Wordpress Pentest

[babadoctor]

I want to test a friends word press website for vulnerabilities, so i was wondering what tools you guys know of in kali that would help me do this?

 

Or any tools in general that test word press websites for vulnerabilities

 

 

[mikat]

I want to test a friends word press website for vulnerabilities, so i was wondering what tools you guys know of in kali that would help me do this?

 

Or any tools in general that test word press websites for vulnerabilities

1. get a good internet connection (data center or google fiber) (more upload than the webserver has download)

2. download low orbit ion cannon

3. type in the ip

4. click teh button

5. rip website.

 

edit: did he code his website himself? because if he didn't he could just look up if his version of wordpress has any vulnerabilities

[babadoctor]

1. get a good internet connection (data center or google fiber) (more upload than the webserver has download)

2. download low orbit ion cannon

3. type in the ip

4. click teh button

5. rip website.

 

edit: did he code his website himself? because if he didn't he could just look up if his version of wordpress has any vulnerabilities

I dont want to ddos his website.

If i wanted to i would launch a dns attack with enough power to equal up to 200GBPS

[babadoctor]

1. get a good internet connection (data center or google fiber) (more upload than the webserver has download)

2. download low orbit ion cannon

3. type in the ip

4. click teh button

5. rip website.

 

edit: did he code his website himself? because if he didn't he could just look up if his version of wordpress has any vulnerabilities

And since you mentioned that

is 500 megs enough?

https://www.youtube.com/watch?v=502OYMyglu0

[mikat]

And since you mentioned that

is 500 megs enough?

https://www.youtube.com/watch?v=502OYMyglu0

yes haha, most people host on 100/100

btw, if someone comes along with google fiber you're still fucked if they ddos you

also: you just made your ip public... LOL

[Blake]

I want to test a friends word press website for vulnerabilities, so i was wondering what tools you guys know of in kali that would help me do this?

 

Or any tools in general that test word press websites for vulnerabilities

https://blog.ctf365.com/infographic-your-pentest-tools-arsenal/

 

This will give you a few applications to start with. Yes you want to use Kali, but it isn't required.

[Blake]

1. get a good internet connection (data center or google fiber) (more upload than the webserver has download)

2. download low orbit ion cannon

3. type in the ip

4. click teh button

5. rip website.

 

edit: did he code his website himself? because if he didn't he could just look up if his version of wordpress has any vulnerabilities

Unfortunatley, DOS attacks are not really Pentesting...

[mikat]

Unfortunatley, DOS attacks are not really Pentesting...

maybe not pentesting, but it will certainly test his connection strength