Wp_Hunter – Static Analysis Of WordPress Plugins

Static analysis to search for vulnerabilities in WordPress plugins.

 __      ____________  ___ ___               __                
/      /  ______   /   |    __ __  _____/  |_  ___________ 
   //   /|     ___/    ~      |  /       __/ __ _  __ 
         / |    |       Y    /  |  /   |    |   ___/|  | /
  __/  /  |____|_______|_  /|____/|___|  /__|  ___  >__|   
       /       /_____/     /            /          /       

|__ Author: @JosueEncinar


[*] Starting the process
[*] Total plugins 87509
[*] Starting the analisys

How to add a module

The tool has been uploaded without regex, for the search you need to add your regular expressions. The key to reduce false positives is here, go for it.

To know how to do this, check out modules/php/test.py and modules/js/test.py. It is not complicated.

How to use

To use the tool, follow the instructions below:

git clone https://github.com/Josue87/wp_hunter.git
cd wp_hunter
pip3 install -r requirements.txt
python3 wp_hunter.py

The tests have been carried out with the Linux operating system