dude i ran wpscan on that in 2016 and it was 'the floor is lava'. i wonder what its like now
November 26, 2024 at 11:41 PM
dude i ran wpscan on that in 2016 and it was 'the floor is lava'. i wonder what its like now
Claude Desktop connected to an MCP Kali Server to orchestrate a full lab pentest with Nmap, sqlmap, Hydra, Metasploit, John the Ripper, WPScan, and NetExec, ending in root, WordPress, and domain admin access. #ClaudeDesktop #Metasploit #WPScan
Automated Penetration Testing with Claude AI
This article describes an end-to-end lab penetration test orchestrated through Claude Desktop connected to an MCP Kali Server, where natural-language prompts drove tools like Nmap, sqlmap, Hydra, Metasploit, John the Ripper, WPScan, and NetExec. The attack chain moved from reconnaissance and exploitation to root access, WordPress compromise, and domain administrator credential recovery on a Windows Server 2019 domain controller. #ClaudeDesktop #MCPKaliServer #Metasploit #sqlmap #Hydra #JohnTheRipper #WPScan #NetExec #Samba #WordPress #WindowsServer2019
www.hendryadrian.com
June 13, 2026 at 11:45 PM
Claude Desktop connected to an MCP Kali Server to orchestrate a full lab pentest with Nmap, sqlmap, Hydra, Metasploit, John the Ripper, WPScan, and NetExec, ending in root, WordPress, and domain admin access. #ClaudeDesktop #Metasploit #WPScan
WordPress powers a large number of sites on the internet. But because of this, it's a popular target for attackers. But you can use tools like WPScan to help find vulnerabilities. Marco walks you through different scan types and explains how to use the results.
Tutorial on freeCodeCamp News.
Tutorial on freeCodeCamp News.
December 6, 2024 at 1:01 AM
WordPress powers a large number of sites on the internet. But because of this, it's a popular target for attackers. But you can use tools like WPScan to help find vulnerabilities. Marco walks you through different scan types and explains how to use the results.
Tutorial on freeCodeCamp News.
Tutorial on freeCodeCamp News.
Confira o último artigo na minha news Cyber CLI:
Ferramenta "WPScan": Explorando Vulnerabilidades em Sites WordPress https://buff.ly/4esZjJ7 via @LinkedIn
#cybersecurity #wordpress
Ferramenta "WPScan": Explorando Vulnerabilidades em Sites WordPress https://buff.ly/4esZjJ7 via @LinkedIn
#cybersecurity #wordpress
Ferramenta "WPScan": Explorando Vulnerabilidades em Sites WordPress
O que é o comando wpscan? O wpscan é uma ferramenta de código aberto desenvolvida para testar a segurança de sites WordPress. Ele permite a varredura em busca de vulnerabilidades, plugins…
buff.ly
September 18, 2024 at 12:56 PM
Confira o último artigo na minha news Cyber CLI:
Ferramenta "WPScan": Explorando Vulnerabilidades em Sites WordPress https://buff.ly/4esZjJ7 via @LinkedIn
#cybersecurity #wordpress
Ferramenta "WPScan": Explorando Vulnerabilidades em Sites WordPress https://buff.ly/4esZjJ7 via @LinkedIn
#cybersecurity #wordpress
The WPScan plugin for WordPress was graded with the Plugin Security Scorecard and got an F.
Security Scorecard for WPScan Plugin for WordPress
The WPScan plugin for WordPress has a security grade of F.
www.pluginvulnerabilities.com
April 12, 2025 at 9:22 PM
The WPScan plugin for WordPress was graded with the Plugin Security Scorecard and got an F.
Wpscan Cheat Sheet
November 20, 2023 at 9:06 AM
Wpscan Cheat Sheet
Master WPScan in Bug Bounty: Essential Guide to Vulnerability Scanning
https://medium.com/@jpablo13/master-wpscan-in-bug-bounty-essential-guide-to-vulnerability-scanning-6c68a4a19b3a?source=rss------bug_bounty-5
https://medium.com/@jpablo13/master-wpscan-in-bug-bounty-essential-guide-to-vulnerability-scanning-6c68a4a19b3a?source=rss------bug_bounty-5
September 20, 2025 at 12:39 AM
Master WPScan in Bug Bounty: Essential Guide to Vulnerability Scanning
https://medium.com/@jpablo13/master-wpscan-in-bug-bounty-essential-guide-to-vulnerability-scanning-6c68a4a19b3a?source=rss------bug_bounty-5
https://medium.com/@jpablo13/master-wpscan-in-bug-bounty-essential-guide-to-vulnerability-scanning-6c68a4a19b3a?source=rss------bug_bounty-5
🔐 Ultimate WPScan Cheat Sheet (2026)
Master WordPress security testing with essential WPScan commands for plugins, themes & vulnerabilities.
