LinuxTools Hacking

WPScan WordPress Vulnerability Scanner

WPScan Scanner

WPScan WordPress Vulnerability Scanner

 

WPScan is a free tool, for non-commercial use, black box WordPress vulnerability scanner written for security professionals and blog maintainers to test the security of their sites.

WPScanThis will scan the blog using default options with a good compromise between speed and accuracy. For example, the plugins will be checked passively but their version with a mixed detection mode.

 

INSTALL

Prerequisites:

  1. Ruby >= 2.2.2 – Recommended: 2.3.3
  2. Curl >= 7.21 – Recommended: latest – FYI the 7.29 has a segfault
  3. RubyGems – Recommended: latest

Usage

WPScan can load all options (including the –url) from configuration files, the following locations are checked (order: first to last):

  • ~/.wpscan/cli_options.json
  • ~/.wpscan/cli_options.yml
  • pwd/.wpscan/cli_options.json
  • pwd/.wpscan/cli_options.yml

PROJECT HOME
https://wpscan.org

VULNERABILITY DATABASE
https://wpvulndb.com

 

Tags

Related Articles

Leave a Reply

Your email address will not be published. Required fields are marked *

Close