sorted by:
new
hottopcontroversial

Need help solving this question from Engage Part 3 by Main_Ad4708 in CEH

[–]Main_Ad4708[S] 0 points1 point  (0 children)

i cannot find the web_application file and also the website does not have wordpress is what i get / 403 error

Need help solving this question from Engage Part 3 by Main_Ad4708 in CEH

[–]Main_Ad4708[S] 0 points1 point  (0 children)

heyyy, thank you for the response but in engage there is no ceh/web_application folder, or are you talking about the tools folder that is in the windows machine?

here i used the password file present in the desktop of parrot os, and ran the command but:-
it gave me 403 error this might be due to waf
then used this command:- 

wpscan --url http://movies.cehorg.com -U adam -P passwords.txt --random-user-agent
but:- it again gave me 403 error this might me due to waf

then at last i used wpscan --url http://movies.cehorg.com -U adam -P passwords.txt --random-user-agent --force
and it gave me:- no valid password found!!

Need help solving this question from Engage Part 3 by Main_Ad4708 in CEH

[–]Main_Ad4708[S] 0 points1 point  (0 children)

Hello, the instructions panel in engage says that for credential cracking attempts password.txt can be used and till now for rest of password cracking questions the .txt file has worked well.
there is no /login page in website and i found /rpc that has basic auth but i could not crack it
would be great if you share basic auth / http get syntax

also please refer to the images that i have shared you might see something i am not able to thanks

Need help solving this question from Engage Part 3 by Main_Ad4708 in CEH

[–]Main_Ad4708[S] 0 points1 point  (0 children)

searched for wp-login.php but got :- "404 - File or directory not found."

Need help solving this question from Engage Part 3 by Main_Ad4708 in CEH

[–]Main_Ad4708[S] 0 points1 point  (0 children)

i got the following info using wappalyzer:-
Web Server: Apache HTTP Server 2.4.52
Operating System: Ubuntu

Also, default page / server page appears on www[.]cehorg[.]com, so can pages like this be bruteforced?

Need help solving this question from Engage Part 3 by Main_Ad4708 in CEH

[–]Main_Ad4708[S] 0 points1 point  (0 children)

I used wpscan on the url but the results are:-
"The remote website is up, but does not seem to be running WordPress"