anonhq

[+] URL: http://anonhq.com/
[+] Started: Tue Nov  8 00:53:59 2016

[+] robots.txt available under: 'http://anonhq.com/robots.txt'
[+] Interesting entry from robots.txt: http://anonhq.com/wp-content/plugins/
[!] The WordPress 'http://anonhq.com/readme.html' file exists exposing a version number
[+] Interesting header: CF-RAY: 2fe14118848a2fcf-MAA
[+] Interesting header: LINK: <http://anonhq.com/wp-json/>; rel="https://api.w.org/"
[+] Interesting header: LINK: <http://anonhq.com/>; rel=shortlink
[+] Interesting header: SERVER: cloudflare-nginx
[+] Interesting header: X-UA-COMPATIBLE: IE=edge

[+] WordPress version 4.6.1 identified from meta generator

[+] WordPress theme in use: today

[+] Name: today
 |  Location: http://anonhq.com/wp-content/themes/today/
 |  Style URL: http://anonhq.com/wp-content/themes/today/style.css
 |  Description:

[+] Enumerating plugins from passive detection ...
 | 4 plugins found:

[+] Name: js_composer
 |  Location: http://anonhq.com/wp-content/plugins/js_composer/

[+] Name: responsivevoice-text-to-speech
 |  Location: http://anonhq.com/wp-content/plugins/responsivevoice-text-to-speech/

[+] Name: wordpress-popular-posts
 |  Location: http://anonhq.com/wp-content/plugins/wordpress-popular-posts/

[+] Name: wp-super-cache
 |  Location: http://anonhq.com/wp-content/plugins/wp-super-cache/

[!] We could not determine a version so all vulnerabilities are printed out

[!] Title: WP-Super-Cache 1.3 - Remote Code Execution
    Reference: https://wpvulndb.com/vulnerabilities/6623
    Reference: http://www.acunetix.com/blog/web-security-zone/wp-plugins-remote-code-execution/
    Reference: http://wordpress.org/support/topic/pwn3d
    Reference: http://blog.sucuri.net/2013/04/update-wp-super-cache-and-w3tc-immediately-remote-code-execution-vulnerability-disclosed.html
[i] Fixed in: 1.3.1

[!] Title: WP Super Cache 1.3 - trunk/wp-cache.php wp_nonce_url Function URI XSS
    Reference: https://wpvulndb.com/vulnerabilities/6624
    Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2008
    Reference: http://osvdb.org/show/osvdb/92832
[i] Fixed in: 1.3.1

[!] Title: WP Super Cache 1.3 - trunk/plugins/wptouch.php URI XSS
    Reference: https://wpvulndb.com/vulnerabilities/6625
    Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2008
    Reference: http://osvdb.org/show/osvdb/92831
[i] Fixed in: 1.3.1

[!] Title: WP Super Cache 1.3 - trunk/plugins/searchengine.php URI XSS
    Reference: https://wpvulndb.com/vulnerabilities/6626
    Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2008
    Reference: http://osvdb.org/show/osvdb/92830
[i] Fixed in: 1.3.1

[!] Title: WP Super Cache 1.3 - trunk/plugins/domain-mapping.php URI XSS
    Reference: https://wpvulndb.com/vulnerabilities/6627
    Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2008
    Reference: http://osvdb.org/show/osvdb/92829
[i] Fixed in: 1.3.1

[!] Title: WP Super Cache 1.3 - trunk/plugins/badbehaviour.php URI XSS
    Reference: https://wpvulndb.com/vulnerabilities/6628
    Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2008
    Reference: http://osvdb.org/show/osvdb/92828
[i] Fixed in: 1.3.1

[!] Title: WP Super Cache 1.3 - trunk/plugins/awaitingmoderation.php URI XSS
    Reference: https://wpvulndb.com/vulnerabilities/6629
    Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2008
    Reference: http://osvdb.org/show/osvdb/92827
[i] Fixed in: 1.3.1

[!] Title: WP Super Cache <= 1.4.2 - Persistent Cross-Site Scripting (XSS)
    Reference: https://wpvulndb.com/vulnerabilities/7889
    Reference: http://blog.sucuri.net/2015/04/security-advisory-persistent-xss-in-wp-super-cache.html
[i] Fixed in: 1.4.3

[+] Enumerating usernames ...
[+] Identified the following 7 user/s:
    +----+-------------+----------------------+
    | Id | Login       | Name                 |
    +----+-------------+----------------------+
    | 1  | wpadmin     | hqanon               |
    | 2  | anonvoid    | AnonVoid (Moderator) |
    | 4  | anonwatcher | AnonWatcher          |
    | 6  | anondos     | Anon.Dos             |
    | 8  | anonev      | EV                   |
    | 9  | conn        | CoNN                 |
    | 10 | vandita     | Vandita              |
    +----+-------------+----------------------+