Tool
WPScan
- First Reported
- Feb 17, 2026
- Latest Reported
- Oct 9, 2026
Reported Context (7)
- The actors use BBScan, dirsearch, Fscan, ksubdomain, masscan, Nmap, OneForAll, ShuiZe, and WPScan to identify potential targets. CISA Details How China-Linked Actors Steal Sensitive Data
- Typhoon was also seen using BBScan, dirsearch, Fscan, ksubdomain, masscan, Nmap, OneForAll, ShuiZe, and WPScan for reconnaissance, and command-line exploit utilities and the EBurst Microsoft Exchange password US Disrupts Chinese State-Linked Hacking Tools Used Against Critical Infrastructure
- by open-source tooling like BBScan, dirsearch, Fscan, ksubdomain, masscan, NMAP, OneForAll, ShuiZe, and wpscan that are used to find vulnerabilities in networks and web-based applications. FBI Disrupts Flax Typhoon Tools Used to Target Critical Infrastructure
- The hackers look for flaws in networks and web applications with open-source scanners such as Nmap, masscan, and WPScan, the advisory said. Their scans focus on ports 21, 22, 53, 80, 443, and 1080. FBI Says China-Linked Hackers Stole Emails and Gave Third Parties Access
- Searching the phrase below returns matching options from drupwn, enum4linux-ng, impacket, NetExec, rpcclient, sqlmap, windapsearch, wpscan, and more. Arsenal-NG Offers a Searchable Command Launcher for Penetration Testing
CVE (1)
Malware (13)
People (7)
Threat Actors (21)
MITRE ATT&CK (35)
Vendors (11)
Products (43)
Tools (68)
Industries (13)
Countries (9)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.