Moham3dRiahi/XAttacker

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1757 stars · 468 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

XAttacker is a Perl-based command-line tool that scans websites for vulnerabilities and automatically exploits them. It detects the target's CMS (WordPress, Joomla, Drupal, PrestaShop, Lokomedia) and attempts known exploits against it, reporting exploit links to the user.

Use cases

• scan a website for known CMS vulnerabilities
• auto-exploit vulnerable WordPress plugins
• test a list of websites for exploitable CMS flaws
• detect which CMS a target site runs
• find exploitable Joomla or Drupal components
• generate plain-text reports of found vulnerabilities

When to choose

• you need a quick automated scanner plus exploiter for common CMS vulnerabilities in a lab or authorized pentest
• you want a lightweight Perl script with no complex dependencies
• you are testing many targets from a list at once

When to avoid

• you need a modern, maintained scanner with CVE database integration
• you require a license-compliant tool for commercial use (no license is provided)
• you need stealth, depth, or accuracy beyond known public CMS exploits
• you lack explicit authorization to test the target

Facets

cli-tool · maturity maintenance

vulnerability-scanning penetration-testing security security penetration-testing web-development cli windows auto-exploiter cms-vulnerabilities wordpress joomla drupal prestashop perl hacking-tool educational linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Moham3dRiahi/XAttacker")