# Enumeración de CMS

### Wordpress

Enumeración de temas y plugins Wordpress

**Nmap**

```bash
nmap -p80 --script http-wordpress-enum --script-args http-wordpress-enum.root='/wordpress',search-limit=1000 remote.nyx
```

**Wpscan**

```bash
wpscan --url http://192.168.1.10/wordpress --api-token $WP_TOKEN --plugins-detection aggressive
```

> La variable de entorno `$WP_TOKEN` contiene el token generado en la web <https://wpscan.com/>

**Nuclei**

```bash
nuclei -u http://remote.nyx/wordpress/ -tags fuzz -t /home/d4redevil/.local/nuclei-templates/http/fuzzing/wordpress-plugins-detect.yaml
```

**Gobuster**

```bash
gobuster dir -u http://remote.nyx/wordpress/ -w /usr/share/seclists/Discovery/WebContent/CMS/wp-plugins.fuzz.txt
```

### Joomla

[**joomscan**](https://github.com/OWASP/joomscan)

```bash
joomscan -u http://192.168.1.10
```

### Drupal

[droopescan](https://github.com/SamJoan/droopescan)

```bash
droopescan scan drupal -u http://example.org/ -t 32
```

### Magento

[magescan](https://github.com/steverobbins/magescan)

```bash
php magescan.phar scan:all <https://example.com>
```
