Thursday, October 27, 2011

WPScan - Wordpress Security Scanner - Tool Download And Tutorial


WPScan is a vulnerability scanner which checks the security of WordPress installations using a black box approach.


  • Username enumeration (from author querystring and location header)
  • Weak password cracking (multithreaded)
  • Version enumeration (from generator meta tag and from client side files)
  • Vulnerability enumeration (based on version)
  • Plugin enumeration (2220 most popular by default)
  • Plugin vulnerability enumeration (based on version)
  • Plugin enumeration list generation
  • Other misc WordPress checks (theme name, dir listing, ...)


Sponsored by the RandomStorm Open Source Initiative.

Video of WPScan in Action

Video of the first PoC

And A video of this tool explained by Ankit Mehta


Post a Comment