🌐 Ethical Hacking Tutorial: WordPress Security Testing with WPScan 🚨

Objective: Use WPScan to uncover vulnerabilities in WordPress sites ethically.


🛠 Setup WPScan

Install:

sudo apt install wpscan

API Key: Get one at wpscan.com.


🔍 Key Commands

1. Scan the Website:

wpscan --url http://example.com


2. Find Plugins:

wpscan --url http://example.com --enumerate p


3. List Users:

wpscan --url http://example.com --enumerate u


⚠️ Brute Force (Authorized Only)

Test weak passwords:

wpscan --url http://example.com --passwords passwords.txt


💡 Tips: Use only with permission! Update plugins/themes and enable 2FA to secure WordPress sites. 🔒