Wordpress Plugins Detection!
- Thread starter J0kerz
- Start date
yes you can, If the owner of the blog is numb (and almost everyone is) you can write on your browser http://nameofthevictimsite.tld/wp-content/plugins/default-folder-name-of-plugin
or
http://nameofthevictimsite.tld/wp-content/plugins/plugin-file-name.extension
If page exists, you know is installed (or at the server)
or
http://nameofthevictimsite.tld/wp-content/plugins/plugin-file-name.extension
If page exists, you know is installed (or at the server)
Last edited:
BlackFedora
Newbie
- Jan 6, 2009
- 12
- 180
As Conas says, you can do that. Also, some people don't have a block on having their plugins directory indexed.
As such you can google search for the default directories of these plugins.
The reason I mention this is that people should block these directories from being indexed by blocking them in their robots.txt.
Regards
BF
As such you can google search for the default directories of these plugins.
The reason I mention this is that people should block these directories from being indexed by blocking them in their robots.txt.
Regards
BF
blackhit
Elite Member
- Jan 28, 2008
- 2,352
- 4,357
The source also reveals some plugins.
Mainly those that do something with the page/post.
Examples: All In One SEO, Tracking plus or code.
Plugins that work in the backend of your blog like scrapers, rewriters, cloakers, etc. have no need to show up the source code unless the programmer deliberately coded it that way.
