WPScan

Página do projeto

• http://wpscan.org/

Instalando no Debian

apt-get install gawk libreadline6-dev libyaml-dev sqlite3 libgdbm-dev libncurses5-dev libffi-dev curl git-core
sudo apt-get install git ruby ruby-dev libcurl4-openssl-dev make zlib1g-dev
git clone https://github.com/wpscanteam/wpscan.git
cd wpscan
git checkout tags/2.8
gem install bundler
bundle install --without test

Instalando no Debian

sudo apt-get install git ruby ruby-dev libcurl4-openssl-dev make zlib1g-dev
git clone https://github.com/wpscanteam/wpscan.git
cd wpscan
sudo gem install bundler
bundle install --without test --path vendor/bundle

uso básico

ruby wpscan.rb --url www.example.com

para usar através de proxy ou TOR

ruby wpscan.rb --url www.example.com --username admin --threads 10 --proxy HTTP://127.0.0.1:8123

usando wordlist para testar senha e com interface de 10 segundo para tentativas e não ser bloqueado

wpscan --url www.example.com --wordlist ~/password.txt --username admin --threads 10