wpfinger

wpfinger is a red-team WordPress scanning tool.

Features

• Core version detection
• Plugin scanning through fingerprinting
• Vulnerability output, using database from Wordfence

Usage

Update database

wpfinger update

Will update the database with the latest vulnerabilities and plugin fingerprint.

Scan

wpfinger scan -u https://example.com

| Flag | Description | |-------|-------------------------------------------------------| | --all | Will scan for all plugins, default is vulnerable only | | --url | Target WordPress URL |

Installation Instructions

From Binary

The installation is easy. You can download the pre-built binaries for your platform from the Releases page.

▶ chmod +x wpfinger
▶ mv wpfinger /usr/local/bin/wpfinger

From Source

▶ go install github.com/LeakIX/wpfinger/cmd/wpfinger@latest
▶ ${GOPATH}/bin/wpfinger -h

Acknowledgements

Vulnerability database is courtesy of Wordfence.