Updated wpscan and dirb commands. Fixes #9
This commit is contained in:
parent
5da3f41acc
commit
866cb32987
|
|
@ -143,8 +143,8 @@ ignore-service-names = [
|
||||||
[[http.manual]]
|
[[http.manual]]
|
||||||
description = '(dirb) Recursive directory/file enumeration for web servers using various wordlists (same as dirsearch above):'
|
description = '(dirb) Recursive directory/file enumeration for web servers using various wordlists (same as dirsearch above):'
|
||||||
commands = [
|
commands = [
|
||||||
'dirb {scheme}://{address}:{port}/ -o "{scandir}/{protocol}_{port}_{scheme}_dirb_big.txt" /usr/share/seclists/Discovery/Web-Content/big.txt',
|
'dirb {scheme}://{address}:{port}/ /usr/share/seclists/Discovery/Web-Content/big.txt -o "{scandir}/{protocol}_{port}_{scheme}_dirb_big.txt"',
|
||||||
'dirb {scheme}://{address}:{port}/ -o "{scandir}/{protocol}_{port}_{scheme}_dirb_dirbuster.txt" /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt'
|
'dirb {scheme}://{address}:{port}/ /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -o "{scandir}/{protocol}_{port}_{scheme}_dirb_dirbuster.txt"'
|
||||||
]
|
]
|
||||||
|
|
||||||
[[http.manual]]
|
[[http.manual]]
|
||||||
|
|
@ -157,7 +157,7 @@ ignore-service-names = [
|
||||||
[[http.manual]]
|
[[http.manual]]
|
||||||
description = '(wpscan) WordPress Security Scanner (useful if WordPress is found):'
|
description = '(wpscan) WordPress Security Scanner (useful if WordPress is found):'
|
||||||
commands = [
|
commands = [
|
||||||
'wpscan --url {scheme}://{address}:{port}/ --no-update -e vp,vt,tt,cb,dbe,u,m -f cli-no-color 2>&1 | tee "{scandir}/{protocol}_{port}_{scheme}_wpscan.txt"'
|
'wpscan --url {scheme}://{address}:{port}/ --no-update -e vp,vt,tt,cb,dbe,u,m --plugins-detection aggressive --plugins-version-detection aggressive -f cli-no-color 2>&1 | tee "{scandir}/{protocol}_{port}_{scheme}_wpscan.txt"'
|
||||||
]
|
]
|
||||||
|
|
||||||
[[http.manual]]
|
[[http.manual]]
|
||||||
|
|
@ -207,6 +207,12 @@ service-names = [
|
||||||
ports.tcp = [139, 389, 445]
|
ports.tcp = [139, 389, 445]
|
||||||
ports.udp = [137]
|
ports.udp = [137]
|
||||||
|
|
||||||
|
[[ldap.manual]]
|
||||||
|
description = 'ldapsearch command (modify before running)'
|
||||||
|
commands = [
|
||||||
|
'ldapsearch -x -D "<username>" -w "<password>"" -p {port} -h {address} -b "dc=example,dc=com" -s sub "(objectclass=*) 2>&1 | tee > "{scandir}/{protocol}_{port}_ldap_all-entries.txt"'
|
||||||
|
]
|
||||||
|
|
||||||
[mongodb]
|
[mongodb]
|
||||||
|
|
||||||
service-names = [
|
service-names = [
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue