WP Mass Recon Skill

Batch WordPress vulnerability detection pipeline for scanning dozens to hundreds of domains in parallel. Detects WordPress presence, REST API user enumeration, CORS credential reflection, XMLRPC exposure, open registration, and sensitive file leaks in a single pass. Proven on 600+ US company domains across 28 sectors.

When to Use

• You have an authorized target list from a bug bounty program, pentest engagement, or red team with signed RoE.
• Sector-wide recon within authorized scope.
• After subfinder/crt.sh produces a target list and you need to triage.
• You want maximum findings per minute with a parallelizable pipeline.

Prerequisites

• curl, httpx, python3, and jq.
• A target list in domain|company|sector format, one target per line.
• A writable OUTPUT_DIR; examples default to ./output.
• The bundled scanner or the inline commands below.

How to Run