Scribd
Upload
8 views2 pages

WPScan and Nmap Usage Guide

Uploaded by

xhbgames
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
8 views2 pages

WPScan and Nmap Usage Guide

Uploaded by

xhbgames
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd

Examples

Example 1: Basic Scan

wpscan --url [Link]

Example 2: Enumerate Plugins & Themes

wpscan --url [Link] --enumerate p,t

Example 3: Password Brute Force

wpscan --url [Link] --usernames admin --wordlist


[Link]

Example 4: WPScan + Nmap

nmap -p- -sV --script=http-wordpress-enum [Link]

wpscan --url [Link] --enumerate vp --plugins-detection mixed

Example 5: WPScan + Nikto

wpscan --url [Link] --enumerate p,t,u

nikto -h [Link]

+ Target IP: [Link]

+ Target Hostname: [Link]

+ Target Port: 80

Installation in Kali

The easiest way to install w3af in Kali is:

apt-get update

apt-get install -y w3af

This will install the latest packaged version, which might not be the latest
available from our repositories. If the latest version is needed these steps
are recommended:

cd ~

apt-get update
apt-get install -y python-pip w3af

pip install --upgrade pip

git clone [Link]

cd w3af

./w3af_console

. /tmp/w3af_dependency_install.sh

You might also like