Forrest logo
back to the wpscan tool

wordpress:security:scan:website:with-proxy

Scan a WordPress website through a proxy.
$ wpscan --url ${url} --proxy ${protocol:--ip:port} --proxy-auth ${username:password}
try on your machine

This command is used to run a security scan using the WPScan tool on a specific URL. Here's what each option does:

  • --url ${url}: Specifies the URL of the WordPress site you want to scan. Replace ${url} with the actual URL.
  • --proxy ${protocol:--ip:port}: Specifies the proxy server to use for the scan. Replace ${protocol:--ip:port} with the appropriate protocol (e.g. http or https), IP address, and port number of the proxy server. If you don't want to use a proxy, you can leave this option out entirely.
  • --proxy-auth ${username:password}: Specifies the authentication credentials to use for the proxy server. Replace ${username:password} with the actual username and password for the proxy server. If you don't need authentication, you can leave this option out entirely.

Overall, this command is useful for performing scans on WordPress websites while also using a proxy server with authentication credentials.

This explanation was created by an AI. In most cases those are correct. But please always be careful and never run a command you are not sure if it is safe.
back to the wpscan tool