beatzaplenty/autorecon
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fresh autorecon run

Browse Source
This commit is contained in:
beatzaplenty committed 2026-04-14 17:49:38 +10:00
1 parent c8f17a17e6
commit 3c3a192c79
1252 files changed
+4574573 -1993899
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

results/portainer.lan.ddnsgeek.com/scans/_manual_commands.txt
-20
View File
@@ -18,23 +18,3 @@
wpscan --url http://portainer.lan.ddnsgeek.com:80/ --no-update -e vp,vt,tt,cb,dbe,u,m --plugins-detection aggressive --plugins-version-detection aggressive -f cli-no-color 2>&1 | tee "/root/results/portainer.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_wpscan.txt"
[*] http on tcp/443
[-] (feroxbuster) Multi-threaded recursive directory/file enumeration for web servers using various wordlists:
feroxbuster -u https://portainer.lan.ddnsgeek.com:443 -t 10 -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -e -r -o /root/results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt
[-] Credential bruteforcing commands (don't run these without modifying them):
hydra -L "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e nsr -s 443 -o "/root/results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_auth_hydra.txt" https-get://portainer.lan.ddnsgeek.com/path/to/auth/area
medusa -U "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e ns -n 443 -O "/root/results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_auth_medusa.txt" -M http -h portainer.lan.ddnsgeek.com -m DIR:/path/to/auth/area
hydra -L "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e nsr -s 443 -o "/root/results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_form_hydra.txt" https-post-form://portainer.lan.ddnsgeek.com/path/to/login.php:"username=^USER^&password=^PASS^":"invalid-login-message"
medusa -U "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e ns -n 443 -O "/root/results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_form_medusa.txt" -M web-form -h portainer.lan.ddnsgeek.com -m FORM:/path/to/login.php -m FORM-DATA:"post?username=&password=" -m DENY-SIGNAL:"invalid login message"
[-] (wpscan) WordPress Security Scanner (useful if WordPress is found):
wpscan --url https://portainer.lan.ddnsgeek.com:443/ --no-update -e vp,vt,tt,cb,dbe,u,m --plugins-detection aggressive --plugins-version-detection aggressive -f cli-no-color 2>&1 | tee "/root/results/portainer.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_wpscan.txt"