WPScan is a free, for non-commercial use, black box WordPress security scanner written for security professionals and blog maintainers to test the security of their WordPress websites.

WPScan rewritten in Python + some WPSeku ideas

*Frequently Updated. Sifter is a osint, recon & vulnerability scanner. It combines a plethara of tools within different module sets in order to quickly perform recon tasks, check network firewalling, enumerate remote and local hosts, and scan for the 'blue' vulnerabilities within microsft and if unpatched, exploit them. It uses tools like blackwidow and konan for webdir enumeration and attack surface mapping rapidly using ASM.

Docker images for infosec tools

⚡ Wordpress vulnerability Scanner ⚡

Wordpress Watcher is a Python wrapper for WPScan that manages scans on multiple sites and reports by email

All In One Tools Hacking

WordPress vulnerability scanner

WPScan is a black box WordPress vulnerability scanner.

A little bash script to automaticlly enumerate wordpress Users and Wordpress Vulnerabillities

Wordpress Plugins List

WP Tests is a fantastically exhaustive set of tools to help you test and measure the integrity of your WordPress site.

WPScan plugin for the Dradis Framework

Fork of WPScan for Prestashop

Security Plugin for WordPress

simple bash script to WPSCAN from targets file

WPScan is a free, for non-commercial use, black box WordPress Vulnerability Scanner written for security professionals and blog maintainers to test the security of their WordPress websites.

Security plugin for Wordpress: No User Enumeration. https://wordpress.org/plugins/no-user-enumeration/

A Ruby framework designed to aid in the penetration testing of WordPress systems.

Python parser for WPScan output files (JSON and CLI). It analyze vulnerabilities, miscellaneous alerts and warnings and other findings.