reewardius / wpfinger

wpfinger is a red-team WordPress scanning tool

wpfinger

wpfinger is a red-team WordPress scanning tool.

Features

• Core version detection
• Plugin scanning through fingerprinting
• Vulnerability output, using database from Wordfence

Usage

Update database

wpfinger update

Will update the database with the latest vulnerabilities and plugin fingerprint.

Scan

wpfinger scan -u https://example.com

Flag	Description
--all	Will scan for all plugins, default is vulnerable only
--url	Target WordPress URL

Installation Instructions

From Binary

The installation is easy. You can download the pre-built binaries for your platform from the Releases page.

▶ chmod +x wpfinger
▶ mv wpfinger /usr/local/bin/wpfinger

From Source

▶ go install github.com/LeakIX/wpfinger/cmd/wpfinger@latest
▶ ${GOPATH}/bin/wpfinger -h

Acknowledgements

Vulnerability database is courtesy of Wordfence.