garfield/wpscan
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Updated WPScan User Documentation (markdown)

Ryan Dewhurst
2020-04-03 10:05:17 +02:00
parent 420c83770e
commit 56a31d2f5e
1 changed files with 20 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
WPScan-User-Documentation.md

@@ -4,6 +4,26 @@
WPScan is a free, for non-commercial use, black box WordPress vulnerability scanner written for security professionals and blog maintainers to test the security of their sites. WPScan is a free, for non-commercial use, black box WordPress vulnerability scanner written for security professionals and blog maintainers to test the security of their sites.
WPScan is written in the Ruby programming language. The first version of WPScan was released on the [16th of June 2011](https://blog.dewhurstsecurity.com/2011/06/16/introducing-wpscan-wordpress-security-scanner.html).
## Installation
### Ruby Gem
WPScan is shipped as a Ruby gem, and can be installed with the following command:
`gem install wpscan`
### Docker
We also support Docker. Pull the repo with:
`docker pull wpscanteam/wpscan`
Example Docker command to enumerate usernames:
`docker run -it --rm wpscanteam/wpscan --url https://example.com/ --enumerate u`
## Enumeration Modes ## Enumeration Modes
When enumerating the WordPress version, installed plugins or installed themes, you can use three different "modes", which are: When enumerating the WordPress version, installed plugins or installed themes, you can use three different "modes", which are: