rastating / wordpress-exploit-framework

A Ruby framework designed to aid in the penetration testing of WordPress systems.
https://rastating.github.io/wordpress-exploit-framework
GNU General Public License v3.0
1.02k stars 265 forks source link

Usage #53

Closed ghost closed 6 years ago

ghost commented 6 years ago

Is it possible to scan a website, parse the output and cross reference it with the exploits available in the database?

Otherwise the project looks promising.

rastating commented 6 years ago

WPScan provides vulnerability scanning - you can then use the search function in the CLI to look for modules for the plugins it deems are vulnerable. Generally speaking, the modules in WordPress Exploit Framework have a similar name to what is found in the results of WPScan.