来源：自学PHP网 时间：2015-04-17 12:00 作者： 阅读:次
[导读] NO1root@bt:/pentest/web/wpscanteam# sudo apt-get install libcurl4-gnutls-dev libopenssl-ruby libxml2 libxml2-dev libxslt1-devNO2root@bt:/pentest/web/wpscanteam# sudo gem install ndash......
|
NO1
root@bt:/pentest/web/wpscanteam# sudo apt-get install libcurl4-gnutls-dev libopenssl-ruby libxml2 libxml2-dev libxslt1-dev
NO2
root@bt:/pentest/web/wpscanteam# sudo gem install –user-install typhoeus -v ’0.4.2′
搞定之
root@bt:/pentest/web/wpscanteam# ruby wpscan.rb
____________________________________________________
__ _______ _____
\ \ / / __ \ / ____|
\ \ /\ / /| |__) | (___ ___ __ _ _ __
\ \/ \/ / | ___/ \___ \ / __|/ _` | ‘_ \
\ /\ / | | ____) | (__| (_| | | | |
\/ \/ |_| |_____/ \___|\__,_|_| |_| v2.0rNA
WordPress Security Scanner by the WPScan Team
Sponsored by the RandomStorm Open Source Initiative
_____________________________________________________
Examples :
-Further help …
ruby wpscan.rb –help
-Do ‘non-intrusive’ checks …
ruby wpscan.rb –url www.example.com
-Do wordlist password brute force on enumerated users using 50 threads …
ruby wpscan.rb –url www.example.com –wordlist darkc0de.lst –threads 50
-Do wordlist password brute force on the ‘admin’ username only …
ruby wpscan.rb –url www.example.com –wordlist darkc0de.lst –username admin
-Enumerate installed plugins …
ruby wpscan.rb –url www.example.com –enumerate p
-Enumerate installed themes …
ruby wpscan.rb –url www.example.com –enumerate t
-Enumerate users …
ruby wpscan.rb –url www.example.com –enumerate u
-Enumerate installed timthumbs …
ruby wpscan.rb –url www.example.com –enumerate tt
-Use a HTTP proxy …
ruby wpscan.rb –url www.example.com –proxy 127.0.0.1:8118
-Use a SOCKS5 proxy … (cURL >= v7.21.7 needed)
ruby wpscan.rb –url www.2cto.com –proxy socks5://127.0.0.1:9000
-Use custom content directory …
ruby wpscan.rb -u www.example.com –wp-content-dir custom-content
-Use custom plugins directory …
ruby wpscan.rb -u www.example.com –wp-plugins-dir wp-content/custom-plugins
-Update …
ruby wpscan.rb –update
|
自学PHP网专注网站建设学习,PHP程序学习,平面设计学习，以及操作系统学习
京ICP备14009008号-1@版权所有www.zixuephp.com
网站声明：本站所有视频，教程都由网友上传，站长收集和分享给大家学习使用，如由牵扯版权问题请联系站长邮箱904561283@qq.com
