TIKTOUK: Tracing a WordPress Credential Collection Toolkit

October 1, 2026 · LevelBlue SpiderLabs · Severity: MEDIUM

TIKTOUK brings together WordPress probing, collection of exposed configuration data, recovery of encrypted email credentials, and JavaScript secret scanning. Its two Python components and Go-based Linux crawler turn website responses into structured results for a central hub: an HTTP service that distributes target tasks and receives collected data and status reports.