tuhinshubhra / wpintel

Chrome extension designed for WordPress Vulnerability Scanning and information gathering!

Features • Installation • Use • License • Download

Video Demonstration

Features

• Detect WordPress version
• Detect version vulnerabilities
• Enumerate Users
• Detect Themes
• Detect Plugins
• Find full path disclosure
• Check user registration status

Installation

Google chrome users can download WPintel from Chrome Web Store

How to use?

Understanding the icon colors

Using WPintel is pretty straight forward. Once you have added WPintel you can check whether a site is using WordPress or not by the color of the WPintel icon.

Scan Menu

Once the color of the icon is green you can click on it and you will be provided with the following option screen, click on the desired scan and it'll be done.

Change Target

You can change the target website from WPintel extension itself, just change the website address to target website and click on Set Target

License

WPintel is licensed under GNU General Public License v3.0.

Copyright (c) 2019 Tuhinshubhra

wpintel's Issues

Issue With Version & Vulnerabilities

This is a great plugin and it would be awesome if the interface and functionality is updated. The Version & Vulnerability section of the application does not work correctly anymore. This was a game changer for my business as I could use this application to show new clients the Vulnerabilities in real time on their WordPress website.

If the author could spend some time in updating the functionality and bring the plugin back to life would be grateful.

Overall an excellent plugin for agencies and pentesters.

Plugin doesn't detect WP version

Latest version of extension doesn't detect WP version.

outdated api

function check_vuln(version){
    show_scanning('../images/crawl_vuln.svg', 'Checking for Version Vulnerabilities...', '4');
    var vuln_ver = version.split(".").join("");
    var vuln_url = 'https://wpvulndb.com/api/v2/wordpresses/' + vuln_ver;

they switched to v3 with apikey. maybe you want to update your script.

pls update! :(

:(

porting scan.js to website

thought of porting the scan,js to a scanner for including in websites.
can u help ?