Skip to content

ace-83/simple-wp-checker

Folders and files

NameName
Last commit message
Last commit date

Latest commit

Β 

History

6 Commits
Β 
Β 
Β 
Β 

Repository files navigation

🐾 WP Enumeration Tool

Welcome to the WP Enumeration Tool! This Python script is designed to help security researchers and developers identify potential vulnerabilities in WordPress sites by enumerating users, checking for accessible files, and testing various endpoints. πŸš€

πŸ“‹ Features

  • User Enumeration: Discover WordPress users through the REST API and individual user endpoints.
  • Admin Login Check: Verify the existence of common WordPress login paths.
  • Uploads Accessibility Check: Check if the wp-content/uploads directory is accessible.
  • XML-RPC Testing: Test for the presence of xmlrpc.php for potential pingback and brute force attacks.
  • Configuration File Check: Attempt to download sensitive configuration files like wp-config.php.
  • oEmbed Proxy Check: Test for SSRF vulnerabilities via the oEmbed proxy.

βš™οΈ Requirements

  • Python 3.x
  • requests library (install via pip install requests)

πŸ“₯ Installation

  1. Clone the repository:
    git clone https://github.com/ace-83/simple-wp-checker.git
    cd simple-wp-checker

Create a domains.txt file and list the domains you want to test, one per line.

About

simple wordpress checker

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

 
 
 

Contributors

Languages