WordPress Security Scanner- WPscan

WordPress is among the best blogging platform, it is a open source and currently a lot of bloggers using it for their blogs. WordPress has a amazing features and has changed the way of blogging, just like other platform security is the main concern for wordpress. There are different tips for WordPress security are available on the Internet, let suppose you are implemented relevant tips to secure your blog but you must use some automatic tools to perform the security of your blog. 

There are different tools available to perform a quick penetration testing on web applications, beside these tools there is a new development to check the security of wordpress.


There are different holes has been found on wordpress plug in and on the installation bugs, WPScan is a black box WordPress Security Scanner written in Ruby which attempts to find known security weaknesses within WordPress installations. Its intended use it to be for security professionals or WordPress administrators to asses the security posture of their WordPress installations.

Key Features

• Password cracking
• Enumeration (version, plug in, username)
• Vulnerability enumeration  

Download

Wpscan Tutorial

Wpscan has been written on ruby so you can use it on cross operating system like Linux, Windows and others, however it has been written and tested on backtrack 5 GNOME. You have to install some dependencies on the terminal type

sudo apt-get install libcurl4-gnutls-dev
sudo gem install –user-install typhoeus
sudo gem install –user-install xml-simple  

The usage is very simple

ruby wpscan.rb –url www.example.com
ruby wpscan.rb –url www.example.com –wordlist darkc0de.lst –threads 50

Video Tutorial of Wpscan

Note: If you want to learn more about Linux and Windows based Penetration testing, you might want to subscribe our RSS feed and Email Subscription  or become our Facebook fan! You will get all the latest updates at both the places.