Pentesting – WordPress – Wpscan

Published by david on

Create an Account on WPScan

Create a free account on WPScan. An API is available to use with WPScan tools.

Only one request per day is available with a free account (each user request counts as three or more API calls per request).

WPScan free account registration

Kali Linux

I used Kali Linux because this tool is installed by default.

Install Kali Linux: Install Kali Linux

Alternatively, you can use Parrot OS: Install Parrot OS

Testing

  • WPScan test
WPScan command output
wpscan --url https://blog.wuibaille.fr --api-token MhSasc03k440Q7Rhz48SAz32
WPScan API token command
  • WPScan test with WAF error
WPScan error with WAF
wpscan --url https://www.blog.labo.fr --api-token --random-user-agent MhSasc03k440Q7Rhz48SAz32L1aIIPsI658YQu67TNc
WPScan example output with random user agent
WPScan command for penetration testing

Categories: Pentesting
Tags:

0 Comments

Leave a Reply

Avatar placeholder

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Related Posts

Pentesting

Resource : LOLBAS and GTFOBins

Discover the LOLBAS and GTFOBins projects, tools that penetration testers use to exploit native binaries for privilege escalation, command execution, and data exfiltration.

Pentesting

Install Pfsense

This guide provides detailed steps for downloading, installing, and configuring pfSense on a virtual machine. It includes setting up two network cards—one for internet access and the other for a local network—and initial configurations like disabling DHCP and setting the DNS.

Pentesting

Install Oracle Linux

A step-by-step guide to downloading and setting up Oracle Linux 9.4.0 in a virtual machine, including configuring settings such as RAM, network, and disabling secure boot. Ideal for users looking to create a virtual environment for testing and development.