Comments on: WPSeku – A Vulnerability Scanner to Find Security Issues in WordPress

By: Aaron Kili

Aaron Kili — Mon, 12 Mar 2018 06:19:39 +0000

In reply to Milad.

@Malid

Welcome, we are glad that your found it useful. Thanks for the feedback.

By: Milad

Milad — Sun, 11 Mar 2018 19:02:49 +0000

thanks for this wonderful article, very helpful.

By: Aaron Kili

Aaron Kili — Mon, 08 May 2017 09:23:25 +0000

In reply to Bruce Ferrell.

@Bruce

Did you specify a valid URL? For example:
./wpseku -u https://bruceferrel.com
And for the -p option, you need to specify the location of plugins in the URL as shown in the article.

By: Aaron Kili

Aaron Kili — Mon, 08 May 2017 09:19:44 +0000

In reply to jsda.

@jsda

Sure, but for demonstration purposes, we only blurred the domain name(for security reasons).

By: Bruce Ferrell

Bruce Ferrell — Sat, 06 May 2017 19:25:30 +0000

$ ./wpseku -u  -p s returns:

]+[ Searching sql vulns…
Traceback (most recent call last):
File “./wpseku.py”, line 805, in
main.WPSekuMain()
File “./wpseku.py”, line 776, in WPSekuMain
WPAttack(self.url,self.path,self.query,self.headers).sqlattack()
File “./wpseku.py”, line 553, in sqlattack
params = dict([part.split(‘=’) for part in u.query.split(‘&’)])
ValueError: dictionary update sequence element #0 has length 1; 2 is required