From Wordpress admin to pty automatically!
Alternatives To Omega
Project NameStarsDownloadsRepos Using ThisPackages Using ThisMost Recent CommitTotal ReleasesLatest ReleaseOpen IssuesLicenseLanguage
9 months ago9gpl-2.0Python
A static code analysis for WordPress (and PHP)
The Big List Of Hacked Malware Web Sites183
a year ago3otherShell
This repository contains a list of all web sites I come across that are either hacked with or purposefully hosting malware, ransomware, viruses or trojans.
4 months agogpl-3.0Python
✔ A python written hacking tool 👽👾👩‍💻🔒🚀
a month ago6January 03, 2022gpl-2.0Python
From Wordpress admin to pty automatically!
Wpsec Cli7
2 months agomitPython
WPSec command line tool
Enclaive Docker Wordpress Sgx4
9 months agoGo
SGX-ready Enclaive Docker Image for Wordpress
5 years agogpl-3.0PHP
EncryptWP - Adds military-grade encryption and tamper protection to WordPress user data.
Alternatives To Omega
Select To Compare

Alternative Project Comparisons

Test suite status Version v2.6 GPL-2.0 license

Omega - From Wordpress admin to pty

The Linux tool to automate the process of getting a pty once you got admin credentials in a Wordpress site. Works in Linux, Windows and MacOS hosts!

The shell code used for Windows hosts is a modified version of the PHP reverse shell by ivan-sincek, credits to the author.

Omega getting a pty to a Wordpress host

How does it work?

First, Omega gets an admin session in the Wordpress site and using web scrapping, it extracts the current template used by Wordpress. After that, it will use the template editor to inject a payload with a simple web shell and a base64 PHP code evaluation function.

Once everything is set up, Omega will spin up a listener, execute a reverse shell using the payload injected and wait for the shell to connect back. Before giving the control to the user, Omega will try to stabilize the shell and get a pty (Only for Linux and MacOS hosts).

If stabilization is not possible using the methods Omega has, a non tty shell will be provided that can be stabilized without problems using any method you want.


Just execute pip3 install omega-wp and enjoy! You can use a virtual env or intall it system wide.


If you have all the requirements you can start playing with Omega!

Omega - From Wordpress admin to pty

usage: omega [-h] [-v] [--no-pty] -u WP_URL -l USERNAME -p PASSWORD -H LHOST [-P LPORT]

Provides a reverse shell (stabilized if possible) to a Wordpress host. You need admin credentials!

optional arguments:
  -h, --help            show this help message and exit
  -v, --version         show program's version number and exit
  --no-pty              if this flag is set, no shell stabilization is perform
  -u WP_URL, --wp-url WP_URL
                        the target Wordpress url
  -l USERNAME, --username USERNAME
                        Wordpress admin user to use for login
  -p PASSWORD, --password PASSWORD
                        Wordpress admin password to use for login
  -H LHOST, --lhost LHOST
                        the ip where the reverse shell should connect to
  -P LPORT, --lport LPORT
                        the port used to listen for the reverse shell (Default: 8080)
Popular Wordpress Projects
Popular Cybersecurity Projects
Popular Content Management Categories
Related Searches

Get A Weekly Email With Trending Projects For These Categories
No Spam. Unsubscribe easily at any time.
Reverse Shell