diff --git a/Documentation.md b/Documentation.md new file mode 100644 index 0000000..0c83523 --- /dev/null +++ b/Documentation.md @@ -0,0 +1,49 @@ +# WPScan User Documentation + +## Introduction +What WPScan is, where to find info... + +## Information Gathering + +### Common Files +readme.html +debug.log +error_log +robots.txt + +### Vulnerabilities +Full Path Disclosure (FPD) +Directory Listing + +### WordPress Version +Generator HTML meta tag +RSS Feeds +Advanced detection + +### XML-RPC Detection + +### WordPress Folders +* plugins +* wp-content + +## Enumeration + +### Passive +From HTML source code (https://github.com/wpscanteam/wpscan/blob/master/lib/wpscan/wp_detector.rb) + +### Active +From directory brute forcing + +### Types + +* Plugins - How? +* Themes - How? +* Users - How? +* Timthumbs - what is timthumbs.... + +## Other features + +### Login Bruteforce + +How to use it? +