Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Scan Aborted: The number of plugins detected reached the threshold of 100 which might indicate False Positive. It would be recommended to use the --exclude-content-based option to ignore the bad responses. #1862

Open
SandiyosDev opened this issue Sep 17, 2024 · 1 comment

Comments

@SandiyosDev
Copy link

SandiyosDev commented Sep 17, 2024

Scan aborted due to forced threshold set for plugin detections

WPScan: 3.8.27 (Docker) (Latest)
docker run -it --rm wpscanteam/wpscan --url (redacted) -e vp --plugins-detection 'aggressive' --api-token (redacted) --exclude-content-based 'not found' --wp-plugins-dir 'app/plugins'

Steps to reproduce

I'd exclude my site URL here, but we do indeed have over 100 plugins installed, lots of them are Slider Revolution AddOns that are required to install as dedicated plugins.

Expected behavior

What's expected is to have the ability to manually override this default behavior

Actual behavior

image
During Scan, I encountered the error message Scan Aborted: The number of plugins detected reached the threshold of 100 which might indicate False Positive. It would be recommended to use the --exclude-content-based option to ignore the bad responses.

What have you already tried

There's no relevant documentation to override this behavior.

@uqahump3
Copy link

wpscan --hh has more options. What you are looking for appears to be

        --plugins-threshold THRESHOLD             Raise an error when the number of detected plugins via known locations reaches the threshold. Set to 0 to ignore the threshold.
                                                  Default: 100

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants