+ Initialize Phase:
Get Wordpress Plugins
Get Joomla Plugins
Get Drupal Plugins

+ CMS Type Detection

+ Wordpress Scan:
Version
Theme
Plugins
Config Files
Username Enumeration Via Feed 
Username Enumeration Via Author 
Username Enumeration Via Forgotten Password
Full Path Disclosure Via Hello plugin
Directories Listing
Vulnerable Plugins
Default Files

+ Joomla Scan:
Version
Template
Components
Config Files
Vulnerable Components
Directories Listing
Default Files

+ Drupal Scan:
Version
Theme
Config Files
Username Enumeration via Views Module
Username Enumeration via Blog Module
Username Enumeration via Forgotten Password
Modules
Vulnerable Modules
Directories Listing
Default Files

+ WP Brute Forcing Attack
+ Joomla Brute Forcing Attack
+ Drupal Brute Forcing Attack

+ Generic Checks
Directory Listing
HTTPS Check
Autocomplete Off
Robots.txt