Metasploit does not have a module that can perform vulnerability assessment scanning. However, you can write a Metasploit module that acts as a wrapper for a third-party tool such as WPscan, which can be used for vulnerability assessment scanning.
We have written a custom Metasploit module that, on execution, will run WPscan, parse the output, and print it. Though the module is just a rough wrapper code, you can further modify it according to your needs. The following is the sample code for the custom Metasploit module:
- We will start by adding the required libraries as follows:
require 'open3'require 'fileutils'require 'json'require 'pp'
- Then, we add the Metasploit Auxiliary class:
class MetasploitModule ...
