WP Scan

Sometimes your target has running a WordPress website running on their end. There is also a tool which allows you to scan such websites. 

 This is how you run an overall scan 

 wpscan --url http://10.10.10.10/wordpress -e vp,u 

   

 When you found a username you can also start a Brute-Force attack on the Website: 

 wpscan --url http://10.10.10.10/wordpress  --usernames admin --passwords /usr/share/wordlists/rockyou.txt --max-threads 50