Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[wordpress-panel] [info] WordPress Panel found on http://127.0.0.1:31337 #38

Closed
github-actions bot opened this issue Jul 8, 2021 · 0 comments
Closed

[wordpress-panel] [info] WordPress Panel found on http://127.0.0.1:31337 #38

github-actions bot opened this issue Jul 8, 2021 · 0 comments
Assignees
@ehsandeep
Labels
Nuclei

Comments

@github-actions
Copy link

github-actions bot commented Jul 8, 2021

Details: wordpress-panel matched at http://127.0.0.1:31337

Protocol: HTTP

Full URL: http://127.0.0.1:31337/wp-login.php

Timestamp: Thu Jul 8 00:10:56 +0000 UTC 2021

Template Information

Key Value
name WordPress Panel
author github.com/its0x08
severity info
tags panel

Request

GET /wp-login.php HTTP/1.1
Host: 127.0.0.1:31337
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.67 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

Response

HTTP/1.1 200 OK
Connection: close
Cache-Control: no-cache, must-revalidate, max-age=0
Content-Type: text/html; charset=UTF-8
Date: Thu, 08 Jul 2021 00:10:56 GMT
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Server: Apache/2.4.38 (Debian)
Set-Cookie: wordpress_test_cookie=WP+Cookie+check; path=/
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-Powered-By: PHP/7.1.33

<!DOCTYPE html>
	<!--[if IE 8]>
		<html xmlns="http://www.w3.org/1999/xhtml" class="ie8" lang="en-US">
	<![endif]-->
	<!--[if !(IE 8) ]><!-->
		<html xmlns="http://www.w3.org/1999/xhtml" lang="en-US">
	<!--<![endif]-->
	<head>
	<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
	<title>Log In &lsaquo; Damn Vulnerable WordPress &#8212; WordPress</title>
	<link rel='dns-prefetch' href='//s.w.org' />
<link rel='stylesheet' id='social-warfare-block-css-css'  href='http://127.0.0.1:31337/wp-content/plugins/social-warfare/assets/js/post-editor/dist/blocks.style.build.css?ver=5.3' media='all' />
<link rel='stylesheet' id='dashicons-css'  href='http://127.0.0.1:31337/wp-includes/css/dashicons.min.css?ver=5.3' media='all' />
<link rel='stylesheet' id='buttons-css'  href='http://127.0.0.1:31337/wp-includes/css/buttons.min.css?ver=5.3' media='all' />
<link rel='stylesheet' id='forms-css'  href='http://127.0.0.1:31337/wp-admin/css/forms.min.css?ver=5.3' media='all' />
<link rel='stylesheet' id='l10n-css'  href='http://127.0.0.1:31337/wp-admin/css/l10n.min.css?ver=5.3' media='all' />
<link rel='stylesheet' id='login-css'  href='http://127.0.0.1:31337/wp-admin/css/login.min.css?ver=5.3' media='all' />
	<meta name='robots' content='noindex,noarchive' />
	<meta name='referrer' content='strict-origin-when-cross-origin' />
		<meta name="viewport" content="width=device-width" />
		</head>
	<body class="login no-js login-action-login wp-core-ui  locale-en-us">
	<script type="text/javascript">
		document.body.className = document.body.className.replace('no-js','js');
	</script>
		<div id="login">
		<h1><a href="https://wordpress.org/">Powered by WordPress</a></h1>
	
		<form name="loginform" id="loginform" action="http://127.0.0.1:31337/wp-login.php" method="post">
			<p>
				<label for="user_login">Username or Email Address</label>
				<input type="text" name="log" id="user_login" class="input" value="" size="20" autocapitalize="off" />
			</p>

			<div class="user-pass-wrap">
				<label for="user_pass">Password</label>
				<div class="wp-pwd">
					<input type="password" name="pwd" id="user_pass" class="input password-input" value="" size="20" />
					<button type="button" class="button button-secondary wp-hide-pw hide-if-no-js" data-toggle="0" aria-label="Show password">
						<span class="dashicons dashicons-visibility" aria-hidden="true"></span>
					</button>
				</div>
			</div>
						<p class="forgetmenot"><input name="rememberme" type="checkbox" id="rememberme" value="forever"  /> <label for="rememberme">Remember Me</label></p>
			<p class="submit">
				<input type="submit" name="wp-submit" id="wp-submit" class="button button-primary button-large" value="Log In" />
									<input type="hidden" name="redirect_to" value="http://127.0.0.1:31337/wp-admin/" />
									<input type="hidden" name="testcookie" value="1" />
			</p>
		</form>

					<p id="nav">
									<a href="http://127.0.0.1:31337/wp-login.php?action=lostpassword">Lost your password?</a>
								</p>
					<script type="text/javascript">
			function wp_attempt_focus() {setTimeout( function() {try {d = document.getElementById( "user_login" );d.focus(); d.select();} catch( er ) {}}, 200);}
wp_attempt_focus();
if ( typeof wpOnload === 'function' ) { wpOnload() }		</script>
				<p id="backtoblog"><a href="http://127.0.0.1:31337/">
		&larr; Back to Damn Vulnerable WordPress		</a></p>
			</div>
	<script src='http://127.0.0.1:31337/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp'></script>
<script src='http://127.0.0.1:31337/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1'></script>
<script>
var _zxcvbnSettings = {"src":"http:\/\/127.0.0.1:31337\/wp-includes\/js\/zxcvbn.min.js"};
</script>
<script src='http://127.0.0.1:31337/wp-includes/js/zxcvbn-async.min.js?ver=1.0'></script>
<script>
var pwsL10n = {"unknown":"Password strength unknown","short":"Very weak","bad":"Weak","good":"Medium","strong":"Strong","mismatch":"Mismatch"};
</script>
<script src='http://127.0.0.1:31337/wp-admin/js/password-strength-meter.min.js?ver=5.3'></script>
<script src='http://127.0.0.1:31337/wp-includes/js/underscore.min.js?ver=1.8.3'></script>
<script>
var _wpUtilSettings = {"ajax":{"url":"\/wp-admin\/admin-ajax.php"}};
</script>
<script src='http://127.0.0.1:31337/wp-includes/js/wp-util.min.js?ver=5.3'></script>
<script>
var userProfileL10n = {"warn":"Your new password has not been saved.","warnWeak":"Confirm use of weak password","show":"Show","hide":"Hide","cancel":"Cancel","ariaShow":"Show password","ariaHide":"Hide password"};
</script>
<script src='http://127.0.0.1:31337/wp-admin/js/user-profile.min.js?ver=5.3'></script>
	<script>
	/(trident|msie)/i.test(navigator.userAgent)&&document.getElementById&&window.... Truncated ....

Generated by Nuclei
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@ehsandeep ehsandeep

Labels
Nuclei
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@ehsandeep