TIKTOUK: Tracing a WordPress Credential Collection Toolkit

Reported 01 Oct 2026 by otx · Severity: medium

TIKTOUK is a multi-component toolkit designed to collect credentials from WordPress sites. It consists of three components: a Python probing module that identifies WordPress installations and scans for exposed secrets, a Python collection module that extracts configuration files