> For the complete documentation index, see [llms.txt](https://dhaneshsivasamy07.gitbook.io/oscp-2022/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://dhaneshsivasamy07.gitbook.io/oscp-2022/enumeration/http-https/cms-exploitation/wordpress.md).

# Wordpress

## Enumeration

* Enumeration via wp-scan

```bash
# enuemrate users
wpscan --url http://url -e u
# perform aggressive scans 
wpscan --url http://url -e u,t,p --detection aggressive --plugins-detection aggressive 
# perform checks on https sites
wpscan --url https://url -e u --disable-tls-checks
```

* Useful locations

```bash
/wp-contents/plugins/
/wp-includes/
```

## Exploitation

* [ttps://book.hacktricks.xyz/pentesting/pentesting-web/wordpress](https://book.hacktricks.xyz/pentesting/pentesting-web/wordpress)