Merge pull request #880 from projectdiscovery/wp

adding wp template and workflow

vulnerabilities/wordpress/wordpress-xmlrpc-listmethods.yaml

@@ -0,0 +1,26 @@
+id: wordpress-xmlrpc-listmethods
+info:
+  name: Wordpress XML-RPC List System Methods
+  author: 0ut0fb4nd
+  severity: info
+  tags: wordpress
+
+requests:
+  - method: POST
+    path:
+      - "{{BaseURL}}/xmlrpc.php"
+
+    body: "<?xml version=\"1.0\" encoding=\"utf-8\"?><methodCall><methodName>system.listMethods</methodName><params></params></methodCall>"
+
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+      - type: word
+        words:
+          - "system.multicall"
+          - "system.listMethods"
+          - "demo.sayHello"
+        condition: and
+        part: body

workflows/wordpress-workflow.yaml

@@ -35,4 +35,5 @@ workflows:
           - template: vulnerabilities/wordpress/wordpress-wpcourses-info-disclosure.yaml
           - template: vulnerabilities/wordpress/wp-enabled-registration.yaml
           - template: vulnerabilities/wordpress/wp-xmlrpc.yaml
+          - template: vulnerabilities/wordpress/wordpress-xmlrpc-listmethods.yaml
           - template: vulnerabilities/wordpress-zebra-form-xss.yaml