Klementinus Kennyvito Salim

A method to get access into someone’s account is to brute force the username and passwords. However, we need a real and valid username first before brute force the password. Hence, we use WPS enumerate user

The command in kali linux : wpscan –url target –enumerate u

We will test on pentest.id

On the above example, there are some usernames found such as admin-2.