WordPress userdata extractor

I’ve created a simple Python based utility to extract WordPress userdata. It is now available at my Github profile here.

How it works then? The utility relies and uses nothing but publicly available information of any WordPress website. It is provided neatly by WordPress provided REST API which can be then used for the described purpose. It simply takes in the WordPress website installation location and produces a CSV file based on it.

As this utility could be useful for OSINT researchers and people interested in REST APIs, it is most likely more useful to provide the data in CSV form which can be imported and machine read more easily. The utility takes care of some issues where e.g the website returning the JSON file for the userdata does not exactly follow the schema defined in the REST API documentation.

As an extra feature, the MD5 sums of Gravatar URLs are returned as those might be valuable in some cases.

Leave a Comment