URL: https://unej.ac.id/ [103.241.205.51]
Started: Sun Nov 30 19:06:05 2025

Interesting Finding(s):

Headers
 | Interesting Entries:
 |  - X-TEC-API-VERSION: v1
 |  - X-TEC-API-ROOT: https://unej.ac.id/wp-json/tribe/events/v1/
 |  - X-TEC-API-ORIGIN: https://unej.ac.id
 |  - X-Cache-Lifetime: 604800
 |  - X-Cache-Tags: 62e9,62e9-post-175544
 |  - Referrer-Policy: same-origin, no-referrer-when-downgrade
 |  - alt-svc: h3=":443"; ma=86400
 |  - X-Cache-Age: 58987
 |  - Server: Go
 |  - Alt-Svc: h3=":443"; ma=86400, h3=":443"; ma=86400
 |  - Permissions-Policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), browsing-topics=(), interest-cohort=(), fullscreen=(), autoplay=(), midi=(), sync-xhr=()
 |  - Content-Security-Policy: default-src 'self'; script-src 'self' https://unej.ac.id https://cdn.tailwindcss.com https://www.googletagmanager.com https://www.google-analytics.com https://www.clarity.ms 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://fonts.googleapis.com 'unsafe-inline'; img-src 'self' https://www.google.co.id https://ps.w.org https://c.clarity.ms https://c.bing.com data:; font-src 'self' https://fonts.gstatic.com; frame-src 'self'  https://docs.google.com https://www.youtube.com https://www.google.com https://td.doubleclick.net; object-src 'none'; base-uri 'self'; form-action 'self'; connect-src 'self' https://unej.ac.id https://api.unej.id https://www.google-analytics.com https://analytics.google.com https://j.clarity.ms https://n.clarity.ms https://w.clarity.ms https://stats.g.doubleclick.net; worker-src 'self' blob:; upgrade-insecure-requests;
 |  - X-Page-Speed: 1
 | Found By: Headers (Passive Detection)
 | Confidence: 100%

robots.txt found: https://unej.ac.id/robots.txt
 | Found By: Robots Txt (Aggressive Detection)
 | Confidence: 100%

WordPress readme found: https://unej.ac.id/readme.html
 | Found By: Direct Access (Aggressive Detection)
 | Confidence: 100%

This site has 'Must Use Plugins': https://unej.ac.id/wp-content/mu-plugins/
 | Found By: Direct Access (Aggressive Detection)
 | Confidence: 80%
 | Reference: http://codex.wordpress.org/Must_Use_Plugins

The external WP-Cron seems to be enabled: https://unej.ac.id/wp-cron.php
 | Found By: Direct Access (Aggressive Detection)
 | Confidence: 60%
 | References:
 |  - https://www.iplocation.net/defend-wordpress-from-ddos
 |  - https://github.com/wpscanteam/wpscan/issues/1299


Fingerprinting the version -: |=============== No WPScan API Token given, as a result vulnerability data has not been output.
 You can get a free API token with 25 daily requests by registering at https://wpscan.com/register

Finished: Sun Nov 30 19:07:02 2025
Requests Done: 384
Cached Requests: 7
Data Sent: 105.085 KB
Data Received: 19.184 MB
Memory used: 151.848 MB
Elapsed time: 00:00:56

Scan Aborted: Max Scan Duration Reached

Target

unej.ac.id

Scan method

Enumerate Wordpress Users

Run command

wpscan --url https://unej.ac.id/ --enumerate u --random-user-agent --force --max-scan-duration 60

Scan time

56s

Quick report

Order full scan ($19/one time)

Scan date

30 Nov 2025 22:07

Copy scan report

Download report

Remove scan result

$