Wordpress

https://wordpress.org/

https://wpscan.com/

---

Tools

• WPScan

---

Directorios

/wp-admin
/wp-content
/wp-content/plugins
/wp-content/themes

Archivos

/robots.txt

Enumeración

curl -s http://blog.inlanefreight.local | grep WordPress
curl -s http://blog.inlanefreight.local/ | grep themes
curl -s http://blog.inlanefreight.local/ | grep plugins

https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_xmlrpc_login/

Ataques

https://www.rapid7.com/db/modules/exploit/unix/webapp/wp_admin_shell_upload/

Hardening

https://developer.wordpress.org/advanced-administration/security/hardening/

https://www.wordfence.com/