Udemy Business

Teach on Udemy

Turn what you know into an opportunity and reach millions around the world.

Learn More

Your cart is empty.

Keep shopping

WordPress for Pentesters

Name: WordPress for Pentesters
Rating: 4.2 (3 reviews)

Learn how to enumerate and exploit WordPress CMS

Created byNaga Sai Nikhil

Last updated 6/2021

English

What you'll learn

Enumerate WordPress
Enumerate Users , Themes , Plugins in WordPress
Bruteforce Attacks using XMLRPC , Python , BurpSuite and Hydra
Bruteforce Attacks using Metasploit
Exploit Themes , Plugins and Pop a Shell
Shell Upload using Metasploit

Course content

5 sections • 12 lectures • 1h 58m total length

Installing Wordpress8:48
Install and configure zamp to run WordPress locally, start Apache and MySQL, create a WordPress database, copy the WordPress folder, and complete the WordPress setup.

WordPress Directory Enumeration8:01
Explore the WordPress directory to identify admin, plugins, uploads, and wp-config details, revealing the database name and credentials, and examine XML RPC to understand version and exposure risks.
Enumeration with WPScan6:16
Learn how to use WPScan to enumerate WordPress plugins, themes, and users, identify vulnerable components, and assess version details to bolster site security.

WordPress XMLRPC18:22
Explore WordPress XMLRPC and how remote methods can be invoked via crafted XML requests, and examine login vulnerabilities and brute-force risks in WordPress apps.
WPScan XMLRPC3:33
Learn to use WPScan XMLRPC to enumerate WordPress users, set proxies, and perform password attack tests, including login credential checks and configuration backups.
Metasploit XMLRPC8:12
Use Metasploit XMLRPC to enumerate WordPress targets with auxiliary modules, configure host and target options, and perform login attempts with wordlists, including a brute-force fallback.
Login Bruteforcing with Burp and Hydra13:39
Practice login brute forcing on a WordPress site using Burp and Hydra, testing usernames and password dictionaries to simulate credential guessing and access attempts.

Exploiting themes to get reverse shell3:37
exploiting WordPress themes to get reverse shell, the lecture demonstrates manipulating theme content and command delivery to establish a remote connection on port 555.
Exploiting Plugins to get reverse shell3:15
This lecture shows how pentesters exploit WordPress plugins to obtain a reverse shell, illustrating practical patterns and steps to assess plugin vulnerabilities during security testing.
Metasploit admin shell upload module5:52
Explore how to use the metasploit admin shell upload module to test WordPress security by configuring options, setting credentials, using a proxy, and attempting to upload a shell.

Pentesting Drupal CMS19:25
Learn to pentest WordPress and Drupal CMSs by using scanners like WPE and Drupal-specific tools, identify authentication flaws, exposed information, and vulnerable endpoints, then practice step-by-step exploitation concepts.
TryHackMe - Blog Writeup19:00
Explore a TryHackMe blog writeup on WordPress pentesting, covering login enumeration, brute-force password testing, plugin and theme checks, and a cropped image upload vulnerability leading to remote code execution.

Requirements

No Prerequisites needed but web and python fundamentals are optional

Description

This course teaches you how to enumerate WordPress CMS.

Wordpress cms is one of most popular cms to build blogs , shopping websites and more

Wordpress comes with lot of 3rd party plugins and themes

so does vulnerabilities and misconfigurations

We need to know how hackers attack wordpress thus protecting ourself from the attacks

We will see how to enumerate and bruteforce with python , burp , wpscan , metasploit etc

tools like wpscan does awesome job at enumeration and also at bruteforce attacks thus testing our password security

Metasploit have some auxiliary scanners and wordpress exploits to test aganist wordpress

we can script our code in python to bruteforce the login credentials and hence some what faster than burp community edition

Burp professional edition have the option of multi threading thus testing passwords faster

but in this course we will not discuss about professional edition as it is not free

we will also get the reverse shell from the vulnerable wordpress machine

Bonus video includes how we attack a Drupal CMS using droopescan

we can use droopescan to scan wordpress , joomla , drupal , moodle etc

but for wordpress we better use wpscan first

later we see some try hack me writeup which involves pentesting wordpress cms and exploiting it

after this course you can try mrrobot room from tryhackme and test your skills

Who this course is for:

Anyone who is interested in Pentesting
Anyone who wants to learn how to pentest Wordpress or any other CMS

WordPress for Pentesters

What you'll learn

Explore related topics

Course content

Installation1 lecture • 9min

Enumeration2 lectures • 14min

Bruteforce Attacks4 lectures • 44min

Exploiting Themes and Plugins to RCE3 lectures • 13min

Drupal CMS and Writeup2 lectures • 38min

Requirements

Description

Who this course is for: