Batch scan domains for WordPress vulnerabilities and generate prioritized reports.
npx skills add https://github.com/uphiago/recon-skills --skill wp-mass-recon
Please help me install this Agent Skill. Skill: wp-mass-recon Source: https://github.com/uphiago/recon-skills/tree/main/recon/wp-mass-recon Command: npx skills add https://github.com/uphiago/recon-skills --skill wp-mass-recon
Manually scanning large lists of domains for WordPress-specific vulnerabilities is extremely time-consuming and prone to missed findings, especially when performing sector-wide recon or triaging targets from subdomain enumeration tools.
Use the wp-mass-recon skill to scan a list of target domains stored at /root/output/targets.txt and generate a prioritized report of confirmed WordPress vulnerabilities and exposed sensitive files.
High-intent search queries and answers about installing and using this skill.
Batch scanning WordPress vulnerabilities across many domains requires a tool like wp-mass-recon to run parallel checks for user enumeration, CORS reflection, XMLRPC exposure, open registration, and sensitive file leaks. It uses 20 parallel workers for high throughput.
During WordPress mass recon, you should look for REST API user enumeration, CORS credential reflection, XMLRPC exposure, open registration, and sensitive file leaks. These vulnerabilities are commonly triaged to map sector-wide exposure.
Yes, you can triage target lists from subdomain enumeration tools like subfinder or crt.sh. The tool performs live host discovery and WordPress detection to maximize vulnerability discovery throughput for large target sets.
WordPress mass recon includes built-in workarounds for common WAF and rate limiting blocks. It also applies false positive filters specifically designed for SPA catch-all responses to ensure accurate vulnerability scoring.
Running WordPress vulnerability scanning at scale requires curl, httpx, and python3 installed in your environment. These dependencies facilitate live host discovery, WordPress detection, and parallel vulnerability checks across target lists.
False positives on SPA sites occur because catch-all responses mimic vulnerable endpoints. WordPress mass recon applies built-in false positive filters to detect and exclude these SPA catch-all responses during vulnerability scoring.
jayjpatel9717Map attack surfaces via DNS enumeration, port scanning, and vulnerability assessment.
zebbernAutomate WordPress security testing with enumeration, vulnerability assessment, and exploitation workflows.
ArianHobson333Automate bug bounty hunting with recon, scanning, and reporting.
gongzeqCrawls authorized web targets to generate deduplicated candidate URLs for vulnerability scanning.
