garfield/wpscan
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Improves the Plugins & Themes passive detection, fixes #674

Browse Source
This commit is contained in:
erwanlr
2014-09-01 18:28:09 +02:00
parent 94fdddb056
commit 03618f38b5
6 changed files with 119 additions and 78 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
spec/lib/common/collections/wp_items_spec.rb
View File

@@ -18,12 +18,21 @@ describe WpItems do
vulnerable_targets_items: [ WpItem.new(uri, name: 'mr-smith'),
WpItem.new(uri, name: 'neo')],
passive_detection: WpItems.new << WpItem.new(uri, name: 'js-source') <<
WpItem.new(uri, name: 'escaped-url') <<
WpItem.new(uri, name: 'link-tag') <<
WpItem.new(uri, name: 'script-tag') <<
WpItem.new(uri, name: 'style-tag') <<
WpItem.new(uri, name: 'style-tag-import')
# Any better way to do this ? :x
passive_detection: WpItems.new << WpItem.new(uri, name: 'detect-me-1') <<
WpItem.new(uri, name: 'detect-me-2') <<
WpItem.new(uri, name: 'detect-me-3') <<
WpItem.new(uri, name: 'detect-me-4') <<
WpItem.new(uri, name: 'detect-me-5') <<
WpItem.new(uri, name: 'detect-me-6') <<
WpItem.new(uri, name: 'detect-me-7') <<
WpItem.new(uri, name: 'detect-me-8') <<
WpItem.new(uri, name: 'detect-me-9') <<
WpItem.new(uri, name: 'detect-me-10') <<
WpItem.new(uri, name: 'detect-me-11') <<
WpItem.new(uri, name: 'detect-me-12') <<
WpItem.new(uri, name: 'detect-me-13') <<
WpItem.new(uri, name: 'detect-me-14')
}
end
end

3
spec/lib/common/collections/wp_plugins_spec.rb
View File

@@ -19,8 +19,7 @@ describe WpPlugins do
vulnerable_targets_items: [ WpPlugin.new(uri, name: 'mr-smith'),
WpPlugin.new(uri, name: 'neo')],
passive_detection: WpPlugins.new << WpPlugin.new(uri, name: 'js-source') <<
WpPlugin.new(uri, name: 'escaped-url') <<
passive_detection: WpPlugins.new << WpPlugin.new(uri, name: 'escaped-url') <<
WpPlugin.new(uri, name: 'link-tag') <<
WpPlugin.new(uri, name: 'script-tag') <<
WpPlugin.new(uri, name: 'style-tag') <<