WPscan
http://code.google.com/p/wpscan/
root@bt5:/tmp# svn checkout http://wpscan.googlecode.com/svn/trunk/ ./wpscan
root@bt5:/tmp# apt-get install libcurl4-gnutls-dev
root@bt5:/tmp# gem install --user-install mime-types typhoeus nokogiri json
root@bt5:/tmp/wpscan# ruby wpscan.rb --url www.target.com --enumerate p
Plecost
root@bt5:/pentest/web/scanners/plecost# ./plecost-0.2.2-9-beta.py -i wp_plugin_list.txt -c http://www.target.com/
CMS-Explorer
root@bt5:/pentest/enumeration/web/cms-explorer# ./cms-explorer.pl -url http://www.target.com/ -explore -type wordpress
root@bt5:/pentest/enumeration/web/cms-explorer# ./cms-explorer.pl -url http://www.target.com/ -explore -type wordpress -osvdb
PluginsScan
root@bt5:/tmp# ./PluginsScan.py
本文出自 “Sanr” 博客，请务必保留此出处http://0x007.blog.51cto.com/6330498/1621672
原文：http://0x007.blog.51cto.com/6330498/1621672