Wprecon | A Vulnerability Recognition Tool In CMS WordPress, 100% Developed In Go

Golpher Ninja by Takuya Ueda

WPrecon (Wordpress Recon)

License: GPL v3 GitHub commit activity GitHub go.mod Go version (branch)

Hello! Welcome. Wprecon (Wordpress Recon), is a vulnerability recognition tool in CMS Wordpress, 100% developed in Go.

Version: 0.1.3.0a

Notice:

Why is the project out of updates these days ?! What happens is that I am doing the vulnerability scanner.

Branch Dev

Compile and Install

Features

Status Features
:white_check_mark: Random Agent
:white_check_mark: Detection WAF
:white_check_mark: User Enumerator
:white_check_mark: Plugin Scanner
:white_check_mark: Theme Scanner
:white_check_mark: Tor Proxy’s
:white_check_mark: Detection Honeypot
:white_check_mark: Fuzzing Backup Files
:x: Fuzzing Passwords
:x: Vulnerability Scanner

Usage

Flag(s) Description
-u, --url string Target URL (Ex: http(s)://example.com/). (Required)
–users-enumerate Use the supplied mode to enumerate Users.
–themes-enumerate Use the supplied mode to enumerate Themes.
–plugins-enumerate Use the supplied mode to enumerate Plugins.
–detection-waf I will try to detect if the target is using any WAF.
–detection-honeypot I will try to detect if the target is a honeypot, based on the shodan.
–no-check-wp Will skip wordpress check on target.
–random-agent Use randomly selected HTTP(S) User-Agent header value.
–tor Use Tor anonymity network.
–disable-tls-checks Disables SSL/TLS certificate verification.
-h, --help help for wprecon.
-v, --verbose Verbosity mode.

WPrecon running

Command: wprecon --url "https://www.xxxxxxx.com/" --detection-waf

Output:
—————————————————————————————————————————————————————————————————————

___       ______________________________________________   __
__ |     / /__  __ \__  __ \__  ____/_  ____/_  __ \__  | / /
__ | /| / /__  /_/ /_  /_/ /_  __/  _  /    _  / / /_   |/ /
__ |/ |/ / _  ____/_  _, _/_  /___  / /___  / /_/ /_  /|  /
____/|__/  /_/     /_/ |_| /_____/  \____/  \____/ /_/ |_/

Github: https://github.com/blackcrw/wprecon
Version: 0.0.1a
—————————————————————————————————————————————————————————————————————
[•] Target: https://www.xxxxxxx.com/
[•] Starting: 09/jan/2020 12:11:17

[•] Listing enable: https://www.xxxxxxx.com/wp-content/plugins/
[•] Listing enable: https://www.xxxxxxx.com/wp-content/themes/
[•••] Status Code: 200 — URL: https://www.xxxxxxx.com/wp-admin/
[•••] I'm not absolutely sure that this target is using wordpress! 37.50% chance. do you wish to continue ? [Y/n]: Y
[•••] Status Code: 200 — WAF: Wordfence Security Detected
[•••] Do you wish to continue ?! [Y/n] : Y

Yes Baby, Thank You! :raised_hand:

GitHub:

3 Likes
Friendly Websites

https://igg-games.com/ https://pirateiro.com/ ettvdl.com https://dodi-repacks.site/ https://crackingpatching.com/ https://glodls.to/ https://prostylex.org/ https://haxnode.com/ https://freedownloadae.com/ https://www.novahax.com/ https://www.sadeempc.com/ freecoursesonline.me ftuapps.dev