How To Install WPScan on Ubuntu
In this tutorial we will show you how to install WPScan in an Ubuntu 14.04. For those of you who didn’t know, WPScan is a black box WordPress vulnerability scanner. You can use it for problem location in case there are any vulnerable WordPress themes or WordPress plugins on your website.
This article assumes you have at least basic knowledge of linux, know how to use the shell, and most importantly, you host your site of your own VPS. The installation is quite simple. I will show you through the step by step installation WPScan in Ubuntu 14.04 server.
Install WPScan on Ubuntu
Step 1. First of all make sure that all packages are up to date.
|
1
2
|
apt–get update
apt–get upgrade
|
Step 2. Install WPScan.
Install all required packages:
|
1
|
apt–get install git ruby–dev ruby1.9.3 libxml2 libxml2–dev libxslt1–dev libcurl4–gnutls–dev
|
Now we need to clone the wpscan package from github:
|
1
2
|
cd /opt
git clone https://github.com/wpscanteam/wpscan.git
|
Once the download is finished, you will need to navigate to the wpscan directory and install the required ruby gems using bundler:
|
1
2
|
cd wpscan
sudo gem install bundler && bundle install —without test
|
To update WPScan, simply use the following command:
|
1
|
ruby wpscan.rb —update
|
How to use WPScan
You can use WPScan through arguments. You can get a complete list of arguments by executing the following command:
|
1
|
ruby wpscan.rb —help
|
Scan WordPress plugins:
|
1
|
ruby wpscan.rb —url http(s)://www.yoursiteurl.com –enumerate p
|
Scan Vulnerable plugins:
|
1
|
ruby wpscan.rb —url http(s)://www.yoursiteurl.com –enumerate vp
|
Scan themes:
|
1
|
ruby wpscan.rb —url http(s)://www.yoursiteurl.com –enumerate t
|
Scan vulnerable themes:
|
1
|
ruby wpscan.rb —url http(s)://www.yoursiteurl.com –enumerate vt
|
Scan user accounts:
|
1
|
ruby wpscan.rb —url http(s)://www.yoursiteurl.com –enumerate u
|
Scan for timthumb installations:
|
1
|
ruby wpscan.rb —url http(s)://www.yoursiteurl.com –enumerate tt
|
Congratulation’s! You have successfully installed WPScan. Thanks for using this tutorial for installing WordPress vulnerability scanner in Ubuntu 14.04 system. For additional help or useful information, we recommend you to check the official WPScan web site.