DawnMagnet/tldr
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

*: fix typos reported by Hunspell (#5848)

Browse Source 
Co-authored-by: marchersimon <50295997+marchersimon@users.noreply.github.com>
Co-authored-by: Seth Falco <seth@falco.fun>
Co-authored-by: Patrice Denis <patricedenis@users.noreply.github.com>
This commit is contained in:
bl-ue
2021-05-20 16:13:41 -04:00
committed by GitHub
parent 3d70909e0c
commit 8ebd171d6f
267 changed files with 358 additions and 360 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
pages/common/wpscan.md
View File

@@ -1,36 +1,36 @@
# wpscan
> Wordpress vulnerability scanner.
> WordPress vulnerability scanner.
> More information: <https://github.com/wpscanteam/wpscan>.
- Update the vulnerability database:
`wpscan --update`
- Scan a Wordpress website:
- Scan a WordPress website:
`wpscan --url {{url}}`
- Scan a Wordpress website, using random user agents and passive detection:
- Scan a WordPress website, using random user agents and passive detection:
`wpscan --url {{url}} --stealthy`
- Scan a Wordpress website, checking for vulnerable plugins and specifying the path to the `wp-content` directory:
- Scan a WordPress website, checking for vulnerable plugins and specifying the path to the `wp-content` directory:
`wpscan --url {{url}} --enumerate {{vp}} --wp-content-dir {{remote/path/to/wp-content}}`
- Scan a Wordpress website through a proxy:
- Scan a WordPress website through a proxy:
`wpscan --url {{url}} --proxy {{protocol://ip:port}} --proxy-auth {{username:password}}`
- Perform user identifiers enumeration on a Wordpress website:
- Perform user identifiers enumeration on a WordPress website:
`wpscan --url {{url}} --enumerate {{u}}`
- Execute a password guessing attack on a Wordpress website:
- Execute a password guessing attack on a WordPress website:
`wpscan --url {{url}} --usernames {{username|path/to/usernames.txt}} --passwords {{path/to/passwords.txt}} threads {{20}}`
- Scan a Wordpress website, collecting vulnerability data from the WPVulnDB (https://wpvulndb.com/):
- Scan a WordPress website, collecting vulnerability data from the WPVulnDB (https://wpvulndb.com/):
`wpscan --url {{url}} --api-token {{token}}`