skills.rest
EntroVyx
EntroVyxCOMMUNITY
Explore all skills by this author →
GitHub

wp-mass-recon

Automate WordPress vulnerability identification across multiple domains.

3|1|Updated Jul 2, 2026
Search Tags:#automation#security#vulnerability#reconnaissance#wordpress#mass-scan
One-click install
npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill wp-mass-recon-entrovyx
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: wp-mass-recon
Source: https://github.com/EntroVyx/hermes-agent-offsec/tree/main/skills/offsec/recon/wp-mass-recon
Command: npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill wp-mass-recon-entrovyx

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires curl, nmap, python3, masscan, subfinder, httpx, nuclei, and includes scripts (resource) components.

What problem does it solve?

This skill automates the time-consuming process of identifying WordPress-based attack surfaces across large lists of domains, allowing security researchers to triage targets efficiently.

Core Features & Use Cases

  • Vulnerability Mapping: Detects WordPress installations, exposed user enumeration endpoints, CORS misconfigurations, and open XMLRPC interfaces.
  • Sensitive Data Discovery: Scans for exposed configuration files, backup databases, and environment files that could lead to full system compromise.
  • Use Case: When performing sector-wide reconnaissance, use this skill to quickly identify which of the hundreds of discovered domains are running vulnerable WordPress versions or have misconfigured security settings.

Quick Start

Run the wp-mass-recon skill by providing a text file containing your target domains to the scanner script to initiate the parallel vulnerability detection pipeline.

Frequently Asked Questions about wp-mass-recon

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate WordPress vulnerability scanning across multiple domains?▼

To automate WordPress vulnerability scanning across multiple domains, provide a text file containing your target domains to the scanner script to initiate a parallelized vulnerability detection pipeline.

What specific WordPress security misconfigurations can I detect during mass reconnaissance?▼

During mass reconnaissance, you can detect WordPress-specific vulnerabilities including user enumeration endpoints, CORS misconfigurations, open XMLRPC interfaces, and exposed sensitive configuration files.

Can I use curl and python3 to detect exposed backup databases in WordPress installations?▼

Yes, you can use curl and python3 to detect exposed backup databases and environment files in WordPress installations by executing parallelized HTTP requests and content verification.

Do I need to install subfinder and masscan to run large-scale WordPress security triage?▼

Yes, large-scale WordPress security triage requires installing subfinder, masscan, httpx, nuclei, nmap, curl, and python3 to execute parallelized HTTP requests and network reconnaissance.

What is the best way to identify vulnerable WordPress versions during sector-wide reconnaissance?▼

The best way to identify vulnerable WordPress versions during sector-wide reconnaissance is using an automated batch scanner to map installations and exposed endpoints across hundreds of discovered domains.

Why does mass WordPress reconnaissance sometimes fail to detect sensitive file exposure?▼

Mass WordPress reconnaissance might fail to detect sensitive file exposure if target domains block parallelized HTTP requests or if standard Linux networking utilities encounter strict firewall restrictions.

Related Skills

Explore More Software Engineering Skills→
EntroVyxEntroVyx
3

phpinfo-to-rce

Analyze exposed phpinfo files to identify remote code execution vectors.

Community
Advanced
florianbuetowflorianbuetow
12

report

Generate security reports from scanner findings in Markdown, HTML, JSON, and SARIF formats.

Community
Advanced
EntroVyxEntroVyx
3

wordpress-plugin-hunt

Identify WordPress plugins and versions via REST API, readme.txt, and HTML fingerprinting.

Community
Advanced
EntroVyxEntroVyx
3

recon-plumbing

Automate reconnaissance of WordPress plumbing sites for PII exposure and misconfigurations.

Community
Intermediate