wpscan
AGENTS.md9.8k starsChanged 8 years agoLicence not identifiedView on GitHub
WPScan is a WordPress security scanner written in Ruby. It provides WordPress-specific scanning capabilities including vulnerability detection, enumeration, and password attacks. Key characteristics: - Ruby gem with CLI tool -…
Trending
Less talk lately.about the whole repository
Who's talking about wpscanteam/wpscan
- Stack Overflow“Run a Ruby Script with Python”Stack Overflow · Mar 17, 2016 · 5 votes
- A Hacker News story“WPScan: WordPress Security Scanner”Hacker News · Dec 24, 2025 · 3 points
- renzu0/Red-team“红队和蓝队资料集锦”GitHub · Feb 2, 2021 · 2 reactions
- YunoHost/issues“Install and configure security tools related to a standard use of ynh”GitHub · Aug 13, 2019 · 2 reactions
- chenrui333/homebrew-tap“wpscan 4.2.0”GitHub · Oct 27, 2026 · 1 reactions
The biggest 5 of 55 mentions linking to the repository that our crawl found. Each line is their own headline.
See all 55
Talked about on GitHub, Stack Overflow and Hacker News (55 times).
On GitHub · 50
- Feb 2, 2021红队和蓝队资料集锦 — renzu0/Red-team2 reactions
- Aug 13, 2019Install and configure security tools related to a standard use of ynh — YunoHost/issues2 reactions · 1 comment
- Oct 27, 2026wpscan 4.2.0 — chenrui333/homebrew-tap1 reaction · 1 comment
- Jul 23, 2026wpscan 4.1.0 — chenrui333/homebrew-tap1 reaction
- Jul 8, 2026wpscan 4.0.1 — chenrui333/homebrew-tap1 reaction
45 more on GitHub
- May 19, 2026wpscan 4.0.0 — chenrui333/homebrew-tap1 reaction
- May 4, 2026wpscan 3.8.28 — chenrui333/homebrew-tap1 reaction
- Sep 10, 2020Update regex pattern for WP Duplicator plugin installer-log — projectdiscovery/nuclei-templates1 reaction · 1 comment
- Jul 18, 2016XSS with user name — refined-github/refined-github1 reaction · 3 comments
- Sep 28, 2014All version of Ruby core dump in ethon running wpstools (wpscan) — typhoeus/ethon1 reaction · 8 comments
- Oct 11, 2026Fix brew audit offenses in the wpscan formula — wpscanteam/homebrew-tap0 reactions
- Aug 8, 2026# Run the tool python marokk.py # Enter password: mro # Choose a category (1-5) # Enter a tool name to run it # Use 'i' to check if a tool is installed and get install instructions # Use 'd' to download the tool's GitHub repo — omarmora20300-lgtm/-0 reactions
- Jun 5, 2026wpscan: 3.8.28 -> 4.0.0 — NixOS/nixpkgs0 reactions · 1 comment
- Jan 19, 2026Enable builds for Ruby 4.0 and -head — wpscanteam/CMSScanner0 reactions · 3 comments
- Oct 19, 2025Fix wpscan history — ThePorgs/Exegol-images0 reactions
- Jun 27, 2025thl_Offensive — 7r1UMPHK/7r1UMPHK.github.io0 reactions
- Jun 27, 2025hmv_canto — 7r1UMPHK/7r1UMPHK.github.io0 reactions
- Jun 27, 2025hmv_buster — 7r1UMPHK/7r1UMPHK.github.io0 reactions
- Jun 27, 2025hmv_Disguise靶机渗透测试详解 — 7r1UMPHK/7r1UMPHK.github.io0 reactions
- May 16, 2025hmv_Disguise靶机渗透测试详解 — 7r1UMPH/7r1UMPH.github.io0 reactions
- Mar 27, 2025Ensure scan_aborted error message is contextual — wpscanteam/CMSScanner0 reactions · 2 comments
- Mar 20, 2025thl_Offensive — 7r1UMPH/7r1UMPH.github.io0 reactions
- Mar 20, 2025hmv_canto — 7r1UMPH/7r1UMPH.github.io0 reactions
- Mar 20, 2025hmv_buster — 7r1UMPH/7r1UMPH.github.io0 reactions
- Jan 5, 2025wpscan — WeakSpotter/WeakSpotter0 reactions
- Sep 5, 2024wpscan 3.8.27 — Neved4/homebrew-tap0 reactions
- Sep 5, 2024wpscan 3.8.26 — Neved4/homebrew-tap0 reactions
- Aug 28, 2024brew wpscan error — wpscanteam/homebrew-tap0 reactions · 6 comments
- May 25, 2024Add support for SAML authentication — wpscanteam/CMSScanner0 reactions · 2 comments
- Jan 8, 2024Wordpress Security Scanner — CERT-Polska/Artemis-modules-extra0 reactions · 6 comments
