wpscan
WordPress vulnerability scanner. tldr-pages
On several platforms 1 Sigma rule name it
Several platforms
Update the vulnerability database
wpscan --updateIdentifyTrips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])
Scan a WordPress website
wpscan --url urlIdentifyTrips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])
Scan a WordPress website, using random user agents and passive detection
wpscan --url url --stealthyIdentifyTrips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])
Scan a WordPress website, checking for vulnerable plugins and specifying the path to the wp-content directory
wpscan --url url --enumerate vp --wp-content-dir remote/path/to/wp-contentIdentifyTrips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])
Scan a WordPress website through a proxy
wpscan --url url --proxy protocol://ip:port --proxy-auth username:passwordIdentifyTrips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])
Perform user identifiers enumeration on a WordPress website
wpscan --url url --enumerate uIdentifyTrips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])
Execute a password guessing attack on a WordPress website
wpscan --url url --usernames username --passwords path/to/passwords.txt threads 20IdentifyTrips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])
Scan a WordPress website, collecting vulnerability data from the WPVulnDB (<https://wpvulndb.com/>)
wpscan --url url --api-token tokenIdentifyTrips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])