Enumerate Wordpress Users (wpscan --url https://www.uii.ac.id/ --enumerate u --random-user-agent --force --max-scan-duration 60)
URL: https://www.uii.ac.id/ [2606:4700:20::ac43:442c]
Started: Fri Jun 27 19:02:43 2025
Interesting Finding(s):
Headers
| Interesting Entries:
| - content-security-policy: upgrade-insecure-requests
| - referrer-policy: no-referrer-when-downgrade
| - permissions-policy: camera=(), geolocation=(), microphone=(), sync-xhr=(self),fullscreen=(self)
| - cf-cache-status: DYNAMIC
| - Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lQktzBukTRLg0%2FCb4vz5lv5RYlLt0s76TuP8iJBdjoq%2BCZz%2Bfs7NnLXWJkpZ1HKL1iO9kb0lW6eBRRUc%2F26UW9am6bsmDrjRuy%2BOkASE7ZdTYygeg%2F47iPepnmQznQ3ujhm4lTXh6CEBuIE%3D"}],"group":"cf-nel","max_age":604800}
| - NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
| - Server: cloudflare
| - CF-RAY: 95699a242ba8f7db-LAX
| - server-timing: cfL4;desc="?proto=TCP&rtt=996&min_rtt=987&rtt_var=390&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2833&recv_bytes=867&delivery_rate=3793621&cwnd=252&unsent_bytes=0&cid=10e3ef6a71f167db&ts=1289&x=0"
| Found By: Headers (Passive Detection)
| Confidence: 100%
robots.txt found: https://www.uii.ac.id/robots.txt
| Found By: Robots Txt (Aggressive Detection)
| Confidence: 100%
XML-RPC seems to be enabled: https://www.uii.ac.id/xmlrpc.php
| Found By: Link Tag (Passive Detection)
| Confidence: 30%
| References:
| - http://codex.wordpress.org/XML-RPC_Pingback_API
| - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_ghost_scanner/
| - https://www.rapid7.com/db/modules/auxiliary/dos/http/wordpress_xmlrpc_dos/
| - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_xmlrpc_login/
| - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_pingback_access/
WordPress readme found: https://www.uii.ac.id/readme.html
| Found By: Direct Access (Aggressive Detection)
| Confidence: 100%
Debug Log found: https://www.uii.ac.id/wp-content/debug.log
| Found By: Direct Access (Aggressive Detection)
| Confidence: 100%
| Reference: https://codex.wordpress.org/Debugging_in_WordPress
The external WP-Cron seems to be enabled: https://www.uii.ac.id/wp-cron.php
| Found By: Direct Access (Aggressive Detection)
| Confidence: 60%
| References:
| - https://www.iplocation.net/defend-wordpress-from-ddos
| - https://github.com/wpscanteam/wpscan/issues/1299
WordPress version 6.8 identified (Insecure, released on 2025-04-15).
| Found By: Rss Generator (Passive Detection)
| - https://www.uii.ac.id/feed/, <generator>https://wordpress.org/?v=6.8</generator>
| Confirmed By: Meta Generator (Passive Detection)
| - https://www.uii.ac.id/, Match: 'WordPress 6.8'
WordPress theme in use: enfold
| Location: https://www.uii.ac.id/wp-content/themes/enfold/
| Last Updated: 2025-05-28T05:57:13.000Z
| The version is out of date, the latest version is 7.1.1
| Style URL: https://www.uii.ac.id/wp-content/themes/enfold/style.css
| Style Name: Enfold
| Style URI: www.kriesi.at/themes/enfold/
| Description: <strong>A superflexible and responsive Business Theme by Kriesi</strong> - <br/> Update notification...
| Author: Kriesi
| Author URI: https://kriesi.at
|
| Found By: Urls In Homepage (Passive Detection)
|
| Version: 7.1 (80% confidence)
| Found By: Style (Passive Detection)
| - https://www.uii.ac.id/wp-content/themes/enfold/style.css, Match: 'Version: 7.1'
Enumerating Users (via Passive and Aggressive Methods)
Brute Forcing Author IDs -: |=================================================|
User(s) Identified:
Humas
| Found By: Rss Generator (Passive Detection)
| Confirmed By: Rss Generator (Aggressive Detection)
andhika
| Found By: Yoast Seo Author Sitemap (Aggressive Detection)
| - https://www.uii.ac.id/author-sitemap.xml
091002215
| Found By: Yoast Seo Author Sitemap (Aggressive Detection)
| - https://www.uii.ac.id/author-sitemap.xml
151002214
| Found By: Yoast Seo Author Sitemap (Aggressive Detection)
| - https://www.uii.ac.id/author-sitemap.xml
211002607
| Found By: Yoast Seo Author Sitemap (Aggressive Detection)
| - https://www.uii.ac.id/author-sitemap.xml
humas
| Found By: Yoast Seo Author Sitemap (Aggressive Detection)
| - https://www.uii.ac.id/author-sitemap.xml
131002104
| Found By: Yoast Seo Author Sitemap (Aggressive Detection)
| - https://www.uii.ac.id/author-sitemap.xml
161002216
| Found By: Yoast Seo Author Sitemap (Aggressive Detection)
| - https://www.uii.ac.id/author-sitemap.xml
123230101
| Found By: Yoast Seo Author Sitemap (Aggressive Detection)
| - https://www.uii.ac.id/author-sitemap.xml
083120403
| Found By: Yoast Seo Author Sitemap (Aggressive Detection)
| - https://www.uii.ac.id/author-sitemap.xml
dp2
| Found By: Yoast Seo Author Sitemap (Aggressive Detection)
| - https://www.uii.ac.id/author-sitemap.xml
985230102
| Found By: Yoast Seo Author Sitemap (Aggressive Detection)
| - https://www.uii.ac.id/author-sitemap.xml
101002204
| Found By: Yoast Seo Author Sitemap (Aggressive Detection)
| - https://www.uii.ac.id/author-sitemap.xml
115230404
| Found By: Yoast Seo Author Sitemap (Aggressive Detection)
| - https://www.uii.ac.id/author-sitemap.xml
No WPScan API Token given, as a result vulnerability data has not been output.
You can get a free API token with 25 daily requests by registering at https://wpscan.com/register
Finished: Fri Jun 27 19:03:23 2025
Requests Done: 54
Cached Requests: 7
Data Sent: 17.823 KB
Data Received: 1.292 MB
Memory used: 190.805 MB
Elapsed time: 00:00:40
Color Scheme
-
Target
www.uii.ac.id
-
Scan method
Enumerate Wordpress Users
-
Run command
wpscan --url https://www.uii.ac.id/ --enumerate u --random-user-agent --force --max-scan-duration 60
-
Scan time
-
Quick report
-
Scan date
27 Jun 2025 22:03
-
Copy scan report
-
Download report
-
Remove scan result
-
Total scans
We use cookies to ensure you get the best experience on our website.
Cookie policy