In the Open
In the Open

WPScan

Themes

wpscan --url <URL> --enumerate t
  • ls for content

Plugins

wpscan --url <URL> --enumerate p

Users

wpscan --url <URL> --enumerate u

Vulnerabilities

  • WPVulnDB API is needed
  • Plugins
wpscan --url <URL> --enumerate vp

Password attack

wpscan --url <URL> --passwords <wordlist> --usernames <usersFromEnumeration>

WAF Aggressiveness

```sh wpscan --url --enumerate p --plugins-detection