From 78500b018f662cb07b3018527bab83c927d0016a Mon Sep 17 00:00:00 2001 From: ethicalhack3r Date: Mon, 25 Mar 2013 11:34:40 -0700 Subject: [PATCH] Just a start --- Documentation.md | 49 ++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 49 insertions(+) create mode 100644 Documentation.md diff --git a/Documentation.md b/Documentation.md new file mode 100644 index 0000000..0c83523 --- /dev/null +++ b/Documentation.md @@ -0,0 +1,49 @@ +# WPScan User Documentation + +## Introduction +What WPScan is, where to find info... + +## Information Gathering + +### Common Files +readme.html +debug.log +error_log +robots.txt + +### Vulnerabilities +Full Path Disclosure (FPD) +Directory Listing + +### WordPress Version +Generator HTML meta tag +RSS Feeds +Advanced detection + +### XML-RPC Detection + +### WordPress Folders +* plugins +* wp-content + +## Enumeration + +### Passive +From HTML source code (https://github.com/wpscanteam/wpscan/blob/master/lib/wpscan/wp_detector.rb) + +### Active +From directory brute forcing + +### Types + +* Plugins - How? +* Themes - How? +* Users - How? +* Timthumbs - what is timthumbs.... + +## Other features + +### Login Bruteforce + +How to use it? +