WPScan vulnerabilities are not reported to Faraday Server

[elenasarim]

Hello,

I use the community version of Faraday. It is installed in Kali Linux, in the same machine I have installed the Faraday client as well. However, I could not access the Web Gui remotely so I changed the /home/faraday/.faraday/config/server.ini to the following:

[faraday_server]
port=5985
bind_address=0.0.0.0

Whenever I run faraday client and execute wpscan --url www.mydomain.com I can see the list of vulnerabilities but these are not transferred to my workspace. In fact, they are not even recognized by the faraday client.

Finally, please note that whenever I execute faraday-client, before opening the gui, I notice the following logs on the terminal:

2019-10-29 16:18:26,068 - faraday.client.model.api - INFO {MainThread} [api.py:117 - _setUpAPIServer()]  XMLRPC API server configured on ('localhost', 9876)
2019-10-29 16:18:26,082 - faraday.client.apis.rest.api - INFO {MainThread} [api.py:65 - startAPIs()]  REST API server configured on ('localhost', 9977)

What do you think?

[llazzaro]

Hi, We think that the stdout of the wpscan has changed and the plugin is not supporting the latest version. Could you tell us the version of wpscan? Can you retry using the --debug flag on the faraday-client? Thanks!

[geosphere]

Some issue with WPScan v. 3.7.5

[llazzaro]

Can you try to output a json with wpscan and then upload it from the webui?