What's new
- Full rewrite from Python 2 / Flask 0.x to Python 3.10+ / Flask 3.x
- Mimics WordPress 6.4.3 with Twenty Twenty-Four theme
- Proper /wp-content/ paths (no /static/ leak)
- Plugin system with login capture, author enum, timthumb detection
- Python 3 fixes (bare except, e.message, to_json_log)
Still TODO (contributions welcome)
- Spoofed Apache server headers (done in Docker wrapper, not yet in standalone)
- User enumeration needs WordPress-style /author/ redirects
- Plugin fingerprints not yet detectable by WPScan
- See ITSupportAsia repo for Docker deployment with WPScan validation
Upgrade from v1.x
This is a breaking change from the original Wordpot. Full rewrite.