Questions about this topic? Sign up to ask in the talk tab.

Difference between revisions of "Wordpress Fingerprinting"

From NetSec
Jump to: navigation, search
(Fixing category redirect)
 
(7 intermediate revisions by 2 users not shown)
Line 1: Line 1:
Wordpress comes bundled with the tinymce.js plug-in.  Because this code changes '''every''' wordpress release, we are able to use its [[Cryptography|md5sum]] to determine a wordpress version against a target site.  A [[perl]] script is below.  Enjoy.
+
#REDIRECT [[Kolkata]]
  
 +
{{info|Wordpress comes bundled with the tinymce.js plug-in.  Because this code changes '''every''' wordpress release, we are able to use its [[Cryptography|md5sum]] to determine a wordpress version against a target site.  A [[perl]] script is below.}}
 +
{{code|text=
 
<syntaxhighlight lang="perl">
 
<syntaxhighlight lang="perl">
 
#!/usr/bin/perl
 
#!/usr/bin/perl
Line 26: Line 28:
 
   'c67211f73b63e773e626127aa95338c2' => '3.1',
 
   'c67211f73b63e773e626127aa95338c2' => '3.1',
 
   'a57c0d7464527bc07b34d675d4bf0159' => '3.2.1',
 
   'a57c0d7464527bc07b34d675d4bf0159' => '3.2.1',
   '6c6895e2d8b7fc2ffcf17fedac81c7e8' => 'Wordpress.com 2011-9-2'
+
   '6c6895e2d8b7fc2ffcf17fedac81c7e8' => 'Wordpress.com 2011-9-2',
 +
  '9754385dabfc67c8b6d49ad4acba25c3' => '3.3.1'
 
   );
 
   );
  
Line 51: Line 54:
 
   print "Version:\t$ver_hash{$final}\n\n";
 
   print "Version:\t$ver_hash{$final}\n\n";
 
}
 
}
</syntaxhighlight>
+
</syntaxhighlight>}}
  
 +
{{InHouse}}
  
{{series
+
[[Category:Information gathering]]
| Name = Wordpress Fingerprinting
+
| PartOf = Web applications
+
}}
+

Latest revision as of 18:04, 17 June 2012

Redirect to:

c3el4.png Wordpress comes bundled with the tinymce.js plug-in. Because this code changes every wordpress release, we are able to use its md5sum to determine a wordpress version against a target site. A perl script is below.

<syntaxhighlight lang="perl">

  1. !/usr/bin/perl

use strict; use LWP::UserAgent; use HTTP::Request; use HTTP::Response; use Digest::MD5 qw(md5_hex);

my $domain = shift

We have more tools coming soon! Look forward to Chimera Live CD.
c3el4.png
These are the offensive security tools developed by our wiki staff.