Wpscan anwenden: Unterschied zwischen den Versionen

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen
(Die Seite wurde neu angelegt: „ =Enumerate all plugins with known vulnerabilities= *wpscan --url example.com -e vp --plugins-detection mixed --api-token YOUR_TOKEN* =Enumerate all plugins i…“)
 
 
(Eine dazwischenliegende Version desselben Benutzers wird nicht angezeigt)
Zeile 1: Zeile 1:
  
 
=Enumerate all plugins with known vulnerabilities=
 
=Enumerate all plugins with known vulnerabilities=
*wpscan --url example.com -e vp --plugins-detection mixed --api-token YOUR_TOKEN*
+
*wpscan --url example.com -e vp --plugins-detection mixed
  
 
=Enumerate all plugins in our database (could take a very long time)=
 
=Enumerate all plugins in our database (could take a very long time)=
*wpscan --url example.com -e ap --plugins-detection mixed --api-token YOUR_TOKEN
+
*wpscan --url example.com -e ap --plugins-detection mixed
  
 
=Password brute force attack=
 
=Password brute force attack=
 
*wpscan --url example.com -e u --passwords /path/to/password_file.txt
 
*wpscan --url example.com -e u --passwords /path/to/password_file.txt

Aktuelle Version vom 22. März 2023, 16:23 Uhr

Enumerate all plugins with known vulnerabilities

  • wpscan --url example.com -e vp --plugins-detection mixed

Enumerate all plugins in our database (could take a very long time)

  • wpscan --url example.com -e ap --plugins-detection mixed

Password brute force attack

  • wpscan --url example.com -e u --passwords /path/to/password_file.txt