faraday

Open Source Vulnerability Manager Security has two difficult tasks: designing smart ways of getting new information, and keeping track of findings to improve remediation efforts. With Faraday, you may focus on discovering vulnerabilities while we help you with the rest. Just use it in your termin...

wpscan

WPScan WordPress Security Scanner WPScan WordPress Vulnerability Database - WordPress Security Plugin INSTALL Prerequisites Optional but highly recommended: rbenv Ruby = 3.3 - Recommended: latest stable Curl = 7.72 - Recommended: latest stable The 7.29 has a segfault The 7.72 could result in...

wpscan

WPScan WordPress セキュリティスキャナ WPScan WordPress 脆弱性データベース - WordPress セキュリティプラグイン インストール 前提条件 （任意ですが強く推奨：rbenv） Ruby = 3.3 - 推奨：最新の安定版 Curl = 7.72 - 推奨：最新の安定版 7.29 にはセグメンテーションフォルトがあります 7.72 未満では、場合によっては Stream error in the HTTP/2 framing layer が発生する可能性があります RubyGems - 推奨：最新の安定版 Nokogiri は OS...

WPScan

==LICENSE== WPScan - WordPress セキュリティスキャナー 著作権 C, ClsHack.com このプログラムはフリーソフトウェアです。あなたはこれを、フリーソフトウェア財団によって発行されたGNU General Public License（バージョン3、または（あなたの選択により）それ以降のバージョン）の条件の下で再配布および/または修正することができます。 このプログラムは有用であることを期待して配布されていますが、いかなる保証も提供されません。暗黙の商品性または特定目的への適合性の保証も含まれません。詳細については、GNU General Publi...

autowpscan

autowpscan 一款自动化工具，可同时扫描多个使用 WordPress 搭建的网站列表，并将扫描摘要及 wpscan 日志发送到 Telegram。 需要 wpscan、Telegram BOT Token、WordPress 漏洞数据库 API Token。 介绍 本工具接收一个由多个 WordPress 网站组成的列表，按预定义格式整理，并使用 wpscan 进行扫描。 没什么特别的，只是一个简单的多网站 wpscan 扫描器。如果你熟悉代码，我相信你可以实现更复杂的自动化（例如 Telegram 机器人、通过资产信息报告 API 自动检查部署等），或者如果你正在考虑自己的...

BurpWpsScan

開発支援 このプロジェクトがあなたの作業に役立つなら、継続的なメンテナンスと新機能の開発を支援してください。 ETH 寄付ウォレット 0x11282eE5726B3370c8B480e321b3B2aA13686582 QRコードをスキャンするか、上記のウォレットアドレスをコピーしてください。 BurpWpsScan Webアプリケーションテスト中にWordPressサイトを検出し（パッシブ検出＋アクティブ確認）、WPScan APIを介してWordPressコア、プラグイン、テーマの脆弱性スキャンを含む包括的なセキュリティ評価を実行し、XML-RPC/REST...

Wordpresscan

Wordpresscan WPScan（Ruby版）の成果に基づいてPythonで書かれたシンプルなWordpressスキャナーです。一部の機能はWPSekuにインスパイアされています。 免責事項 このGitHubの作成者は、誤用やあなたが引き起こす可能性のある損害について一切責任を負いません。 本ソフトウェアは自己責任で使用することに同意したものとします。 インストールと起動 インストール git clone https://github.com/swisskyrepo/Wordpresscan.git cd Wordpresscan Virtualenv virtualenv .ve...

xmlrpc-bruteforcer

An XMLRPC BruteForcer for Wordpress - Inpired by 1N3@CrowdShield Note - This project is discontinued Usage python3 xmlrcpbruteforce.py http://wordpress.org/xmlrpc.php passwords.txt username python3 xmlrpcbruteforce.py http://wordpress.org/xmlrpc.php passwords.txt userlist.txt in progess Target is...

WordPress Modern Events Calendar Lite <5.16.5 - Sensitive Information Disclosure

WordPress Modern Events Calendar Lite before 5.16.5 does not properly restrict access to the export files, allowing unauthenticated users to exports all events data in CSV or XML format. id: CVE-2021-24146 info: name: WordPress Modern Events Calendar Lite 5.16.5 - Sensitive Information Disclosure...

WordPress All-In-One Video Gallery <2.5.0 - Local File Inclusion

WordPress All-in-One Video Gallery plugin before 2.5.0 is susceptible to local file inclusion. The plugin does not sanitize and validate the tab parameter before using it in a require statement in the admin dashboard. An attacker can possibly obtain sensitive information, modify data, and/or...

Ninja Forms < 3.6.26 - Cross-Site Scripting

The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin id: CVE-2023-37979 info: name: Ninja Forms 3.6.26 - Cross-Site Scripting author: r3Y3r53 severity:...

Hide My WP Ghost < 5.2.02 - Hidden Login Page Disclosure

The Hide My WP Ghost plugin does not prevent redirects to the login page via the authredirect WordPress function, allowing an unauthenticated visitor to access the hidden login page. id: CVE-2024-6420 info: name: Hide My WP Ghost 5.2.02 - Hidden Login Page Disclosure author: jpg0mez severity: hig...

Tiempo.com <= 0.1.2 - Cross-Site Scripting

Tiempo.com before 0.1.2 is susceptible to cross-site scripting via the page parameter due to insufficient input sanitization and output escaping. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to stea...

Video List Manager <= 1.7 - SQL Injection

The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin. id: CVE-2023-1408 info: name: Video List Manager = 1.7 - SQL Injection author: r3Y3r53 severity: high description: | The...

Ditty < 3.1.25 - Cross-Site Scripting

The Ditty WordPress plugin before 3.1.25 does not sanitise and escape some parameters and generated URLs before outputting them back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin. id: CVE-2023-4148 info: name: Ditty 3.1.25 ...

WordPress Sniplets 1.1.2 - Local File Inclusion

PHP remote file inclusion vulnerability in modules/syntaxhighlight.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the libpath parameter. id: CVE-2008-1059 info: name: WordPress Sniplets 1.1.2 - Local File Inclusion autho...

WordPress Sniplets <=1.2.2 - Cross-Site Scripting

WordPress Sniplets 1.1.2 and 1.2.2 plugin contains a cross-site scripting vulnerability which allows remote attackers to inject arbitrary web script or HTML via the text parameter to warning.php, notice.php, and inset.php in view/sniplets/, and possibly modules/execute.php; via the url parameter ...

WordPress MyPixs <=0.3 - Local File Inclusion

WordPress MyPixs 0.3 and prior contains a local file inclusion vulnerability. id: CVE-2015-1000012 info: name: WordPress MyPixs =0.4 or apply the vendor-provided patch to fix the LFI vulnerability. reference: - https://wpscan.com/vulnerability/24b83ce5-e3b8-4262-b087-a2dfec014985 -...

WordPress Simple Image Manipulator < 1.0 - Local File Inclusion

WordPress Simple Image Manipulator 1.0 is vulnerable to local file inclusion in ./simple-image-manipulator/controller/download.php because no checks are made to authenticate users or sanitize input when determining file location. id: CVE-2015-1000010 info: name: WordPress Simple Image Manipulator...

WP Attachment Export < 0.2.4 - Unrestricted File Download

The plugin does not have proper access controls, allowing unauthenticated users to download the XML data that holds all the details of attachments/posts on a Wordpress powered site. This includes details of even privately published posts and password protected posts with their passwords revealed ...