Wpscan anwenden: Unterschied zwischen den Versionen

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen
 
Zeile 4: Zeile 4:
  
 
=Enumerate all plugins in our database (could take a very long time)=
 
=Enumerate all plugins in our database (could take a very long time)=
*wpscan --url example.com -e ap --plugins-detection mixed --api-token YOUR_TOKEN
+
*wpscan --url example.com -e ap --plugins-detection mixed
  
 
=Password brute force attack=
 
=Password brute force attack=
 
*wpscan --url example.com -e u --passwords /path/to/password_file.txt
 
*wpscan --url example.com -e u --passwords /path/to/password_file.txt

Aktuelle Version vom 22. März 2023, 16:23 Uhr

Enumerate all plugins with known vulnerabilities

  • wpscan --url example.com -e vp --plugins-detection mixed

Enumerate all plugins in our database (could take a very long time)

  • wpscan --url example.com -e ap --plugins-detection mixed

Password brute force attack

  • wpscan --url example.com -e u --passwords /path/to/password_file.txt