wordpress渗透测试系列（二）

libo

枚举用户

命令：

1. wpscan --url http://192.168.3.234:8081 --enumerate u

复制代码

如图：通过枚举我们得到了用户名priess

1. [+] Enumerating plugins from passive detection ...
   
2. [+] No plugins found
   
3. 
   
4. [+] Enumerating usernames ...
   
5. [+] Identified the following 1 user/s:
   
6.     +----+--------+----------+
   
7.     | Id | Login  | Name     |
   
8.     +----+--------+----------+
   
9.     | 1  | priess | priess – |
   
10.     +----+--------+----------+
    

复制代码