Wordpresscan - WPScan reescritos en Python + algunas ideas WPSeku


No hay texto alternativo automático disponible.

Wordpresscan - WPScan reescritos en Python + algunas ideas WPSeku

Un simple Wordpress escáner escrito en Python basa en el trabajo de WPScan (versión de Ruby)

instalacion de dependencias:

pip install requests
pip install tornado

instalar:

git clone https://github.com/swisskyrepo/Wordpresscan.git
cd Wordpresscan

actualizacio de base de datos:

python main.py -u "http://localhost/wordpress" --update --random-agent

-u : Url of the WordPress
--update : Update the wpscan database
--aggressive : Launch an aggressive version to scan for plugins/themes
--random-agent : Use a random user-agent for this session

Fuzz:

python main.py -u "http://127.0.0.1/wordpress/" --fuzz

[i] Enumerating components from aggressive fuzzing ...
[i] File: http://127.0.0.1/wordpress/license.txt - found
[i] File: http://127.0.0.1/wordpress/readme.html - found
[i] File: http://127.0.0.1/wordpress/wp-admin/admin-footer.php - found
[i] File: http://127.0.0.1/wordpress/wp-admin/css/ - found
[i] File: http://127.0.0.1/wordpress/wp-admin/admin-ajax.php - found
[i] File: http://127.0.0.1/wordpress/wp-activate.php - found
--fuzz : Will fuzz the website in order to detect as much file, themes and plugins as possible

Descarga: https://github.com/swisskyrepo/Wordpresscan

0 comentarios:

Publicar un comentario