Installing the wpscan utility on Ubuntu allows non-invasive scanning of a website running WordPress to find any vulnerabilities. This is very useful to run on your own website, then you may fix any problems presented after the scanning is complete. This helps ensure that your WordPress blog is as secure as you can make it. … Read more
The wpscan utility may be used to brute force a WordPress password very easily. But firstly, we need the WordPress username. Get it like this. Using Nmap. As Nmap supports user enumeration for WordPress, this is easy. ubuntu ~ $ nmap -sV –script http-wordpress-enum –script-args limit=195 somewordpresssite.com Starting Nmap 6.40 ( http://nmap.org ) at … Read more
Kali Linux has available to it a Ruby script that may be used to list all users on a WordPress website. Use the command below to scan a website for security vulnerabilties and see if there are any problems with the website. root@kali:~# wpscan –url mywordpresssite.com –enumerate userroot@kali:~# wpscan –url mywordpresssite.com –enumerate user Use this … Read more