GitHub PushEvent at 2014-02-09 22:56:21
Repository: cmsmap
Actor: m7x
Payload: {"shas":[["4734e2300168a7d9ad3ef46f22d14cb356644147","38d47f9e0f279d524009dab7bd68aa79ae0aba04@gmail.com","+ Commit 6\n+ Initialize Phase:\nGet Wordpress Plugins via Wordpress site and ExploitDB\nGet Joomla Plugins via ExploitDB\nGet Drupal Plugins via Drupal site\n\n+ CMS Type Detection\n\n+ Wordpress Scan:\nVersion Detection\nTheme Detection\nPlugins Enumeration\nConfig Files Detection\nDefault Files Detection\nUsername Enumeration Via Feed \nUsername Enumeration Via Author \nUsername Enumeration Via Forgotten Password\nLow Intensive Brute Forcing (5 attempts)\nPath Disclosure Via Hello plugin\nDirectories Listing\nExploitDB Searching of Plugins\nExploitDB Searching of Themes\n\n+ Joomla Scan:\nVersion Detection\nTemplate Detection\nConfig Files Detection\nDefault Files Detection\nUsername Enumeration Via Feed\nLow Intensive Brute Forcing (5 attempts)\nComponents Enumeration\nExploitDB Searching of Components\nDirectories Listing\n\n+ Drupal Scan:\nVersion Detection\nTheme Detection\nConfig Files Detection\nDefault Files Detection\nUsername Enumeration via Views Module\nUsername Enumeration via Blog Module\nUsername Enumeration via Forgotten Password\nLow Intensive Brute Forcing (5 attempts)\nModules Enumeration\nExploitDB Searching of Modules\nDirectories Listing\n\n+ Wordpress Brute Forcing Attack\n+ Joomla Brute Forcing Attack\n+ Drupal Brute Forcing Attack\n\n+ Generic Checks\nDirectory Listing\nHTTPS Check\nAutocomplete Off Check\nRobots.txt Check\n\n+ Post Exploit\nWordpress Shell via Plugin\nJoomla Shell\n\n+ Files\nwp_plugins.txt\nwp_themes.txt\nwp-shell.zip\njoomla_plugins.txt\ndrupal_plugins.txt\n\n+ ThirdParty\nmultipart\ntermicolor\n\n+ Disclaimer\n+ License\n\nSigned-off-by: m7x <michelemanzotti@gmail.com>","m7x",true]],"size":1,"ref":"refs/heads/master","head":"4734e2300168a7d9ad3ef46f22d14cb356644147"}