Use XSHM to identify WordPress websites running on internal networks and behind firewalls and also launch a login bruteforce attack on them.

PyShell is new tool made for bug bounty, ethical hacking, penetration testers or red-teamers. This tool helps you to obtain a shell-like interface on a web server to be remotely accessed. Unlike other webshells, the main goal of the tool is to use as litt... (more…)

List of WordPress REST API applications, for WordPress or for WordPress.com. REST API apps can be written in javascript, php, ... (more…)

Ever since you created a WordPress site, you may have wondered how could you handle customer or viewer activity on that site. (more…)

Inspired by Erik Bernhardsson post The half-life of code & the ship of Theseus, here are the results of running Erik’s scripts against the WordPress git repo. Cohorts Code decay over time…