📌 Ethical | Practical | Beginner-Friendly
👉 Read now:
Master WordPress security testing with essential WPScan commands for plugins, themes & vulnerabilities.
📌 Ethical | Practical | Beginner-Friendly
👉 Read now:
Ultimate WPScan Cheat Sheet
Ultimate WPScan Cheat Sheet The definitive black-box WordPress security scanner. Jump To Section General Scanning Enumeration Password Attacks Plugins & Themes WPVulnDB API Bypass & Performance 1. General Scanning Basic non-intrusive scans to fingerprint the WordPress installation. Simple Scan Check WordPress version, theme, and basic vulnerabilities. wpscan --url Aggressive Detection Use active probing (mixed) instead of just passive methods.
blog.cybersamir.com
February 16, 2026 at 5:34 AM
🔐 Ultimate WPScan Cheat Sheet (2026)
Master WordPress security testing with essential WPScan commands for plugins, themes & vulnerabilities.
📌 Ethical | Practical | Beginner-Friendly
👉 Read now:
Master WordPress security testing with essential WPScan commands for plugins, themes & vulnerabilities.
📌 Ethical | Practical | Beginner-Friendly
👉 Read now:
WPScan Tutorial Kali Linux 2026 — Scan WordPress Sites, Find Vulnerabilities & Enumerate Users | Tools Day17
WPScan tutorial kali linux 2026 — scan WordPress sites for vulnerable plugins, themes and users. Day 17 complete guide with API token setup and real scan output.
WPScan tutorial kali linux 2026 — scan WordPress sites for vulnerable plugins, themes and users. Day 17 complete guide with API token setup and real scan output.
WPScan Tutorial Kali Linux 2026 — Scan WordPress Sites, Find Vulnerabilities & Enumerate Users | Tools Day17
WPScan tutorial kali linux 2026 — scan WordPress sites for vulnerable plugins, themes and users. Day 17 complete guide with API token setup and real scan output.
securityelites.com
April 13, 2026 at 3:51 AM
WPScan Tutorial Kali Linux 2026 — Scan WordPress Sites, Find Vulnerabilities & Enumerate Users | Tools Day17
WPScan tutorial kali linux 2026 — scan WordPress sites for vulnerable plugins, themes and users. Day 17 complete guide with API token setup and real scan output.
WPScan tutorial kali linux 2026 — scan WordPress sites for vulnerable plugins, themes and users. Day 17 complete guide with API token setup and real scan output.
Start here!
WPScan
WPScan is an enterprise vulnerability database for WordPress. Be the first to know about vulnerabilities affecting your WordPress core, plugins & themes.
wpscan.com
July 18, 2024 at 2:04 PM
Start here!
I have a question for anyone involved in web app pentest scoping:
Imagine nobody has ever heard of WordPress before, there are no tools like wpscan, etc. A customer comes to you and wants you to test their new blogging software. It's WordPress.
How many days testing would you scope and why?
Imagine nobody has ever heard of WordPress before, there are no tools like wpscan, etc. A customer comes to you and wants you to test their new blogging software. It's WordPress.
How many days testing would you scope and why?
February 26, 2025 at 8:10 PM
I have a question for anyone involved in web app pentest scoping:
Imagine nobody has ever heard of WordPress before, there are no tools like wpscan, etc. A customer comes to you and wants you to test their new blogging software. It's WordPress.
How many days testing would you scope and why?
Imagine nobody has ever heard of WordPress before, there are no tools like wpscan, etc. A customer comes to you and wants you to test their new blogging software. It's WordPress.
How many days testing would you scope and why?
Ever used WPScan or heard of or used Damn Vulnerable Web App? (I used DVWA to teach students how web attacks work and how to secure them).
Here he is.
👇🏿
Here he is.
👇🏿
Using AI has made me much more productive while working on my new project.
From debugging, validating ideas, creating high level steps, and much more.
I’d estimate that it’s doubled by productively.
From debugging, validating ideas, creating high level steps, and much more.
I’d estimate that it’s doubled by productively.
