merhaba arkadaslar, kendimde indirmistim bir kac gündür denedikten sonra antivirus programim trojan tehlikesi oldugunu uyari verip durdu sonra biraz arastirdim dark webde paypal, kredikarti satan hackerler geldi aklima... simdi ip numaranizdan herseyinize kadar bilgi toplaya biliyor prgram ve kötü ellere düserse nelerden olabiliriz akliniz aliyordur.... bir baska forumdada gördüm ve orada bir arkadasda benim gibi süphelenmis ve arastirmis... wpscan ile taradiginda wordpressin güncel olmadigi cikiyor. ben trojan hatalari geldiginde silmistim programi, 5-10$ kazanacaz diye bilgilerimizi özel seylerimizi ele vermeyelim....
(base) ┌──(mgalidertm㉿mgalidertm)-[~]
└─$ wpscan --url earnapp.com --enumerate u 1 ⨯
_______________________________________________________________
__ _______ _____
\ \ / / __ \ / ____|
\ \ /\ / /| |__) | (___ ___ __ _ _ __ ®
\ \/ \/ / | ___/ \___ \ / __|/ _` | '_ \
\ /\ / | | ____) | (__| (_| | | | |
\/ \/ |_| |_____/ \___|\__,_|_| |_|
WordPress Security Scanner by the WPScan Team
Version 3.8.18
@_WPScan_, @ethicalhack3r, @erwan_lr, @firefart
_______________________________________________________________
Updating the Database ...
Update completed.
[+] URL: Make money from your device in the form of Amazon Gift Cards! - EarnApp [54.175.108.76]
[+] Effective URL: Make money from your device in the form of Amazon Gift Cards! - EarnApp
[+] Started: Mon Jan 3 14:32:22 2022
Interesting Finding(s):
[+] Headers
| Interesting Entries:
| - server: nginx
| - x-proxy-cache: HIT
| Found By: Headers (Passive Detection)
| Confidence: 100%
[+] This site has 'Must Use Plugins': http://earnapp.com/wp-content/mu-plugins/
| Found By: Direct Access (Aggressive Detection)
| Confidence: 80%
| Reference: Must Use Plugins
[+] WordPress version 5.8.1 identified (Insecure-, released on 2021-09-09).
| Found By: Meta Generator (Passive Detection)
| - Make money from your device in the form of Amazon Gift Cards! - EarnApp, Match: 'WordPress 5.8.1'
| Confirmed By: Most Common Wp Includes Query Parameter In Homepage (Passive Detection)
| - https://earnapp.com/wp/wp-includes/css/dist/block-library/style.min.css?ver=5.8.1
[+] WordPress theme in use: earnapp
| Location: http://earnapp.com/wp-content/themes/earnapp/
| Style URL: https://earnapp.com/wp-content/themes/earnapp/style.css?ver=1.1.86
| Style Name: earnapp.com
| Description: earnapp.com theme...
|
| Found By: Css Style In Homepage (Passive Detection)
|
| Version: 1.1.86 (80% confidence)
| Found By: Style (Passive Detection)
| - https://earnapp.com/wp-content/themes/earnapp/style.css?ver=1.1.86, Match: 'Version: 1.1.86'
[+] Enumerating Users (via Passive and Aggressive Methods)
Brute Forcing Author IDs - Time: 00:00:00 <> (0 / 10) 0.00% ETA: ??:??:? Brute Forcing Author IDs - Time: 00:00:00 <> (1 / 10) 10.00% ETA: 00:00:0 Brute Forcing Author IDs - Time: 00:00:04 <> (2 / 10) 20.00% ETA: 00:00:2 Brute Forcing Author IDs - Time: 00:00:05 <> (3 / 10) 30.00% ETA: 00:00:1 Brute Forcing Author IDs - Time: 00:00:07 <> (4 / 10) 40.00% ETA: 00:00:1 Brute Forcing Author IDs - Time: 00:00:08 <> (5 / 10) 50.00% ETA: 00:00:0 Brute Forcing Author IDs - Time: 00:00:09 <> (6 / 10) 60.00% ETA: 00:00:0 Brute Forcing Author IDs - Time: 00:00:10 <> (7 / 10) 70.00% ETA: 00:00:0 Brute Forcing Author IDs - Time: 00:00:15 <> (8 / 10) 80.00% ETA: 00:00:0 Brute Forcing Author IDs - Time: 00:00:18 <> (9 / 10) 90.00% ETA: 00:00:0 Brute Forcing Author IDs - Time: 00:01:18 <> (10 / 10) 100.00% Time: 00:01:18
No Users Found.
[!] No WPScan API Token given, as a result vulnerability data has not been output.
[!] You can get a free API token with 25 daily requests by registering at https://wpscan.com/register
[+] Finished: Mon Jan 3 14:34:20 2022
[+] Requests Done: 81
[+] Cached Requests: 3
[+] Data Sent: 19.743 KB
[+] Data Received: 18.31 MB
[+] Memory used: 176.125 MB
[+] Elapsed time: 00:01:57

