Why -P does not work with the docker image?

[ssxcxS45XT]

I got the following error. The password file exist. Does anybody know why wpscan still shows an error? Thanks.

$ ls -lgG /tmp/fasttrack.txt
-rw-r--r-- 1 2006 2021/01/01-20:32:39 /tmp/fasttrack.txt
$ docker run -it --rm wpscanteam/wpscan --url website.com -U users.txt -P /tmp/fasttrack.txt

Scan Aborted: --passwords The path '/tmp/fasttrack.txt' does not exist or is not a file

[erwanlr]

You need to mount a volume with your wordlist in your docker container, see https://docs.docker.com/storage/volumes/

[ssxcxS45XT]

But why -U deosn't give the same error. So users.txt doesn't need to be in a volume in the docker container?

[erwanlr]

Because -U accepts either a file path or string, so when the argument given is not a file, it's assumed to be a string with the usernames. In your case, -U users.txt will result in the usernames to target to literally be users.txt and not the content of this file.

-P accepts only a file path, hence the differences

[ssxcxS45XT]

@erwanlr

You need to mount a volume with your wordlist in your docker container ...

There are many example commands covered on the docker help page.

Could you please be specific on the exact commands that I should use to get wpscan work? Thank.

[erwanlr]

You have an example at #1256 (comment)

[ethicalhack3r]

FYI I've added this to our user guide:

https://github.com/wpscanteam/wpscan/wiki/WPScan-User-Documentation#pass-password-list-to-docker-container