wpscanteam/wpscan

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com

WPScan WordPress Security Scanner WPScan WordPress Vulnerability Database - WordPress Security Plugin # INSTALL ## Prerequisites - (Optional but highly recommended: [rbenv](https://github.com/rbenv/rbenv)) - Ruby >= 3.3 - Recommended: latest stable - Curl >= 7.72 - Recommended: latest stable - The 7.29 has a segfault - The < 7.72 could result in `Stream error in the HTTP/2 framing layer` in some cases - RubyGems - Recommended: latest stable - Nokogiri might require packages to be installed via your package manager depending on your OS, see https://nokogiri.org/tutorials/installing_nokogiri.html ### In a Pentesting distribution When using a pentesting distribution (such as Kali Linux), it is recommended to install/update wpscan via the package manager if available. ### In macOSX via Homebrew ```shell brew install wpscanteam/tap/wpscan ``` ### From RubyGems WPScan depends on gems with native extensions (e.g. `yajl-ruby`, `nokogiri`, `ffi`), so a working C toolchain and Ruby development headers must be present before `gem install wpscan`. Without them, the install fails with errors like `Failed to build gem native extension` or `make: x86_64-linux-gnu-gcc: No such file or directory` (see [#1844](https://github.com/wpscanteam/wpscan/issues/1844)). - **Debian / Ubuntu**: ```shell sudo apt install build-essential ruby-dev ``` - **Fedora / RHEL / CentOS**: ```shell sudo dnf install @development-tools ruby-devel ``` - **Arch Linux**: ```shell sudo pacman -S base-devel ruby ``` - **Alpine**: ```shell sudo apk add build-base ruby-dev ``` - **macOS**: install the Xcode Command Line Tools (`xcode-select --install`). Then install the gem: ```shell gem install wpscan ``` On MacOSX, if a ```Gem::FilePermissionError``` is raised due to Ap