TLDRBins TLDRBins / Wordpress

Usage Tips:

  • Click on a keyword to enable inline editing.
  • Click inside a code block to copy (excludes comments).
  • Use the button to view examples.
  • Click outside to collapse all examples.

Default config location

/var/www/html/wp-config.php

Sample Output:
TO-DO

Tools

# HTTP
wpscan --url <TARGET> -e ap,t,tt,u

Sample Output:
TO-DO
# HTTPS
wpscan --url <TARGET> -e ap,t,tt,u --disable-tls-checks

Sample Output:
TO-DO
# You will need an api token to scan vulns
wpscan --url <TARGET> -e ap,t,tt,u --api-token <API_KEY>

Sample Output:
TO-DO
# Brute force wp-admin
wpscan --url <TARGET> --passwords passwords.txt --usernames admin

Sample Output:
TO-DO

Ref: Get Free API key