Wordpresscan - WPScan reescritos en Python + algunas ideas WPSeku
Un simple Wordpress escáner escrito en Python basa en el trabajo de WPScan (versión de Ruby)
instalacion de dependencias:
pip install requests
pip install tornado
instalar:
git clone https://github.com/ swisskyrepo/ Wordpresscan.git
cd Wordpresscan
actualizacio de base de datos:
python main.py -u "http://localhost/ wordpress" --update --random-agent
-u : Url of the WordPress
--update : Update the wpscan database
--aggressive : Launch an aggressive version to scan for plugins/themes
--random-agent : Use a random user-agent for this session
Fuzz:
python main.py -u "http://127.0.0.1/ wordpress/" --fuzz
[i] Enumerating components from aggressive fuzzing ...
[i] File: http://127.0.0.1/ wordpress/license.txt - found
[i] File: http://127.0.0.1/ wordpress/readme.html - found
[i] File: http://127.0.0.1/ wordpress/wp-admin/ admin-footer.php - found
[i] File: http://127.0.0.1/ wordpress/wp-admin/css/ - found
[i] File: http://127.0.0.1/ wordpress/wp-admin/ admin-ajax.php - found
[i] File: http://127.0.0.1/ wordpress/wp-activate.php - found
--fuzz : Will fuzz the website in order to detect as much file, themes and plugins as possible
Descarga: https://github.com/ swisskyrepo/Wordpresscan
Un simple Wordpress escáner escrito en Python basa en el trabajo de WPScan (versión de Ruby)
instalacion de dependencias:
pip install requests
pip install tornado
instalar:
git clone https://github.com/
cd Wordpresscan
actualizacio de base de datos:
python main.py -u "http://localhost/
-u : Url of the WordPress
--update : Update the wpscan database
--aggressive : Launch an aggressive version to scan for plugins/themes
--random-agent : Use a random user-agent for this session
Fuzz:
python main.py -u "http://127.0.0.1/
[i] Enumerating components from aggressive fuzzing ...
[i] File: http://127.0.0.1/
[i] File: http://127.0.0.1/
[i] File: http://127.0.0.1/
[i] File: http://127.0.0.1/
[i] File: http://127.0.0.1/
[i] File: http://127.0.0.1/
--fuzz : Will fuzz the website in order to detect as much file, themes and plugins as possible
Descarga: https://github.com/
0 comentarios:
Publicar un comentario