Comments on: wp-scanner online v1.2 released

By: Votre Wordpress est-il sûr?

Votre Wordpress est-il sûr? — Tue, 10 Jul 2007 10:33:22 +0000

[...] Son nom? wp-scanner online [...]

By: Votre Wordpress est-il sûr?

Votre Wordpress est-il sûr? — Thu, 05 Jul 2007 08:13:56 +0000

[...] Son nom? wp-scanner online [...]

By: David Kierznowski

David Kierznowski — Tue, 03 Jul 2007 19:36:06 +0000

fwolf, wp-2.0.10 is the latest stable release for 2.0.x trunk, wp-scanner just doesn’t identify this as yet. I think you’ll be just fine if you maintain the latest release within the 2.0.x trunk.

By: fwolf

fwolf — Fri, 29 Jun 2007 12:24:29 +0000

doesnt help me a lot. it suggests updating to the latest WP version, but I WONT do that, because I dont like some stuff WP 2.2+ does different from 2.0.x.

a better way to help me would be to point out possible security flaws in this version so I’m able to fix it myself.

cu, w0lf.

By: iKA’s Blog » WordPress Scanner

iKA’s Blog » WordPress Scanner — Tue, 26 Jun 2007 22:33:09 +0000

[...] BlogSecurity wurde ein neuer Scanner in Version 1.2b veröffentlicht. Es handelt sich dabei um ein [...]

By: David Kierznowski

David Kierznowski — Tue, 26 Jun 2007 13:25:36 +0000

Hendrik,

I based the concept around a paper I released on GNUCITIZEN titled generic XSS worms.

In short, we basically attack generic vulnerabilities in PHP’s environment variables (i.e. PHPSELF). We don’t do any URL manipulation.. we may in future releases, although this might be out of the scope of what we are trying to achieve.

Thanks for your feedback, its the first in over 300 blogs tested so far :)

By: Hendrik Lennarz

Hendrik Lennarz — Tue, 26 Jun 2007 13:12:51 +0000

Seams to be very cool staff.
I´m interested in the automatic test of XSS vulnerabilities? What do you test, only the search form or also URL manipulation?

Regards
H. Lennarz

By: Watching the World above the SKY

Watching the World above the SKY — Tue, 26 Jun 2007 07:31:29 +0000

WP Scanner online…

Um die Sicherheit seiner Wordpress Installation/Blogs zu testen, bietet BlogSecurity einen Online WP-Scanner an. Um keine böse Überraschungen zur erleben, nutzt diesen Scanner Leute und testet eure WP Blogs.
(Via: bueltge.de | SW-Guide | BlogSecurit…

By: Testez la sécurité de votre WordPress en ligne

Testez la sécurité de votre WordPress en ligne — Mon, 25 Jun 2007 22:09:31 +0000

[...] Un petit utilitaire a fait son apparition aujourd’hui. Il s’agit de wp-scanner online [...]

By: David Kierznowski

David Kierznowski — Mon, 25 Jun 2007 21:48:59 +0000

Chris, no problem, thanks for the feedback.