[SOLUCIONADO] Explotar pagina montada sobre wordpress

You are not allowed to view links. You are not allowed to view links. Register or Login or You are not allowed to view links. Register or Login
Ya le pongo el pathname /wp-content/ pero sigue dando error :

 
__          _______   _____                  
 \ \        / /  __ \ / ____|                 
  \ \  /\  / /| |__) | (___   ___  __ _ _ __  
   \ \/  \/ / |  ___/ \___ \ / __|/ _` | '_ \ 
    \  /\  /  | |     ____) | (__| (_| | | | |
     \/  \/   |_|    |_____/ \___|\__,_|_| |_| v1.1r425

    WordPress Security Scanner by the WPScan Team
 Sponsored by the RandomStorm Open Source Initiative
_____________________________________________________

[WARNING] The SVN repository is DEPRECATED, use the GIT one - http://github.com/wpscanteam/wpscan

The remote host tried to redirect us to http://www.*site*.com/wp-content/
Do you want follow the redirection ? [y/n]
y
[ERROR] The remote website is up, but does not seem to be running WordPress.
Trace : ["wpscan.rb:79:in `<main>'"]

"[WARNING] The SVN repository is DEPRECATED, use the GIT one - You are not allowed to view links. You are not allowed to view links. Register or Login or You are not allowed to view links. Register or Login"

Tenes que bajarte la ultima version, esa es viejisima.

git clone You are not allowed to view links. You are not allowed to view links. Register or Login or You are not allowed to view links. Register or Login wpscan

Ya tengo la ultima version y me vuelve a dar el mismo error :

 __          _______   _____                  
 \ \        / /  __ \ / ____|                 
  \ \  /\  / /| |__) | (___   ___  __ _ _ __  
   \ \/  \/ / |  ___/ \___ \ / __|/ _` | '_ \ 
    \  /\  /  | |     ____) | (__| (_| | | | |
     \/  \/   |_|    |_____/ \___|\__,_|_| |_| v2.0rcf102a0

    WordPress Security Scanner by the WPScan Team
 Sponsored by the RandomStorm Open Source Initiative
_____________________________________________________

[ERROR] The remote website is up, but does not seem to be running WordPress.
Trace :
wpscan.rb:83:in `<main>'

You are not allowed to view links. You are not allowed to view links. Register or Login or You are not allowed to view links. Register or Login
Ya tengo la ultima version y me vuelve a dar el mismo error :

 __          _______   _____                  
 \ \        / /  __ \ / ____|                 
  \ \  /\  / /| |__) | (___   ___  __ _ _ __  
   \ \/  \/ / |  ___/ \___ \ / __|/ _` | '_ \ 
    \  /\  /  | |     ____) | (__| (_| | | | |
     \/  \/   |_|    |_____/ \___|\__,_|_| |_| v2.0rcf102a0

    WordPress Security Scanner by the WPScan Team
 Sponsored by the RandomStorm Open Source Initiative
_____________________________________________________

[ERROR] The remote website is up, but does not seem to be running WordPress.
Trace :
wpscan.rb:83:in `<main>'

Usa con -f

Ahora me salta otro error con -f

____________________________________________________
 __          _______   _____                  
 \ \        / /  __ \ / ____|                 
  \ \  /\  / /| |__) | (___   ___  __ _ _ __  
   \ \/  \/ / |  ___/ \___ \ / __|/ _` | '_ \ 
    \  /\  /  | |     ____) | (__| (_| | | | |
     \/  \/   |_|    |_____/ \___|\__,_|_| |_| v2.0rcf102a0

    WordPress Security Scanner by the WPScan Team
 Sponsored by the RandomStorm Open Source Initiative
_____________________________________________________

[ERROR] The WordPress URL supplied 'http://www.*site*.com/' seems to be down.
Trace :
wpscan.rb:54:in `<main>'

