WordPress Penetration Testing
Warn
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill provides functional code for a PHP reverse shell utilizing '/bin/bash' and '/dev/tcp' redirects, intended for injection into WordPress theme files such as '404.php'.
- [DYNAMIC_EXECUTION]: Instructions are provided to generate a malicious ZIP plugin containing a webshell that uses the 'system()' function to execute arbitrary commands passed via URL parameters.
- [REMOTE_CODE_EXECUTION]: The workflow guides the agent through the use of the Metasploit Framework ('msfconsole') to exploit WordPress installations, specifically citing modules like 'wp_admin_shell_upload' to gain remote shells.
- [COMMAND_EXECUTION]: The skill includes numerous shell commands for target discovery and vulnerability scanning using tools like WPScan, Nmap, and cURL.
- [INDIRECT_PROMPT_INJECTION]: The skill represents a vulnerability surface as it processes untrusted data from target websites during enumeration and scanning.
- Ingestion points: Target URLs ('target.com') and their corresponding HTTP responses, feeds, and directory listings.
- Boundary markers: Absent; there are no instructions to the agent to sanitize or ignore instructions potentially embedded in the target site's content.
- Capability inventory: The agent has access to network tools ('curl', 'wpscan'), file manipulation ('zip', 'cat'), and exploitation frameworks ('msfconsole').
- Sanitization: No sanitization or validation of the data retrieved from external target URLs is performed before it is presented to the agent context.
Audit Metadata