Skip to content
Kitbay
Submit
Skill

wordpress-penetration-testing

MITUpdated on Nov 11, 20264,703GitHub stars

A security-testing skill from zebbern's claude-code-guide repository for authorised assessments of WordPress installs.

What the skill teaches

A security-testing skill from zebbern's claude-code-guide repository for authorised assessments of WordPress installs. It walks the agent through finding WordPress sites, enumerating the version, themes, plugins and users with WPScan, checking for known vulnerabilities and misconfigurations, testing weak passwords, and exploitation with tools such as Metasploit, ending in reports on each phase. It expects tools like WPScan, Nmap and Burp Suite or OWASP ZAP to be installed, typically on Kali Linux.

Capabilities

  • Enumerate WordPress versions, themes, plugins and users
  • Scan WordPress for known vulnerabilities with WPScan
  • Test for weak credentials
  • Document findings in a report