Web Penetration Testing with Kali Linux(Third Edition)
上QQ阅读APP看书,第一时间看更新

WPScan

WPScan is a very fast WordPress vulnerability scanner written in the Ruby programming language and preinstalled in Kali Linux.

The following information can be extracted using WPScan:

  • The plugins list
  • The name of the theme
  • Weak passwords and usernames using the brute forcing technique
  • Details of the version
  • Possible vulnerabilities

Some additional CMS tools available in Kali Linux are listed in following subsections.