wordpress-rest-enum.py

# wordpress-rest-enum.py

import requests
import json
import argparse
import logging
import urllib3


urllib3.disable_warnings()

# Argument parsing
parser = argparse.ArgumentParser()
parser.add_argument("-w", "--website", help="Website to check.", action='store', type=str, required=True)
parser.add_argument("--log-level", default=logging.INFO, type=lambda x: getattr(logging, x), help="Configure the logging level.")
parser.add_argument("-m", "--media", help="Fetch media", action=argparse.BooleanOptionalAction, required=False)
parser.add_argument("-po", "--posts", help="Fetch posts", action=argparse.BooleanOptionalAction, required=False)
parser.add_argument("-pa", "--pages", help="Fetch pages", action=argparse.BooleanOptionalAction, required=False)
parser.add_argument("-u", "--users", help="Fetch users", action=argparse.BooleanOptionalAction, required=False)
parser.add_argument("-c", "--comments", help="Fetch comments", action=argparse.BooleanOptionalAction, required=False)

cliArgs = parser.parse_args()

# Logging
logging.basicConfig(level=cliArgs.log_level)

# Globals
HEADERS = {'User-Agent': 'WordPress Testing'}


def requestRESTAPIComments(website: str, fetchPage: int, timeout=10) -> json:
    perPage = 100
    apiRequest = f'{website}/wp-json/wp/v2/comments?per_page={perPage}&page={str(fetchPage)}'
    results = []
    try:
        with requests.Session() as s:
            download = s.get(apiRequest, headers=HEADERS, verify=False, timeout=timeout)
            if download.status_code == 200:
                # WordPress API returns mixed HTML and JSON in the users API endpoint.
                # Remove all content to the first `[` indicating the beginning of JSON data.
                content = '[' + '['.join(download.text.split('[')[1:])
                comments = json.loads(content)
                for comment in comments:
                    try:
                        newComment = {"name": comment['author_name'], "date":
                                      comment['date'], "link": comment['link']}
                        results.append(newComment)
                    except Exception as err:
                        print(f"Unexpected {err=}, {type(err)=}")
                        raise
                fetchPage = fetchPage + 1
                if len(comments) > 0:
                    results += requestRESTAPIComments(website, fetchPage)
    except json.JSONDecodeError as e:
        pass
    except urllib3.exceptions.MaxRetryError as e:
        pass  # Silently fail and do nothing
    except requests.exceptions.ConnectionError as e:
        pass  # Silently fail and do nothing
    return results


def requestRESTAPIUsers(website: str, fetchPage: int, timeout=10) -> json:
    perPage = 100
    apiRequest = f'{website}/wp-json/wp/v2/users?per_page={perPage}&page={str(fetchPage)}'
    results = []
    try:
        with requests.Session() as s:
            download = s.get(apiRequest, headers=HEADERS, verify=False, timeout=timeout)
            if download.status_code == 200:
                content = download.text
                users = json.loads(content)
                for user in users:
                    try:
                        newUser = {"name": user['name'], "username": user['slug']}
                        results.append(newUser)
                    except Exception as err:
                        print(f"Unexpected {err=}, {type(err)=}")
                        raise
                fetchPage = fetchPage + 1
                if len(users) > 0:
                    results += requestRESTAPIUsers(website, fetchPage)
    except json.JSONDecodeError as e:
        pass
    except urllib3.exceptions.MaxRetryError as e:
        pass  # Silently fail and do nothing
    except requests.exceptions.ConnectionError as e:
        pass  # Silently fail and do nothing
    return results


def requestRESTAPI(type: str, website: str, fetchPage: int, timeout=10) -> list:
    perPage = 100

    try:
        apiRequest = f'{website}/wp-json/wp/v2/{type}?per_page={perPage}&page={str(fetchPage)}'
        results = []
        with requests.Session() as s:
            download = s.get(apiRequest, headers=HEADERS, verify=False, timeout=timeout)
            if download.status_code == 200:
                content = download.text
                if content is not None:
                    apiResponse = json.loads(content)
                    for typeReturn in apiResponse:
                        try:
                            results.append(typeReturn['guid']['rendered'])
                        except Exception as err:
                            print(f"Unexpected {err=}, {type(err)=}")
                            raise
                    fetchPage = fetchPage + 1
                    if len(apiResponse) > 0:
                        results += requestRESTAPI(type, website, fetchPage)
    except json.JSONDecodeError as e:
        pass
    except urllib3.exceptions.MaxRetryError as e:
        pass  # Silently fail and do nothing
    except requests.exceptions.ConnectionError as e:
        pass  # Silently fail and do nothing
    return results


def main():
    website = cliArgs.website
    fetchPage = 1

    result = {}
    if cliArgs.posts:
        result["posts"] = requestRESTAPI("posts", website, fetchPage)
    if cliArgs.pages:
        result["pages"] = requestRESTAPI("pages", website, fetchPage)
    if cliArgs.comments:
        result["comments"] = requestRESTAPIComments(website, fetchPage)
    if cliArgs.media:
        result["media"] = requestRESTAPI("media", website, fetchPage)
    if cliArgs.users:
        result["users"] = requestRESTAPIUsers(website, fetchPage)
    print(json.dumps(result))


if __name__ == '__main__':
    main()