[Kim Jong-Illest]

Hello Folks.

I am looking for a way to target specific sites and find their vulnerabilities. The site I am interested in is ran on Wordpress with no noticeable plugins. I have been researching and looking at SQLi, XSS, etc and I do not know where to begin as most of these simply point you to arbitrary search on google for dorks whilst I am interested in finding a vulnerability on a specific site.

Thank you.

[xeonx]

You can either do it the manual way, or you can use software for pentesting. There are different tools like that out there, but many of them is quite expensive. Examples can be Netsparker, Nessus and Webcruiser. :)

-Al

[Kim Jong-Illest]

You can either do it the manual way, or you can use software for pentesting. There are different tools like that out there, but many of them is quite expensive. Examples can be Netsparker, Nessus and Webcruiser. :)

-Al

I would prefer to do it the manual way, best way to learn and I find people are far too dependent on tools. I'd rather do it myself and do it the 'honest' way.

[Ichi]

If your target is running the most updated version of Wordpress with no plugins, then good luck. Don't lose hope though you could always target other sites on the same box and gain access to their website that way. Try running WPScan, it can help enumerate vulnerable plugins and other info that could be used to gain a foothold on your target.

If you're lucky, the site will be using a vulnerable version of Wordpress or running a vulnerable plugin you may have overlooked.
I'm not responsible for what happens, I assume this is a legal pentest

[Kim Jong-Illest]

If your target is running the most updated version of Wordpress with no plugins, then good luck. Don't lose hope though you could always target other sites on the same box and gain access to their website that way. Try running WPScan, it can help enumerate vulnerable plugins and other info that could be used to gain a foothold on your target.

If you're lucky, the site will be using a vulnerable version of Wordpress or running a vulnerable plugin you may have overlooked.

*I'm not responsible for what happens, I assume this is a legal pentest*

I am not sure as this site is maintained by a 'less than average' administrator.

[HaxOr❤]

Is the site on a shared server? If so then this will do:
https://hackforums.net/showthread.php?tid=2832327