WPScan (WordPress Scan)

暴力破解登入帳密

wpscan --url http://www.example.com/wp-login.php --wordlist ~/password.txt --username admin --wp-content-dir /wp-content

wpscan -u http://www.example.com/ --wordlist /root/wordlist.lst --username admin

列舉wordpress資訊

wpscan --url http://www.example.com/ -e vp,vt,u -t 100

--enumerate u: enumerate usernames from id 1 to 10