WordPress sites are frequent targets. This scanner checks for exposed login pages (wp-login.php), user enumeration endpoints, and exposed readme files.
Ready to scan...
Botnets aggressively target the default login page. Hiding or protecting it reduces server load and brute-force risk.
It is a technique hackers use to discover valid usernames on your site, which is the first step in a brute-force attack.