WPScan

WPScan is a very fast WordPress vulnerability scanner written in the Ruby programming language and preinstalled in Kali Linux.

The following information can be extracted using WPScan:

  • The plugins list
  • The name of the theme
  • Weak passwords and usernames using the brute forcing technique
  • Details of the version
  • Possible vulnerabilities

Some additional CMS tools available in Kali Linux are listed in following subsections.