WPBullet : A Static Code Analysis For WordPress & PHP

WPBullet is a static code analysis for WordPress Plugins/Themes (and PHP). Simply clone the repository, install requirements and run the script ;

git clone https://github.com/webarx-security/wpbullet wpbullet
cd wpbullet
pip install -r requirements.txt
python wpbullet.py

Available options:

–path (required) System path or download URL
Examples:
–path=”/path/to/plugin”
–path=”https://wordpress.org/plugins/example-plugin”
–path=”https://downloads.wordpress.org/plugin/example-plugin.1.5.zip”

–enabled (optional) Check only for given modules, ex. –enabled=”SQLInjection,CrossSiteScripting”
–disabled (optional) Don’t check for given modules, ex. –disabled=”SQLInjection,CrossSiteScripting”
–cleanup (optional) Automatically remove content of .temp folder after scanning remotely downloaded plugin

$ python wpbullet.py –path=”/var/www/wp-content/plugins/plugin-name”

Also Read – Top Paying Pay per Click Affiliate Programs for Beginners

Creating Modules

Creating a module is flexible and allows for override of the BaseClass methods for each module as well as creating their own methods

Each module in Modules directory is implementing properties and methods from core.modules.BaseClass, thus each module’s required parameter is BaseClass

Once created, module needs to be imported in modules/__init__.py. Module and class name must be consistent in order to module to be loaded.

If you are opening pull request to add new module, please provide unit tests for your module as well.

Module Template

Modules/ExampleVulnerability.py

from core.modules import BaseClass

class ExampleVulnerability(object):

# Vulnerability name name = “Cross-site Scripting”
# Vulnerability severity severity = “Low-Medium”
# Functions causing vulnerability functions = [ “print” “echo” ]
# Functions/regex that prevent exploitation blacklist = [ “htmlspecialchars”, “esc_attr” ]

Overriding regex match pattern

Regex pattern is being generated in core.modules.BaseClass.build_pattern and therefore can be overwritten in each module class.

Modules/ExampleVulnerability.py

import copy…

Build dynamic regex pattern to locate vulnerabilities in given content

def build_pattern(self, content, file):
user_input = copy.deepcopy(self.user_input)

variables = self.get_input_variables(self, content)

if variables:
user_input.extend(variables)

if self.blacklist:
blacklist_pattern = r”(?!(\s?)+(.*(” + ‘|’.join(self.blacklist) + “)))”

else:
blacklist_pattern = “”

self.functions = [self.functions_prefix + x for x in self.functions]

pattern = r”((” + ‘|’.join(self.functions) + “)\s{0,}\(?\s{0,1}” + blacklist_pattern + “.*(” + ‘|’.join(user_input) + “).*)” return pattern

Testing

Running unit tests:

$ python3 -m unittest

R K

Recent Posts

How to Install Docker on Ubuntu (Step-by-Step Guide)

Docker is a powerful open-source containerization platform that allows developers to build, test, and deploy…

5 days ago

Uninstall Docker on Ubuntu

Docker is one of the most widely used containerization platforms. But there may come a…

5 days ago

Admin Panel Dorks : A Complete List of Google Dorks

Introduction Google Dorking is a technique where advanced search operators are used to uncover information…

6 days ago

Log Analysis Fundamentals

Introduction In cybersecurity and IT operations, logging fundamentals form the backbone of monitoring, forensics, and…

1 week ago

Networking Devices 101: Understanding Routers, Switches, Hubs, and More

What is Networking? Networking brings together devices like computers, servers, routers, and switches so they…

1 week ago

Sock Puppets in OSINT: How to Build and Use Research Accounts

Introduction In the world of Open Source Intelligence (OSINT), anonymity and operational security (OPSEC) are…

1 week ago