This is a simple Bash script which helps to enumerate Wordpress plugins, Without WP-scan. I use this when I don't have to make much noise.
git clone https://github.com/piyush-security/WordPress-Plugin-Enum.git
cd WordPress-Plugin-Enum/ ; chmod 755 Enumerator.sh ; chmod 755 Fresh-Wordlist-Gen.py
pip install -r requirements.txt
Now Before using the bash script I suggest you to update our Wordlist (Plugin-names.txt
).
To do this :
rm Plugin-names.txt
python3 Fresh-Wordlist-Gen.py
Now Its Time To use The Enumerator.sh
..
./Enumerator.sh
cat output.txt