Added some stuff
@@ -13,29 +13,37 @@ What WPScan is, where to find info...
|
||||
## Information Gathering
|
||||
|
||||
### Common Files
|
||||
readme.html
|
||||
debug.log
|
||||
error_log
|
||||
robots.txt
|
||||
changelog.txt
|
||||
* readme.html
|
||||
* debug.log
|
||||
* error_log
|
||||
* robots.txt
|
||||
* changelog.txt
|
||||
|
||||
### Vulnerabilities
|
||||
Full Path Disclosure (FPD)
|
||||
Directory Listing
|
||||
* Full Path Disclosure (FPD) - https://github.com/wpscanteam/wpscan/blob/master/lib/wpscan/modules/wp_full_path_disclosure.rb
|
||||
* Directory Listing
|
||||
|
||||
### WordPress Version
|
||||
From Generator HTML meta tag
|
||||
From RSS Feeds
|
||||
From readme.html file
|
||||
From advanced detection
|
||||
|
||||
* From Generator HTML meta tag
|
||||
* From RSS Feeds
|
||||
* From readme.html file
|
||||
* From advanced detection
|
||||
|
||||
### XML-RPC Detection
|
||||
|
||||
### WordPress Folders
|
||||
### WordPress Folder Detection
|
||||
* plugins
|
||||
* wp-content
|
||||
|
||||
### Login Protection Detection
|
||||
https://github.com/wpscanteam/wpscan/blob/master/lib/wpscan/modules/wp_login_protection.rb
|
||||
|
||||
### Configuration File Backup
|
||||
https://github.com/wpscanteam/wpscan/blob/master/lib/wpscan/modules/wp_config_backup.rb
|
||||
|
||||
### Malware Detection
|
||||
https://github.com/wpscanteam/wpscan/blob/master/lib/wpscan/modules/malwares.rb
|
||||
|
||||
### Registration Enabled
|
||||
|
||||
### Multisite Enabled
|
||||
@@ -60,3 +68,5 @@ From directory brute forcing
|
||||
### Login Bruteforce
|
||||
|
||||
How to use it?
|
||||
|
||||
https://github.com/wpscanteam/wpscan/blob/master/lib/wpscan/modules/brute_force.rb
|
||||
Reference in New Issue
Block a user