Forrest logo
tool overview
On this page you find all important commands for the CLI tool wpscan. If the command you are looking for is missing please ask our AI.

wpscan

WPScan is a software to analyse WordPress installations. It attempts to determine the version of components used via various methods. It also checks accessible interfaces and access options to internal resources.

List of commands for wpscan:

  • wordpress:security:attack:password Execute a password guessing attack on a WordPress website.
    $ wpscan --url ${url} --usernames ${username-or-path-to-usernames-txt} --passwords ${path-to-passwords-txt} threads ${nummer-of-threads}
    try on your machine
    explain this command
  • wordpress:security:scan:website Scan a WordPress website.
    $ wpscan --url ${url}
    try on your machine
    explain this command
  • wordpress:security:scan:website:with-proxy Scan a WordPress website through a proxy.
    $ wpscan --url ${url} --proxy ${protocol:--ip:port} --proxy-auth ${username:password}
    try on your machine
    explain this command
  • wordpress:tldr:0b155 wordpress: Execute a password guessing attack on a WordPress website.
    $ wpscan --url ${url} --usernames ${username|path-to-usernames-txt} --passwords ${path-to-passwords-txt} threads ${20}
    try on your machine
    explain this command
  • wpscan:tldr:1ad33 wpscan: Scan a WordPress website, collecting vulnerability data from the WPVulnDB (https://wpvulndb.com/).
    $ wpscan --url ${url} --api-token ${token}
    try on your machine
    explain this command
  • wpscan:tldr:4788d wpscan: Update the vulnerability database.
    $ wpscan --update
    try on your machine
    explain this command
tool overview