· 7 years ago · Nov 04, 2018, 05:30 PM
1root@kali:~# whatweb -v -a 3 http://testphp.vulnweb.com
2WhatWeb report for http://testphp.vulnweb.com
3Status : 200 OK
4Title : Home of Acunetix Art
5IP : 176.28.50.165
6Country : GERMANY, DE
7
8Summary : PHP[5.3.10-1~lucid+2uwsgi2], Script[text/JavaScript], X-Powered-By[PHP/5.3.10-1~lucid+2uwsgi2], Object[http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,29,0][clsid:D27CDB6E-AE6D-11cf-96B8-444553540000], HTTPServer[nginx/1.4.1], Email[wvs@acunetix.com], Adobe-Flash, ActiveX[D27CDB6E-AE6D-11cf-96B8-444553540000], nginx[1.4.1]
9
10Detected Plugins:
11[ ActiveX ]
12 ActiveX is a framework based on Microsoft's Component
13 Object Model (COM) and Object Linking and Embedding (OLE)
14 technologies. ActiveX components officially operate only
15 with Microsoft's Internet Explorer web browser and the
16 Microsoft Windows operating system. - More info:
17 http://en.wikipedia.org/wiki/ActiveX
18
19 Module : D27CDB6E-AE6D-11cf-96B8-444553540000
20
21[ Adobe-Flash ]
22 This plugin identifies instances of embedded adobe flash
23 files.
24
25 Google Dorks: (1)
26
27[ Email ]
28 Extract email addresses. Find valid email address and
29 syntactically invalid email addresses from mailto: link
30 tags. We match syntactically invalid links containing
31 mailto: to catch anti-spam email addresses, eg. bob at
32 gmail.com. This uses the simplified email regular
33 expression from
34 http://www.regular-expressions.info/email.html for valid
35 email address matching.
36
37 String : wvs@acunetix.com
38 String : wvs@acunetix.com
39
40[ HTTPServer ]
41 HTTP server header string. This plugin also attempts to
42 identify the operating system from the server header.
43
44 String : nginx/1.4.1 (from server string)
45
46[ Object ]
47 HTML object tag. This can be audio, video, Flash, ActiveX,
48 Python, etc. More info:
49 http://www.w3schools.com/tags/tag_object.asp
50
51 Module : clsid:D27CDB6E-AE6D-11cf-96B8-444553540000 (from classid)
52 String : http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,29,0
53
54[ PHP ]
55 PHP is a widely-used general-purpose scripting language
56 that is especially suited for Web development and can be
57 embedded into HTML. This plugin identifies PHP errors,
58 modules and versions and extracts the local file path and
59 username if present.
60
61 Version : 5.3.10-1~lucid+2uwsgi2
62 Google Dorks: (2)
63 Website : http://www.php.net/
64
65[ Script ]
66 This plugin detects instances of script HTML elements and
67 returns the script language/type.
68
69 String : text/JavaScript
70
71[ X-Powered-By ]
72 X-Powered-By HTTP header
73
74 String : PHP/5.3.10-1~lucid+2uwsgi2 (from x-powered-by string)
75
76[ nginx ]
77 Nginx (Engine-X) is a free, open-source, high-performance
78 HTTP server and reverse proxy, as well as an IMAP/POP3
79 proxy server.
80
81 Version : 1.4.1
82 Website : http://nginx.net/
83
84HTTP Headers:
85 HTTP/1.1 200 OK
86 Server: nginx/1.4.1
87 Date: Sun, 05 Jul 1970 01:46:59 GMT
88 Content-Type: text/html
89 Transfer-Encoding: chunked
90 Connection: close
91 X-Powered-By: PHP/5.3.10-1~lucid+2uwsgi2
92 Content-Encoding: gzip
93
94root@kali:~#