Wordpress Test Site
-
I want to do a turorial on scanning a wordpress site for vulns. Does anyone have one I can scan and post the results? I only have production style sites at the moment.
-
Like a blank, vanilla site that isn't in use yet?
-
@scottalanmiller said in Wordpress Test Site:
Like a blank, vanilla site that isn't in use yet?
It would be nice if there was template and at least some content to simulate an actual site.
-
Are you looking for something that would resemble a typical production deployment (ie: with all the security features and add-ons enabled like Wordfence) or do you want something that is left open and purposefully vulnerable for your testing purposes?
-
I have a couple drupal ones I could clone. But that prob doesn't help with finding vulnerabilities
-
@IRJ said in Wordpress Test Site:
I want to do a turorial on scanning a wordpress site for vulns. Does anyone have one I can scan and post the results? I only have production style sites at the moment.
Here you go, you can scan one of my sites, it is about to be decomissioned. It has content and plugins, it is suppose to be a members only site. Fully updated, Wordpress 4.8 and Wordfence installed. Would really like to see the results of your scan.
-
My blog has some content. I have barely any time lately to finish some things on it, but it's fine if you run scans against it. I have some security on it, so if you get blocked let me know and ill whitelist you.
-
I've got some stuff to catch up on. Thanks for updating this thread, I probably wont get a chance to do this till the end of the week.