TD Cyber Labs

Cyber LabsBY TUTORIALS DOJO

Labs Tool Trainers Learning Paths Docs

No sign-in required

BackCyber Labs / WordPress Assessment with WPScan Simulated 0 / 90 pts

WordPress Assessment with WPScan

A marketing site runs WordPress. Enumerate its version, plugins and users with WPScan, then identify the vulnerable plugin and a valid author.

Available tools: wpscan · curl · whatweb · ffuf
Target: blog.corp.lab (10.10.10.90)

✓

What WordPress version is running?

20 pts

Run wpscan against the URL.

✓

Which plugin is vulnerable to RCE? (slug)

35 pts

Enumerate vulnerable plugins with --enumerate vp.

✓

Name the non-admin author account

35 pts

Enumerate users with --enumerate u.

Applications

target 10.10.10.90--:--

learner@kali: ~ — Terminal

Congratulations!

You completed WordPress Assessment with WPScan.

Points: 0 / 90
Tasks solved: 0 / 3