OWASP Wordpress Vulnerability Scanner Project

• Main
• FAQs
• Acknowledgements
• Road Map and Getting Involved
• Minimum Viable Product

Instructions are in RED text and should be removed from your document by deleting the text with the span tags. This document is intended to serve as an example of what is required of an OWASP project wiki page. The text in red serves as instructions, while the text in black serves as an example. Text in black is expected to be replaced entirely with information specific to your OWASP project. OWASP Wordpress Scanner Project A Wordpress scanner written in php. main focus of the tools is to analyze a wordpress installation againts a known vulnerability. Description This is where you need to add your more robust project description. A project description should outline the purpose of the project, how it is used, and the value it provides to application security. Ideally, project descriptions should be written in such a way that there is no question what value the project provides to the software security community. This section will be seen and used in various places within the Projects Portal. Poorly written project descriptions therefore detract from a project’s visibility, so project leaders should ensure that the description is meaningful. Licensing This program is free software: you can redistribute it and/or modify it under the terms of the MIT License. Project Resources This is where you can link to the key locations for project files, including setup programs, the source code repository, online documentation, a Wiki Home Page, threaded discussions about the project, and Issue Tracking system, etc. Project Leader Ramadhan Amizudin Related Projects This is where you can link to other OWASP Projects that are similar to yours. Classifications

News and Events This is where you can provide project updates, links to any events like conference presentations, Project Leader interviews, case studies on successful project implementations, and articles written about your project.

Q1

A1

Q2

A2

Contributors

Ramadhan Amizudin - Core Developer

Mokhdzani Faeq - Multi-thread support for plugin enumeration.

Big thanks to WPScan.org team for providing vulnerable plugins list and md5 file hash for version checking. - WPScan.org

As of now, the priorities are:

• Rewrite code to be more modular
• Unit Tests
• Add Proxy Support
• Add Web UI
• Vulnerability Database (currently using https://wpvulndb.com)

This page is where you should indicate what is the minimum set of functionality that is required to make this a useful product that addresses your core security concern. Defining this information helps the project leader to think about what is the critical functionality that a user needs for this project to be useful, thereby helping determine what the priorities should be on the roadmap. And it also helps reviewers who are evaluating the project to determine if the functionality sufficiently provides the critical functionality to determine if the project should be promoted to the next project category.

The project will be release a zip archive.