♦️wordpress

wpscan --url http://office.paper --api-token X0ARzf1PCEfwuHqkOE2G9xRcRsaVpnjKXe9OXHgrGGk -o wp_scan
wpscan --url http://office.paper -e vp --plugins-detection aggressive --api-token X0ARzf1PCEfwuHqkOE2G9xRcRsaVpnjKXe9OXHgrGGk -o wp_scan
  • -e or --enumerate

  • vp vulnerable plugins

  • p plugins

  • t themes

  • u users

  • tt

full command

wpscan --api-token $wpapi --url http://blocky.htb -e ap vt -t 10 -o wpscan --force
wpscan --url https://www.jayapathics.com --api-token YzAuzydERxoPWagytbj81CxyRT8t5ByRt25edKgYZ14 -e vp vt -o wp_scan2 --random-user-agent

Last updated