freelabz/secator

feat: some items could have better output types

Opened this issue ยท 0 comments

For instance, wordpress outputs some info:

๐Ÿšจ [Headers ๐Ÿก•] [info] https://<SITE>/ [headers] [server: Apache,x-powered-by: PHP/7.4]
๐Ÿšจ [robots.txt found ๐Ÿก•] [info] https://<SITE>/robots.txt [robots_txt]
๐Ÿšจ [XML-RPC seems to be enabled ๐Ÿก•] [info] https://<SITE>/xmlrpc.php [xmlrpc]
๐Ÿšจ [WordPress readme found ๐Ÿก•] [info] https://<SITE>/readme.html [readme]
๐Ÿšจ [Upload directory has listing enabled ๐Ÿก•] [info] https://<SITE>/wp-content/uploads/ [upload_directory_listing]
๐Ÿšจ [The external WP-Cron seems to be enabled ๐Ÿก•] [info] https://<SITE>/wp-cron.php [wp_cron]

Although some of those might actually be vulnerabilities (XML-RPC / Upload dir / external WP-Cron), the rest is probably better as tags.

Might want to rethink the info levels of nuclei as well.