wpscanteam / wpscan

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com
https://wpscan.com/wordpress-cli-scanner
Other
8.57k stars 1.26k forks source link

Change default behaviour #1628

Open ethicalhack3r opened 3 years ago

ethicalhack3r commented 3 years ago

THESE ARE BREAKING CHANGES

Change 1

Currently we run a bunch of things when supplying no arguments.

The proposed change would not run anything when no arguments are supplied, and only run enumeration and other things when the additional arguments are supplied.

Change 2

Currently the default enumeration modes are "mixed", with the exception of plugin enumeration, which is "passive".

A lot of users don't read the documentation before using WPScan and miss this.

The proposed change would change --plugins-detection default to mixed.

After changes

erwanlr commented 3 years ago

Reminder for myself: