WPeku - Onye nyocha ihe ọghọm iji chọta okwu nchekwa na WordPress


WordPress bụ isi mmalite mepere emepe nke enwere ike ịhazi ya nke ukwuu (CMS) nke ọtụtụ nde mmadụ na-eji gburugburu ụwa iji mee blọọgụ na webụsaịtị na-arụ ọrụ nke ọma. N'ihi na ọ bụ CMS a na-ejikarị eme ihe n'ebe ahụ, enwere ọtụtụ nsogbu nchekwa/adịghị ike na-eche banyere ya.

Agbanyeghị, enwere ike idozi nsogbu nchekwa ndị a, ma ọ bụrụ na anyị na-agbaso usoro nchekwa nchekwa WordPress nkịtị. N'ime edemede a, anyị ga-egosi gị otu esi eji WPeku, nyocha ngwa ngwa WordPress na Linux, nke enwere ike iji chọta oghere nchekwa na nrụnye WordPress gị wee gbochie ihe iyi egwu.

WPeku bụ nyocha adịghị ike WordPress dị mfe nke edere site na iji Python, enwere ike iji ya nyochaa nrụnye WordPress mpaghara na nke dịpụrụ adịpụ iji chọta nsogbu nchekwa.

Otu esi etinye WPSeku – WordPress Vulnerability Scanner na Linux

Iji tinye WPSeku na Linux, ịkwesịrị imechi ụdị WPeku kacha ọhụrụ site na ebe nchekwa Github dị ka egosiri.

$ cd ~
$ git clone https://github.com/m4ll0k/WPSeku

Ozugbo ị nwetara ya, banye na WPseku ndekọ ma mee ya dị ka ndị a.

$ cd WPSeku

Ugbu a na-agba ọsọ WPSeku site na iji -u nhọrọ iji kọwaa URL nwụnye WordPress gị dị ka nke a.

$ ./wpseku.py -u http://yourdomain.com 

Iwu dị n'okpuru ga-achọ ịde ederede saịtị, ntinye faịlụ mpaghara, yana adịghị ike ịgbanye SQL na plugins WordPress gị site na iji -p nhọrọ, ịkwesịrị ịkọwapụta ọnọdụ plugins na URL:

$ ./wpseku.py -u http://yourdomain.com/wp-content/plugins/wp/wp.php?id= -p [x,l,s]

Iwu na-esote ga-eme nbanye nbanye na paswọọdụ nbanye site na XML-RPC site na iji nhọrọ -b. Ọzọkwa, ịnwere ike ịtọ aha njirimara na ndepụta okwu site na iji --user na --wordlist nhọrọ n'otu n'otu dị ka egosiri n'okpuru.

$ ./wpseku.py -u http://yourdomian.com --user username --wordlist wordlist.txt -b [l,x]   

Ka ilele nhọrọ ojiji WPeku niile, pịnye.

$ ./wpseku.py --help

Ebe nchekwa WPeku Github: https://github.com/m4ll0k/WPSeku

Ọ bụ ya! N'ime edemede a, anyị gosiri gị otu esi enweta ma jiri WPeku maka nyocha ngwa ngwa WordPress na Linux. WordPress nwere nchekwa mana naanị ma ọ bụrụ na anyị na-agbaso usoro nchekwa WordPress kacha mma. Ị nwere echiche ọ bụla ị ga-ekekọrịta? Ọ bụrụ ee, wee jiri ngalaba nkọwa n'okpuru.