• WordPress vulnerability scanner: WPScan checks for security vulnerabilities in your WordPress installation, including outdated WordPress versions, outdated plugins, and themes with known security issues.
• User enumeration: WPScan can be used to check if a WordPress site is susceptible to user enumeration, which is a technique used by attackers to identify valid usernames.
• Plugin and theme enumeration: WPScan can enumerate plugins and themes installed on a WordPress site, which can help identify potential security issues.

• Basic Scan: To perform a basic scan of a WordPress site.
• Enumerate Plugins: To enumerate installed plugins on a target WordPress site.
• User Enumeration: WPScan’s enumeration tool can be used to check if your WordPress site is susceptible to user enumeration.
• Customization: WPScan offers many configuration options, like timeout settings, connecting timeout, TLS checks, and proxy settings. Use these options to fine-tune the tool’s behavior according to your use case.

• WordPress vulnerability scanner: WPScan can be used to identify potential security issues within your WordPress setup, including outdated core, themes, and plugins with known vulnerabilities.
• User enumeration: WPScan’s enumeration tool helps check if your WordPress site is susceptible to user enumeration, which is a technique used by attackers to identify valid usernames.
• Detecting weak passwords: WPScan can perform a brute force attack to test the strength of WordPress user passwords, which helps identify weak passwords that could be easily cracked.
• Stealthy scanning: With the --stealthy or --random-user-agent flag, WPScan can scan your WordPress site more discreetly, making it harder for malicious users to detect the scanning activity.
• WPScan in Kali Linux: WPScan is pre-installed in Kali Linux, making it easily accessible for penetration testing and security assessments on WordPress websites. Additionally, you can use Docker to run WPScan on other Linux distributions.
• Offline scanning: WPScan can be used offline, which is useful when you need to scan a WordPress website without an internet connection, for example, if the site is on a private network or Intranet.

WPScan is a powerful tool for scanning WordPress websites for vulnerabilities. Here are some examples of its usage :

1. Basic Scan : To perform a basic scan of a WordPress site, use : wpscan --url http://example.com

This command checks for vulnerabilities in the WordPress core, plugins, and themes.

2. Enumerating Plugins : To identify vulnerable plugins, use : wpscan --url http://example.com --enumerate vp

This scans for plugins with known vulnerabilities.

3. Password Brute-Force Attack : To test login credentials, use :

wpscan --url http://example.com --passwords passwords.txt --usernames admin

This attempts to log in using a list of passwords.

4. Custom Content Directory : If the WordPress site uses a non-standard content directory, specify it :

wpscan --url http://example.com --wp-content-dir custom-content

5. Stealth Mode : To minimize detection, use : wpscan --url http://example.com --stealthy

This randomizes user agents and uses passive detection techniques.

These examples highlight WPScan's versatility in identifying security issues in WordPress sites.

• Ruby
• gem

Terminal Installation Commands ...

GUI Installation Steps ...

Linux

1. Update the package list : sudo apt update
2. Install WPScan : sudo apt install wpscan

WPScan will be installed and ready to use.

Windows

Installation using Docker

1. Install Docker Desktop from Docker's official site.
2. Pull the WPScan Docker image : docker pull wpscanteam/wpscan
3. Run WPScan : docker run -it wpscanteam/wpscan --help

Installation using WSL

1. Enable WSL : wsl --install
2. Install Ubuntu from the Microsoft Store.
3. Follow the Linux installation steps (e.g., sudo apt install wpscan for Ubuntu).

MacOS

Using Homebrew (Recommended)

1. Install Homebrew (if not already installed) :

$ /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"

2. Install WPScan : brew install wpscanteam/tap/wpscan

Using RubyGems

1. Install dependencies : brew install ruby
2. Install WPScan : gem install wpscan

Terminal Uninstallation Commands ...

GUI Uninstallation Steps ...

Linux

1. Remove WPScan : sudo apt remove wpscan
2. Remove dependencies that are no longer needed : sudo apt autoremove
3. Purge WPScan configuration files (optional) : sudo apt purge wpscan

Windows

1. Docker : Remove the WPScan image : docker rmi wpscanteam/wpscan
2. WSL : Uninstall WPScan inside WSL using : sudo apt remove wpscan

MacOS

Homebrew

1. To remove WPScan : brew uninstall wpscanteam/tap/wpscan

RubyGems

1. To uninstall WPScan : gem uninstall wpscan