Just a start

ethicalhack3r
2013-03-25 11:34:40 -07:00
parent 3a795de494
commit 78500b018f

49
Documentation.md Normal file

@@ -0,0 +1,49 @@
# WPScan User Documentation
## Introduction
What WPScan is, where to find info...
## Information Gathering
### Common Files
readme.html
debug.log
error_log
robots.txt
### Vulnerabilities
Full Path Disclosure (FPD)
Directory Listing
### WordPress Version
Generator HTML meta tag
RSS Feeds
Advanced detection
### XML-RPC Detection
### WordPress Folders
* plugins
* wp-content
## Enumeration
### Passive
From HTML source code (https://github.com/wpscanteam/wpscan/blob/master/lib/wpscan/wp_detector.rb)
### Active
From directory brute forcing
### Types
* Plugins - How?
* Themes - How?
* Users - How?
* Timthumbs - what is timthumbs....
## Other features
### Login Bruteforce
How to use it?