This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "OWASP Wordpress Vulnerability Scanner Project"
(→OWASP Wordpress Scanner Project) |
(→OWASP Wordpress Scanner Project) |
||
Line 12: | Line 12: | ||
==OWASP Wordpress Scanner Project== | ==OWASP Wordpress Scanner Project== | ||
− | A wordpress scanner written in PHP, focus on vulnerability assessment and security audit. | + | A wordpress scanner written in PHP, focus on vulnerability assessment and security audit of wordpress installation. |
==Description== | ==Description== |
Revision as of 01:11, 3 June 2015
Instructions are in RED text and should be removed from your document by deleting the text with the span tags. This document is intended to serve as an example of what is required of an OWASP project wiki page. The text in red serves as instructions, while the text in black serves as an example. Text in black is expected to be replaced entirely with information specific to your OWASP project. OWASP Wordpress Scanner ProjectA wordpress scanner written in PHP, focus on vulnerability assessment and security audit of wordpress installation. DescriptionThis is where you need to add your more robust project description. A project description should outline the purpose of the project, how it is used, and the value it provides to application security. Ideally, project descriptions should be written in such a way that there is no question what value the project provides to the software security community. This section will be seen and used in various places within the Projects Portal. Poorly written project descriptions therefore detract from a project’s visibility, so project leaders should ensure that the description is meaningful.
LicensingThis program is free software: you can redistribute it and/or modify it under the terms of the MIT License. Project ResourcesThis is where you can link to the key locations for project files, including setup programs, the source code repository, online documentation, a Wiki Home Page, threaded discussions about the project, and Issue Tracking system, etc.
Project LeaderRelated ProjectsThis is where you can link to other OWASP Projects that are similar to yours.
Classifications |
- Q1
- A1
- Q2
- A2
Contributors
Ramadhan Amizudin - Core Developer
Mokhdzani Faeq - Multi-thread support for plugin enumeration.
Big thanks to WPScan.org team for providing vulnerable plugins list and md5 file hash for version checking. - WPScan.org
As of now, the priorities are:
- Rewrite code to be more modular
- Unit Tests
- Add Proxy Support
- Add Web UI
- Vulnerability Database (currently using https://wpvulndb.com)