API tools faq
paste
TVT618

[Linux] WPSeku - Wordpress Security Scanner (Raw)

TVT618
Jan 12th, 2018
485
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.33 KB | None | 0 0
raw download clone embed print report
  1. [Linux]
  2. WPSeku - Wordpress Security Scanner
  3.  
  4. WPSeku is a black box WordPress vulnerability scanner that can be used to scan remote WordPress installations to find security issues.
  5.  
  6. Installation
  7. git clone https://github.com/m4ll0k/WPSeku.git wpseku
  8. cd wpseku
  9. pip install -r requirements.txt
  10. python wpseku.py
  11.  
  12. Usage
  13. python wpseku.py --target http://site.com --ragent
  14.  
  15. Credits and Contributors
  16. Original idea and script from WPScan Team (https://wpscan.org/)
  17. WPScan Vulnerability Database (https://wpvulndb.com/api)
  18.  
  19. Help
  20. root@GitHackTools:~/WPSeku# python wpseku.py --help
  21. __ ______ ____ _
  22. \ \ / / _ \/ ___| ___| | ___ _
  23. \ \ /\ / /| |_) \___ \ / _ \ |/ / | | |
  24. \ V V / | __/ ___) | __/ <| |_| |
  25. \_/\_/ |_| |____/ \___|_|\_\\__,_|
  26.  
  27. || WPSeku - Wordpress Security Scanner
  28. || Version 0.3.0
  29. || Momo Outaadi (M4ll0k)
  30. || https://github.com/m4ll0k/WPSeku
  31.  
  32. Usage: wpseku.py [options]
  33.  
  34. -t --target Target URL (eg: http://site.com)
  35. -b --brute Bruteforce login via xmlrpc
  36. -u --user Set username, (df=admin)
  37. -p --proxy Set proxy, (host:port)
  38. -c --cookie Set cookie, (--cookie="COOKIE")
  39. -a --agent Set user-agent, (--agent="AGENT")
  40. -r --ragent Set random user-agent
  41. -f --redirect Redirect target url, (df=true)
  42. -m --timeout Set timeout, (df=None)
  43. -w --wordlist Set wordlist, (df=db/wordlist.txt)
  44. -h --help Show this help and exit
  45.  
  46. Examples:
  47. wpseku.py -t http://site.com
  48. wpseku.py -t http://site.com -b -w wlist.txt
  49. wpseku.py -t http://site.com/wordpress/ --redirect
  50. wpseku.py -t http://site.com -b -u test -w wlist.txt
  51.  
  52. Example
  53. root@GitHackTools:~/WPSeku# python wpseku.py -t http://vn4000.wordpress.com -b -w /usr/share/sqlmap/txt/wordlist.txt
  54. __ ______ ____ _
  55. \ \ / / _ \/ ___| ___| | ___ _
  56. \ \ /\ / /| |_) \___ \ / _ \ |/ / | | |
  57. \ V V / | __/ ___) | __/ <| |_| |
  58. \_/\_/ |_| |____/ \___|_|\_\\__,_|
  59.  
  60. || WPSeku - Wordpress Security Scanner
  61. || Version 0.3.0
  62. || Momo Outaadi (M4ll0k)
  63. || https://github.com/m4ll0k/WPSeku
  64.  
  65. [+] Target: http://vn4000.wordpress.com
  66. [+] Starting: 12/01/2018 21:19:02
  67.  
  68. [+] Bruteforcing login via xmlrpc..
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!