[wordpress插件] Detectify for WP检测WP

wordpress 插件 文章 2020-04-16 00:40 589 0 全屏看文

AI助手支持GPT4.0

评分
80
描述

Detectify analyze the level of security of your website — Simple to use and understand.

检测分析您网站的安全级别-易于使用和理解。

Detectify is cloud based web application security scanner that analyses and reports the security status of your website.

Detectify是基于云的Web应用程序安全扫描程序,可分析和报告您网站的安全状态。

Basically the solution simulates a hacker attack on your site and let you know what security flaws your website have.

基本上,该解决方案模拟了您网站上的黑客攻击,并让您知道您的网站存在哪些安全漏洞。

After the scan you are presented with an easy to understand report, listing the vulnerabilities on the site and probable consequences of them.

扫描后,将向您提供一个易于理解的报告,列出站点上的漏洞及其可能带来的后果。

All you need to do is create an account on the Detectify website and install the meta code in this plug in and your are

您需要做的就是在检测网站上创建一个帐户,然后在此插件中安装元代码,您可以

ready to go!

准备出发!

Detectify does extensive checks on all user data supplied to your application – everything ranging from GET, POST, HTML Forms, Cookies and Headers.

Detectify对提供给应用程序的所有用户数据进行全面检查-包括GET,POST,HTML表单,Cookie和标题在内的所有数据。

Detectify probes for the following set of exploits:

为以下漏洞利用程序探测探针:

    • Local File Inclusion (LFI)
    • 本地文件包含(LFI)

    • Remote File Inclusion (RFI)
    • 远程文件包含(RFI)

    • Reflected Cross Site Scripting flaws (XSS)
    • 反映的跨站点脚本缺陷(XSS)

    • DOM-based Cross Site Scripting flaws (DOM XSS)
    • 基于DOM的跨站点脚本漏洞(DOM XSS)

    • Cross Frame Scripting flaws (XFS)
    • 跨框架脚本缺陷(XFS)

    • Error-Based SQL Injection in the following database systems:
    • 以下数据库系统中的基于错误的SQL注入:

    • MySQL, PostgreSQL, Microsoft SQL Server, Microsoft Access, MongoDB, CouchDB, SQLite, Firebird, Oracle SQL, Informix, IBM DB2, Sybase, MaxDB and Ingres.
    • MySQL,PostgreSQL,Microsoft SQL Server,Microsoft Access,MongoDB,CouchDB,SQLite,Firebird,Oracle SQL,Informix,IBM DB2,Sybase,MaxDB和Ingres。

    • Blind SQL Injection flaws in: MySQL, PostgreSQL and Microsoft SQL Server.
    • 盲SQL注入漏洞存在于:MySQL,PostgreSQL和Microsoft SQL Server。

    • Open Redirect bugs
    • 打开重定向错误

    • Query-based Cross Site Scripting
    • 基于查询的跨站点脚本

    • Remote Command Execution
    • 远程命令执行

    • Remote Code Execution
    • 远程执行代码

    • Evaluates CGI test-scripts
    • 评估CGI测试脚本

    • HTTP TRACE and TRACK Cross Site Scripting
    • HTTP TRACE和TRACK跨站点脚本编写

    • Cross Site Agent Scripting (XSA)
    • 跨站点代理脚本(XSA)

    • Cross Site Referrer Scripting (XSR)
    • 跨站点引用脚本(XSR)

    • PHP NULL Session path disclosures
    • PHP NULL会话路径公开

    • PHP Array path disclosures
    • PHP数组路径公开

    A brief Markdown Example

    一个简短的Markdown示例

      1. Sign up for Detectify
      2. 报名参加Detectify

      3. Add the meta code to your site
      4. 将元代码添加到您的网站

      5. Scan your site to detect any security vulnerabilities
      6. 扫描您的网站以检测任何安全漏洞

安装步骤

    1. Upload the folder “detectify-for-wp” to the /wp-content/plugins/ directory
    2. 将文件夹“ detectify-for-wp”上传到/ wp-content / plugins /目录

    3. Activate the plugin through the ‘Plugins’ menu in WordPress
    4. 通过WordPress中的“插件”菜单激活插件

    5. Add the metacode from the Detectify signup
    6. 检测注册 中添加元代码

下载地址
https://downloads.wordpress.org/plugin/detectify-for-wp.zip
-EOF-

AI助手支持GPT4.0