wpscan
wpscan copied to clipboard
Change default behaviour
THESE ARE BREAKING CHANGES
Change 1
Currently we run a bunch of things when supplying no arguments.
The proposed change would not run anything when no arguments are supplied, and only run enumeration and other things when the additional arguments are supplied.
Change 2
Currently the default enumeration modes are "mixed", with the exception of plugin enumeration, which is "passive".
A lot of users don't read the documentation before using WPScan and miss this.
The proposed change would change --plugins-detection
default to mixed
.
After changes
- [ ] Update CLI help
- [ ] Update wiki documentation
- [ ] Update Github readme
- [ ] Change version in the PR
Reminder for myself:
- [x] Delete https://github.com/wpscanteam/wpscan/blob/master/app/controllers/enumeration/cli_options.rb#L36
- [x] Remove
default
from https://github.com/wpscanteam/wpscan/blob/master/app/controllers/enumeration/cli_options.rb#L55 and https://github.com/wpscanteam/wpscan/blob/master/app/controllers/enumeration/cli_options.rb#L66 - [x] Remove
--plugins-version-detection passive
from https://github.com/wpscanteam/wpscan/blob/master/app/controllers/aliases.rb#L10