Hardhat-Enterprises / Deakin-Detonator-Toolkit

Deakin Detonator Toolkit redesign using Tauri, React and Mantine.
11 stars 19 forks source link

[Bug]: WPScan requires field for API token #650

Open michaeljpigott opened 3 months ago

michaeljpigott commented 3 months ago

Name of Bug

WPScan requires field for API token

What Happened?

To access the full features of WPScan, you are required to register with the WPScan website: https://wpscan.com/

Upon registration, the website provides you with an API token. You can then enter that token into the terminal using the parameter --api-token, which gives you WPScan's full functionality.

It would probably make sense to have API token as a default field and instructions about registering for an API token included in the tooltip.

Steps to Reproduce

  1. Open DDT
  2. Enter the URL of the WordPress website
  3. Click the Scan button.

The output says "You can get a free API token with 25 daily requests by registering at https://wpscan.com/register" and it finds no vulnerabilities. image