WP Scan

Sometimes your target has running a WordPress website running on their end. There is also a tool which allows you to scan such websites.

This is how you run an overall scan

wpscan --url http://10.10.10.10/wordpress -e vp,u

When you found a username you can also start a Brute-Force attack on the Website:

wpscan --url http://10.10.10.10/wordpress  --usernames admin --passwords /usr/share/wordlists/rockyou.txt --max-threads 50