November 18, 2024 at 2:09 PM
Ever used WPScan or heard of or used Damn Vulnerable Web App? (I used DVWA to teach students how web attacks work and how to secure them).
Here he is.
👇🏿
Here he is.
👇🏿
Ma secondo voi, wpscan o tentativo manuale di fotter...?
Io pensavo a wpscan ma poi ho visto che gli accessi non erano tutti alla stessa distanza di tempo. Hanno provato diverse pwd e diverse username
Io pensavo a wpscan ma poi ho visto che gli accessi non erano tutti alla stessa distanza di tempo. Hanno provato diverse pwd e diverse username
May 6, 2025 at 6:13 PM
Ma secondo voi, wpscan o tentativo manuale di fotter...?
Io pensavo a wpscan ma poi ho visto che gli accessi non erano tutti alla stessa distanza di tempo. Hanno provato diverse pwd e diverse username
Io pensavo a wpscan ma poi ho visto che gli accessi non erano tutti alla stessa distanza di tempo. Hanno provato diverse pwd e diverse username
At this point I'm suspicious but still on the fence. So I went and checked a site that monitors WordPress (and therefore woocommerce) and didn't find a match for what's in the email. I also checked the woo site but was unable to find anything.
May 7, 2025 at 2:36 AM
At this point I'm suspicious but still on the fence. So I went and checked a site that monitors WordPress (and therefore woocommerce) and didn't find a match for what's in the email. I also checked the woo site but was unable to find anything.
Just an FYI to those using #WooCommerce, there's a security fix in version 9.4.3. wpscan.com/vulnerabilit...
WooCommerce < 9.4.3 - Unauthenticated Order Creation
See details on WooCommerce < 9.4.3 - Unauthenticated Order Creation. View the latest Plugin Vulnerabilities on WPScan.
wpscan.com
December 4, 2024 at 3:20 PM
Just an FYI to those using #WooCommerce, there's a security fix in version 9.4.3. wpscan.com/vulnerabilit...
Permisos seguros WordPress: guía hardening 2026
¿Tus archivos WordPress tienen permisos 777? Auditá y corregí permisos seguros WordPress hardening con 2 comandos SSH antes de que un atacante lo haga p...
#permisoswordpress #hardeningwordpress #wpscan #chmodwordpress #seguridadwordpress
¿Tus archivos WordPress tienen permisos 777? Auditá y corregí permisos seguros WordPress hardening con 2 comandos SSH antes de que un atacante lo haga p...
#permisoswordpress #hardeningwordpress #wpscan #chmodwordpress #seguridadwordpress
Permisos seguros WordPress: guía hardening 2026 - Seguridad en Wordpress
Guía práctica 2026 para auditar y corregir permisos de archivos y carpetas en WordPress: valores recomendados, comandos CHMOD y automatización con constantes.
seguridadenwordpress.com
May 19, 2026 at 4:17 AM
Permisos seguros WordPress: guía hardening 2026
¿Tus archivos WordPress tienen permisos 777? Auditá y corregí permisos seguros WordPress hardening con 2 comandos SSH antes de que un atacante lo haga p...
#permisoswordpress #hardeningwordpress #wpscan #chmodwordpress #seguridadwordpress
¿Tus archivos WordPress tienen permisos 777? Auditá y corregí permisos seguros WordPress hardening con 2 comandos SSH antes de que un atacante lo haga p...
#permisoswordpress #hardeningwordpress #wpscan #chmodwordpress #seguridadwordpress
WordPress powers many sites on the internet. But because of this, it's a popular target for attackers. But you can use tools like WPScan to help find vulnerabilities. In this guide, Marco walks you through different scan types & explains how to use the results.
www.freecodecamp.org/news/how-to-...
www.freecodecamp.org/news/how-to-...
March 23, 2025 at 8:01 AM
WordPress powers many sites on the internet. But because of this, it's a popular target for attackers. But you can use tools like WPScan to help find vulnerabilities. In this guide, Marco walks you through different scan types & explains how to use the results.
www.freecodecamp.org/news/how-to-...
www.freecodecamp.org/news/how-to-...
