【wordpress】一款开源的woedpress渗透测试框架

github地址：

https://github.com/rastating/wordpress-exploit-framework.git

安装过程

git clone https://github.com/rastating/wordpress-exploit-framework.git
正克隆到 'wordpress-exploit-framework'...
remote: Counting objects: 6200, done.
remote: Compressing objects: 100% (86/86), done.
remote: Total 6200 (delta 63), reused 91 (delta 40), pack-reused 6072
接收对象中: 100% (6200/6200), 1.64 MiB | 61.00 KiB/s, 完成.
处理 delta 中: 100% (3978/3978), 完成.

cd wordpress-exploit-framework/

bundle install
Don't run Bundler as root. Bundler can ask for sudo if it is needed, and
installing your bundle as root will break this application for all non-root
users on this machine.
Fetching gem metadata from https://rubygems.org/........
Using bundler 1.16.1
Fetching colorize 0.8.1
Installing colorize 0.8.1
Using diff-lcs 1.3
Fetching ffi 1.9.18
Installing ffi 1.9.18 with native extensions
Fetching ethon 0.11.0
Installing ethon 0.11.0
Fetching mime-types-data 3.2016.0521
Installing mime-types-data 3.2016.0521
Using mime-types 3.1
Fetching mini_portile2 2.3.0
Installing mini_portile2 2.3.0
Using nokogiri 1.8.2
Fetching require_all 2.0.0
Installing require_all 2.0.0
Fetching rspec-support 3.7.0
Installing rspec-support 3.7.0
Fetching rspec-core 3.7.0
Installing rspec-core 3.7.0
Using rspec-expectations 3.7.0
Fetching rspec-mocks 3.7.0
Installing rspec-mocks 3.7.0
Fetching rspec 3.7.0
Installing rspec 3.7.0
Using rubyzip 1.2.1
Fetching slop 4.6.2
Installing slop 4.6.2
Using typhoeus 1.3.0
Bundle complete! 8 Gemfile dependencies, 18 gems now installed.
Use `bundle info [gemname]` to see where a bundled gem is installed.

运行程序

./wpxf.rb
_
__ _____ _ __ __| |_ __ _ __ ___ ___ ___
\ \ /\ / / _ \| '__/ _` | '_ \| '__/ _ \/ __/ __|
\ V V / (_) | | | (_| | |_) | | | __/\__ \__ \
\_/\_/ \___/|_| \__,_| .__/|_| \___||___/___/
|_|
_ _ _
_____ ___ __ | | ___ (_) |_
/ _ \ \/ / '_ \| |/ _ \| | __|
| __/> <| |_) | | (_) | | |_
\___/_/\_\ .__/|_|\___/|_|\__|
|_|
__ _
/ _|_ __ __ _ _ __ ___ _____ _____ _ __| | __
| |_| '__/ _` | '_ ` _ \ / _ \ \ /\ / / _ \| '__| |/ /
| _| | | (_| | | | | | | __/\ V V / (_) | | | <
|_| |_| \__,_|_| |_| |_|\___| \_/\_/ \___/|_| |_|\_\

Loaded 57 auxiliary modules, 288 exploits, 7 payloads

wpxf >

 

转载于:https://www.cnblogs.com/tide-sec/p/9235057.html