wpscan update 에러 혹은 업데이트 불가시 해결책

먼저 wpscan을 업데이트 하는 방법은

wpscan --update

이다.

하지만 아래와 같이 오류가 뜰때가 있다.

칼리 기준 스캔 시도할 시 오류가 뜰 때

root@kali:/usr/share/wpscan# ./wpscan.rb -u whackur.com
_______________________________________________________________
        __          _______   _____                  
        \ \        / /  __ \ / ____|                 
         \ \  /\  / /| |__) | (___   ___  __ _ _ __ ®
          \ \/  \/ / |  ___/ \___ \ / __|/ _` | '_ \ 
           \  /\  /  | |     ____) | (__| (_| | | | |
            \/  \/   |_|    |_____/ \___|\__,_|_| |_|

        WordPress Security Scanner by the WPScan Team 
                       Version 2.9.3
          Sponsored by Sucuri - https://sucuri.net
   @_WPScan_, @ethicalhack3r, @erwan_lr, pvdl, @_FireFart_
_______________________________________________________________

[i] It seems like you have not updated the database for some time.
[?] Do you want to update now? [Y]es [N]o [A]bort, default: [N]Y
[i] Updating the Database ...
[!] wordpresses.json: checksums do not match (local: 476f6f11850b2d2d4b3306ca0a567377b8d3c0d317f878d72d63ea86bb2da0f2a0d8179ff323da225fab9f29e02b765b0578db8fa58b787544ca1dc69a23cc7e remote: 53307fc243232e4b3d41a5896926c5ee068c50adac818ebbf26cc267ea25eb86c45e1e7475f4d33fa98475d3ad9b1d58efada816e0f93cb3cc2162651b1a7261)
[!] Downloaded File Content:
{"3.8.1":{"release_date":"2014-01-23","changelog_url":"https://codex.wordpress.org/Version_3.8.1","vulnerabilities":[{"id":5963,"title":"WordPress 1.0 - 3.8.1 administrator exploitable blind SQLi","created_at":"2014-08-01T10:58:19.000Z","updated_at":"2015-05-15T13:47:19.000Z","published_date":null,"references":{"url":["https://security.dxw.com/advisories/sqli-in-wordpress-3-6-1/"]},"vuln_type":"SQLI","fixed_in":null},{"id":5964,"title":"WordPress 3.7.1 \u0026 3.8.1 Potential Authentication Cookie

해시값이 안맞아서 오류가 난다던지

N을 선택해서 업데이트를 안한다고 했음에도 불구하고

─[✗]─[root@parrot]─[~]
└──╼ #wpscan -u whackur.xyz
_______________________________________________________________
        __          _______   _____                  
        \ \        / /  __ \ / ____|                 
         \ \  /\  / /| |__) | (___   ___  __ _ _ __ ®
          \ \/  \/ / |  ___/ \___ \ / __|/ _` | '_ \ 
           \  /\  /  | |     ____) | (__| (_| | | | |
            \/  \/   |_|    |_____/ \___|\__,_|_| |_|

        WordPress Security Scanner by the WPScan Team 
                       Version 2.9.3
          Sponsored by Sucuri - https://sucuri.net
   @_WPScan_, @ethicalhack3r, @erwan_lr, pvdl, @_FireFart_
_______________________________________________________________

[i] It seems like you have not updated the database for some time.
[?] Do you want to update now? [Y]es [N]o [A]bort, default: [N]
[!] You can not run a scan without any databases. Extract the data.zip file.

data.zip 파일을 풀어라고 한다.

해결책은 아래와 같다.

칼리 기준 wpscan이 설치되어있는 폴더는

/var/lib/wpscan

이다.

여기에 zip파일을 풀어주자.

cd ~/Desktop
wget https://github.com/wpscanteam/wpscan/raw/master/data.zip
unzip -D data.zip
cp ~/Desktop/data/* /var/lib/wpscan/data

그러면 정상적으로 잘 작동한다.

주의할 점은 칼리 리눅스 기준이므로 /var/lib/wpscan 의 경로가 다를 수 있다.