aggressive Detection)
 |  - https://bloodycase.com/wp-json/oembed/1.0/embed?url=https://bloodycase.com/&format=json

 No WPScan API Token given, as a result vulnerability data has not been output.
 You can get a free API token with 25 daily requests by registering at https://wpscan.com/register

Finished: Wed May 28 00:32:12 2025
Requests Done: 66
Cached Requests: 9
Data Sent: 18.012 KB
Data Received: 24.62 MB
Memory used: 228.484 MB
Elapsed time: 00:00:40

Target

bloodycase.com

Scan method

Enumerate Wordpress Users

Run command

wpscan --url https://bloodycase.com/ --enumerate u --random-user-agent --force --max-scan-duration 60

Scan time

40s

Quick report

Order full scan ($19/one time)

Scan date

28 May 2025 03:32

Copy scan report

Download report

Remove scan result

$