- Oct 13, 2023net-analyzer/wpscan: Bump dev-ruby/cms_scanner dependency version. — pentoo/pentoo-overlay0 reactions · 1 comment
- Mar 14, 2023Protect external WP-Cron — linuxfoundation/lfevents0 reactions · 3 comments
- Feb 2, 2023[DownloadRequest] UMGC — init6security/DownloadRequestList0 reactions · 1 comment
- Jan 19, 2023[addtool] offensive github tools — gwen001/offsectools_www0 reactions · 1 comment
- Nov 11, 2022Added basic Wordpress Plugin Rules — semgrep/semgrep-rules0 reactions · 8 comments
- Aug 24, 2022plugins not visible — lukaspustina/wpscan-analyze0 reactions · 1 comment
- Sep 22, 2021Updated `WPScan` scanner to latest release v3.8.19 — secureCodeBox/secureCodeBox0 reactions
- Aug 27, 2021Detect WPScan Public Source License — aboutcode-org/scancode-toolkit0 reactions · 4 comments
- Jul 10, 2021wpscan: 6.1.3.2 -> 6.1.4 — NixOS/nixpkgs0 reactions · 1 comment
- Jun 1, 2021wpscan: 3.7.5 -> 3.8.17 — NixOS/nixpkgs0 reactions · 1 comment
- Jan 18, 2021红队和蓝队资料集锦 — boluoha/-blog-0 reactions · 15 comments
- Sep 8, 2020Add WordPress Interesting Findings — projectdiscovery/nuclei-templates0 reactions
- Mar 1, 2020Create README.md — mosop12/hasgen.py0 reactions · 1 comment
- Aug 1, 2019Install WPScan — pothi/wp-in-a-box0 reactions
- Aug 11, 2018satrio — satriobintang1bersaudara/satrio0 reactions
- Sep 12, 2017New Role: wpscan — leesoh/yams0 reactions
- Jan 1, 2015update wordpress readme regex — rapid7/metasploit-framework0 reactions
- Feb 21, 2014WPScan integration plugins — cr0hn/golismero-legacy0 reactions · 2 comments
- Nov 14, 2013RFE: please add WPScan to the list of usable scanners — seccubus/seccubus0 reactions
- Aug 21, 2013Wordpress mixin — rapid7/metasploit-framework0 reactions · 54 comments
On Stack Overflow · 3
- Mar 17, 2016Run a Ruby Script with Python5 votes · 2 answers
- Jan 15, 2022I want to run wpscan on Ubuntu vps server, but getting ruby errors0 votes
- Aug 12, 2016WPScan - [ERROR] incompatible library version ruby/2.3.0/gems/ffi-1.9.14/lib/ffi_c.so0 votes
On Hacker News · 2
- Dec 24, 2025WPScan: WordPress Security Scanner3 points · 1 comment
- Oct 26, 2015WPScan, a black box WordPress vulnerability scanner1 point
Where files are headingNew AGENTS.md files have more rules about keeping secrets out of the code, and fewer about code style.
Of the AGENTS.md files we read, the 31,439 first seen in the last six months, against the older ones: the kind of rule that gained most share, and the kind that lost most. About files like this in general, not this one, and an estimate, since a kind is a pattern in the words.
In this repositoryOne other file it gives its agents.
- CLAUDE.mdCLAUDE.md
The file
We split this AGENTS.md into the rules it gives an agent
3 rules. About 0 are common, 0 are distinctive, and 3 are very specific to this project.
≈0
Common · estimate
Many files like this have a rule of this kind.
≈0
Distinctive · estimate
This author's own choices. Worth a look.
3
Very specific
Tied to their project's names, files or tools. Probably skip.
The licence could not be identified — read it at the source. We count its rules but don't quote them. Read them on GitHub.
≈ “Common” is an estimate: at least 1 in 5 of the 40,246 AGENTS.md files we read have a rule of the same kind, not the same words. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.
Does it work?
Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.
No reviews yet
People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.
- It worked
- Partly
- It didn't
Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Now do this for your own.
Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

