wordpress插件漏洞扫描

WPscan http://code.google.com/p/wpscan/ root@bt5:/tmp# svn checkout http://wpscan.googlecode.com/svn/trunk/ ./wpscan
root@bt5:/tmp# apt-get install libcurl4-gnutls-dev
root@bt5:/tmp# gem install --user-install mime-types typhoeus nokogiri json
root@bt5:/tmp/wpscan# ruby wpscan.rb --url www.target.com --enumerate p
Plecost
root@bt5:/pentest/web/scanners/plecost# ./plecost-0.2.2-9-beta.py -i wp_plugin_list.txt -c http://www.target.com/ CMS-Explorer
root@bt5:/pentest/enumeration/web/cms-explorer# ./cms-explorer.pl -url http://www.target.com/ -explore -type wordpress
root@bt5:/pentest/enumeration/web/cms-explorer# ./cms-explorer.pl -url http://www.target.com/ -explore -type wordpress -osvdb
PluginsScan
root@bt5:/tmp# ./PluginsScan.py