Wordpress Penetration Testing
This skill should be used when the user asks to "pentest WordPress sites", "scan WordPress for vu…
by dokhacgiakhoa · MIT
The skill
This skill should be used when the user asks to "pentest WordPress sites", "scan WordPress for vulnerabilities", "enumerate WordPress users, themes, or plugins", "exploit WordPress vulnerabilities", or "use WPScan". It provides comprehensive WordPress security assessment methodologies.
WordPress Penetration Testing
Purpose
Conduct comprehensive security assessments of WordPress installations including enumeration of users, themes, and plugins, vulnerability scanning, credential attacks, and exploitation techniques. WordPress powers approximately 35% of websites, making it a critical target for security testing.
Prerequisites
🧠 Knowledge Modules (Fractal Skills)
1. Required Tools
2. Required Knowledge
3. Phase 1: WordPress Discovery
4. Phase 2: Basic WPScan Enumeration
5. Phase 3: WordPress Version Detection
6. Phase 4: Theme Enumeration
7. Phase 5: Plugin Enumeration
8. Phase 6: User Enumeration
9. Phase 7: Comprehensive Enumeration
10. Phase 8: Password Attacks
11. Phase 9: Vulnerability Exploitation
12. Phase 10: Advanced Techniques
13. WPScan Enumeration Flags
14. Common WordPress Paths
15. WPScan Command Examples
16. Legal Considerations
17. Technical Limitations
18. Detection Evasion
19. WPScan Shows No Vulnerabilities
20. Brute-Force Blocked
21. Cannot Access Admin Panel
Use this skill
Connect your agent to the Skill Store MCP server and ask for it by ref: dokhacgiakhoa/wordpress-penetration-testing-76985032399.
Details
- Publisher
- dokhacgiakhoa
- Category
- Security › Application security
- License
- MIT
- Updated
- 2026-06-11
References
More from dokhacgiakhoa
- 3D Web Experience Expert in building 3D experiences for the web - Three.js, React Three Fiber, Spline, WebGL, and i…
- Ab Test Setup Structured guide for setting up A/B tests with mandatory gates for hypothesis, metrics, and execu…
- Accessibility Compliance Accessibility Audit You are an accessibility expert specializing in WCAG compliance, inclusive design, and assistive…
- Active Directory Attacks This skill should be used when the user asks to "attack Active Directory", "exploit AD", "Kerbero…