Web Hacking: WordPress Penetration Testing and Security

Did you know that more than 30% of websites on internet are based on WordPress and more than 42% of online shopping sites are using WordPress as E-commerce solution.

WordPress is robust and powerful open source website creation tool. In this course we are going to see the vulnerabilities in WordPress based sites We will start this course by looking into the core architecture of WordPress like How WordPress works? How themes work in WordPress? What are plugins and how to create plugins? Then will looking into information gathering phase of WordPress. We will see how to do version detection and how to gather user information. We will also try to find vulnerabilities in WordPress themes and plugins.

After that we will see how to exploit these vulnerabilities and gain access to WordPress site. We will also try and gain access to complete server using WordPress site. Then Will see how to write malware code and exploit WordPress site on different levels. After looking into WordPress vulnerabilities we will see how to secure WordPress sites. We will provide you step by step information to secure your new WordPress site as well as existing WordPress sites.

Requirements

• Basic Ethical Hacking Knowledge
• Basic knowledge of websites and web applications
• Knowledge of PHP Language

Who this course is for:

• Web developers interested in WordPress Security
• Ethical Hackers who wants to learn about WordPress Security
• People who wants to Secure their own or company WordPress site

Instructors

Arsalan Saleem
Software Developer and Security Expert

I’m a Security Expert and Software Developer with 7+ years experience. I love to work on innovative offensive security ideas. I have developed many web application and mobile applications. I have also worked on security of many industrial software’s. Currently I’m working on exploit research and use of deep learning with micro controllers in Penetration Testing.