wordpress-full-compromise

What problem does it solve?

This Skill eliminates the guesswork in selecting the right exploitation path for a fully reconnoitered high-value WordPress target, ensuring penetration testers can quickly choose the highest-impact, lowest-difficulty attack chain to achieve verifiable proof of compromise for client reporting.

Core Features & Use Cases

• 7 Pre-Vetted Kill Chains: Covers the most common WordPress vulnerability profiles including PHPInfo-based file upload, XMLRPC abuse, CORS phishing, unauthenticated plugin CVEs, brute force credential escalation, exposed MySQL databases, and staging site takeover.
• Field-Verified Procedures: Includes real-world tested steps, edge case handling for subscriber role restrictions, and validation checks to avoid wasted effort on blocked attack paths.
• Bundled Reference Materials: Includes guides for Mailinator-based password reset workflows and subscriber escalation pitfalls to handle complex target configurations like subdirectory WordPress installs.
• Use Case: A penetration tester who has completed full recon on a WordPress target and confirmed findings like open XMLRPC, CORS misconfigurations, or vulnerable plugins can use this Skill to automatically select the optimal chain, execute it step-by-step, and verify success for reporting.

Quick Start

Use the wordpress-full-compromise skill to select and execute the optimal exploitation chain for your fully reconnoitered WordPress target to achieve remote code execution, account takeover, or data exfiltration.