+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: xmlrpc and json (/showthread.php?tid=5843791)
xmlrpc and json - spaceisaman - Jun 2, 2018
Well i am currently looking for vulnerabilities in a website.
I have found i can access this file /xmlrpc.php and the output is:
Quote:XML-RPC server accepts POST requests only.and also the xmlrpc.php?rsd: where the source code is:
Code
<rsd version="1.0"><service><engineName>WordPress</engineName><engineLink>wordpress</engineLink><homePageLink>.website</homePageLink><apis><api name="WordPress" blogID="1" preferred="true" apiLink="xmlrpc.php"/><api name="Movable Type" blogID="1" preferred="false" apiLink="xmlrpc.php"/><api name="MetaWeblog" blogID="1" preferred="false" apiLink="xmlrpc.php"/><api name="Blogger" blogID="1" preferred="false" apiLink="xmlrpc.php"/><api name="WP-API" blogID="1" preferred="false" apiLink="/wp-json/"/></apis></service></rsd>Quote:[{"id":131315,"date":"2018-06-02T18:50:19","date_gmt":"2018-06-02T15:50:19","guid":{"rendered":"website\/?p=131315"},"modified":"2018-06-02T18:50:19","modified_gmt":"2018-06-
Are these things a security flaw or its totally normal for an anonymous user to access it?
I am new and i am just trying to learn new thing.Thank you in advance