search

wpscanteam / wpscan

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com
https://wpscan.com/wordpress-cli-scanner
Other
8.49k stars 1.25k forks source link

Scan Aborted: --passwords 'rockyou.txt' is not a file #1288

Closed getstitched closed 5 years ago

getstitched commented 5 years ago

Ok so over the past several days I have tried everything I could to not post here. Ive searched read everything found and tried everything suggested to others to solve this issue.

I have an installation of Kali Linux on a windows 10. That said I am sure I am missing something here as I have my rockyou.txt file on my desktop.

When I run: wpscan --url someurlhere.com --passwords C:\Users\stitch\Desktop\rockyou.txt --username someusernamehere

It always comes back as: Scan Aborted: --passwords 'C:UsersStitch' is not a file

i've tried many different variations of the files path and it always comes back as "is not a file". I have seen many threads and comments suggesting to "mount" the .txt file to docker but I have not been able to find information on how to do so.

I have also already seen this thread and am just not sure how to run it properly I suppose. Id greatly appreciate the help guys.

erwanlr commented 5 years ago

How is Kali installed on your W10 ? If in a VM, then https://www.cyberpratibha.com/blog/how-do-i-use-rockyou-wordlist-txt-in-kali-linux/

firefart commented 5 years ago

You use a windows path on a linux vm. if you use the linux for windows subsystem expect things to fail in kali, as there are a lot limitations. Also try to double encode the backslashes with \\

getstitched commented 5 years ago

@FireFart tried, same thing. Whats the work around? Just to have a dedicated linux OS rather then the installation on windows? Id imagine there's gotta be a way to make it work as the Enumerate function works as it should.

firefart commented 5 years ago

@getstitched sorry but if you type in your problem into google the first hit is already the solution to your problem. C: is mounted under /mnt/c and can be accessed there. Please use google before opening issues

bilaliyah commented 3 years ago

root@darkbil:/home/darkbil/Desktop# wpscan --url https://dhaanish.com/ -e u -U dait -P /home/darkbil/Desktop/wordlist.txt

Scan Aborted: --passwords '/home/darkbil/Desktop/wordlist.txt' is not a file

firefart commented 3 years ago

as the error message says: '/home/darkbil/Desktop/wordlist.txt' is not a file