Wordpress has never been safer!

Fun fact: WP-SCAN won’t allow you to scan wordpress.blogspot or whatever sites. Fix is easy!

Go to where wp-scan libs are (Prob /usr or /opt
(/opt/wpscan/lib/wpscan/wp_target.rb) for me.

change the lines:

def wordpress_hosted?
 @uri.to_s =~ /.*\.wordpress.blogspot.com/i

TO

def wordpress_hosted?
 @uri.to_s =~ /\.qqqqqqqqqqqqqqqqqq\.com/i

Afterwards wp-scan will work just fine on blogspot sites.

8 Likes