Update Cheat Sheet.md

This commit is contained in:
ARZ 2021-03-27 23:41:59 +05:00 committed by GitHub
parent 090d68b7d0
commit 8ab30cc61c
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -387,7 +387,7 @@ Here `api-endpoint` can be for example `/api/v1/resources/books\?FUZZ\=.bash_his
### Wordpress
using wpscan we can find users or do some further enumeration of wordpress version
* `wpscan --url http://<ip>/wordpress -e u` Enumerate Users
* `wpscan --url http://<ip>/wordpress -e ap` Enumearte All plugins
* `wpscan --url http://<ip>/wordpress -e ap --plugins-detection aggressive` Enumearte All plugins
To bruteforce passwords
* `wpscan --url <ip> -U user_file_path -P password_file_path`