wordpress - penetration testing

• wpscan
• wp-json
• xmlrpc

Blog Posts

• CTF – apageinsec
• GitHub - RandomRobbieBF/wordpress-exploits: Random Wordpres Exploits May or May Not Work.
• Wordpress Plugins Hacking - Wargames.MY 2024 CTF Writeup

Plugins and Themes Enumeration

curl -s -X GET http://blog.inlanefreight.online | sed 's/href=/\n/g' | sed 's/src=/\n/g' | grep 'wp-content/plugins/*' | cut -d"'" -f2

curl -s -X GET http://94.237.48.12:41616 | sed 's/href=/\n/g' | sed 's/src=/\n/g' | grep 'wp-content/plugins/*' | cut -d"'" -f2

curl -s -X GET http://blog.inlanefreight.com | sed 's/href=/\n/g' | sed 's/src=/\n/g' | grep 'themes' | cut -d"'" -f2

‌‌‌‌‌‌

curl -s -X GET http://banglapratidin.com | sed 's/href=/\n/g' | sed 's/src=/\n/g' | grep 'wp-content/plugins/*' | cut -d"'" -f2

Using ffuf

ffuf -ic -u http://blog.inlanefreight.local/FUZZ -w /usr/share/wordlists/seclists/Discovery/Web-Content/CMS/wp-plugins.fuzz.txt

Using awk

urls=$(curl -s -X GET http://83.136.249.246:54513 | sed 's/href=/\n/g' | sed 's/src=/\n/g' | grep 'wp-content/plugins/*' | cut -d"'" -f2)

# Loop through the URLs
while IFS= read -r url; do
	folder=$(echo "$url" | awk -F'/' '{NF-=2; print}' OFS=/)
	echo "$folder" $(curl $folder | html2txt)
done <<< "$urls"