Static analysis to search for vulnerabilities in Wordpress plugins.
__ ____________ ___ ___ __
/ \ / \______ \/ | \ __ __ _____/ |_ ___________
\ \/\/ /| ___/ ~ \ | \/ \ __\/ __ \_ __ \
\ / | | \ Y / | / | \ | \ ___/| | \/
\__/\ / |____|____\___|_ /|____/|___| /__| \___ >__|
\/ /_____/ \/ \/ \/
|__ Author: @JosueEncinar
[*] Starting the process
[*] Total plugins 87509
[*] Starting the analisys
The tool has been uploaded without regex, for the search you need to add your regular expressions. The key to reduce false positives is here, go for it.
To know how to do this, check out modules/php/test.py and modules/js/test.py. It is not complicated.
To use the tool, follow the instructions below:
git clone https://github.com/Josue87/wp_hunter.git
cd wp_hunter
pip3 install -r requirements.txt
python3 wp_hunter.py
The tests have been carried out with the Linux operating system