WordPress for Pentesters

Description :

Warning: Illegal string offset 'ID' in /home/onlinecou/public_html/wp-content/plugins/advanced-custom-fields-pro/includes/api/api-field.php on line 890

Warning: Illegal string offset 'key' in /home/onlinecou/public_html/wp-content/plugins/advanced-custom-fields-pro/includes/api/api-field.php on line 891

Warning: Illegal string offset 'label' in /home/onlinecou/public_html/wp-content/plugins/advanced-custom-fields-pro/includes/api/api-field.php on line 892

Warning: Illegal string offset 'name' in /home/onlinecou/public_html/wp-content/plugins/advanced-custom-fields-pro/includes/api/api-field.php on line 893

Warning: Illegal string offset 'menu_order' in /home/onlinecou/public_html/wp-content/plugins/advanced-custom-fields-pro/includes/api/api-field.php on line 894

Warning: Illegal string offset 'parent' in /home/onlinecou/public_html/wp-content/plugins/advanced-custom-fields-pro/includes/api/api-field.php on line 895

Warning: Illegal string offset 'key' in /home/onlinecou/public_html/wp-content/plugins/advanced-custom-fields-pro/includes/api/api-field.php on line 899
This course teaches you how to enumerate WordPress CMS. WordPress cms are one of the most popular cms to build blogs, shopping websites, and more WordPress comes with a lot of 3rd party plugins and themes so do vulnerabilities and misconfigurations We need to know how hackers attack WordPress thus protecting ourselves from the attacks We will see how to enumerate and brute force with python, burp, wpscan, Metasploit etc tools like wpscan do awesome job at enumeration and also at bruteforce attacks thus testing our password security Metasploit have some auxiliary scanners and WordPress exploits to test against WordPress we can script our code in python to bruteforce the login credentials and hence somewhat faster than the burp community edition Burp professional edition has the option of multi-threading thus testing passwords faster but in this course, we will not discuss professional edition as it is not free we will also get the reverse shell from the vulnerable WordPress machine Bonus video includes how we attack a Drupal CMS using droopescan we can use droopescan to scan WordPress , Joomla , Drupal , moodle, etc but for WordPress we better use wpscan first later we see some try hack me writeup  which involves pentesting WordPress cms and exploiting it after this course, you can try mrrobot room from tryhackme and test your skills