WPScan is a black box WordPress vulnerability scanner. hint about GEM_FLAGS and MODRUBY_HANDLE_FLAVORS from jeremy@ OK gonzalo@, jasper@