You are not allowed to view links. You are not allowed to view links. Register or Login or You are not allowed to view links. Register or Login
Ahora me salta otro error con -f

____________________________________________________
 __          _______   _____                  
 \ \        / /  __ \ / ____|                 
  \ \  /\  / /| |__) | (___   ___  __ _ _ __  
   \ \/  \/ / |  ___/ \___ \ / __|/ _` | '_ \ 
    \  /\  /  | |     ____) | (__| (_| | | | |
     \/  \/   |_|    |_____/ \___|\__,_|_| |_| v2.0rcf102a0

    WordPress Security Scanner by the WPScan Team
 Sponsored by the RandomStorm Open Source Initiative
_____________________________________________________

[ERROR] The WordPress URL supplied 'http://www.*site*.com/' seems to be down.
Trace :
wpscan.rb:54:in `<main>'

Pero lpm... Pasame lo que estas escribiendo para lanzar el scan

Despues de leer unos tutoriales, ya encontre mi fallo --wp-content-dir, necesita ir acompañado de algun path como el --enumerate.
He probado --enumerate vp, ap y p pero no se ha encontrado ningun plugin.

root@bt:~/wpscan# ruby wpscan.rb --url www.*site*.com -f --wp-content-dir --enumerate vp
____________________________________________________
 __          _______   _____                  
 \ \        / /  __ \ / ____|                 
  \ \  /\  / /| |__) | (___   ___  __ _ _ __  
   \ \/  \/ / |  ___/ \___ \ / __|/ _` | '_ \ 
    \  /\  /  | |     ____) | (__| (_| | | | |
     \/  \/   |_|    |_____/ \___|\__,_|_| |_| v2.0rcf102a0

    WordPress Security Scanner by the WPScan Team
 Sponsored by the RandomStorm Open Source Initiative
_____________________________________________________

| URL: http://www.*site*.com/
| Started on Thu Jan 10 15:21:18 2013

[!] The WordPress 'http://www.*site*.com/readme.html' file exists
[!] Full Path Disclosure (FPD) in 'http://www.*site*.com/wp-includes/rss-functions.php'
[+] XML-RPC Interface available under http://www.*site*.com/xmlrpc.php
[+] WordPress version 3.5 identified from advanced fingerprinting

[+] Enumerating plugins from passive detection ... 
No plugins found :(

[+] Finished at Thu Jan 10 15:21:31 2013
[+] Elapsed time: 00:00:13

Sin embargo cuando hago la consulta:

 ruby wpscan.rb --url www.*site*.com -f --wp-content-dir custom-content --enumerate vp

Me salen un monton de plugins, para explotar. Pero no se puede acceder a ninguno de ellos.. Y no consigo llevar a cabo ningun exploit.

Al parecer no se puede explotar con metodos publicos entonces.

Alguna sugerencia ??

Brute force al Cpanel no queda otra no ??

Acabo de actualizar el wpSCan y me ha dado dos vulnerabilidades por la version del WordPress 3.5, a ver si me podeis ayudar :

[!] We have identified 2 vulnerabilities from the version number :

 | * Title: XMLRPC Pingback API Internal/External Port Scanning
 | * Reference: https://github.com/FireFart/WordpressPingbackPortScanner

 | * Title: WordPress XMLRPC pingback additional issues
 | * Reference: http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html

Me he instalado el wpps.rb pero no consigo llegar a nada.

You are not allowed to view links. You are not allowed to view links. Register or Login or You are not allowed to view links. Register or Login
Alguna sugerencia ??

Brute force al Cpanel no queda otra no ??

Usa un --enumerate u

Ahi te va a dar los usuarios y probas bruteforcear uno. Igual podes probar un ataque a alguna otra web si es que esta en un shared hosting.

You are not allowed to view links. You are not allowed to view links. Register or Login or You are not allowed to view links. Register or Login
the remote website is up but does not seem to be running wordpress

Que debo de hacer?? en WPSCAN

Por que usas Backtrack?