Aí é foda, usar wpscan em um site que nao usa wordpress kkkkkk
September 6, 2024 at 10:53 AM
Aí é foda, usar wpscan em um site que nao usa wordpress kkkkkk
WordPress güvenlik raporu: 2024 WordPress güvenlik raporu, web sitelerinin sürekli yaptığı hataları gösteriyor. wolkanca.com/wordpress-gu... #Rapor #WebGüvenliği #WordPress #WordPressDev #WPScan
WordPress güvenlik raporu
2024 WordPress güvenlik raporu, web sitelerinin sürekli yaptığı hataları gösteriyor. ⋯ WordPress güvenlik raporu Rapor, Web Güvenliği, WordPress, WordPress Dev, WPScan
wolkanca.com
April 22, 2024 at 10:56 AM
WordPress güvenlik raporu: 2024 WordPress güvenlik raporu, web sitelerinin sürekli yaptığı hataları gösteriyor. wolkanca.com/wordpress-gu... #Rapor #WebGüvenliği #WordPress #WordPressDev #WPScan
Eu só uso quando ele tem alguma ferramenta que não quero instalar pq.nunca uso 🤣🤣🤣
Tipo nmap, wpscan e metasploit
Tipo nmap, wpscan e metasploit
December 17, 2024 at 12:02 AM
Eu só uso quando ele tem alguma ferramenta que não quero instalar pq.nunca uso 🤣🤣🤣
Tipo nmap, wpscan e metasploit
Tipo nmap, wpscan e metasploit
I no longer rely on Jetpack Protect. Instead, I’ve built a lean, hardened WordPress security stack using mod_security, Fail2Ban, WPScan, and a few carefully configured rules. No black boxes. No bloat. Just tools I trust.
#WordPress #Infosec #SelfHosting #WebSecurity #JetpackProtect #Fail2Ban…
#WordPress #Infosec #SelfHosting #WebSecurity #JetpackProtect #Fail2Ban…
Building My Own WordPress Security Stack
I no longer rely on Jetpack Protect. Instead, I’ve built a lean, hardened WordPress security stack using mod_security, Fail2Ban, WPScan, and a few carefully configured rules. No black boxes. No bloat. Just tools I trust.
islandinthenet.com
July 19, 2025 at 2:15 PM
I no longer rely on Jetpack Protect. Instead, I’ve built a lean, hardened WordPress security stack using mod_security, Fail2Ban, WPScan, and a few carefully configured rules. No black boxes. No bloat. Just tools I trust.
#WordPress #Infosec #SelfHosting #WebSecurity #JetpackProtect #Fail2Ban…
#WordPress #Infosec #SelfHosting #WebSecurity #JetpackProtect #Fail2Ban…
Not many, feature-wise. Wpscan "was the first", so it's a favorite for many in the Infosec industry. That's all.
May 29, 2023 at 9:34 PM
Not many, feature-wise. Wpscan "was the first", so it's a favorite for many in the Infosec industry. That's all.
A new AI review! ajinabraham/CMSScan ⭐2.9/5.0
CMSScan is a small Flask-based “security dashboard” that orchestrates several well-known CMS scanners (WPScan, Droopescan, Joomscan, VBScan) and stores results in a local SQLite database for viewing via a web UI.
https://gitrated.com/ajinabraham/CMSScan
CMSScan is a small Flask-based “security dashboard” that orchestrates several well-known CMS scanners (WPScan, Droopescan, Joomscan, VBScan) and stores results in a local SQLite database for viewing via a web UI.
https://gitrated.com/ajinabraham/CMSScan
April 10, 2026 at 3:50 PM
A new AI review! ajinabraham/CMSScan ⭐2.9/5.0
CMSScan is a small Flask-based “security dashboard” that orchestrates several well-known CMS scanners (WPScan, Droopescan, Joomscan, VBScan) and stores results in a local SQLite database for viewing via a web UI.
https://gitrated.com/ajinabraham/CMSScan
CMSScan is a small Flask-based “security dashboard” that orchestrates several well-known CMS scanners (WPScan, Droopescan, Joomscan, VBScan) and stores results in a local SQLite database for viewing via a web UI.
https://gitrated.com/ajinabraham/CMSScan
The problem isn't the public. The problem are the WordPress security providers that know these are not really vulnerabilities and hype them over and over.
Through Automattic, Matt Mullenweg controls one of the providers, WPScan, that has been doing this for years.
Through Automattic, Matt Mullenweg controls one of the providers, WPScan, that has been doing this for years.
October 8, 2024 at 6:42 PM
The problem isn't the public. The problem are the WordPress security providers that know these are not really vulnerabilities and hype them over and over.
Through Automattic, Matt Mullenweg controls one of the providers, WPScan, that has been doing this for years.
Through Automattic, Matt Mullenweg controls one of the providers, WPScan, that has been doing this for years.