• XSS.stack #1 – первый литературный журнал от юзеров форума

Mass WordPress Scanning Method

Int4C

floppy-диск
Пользователь
Регистрация
25.11.2021
Сообщения
3
Реакции
0
Hello all,

I am looking for an efficient way to find large amount of WordPress sites. I am thinking about the following method:

1. Get list of domains from https://dnpedia.com/tlds/daily.php and https://whoisds.com
2. With bash script, see if domain resolves to IP, if no go to next domain
3. If resolve, try to get /wp-login.php . If curl returns code 200, save the domain to SQLite db.

Is there more efficient way to do this? Instead of bash, use Python? Or a better way to get many domains. Is there already a tool or script to do the same? I do not need vulnerability scan with wpscan at this stage.
 
I don't want to pay for Shodan API, especially since I want to do mass scan. I ended up using the metasploit Wordpress scanner
Glad you found an alternative. Take note that Shodan usually have deals on Black Friday / Cyber Monday. You may get it cheap :)
 


Напишите ответ...
  • Вставить:
Прикрепить файлы
Верх