wordpress_vuln_checker/README.md

28 lines
848 B
Markdown
Raw Normal View History

2022-02-22 22:49:50 +00:00
# docker_wordpress_scanner
2022-02-22 19:22:34 -06:00
This is a shell script that calls out to the wpscan database of vulnerabilities and gives you the ability to query for vulnerable themes, plugins, and wordpress versions.
2022-02-22 22:49:50 +00:00
2022-02-22 19:17:21 -06:00
### Pre-requisites:
2022-02-22 19:21:19 -06:00
Signup for an account with a free API key at https://wpscan.com/. They give you 25 api calls per day. If you need more API calls then you can upgrade your account plan. See their pricing page for more info.
### Usage:
Create a .env file with the following envar
```
WPSCANDB_API_TOKEN=
```
this token is used for wpscan db api calls. To use the container:
```
2022-02-22 19:12:15 -06:00
# BUILD IT
docker build -t wp_checker .
# PLUGIN
docker run --env-file .env wp_checker --plugin jetpack
# THEME
docker run --env-file .env wp_checker --theme zerif-lite
# VERSION - Example checks version 4.9.4
docker run --env-file .env wp_checker --all 494
```