evilkitteh

<p>Scans plugin files for matches to <strong>custom regex patterns</strong>. Useful for checking whether your plugins don’t do anything shady.</p>
<h4>Default search patterns match the following:</h4>
<ul>
<li>Exploitable PHP and JS functions and HTML tags</li>
<li>Code (de)obfuscation</li>
<li>Remote requests (including pingbacks, trackbacks and mail sending)</li>
<li>Filesystem modification</li>
<li>Direct database queries</li>
<li>User creation</li>
<li>Inline and enqueued scripts</li>
<li>Unicode and ASCII character literals, integer literals</li>
<li>URL addresses</li>
<li>Strings containing “swf”</li>
<li>Google Analytics and AdSense IDs</li>
</ul>


Code Analyzer

Simple search tool using regular expressions to find unwanted code in plugins.

miniOrange

<p>You will get notified as soon as the scanning is completed. You can scan your site once a day and receive detailed report with POC.</p>
<h4>This plugin actively Scans your wordpress website for top 10 OWASP Vulnerabilities.</h4>
<ul>
<li><strong>Injection.</strong> Injection flaws, such as SQL, NoSQL, OS, and LDAP injection</li>
<li><strong>Broken Authentication</strong></li>
<li><strong>Cross-Site Scripting XSS</strong></li>
<li><strong>Security Misconfiguration</strong></li>
<li><strong>Checks for WordPress API Endpoints if Accessible</strong></li>
</ul>
<h4>FREE Plugin Feature</h4>
<ul>
<li><strong>Penetration Testing Tool:</strong> Scans your wordpress website for top 10 OWASP Vulnerabilities actively.</li>
<li><strong>Email Notification:</strong> After a PenTest is completed, We send a report over email.</li>
<li><strong>Scan your site Once a day:</strong>  You can perform Pen Test on your site once every 24 hours</li>
</ul>
<p>miniOrange uses login.xecurify.com if the user chooses to register and upgrade to premium. If the user does not want to register then he can continue using the free plugin.<br />
(Link to the privacy policy – https://www.miniorange.com/privacy-policy.pdf)</p>
<p>Customized solutions and Active support are available. Email us at info@xecurify.com or call us at +1 9786589387.</p>


miniOrange Penetration Testing Tool

Actively Scans your wordpress website for top 10 OWASP Vulnerabilities like Injection, Broken Authentication , Cross-Site Scripting XSS, Security Misc …

Code Analyzer vs miniOrange Penetration Testing Tool