WHAT CAN WPSCAN DO? -Information about WordPress version and update can be obtained. -Information about plugins and themes on the target site can be obtained. -Usernames of authors and administrators on the target site can be found. -Brute-force attacks can be made. -Information about security vulnerabilities on the target site can be obtained. HOW TO USE WPSCAN? You can see the parameters of the tool by typing the "wpscan --h" command in the terminal .
MOST USED COMMANDS To perform a general scan of the target site
To see the plugins on the target site
For plugins with security vulnerabilities on the target site
For theme information on the target site
To see the vulnerabilities in the theme on the target site
To learn all usernames such as author, administrator, etc. on the target site