+ Initialize Phase:
Get Wordpress Plugins
Get Joomla Plugins
Get Drupal Plugins

+ CMS Type Detection

+ Wordpress Scan:
Version
Theme
Plugins
Config Files
Username Enumeration Via Feed plugin
Username Enumeration Via Forgotten Password
Full Path Disclosure Via Hello plugin
WP Directories Listing
Vulnerable Plugins
Default Files

+ Joomla Scan:
Version
Components
Config Files
Vulnerable Components
Default Files

+ Drupal Scan:
Version
Config Files
Username Enumeration via Views Module
Username Enumeration via Blog Module
Username Enumeration via Forgotten Password
Modules
Vulnerable Modules
Default Files

+ WP Brute Forcing Attack
+ Joomla Brute Forcing Attack
+ Drupal Brute Forcing Attack

+ Generic Checks
Directory Listing
HTTPS Check
Autocomplete Off