curl -I http://target/wp-login.php

interesting files: /var/www/html/wordpress/wp-config.php

interesting dirs (through url browser): /wordpress/wp-content/uploads/ AND /wordpress/wp-content/plugins/

wpscan --url http://target.com

wpscan --url http://target.com/wordpress

• http://[target]/wp-config.bak (backup path for wordpress websites)

gobuster dir -u http://target2.ine.local/wpcontent/plugins/ -w /usr/share/nmap/nselib/data/wp-plugins.lst

• duplicator