WP Plugins Scanner - o unealta cu care poti gasi mai rapid 0days in pluginuri WP

[Andrei]

Am creat o mica aplicatie pentru a descoperi vulnerabilitati in pluginuri de Wordpress mai usor.

Care e ideea?

1. Un crawler ce descarca local orice plugin (sau mai multe) de pe site-ul wordpress.org.

2. Un rezumat al unui scanning de tip white box pentest.

3. Un mic hook la RIPS pentru a oferi rezultate detaliate si un audit al codului sursa foarte misto aranjat.

POC:

Download & Tech Details:

https://github.com/CCSIR/WP-Plugins-Scanner

Original About:

Wordpress Plugins Scanner it is a semi-automatic white box pentesting/crawler app for WP plugins using RIPS from OWASP that can help you to speed up your process of finding 0days in WP plugins. This tool can crawl plugins from Wordpress Directory and store them localy. After they are downloaded you can scan those plugins with OWASP RIPS and see possible security problems.