Just a start
49
Documentation.md
Normal file
49
Documentation.md
Normal file
@@ -0,0 +1,49 @@
|
|||||||
|
# WPScan User Documentation
|
||||||
|
|
||||||
|
## Introduction
|
||||||
|
What WPScan is, where to find info...
|
||||||
|
|
||||||
|
## Information Gathering
|
||||||
|
|
||||||
|
### Common Files
|
||||||
|
readme.html
|
||||||
|
debug.log
|
||||||
|
error_log
|
||||||
|
robots.txt
|
||||||
|
|
||||||
|
### Vulnerabilities
|
||||||
|
Full Path Disclosure (FPD)
|
||||||
|
Directory Listing
|
||||||
|
|
||||||
|
### WordPress Version
|
||||||
|
Generator HTML meta tag
|
||||||
|
RSS Feeds
|
||||||
|
Advanced detection
|
||||||
|
|
||||||
|
### XML-RPC Detection
|
||||||
|
|
||||||
|
### WordPress Folders
|
||||||
|
* plugins
|
||||||
|
* wp-content
|
||||||
|
|
||||||
|
## Enumeration
|
||||||
|
|
||||||
|
### Passive
|
||||||
|
From HTML source code (https://github.com/wpscanteam/wpscan/blob/master/lib/wpscan/wp_detector.rb)
|
||||||
|
|
||||||
|
### Active
|
||||||
|
From directory brute forcing
|
||||||
|
|
||||||
|
### Types
|
||||||
|
|
||||||
|
* Plugins - How?
|
||||||
|
* Themes - How?
|
||||||
|
* Users - How?
|
||||||
|
* Timthumbs - what is timthumbs....
|
||||||
|
|
||||||
|
## Other features
|
||||||
|
|
||||||
|
### Login Bruteforce
|
||||||
|
|
||||||
|
How to use it?
|
||||||
|
|
||||||
Reference in New Issue
Block a user