Shulou(Shulou.com)06/01 Report--

This article mainly introduces the software to use WPSeku to find out WordPress security problems, the article is very detailed, has a certain reference value, interested friends must read it!

WordPress is a blogging platform developed in the PHP language. Users can set up their own blogs on servers that support PHP and MySQL databases, because it is the most used CMS, so there are many potential WordPress security issues / vulnerabilities to consider.

How to install the WordPress vulnerability Scanner in WPSeku-Linux

To install WPSeku in Linux, you need the following latest version of WPSeku from Github clone.

$cd ~ $git clone https://github.com/m4ll0k/WPSeku

When you are done, go to the WPSeku directory and run as follows.

$cd WPSeku

Use the-u option to specify the installation URL for WordPress, and run WPSeku as follows:

$. / wpseku.py-u http://yourdomain.com

The following command uses the-p option to search for cross-site scripting (x), local folder embedding (l), and SQL injection (s) vulnerabilities in the WordPress plug-in. You need to specify the location of the plug-in in URL:

$. / wpseku.py-u http://yourdomain.com/wp-content/plugins/wp/wp.php?id=-p [XJI LJS]

The following command will use the-b option to perform a brute force password login through XML-RPC. In addition, you can use the-user and-wordlist options to set the user name and word list, respectively, as shown below.

$. / wpseku.py-u http://yourdomian.com-- user username-- wordlist wordlist.txt-b [lscox]

To browse all WPSeku usage options, enter:

$. / wpseku.py-the above help is all the content of the article "Software uses WPSeku to find out WordPress security problems". Thank you for reading! Hope to share the content to help you, more related knowledge, welcome to follow the industry information channel!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.