1 KiB
What is WPScan?
WPScan is a popular open-source security scanner for WordPress websites. It is designed to detect vulnerabilities and security issues in WordPress installations by scanning the core WordPress files, themes, and plugins for known vulnerabilities, outdated software versions, and other potential security issues.
WPScan is a command-line tool written in Ruby and is available for Linux, macOS, and Windows operating systems. It is widely used by WordPress developers, security researchers, and website owners to ensure the security of their WordPress websites.
Common Use and Commands
To use WPScan, you need to install it on your local machine or server. Once installed, you can run WPScan with the following command:
Commands
wpscan --url URL --enumerate u
More Information
If you want to learn more about WPScan or contribute to its development, you can check out the official Github repository at https://github.com/wpscanteam/wpscan.