vulnerabilities/wordpress/wp-xmlrpc.yaml

id: wordpress-xmlrpc-file

info:
  name: WordPress xmlrpc
  author: udit_thakkur
  severity: info
  tags: wordpress

requests:
  - method: GET
    path:
      - "{{BaseURL}}/xmlrpc.php"
    matchers:
      - type: word
        words:
          - 'XML-RPC server accepts POST requests only.'
updating template details 2020-06-27 12:25:14 +00:00			`id: wordpress-xmlrpc-file`
Detect wordpress xmlrpc (sometimes get ssrf) Provides a way to detect the wordpress xmlrpc endpoint that can help and leads to possible ssrf sometimes. I am not sure if it is worth to add. But I have got a few good findings using this. Let me know if I'm doing it right, You guys are doing great work, Love this project. Kudos..! Trying to contribute a little. 2020-06-27 17:14:59 +05:30
			`info:`
			`name: WordPress xmlrpc`
			`author: udit_thakkur`
uniform severity update 2020-08-04 03:22:00 +05:30			`severity: info`
Added tags to wordpress templates. 2021-02-05 14:53:55 +05:30			`tags: wordpress`
Detect wordpress xmlrpc (sometimes get ssrf) Provides a way to detect the wordpress xmlrpc endpoint that can help and leads to possible ssrf sometimes. I am not sure if it is worth to add. But I have got a few good findings using this. Let me know if I'm doing it right, You guys are doing great work, Love this project. Kudos..! Trying to contribute a little. 2020-06-27 17:14:59 +05:30
			`requests:`
			`- method: GET`
			`path:`
			`- "{{BaseURL}}/xmlrpc.php"`
			`matchers:`
moving files 2021-01-21 23:11:15 +05:30			`- type: word`
			`words:`
			`- 'XML-RPC server accepts POST requests only.'`