philipjohn/exploit-scanner-hashes

Hashes files for the WordPress Exploit Scanner plugin

Exploit Scanner Hashes

Hashes files for the WordPress Exploit Scanner plugin

Here lies a central repository for the hashses needed to use the excellent (but seemingly abandoned) Exploit Scanner plugin. All contributions welcome!

Life Points

Many users have contributed to this repository with hashes so +10 life points go to;

• mattyrob
• MadGuyyy

Hashes Generator

If you'd like to contribute, you can use the hashes-generator.php included. Kudos to mattyrob (more life points for you!) for creating it.

As well as using the instructions below, you can now use the generator on the command line, like so; $ php hashes-generator.php > hashes-3.9.php

Instructions

1. Download the zipped version of WordPress and save it to the same location as the hashes-generator.php script
2. Make sure the zip is called 'latest.zip'
3. Run the hashes-generator.php script in a browser
4. Copy the resultant code and paste into a new file
5. Save that file as hashes-x.php where x is the WordPress version number. Examples:
   • WordPress 3.7.1 = hashes-3.7.1.php
   • WordPress 3.8 = hashes-3.8.php
   • WordPress 3.8.1 = hashes-3.8.1.php

exploit-scanner-hashes's Issues

Where to save hashes?

Where should I save hashes file?

Will Exploit Scanner work with RC and Beta releases?

Someone needs to try it!

(I would, but I'm about to go to the pub...)

Adapt generator for CLI

It'd be lovely to get the hashes generator working on the command line for easier generation.

Bonuses including being able to specify the zip file and output file.

WP.org API

Oh noooo!
Please consider using the official API-s. Checksums API is available from version 3.6 as a JSON object.
https://api.wordpress.org/core/checksums/1.0/?version=3.6&locale=en_US

Or:

// Loop through
document('https://wordpress.org/download/release-archive/').querySelectorAll('#pagebody .widefat')[0].find('*.zip')
check('*.md5')
remove('wp-content/*')
convert_to_php()