garfield/wpscan
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Ensures that the version detected by stylesheets is present more than once. Ref #478

Browse Source
This commit is contained in:
erwanlr
2015-01-08 23:26:36 +01:00
parent 6221601376
commit 03ab396353
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
lib/common/models/wp_version/findable.rb
View File

@@ -117,7 +117,7 @@ class WpVersion < WpItem
def find_from_stylesheets_numbers(target_uri) def find_from_stylesheets_numbers(target_uri)
wp_versions = WpVersion.all wp_versions = WpVersion.all
found = {} found = {}
pattern = /ver=([0-9\.]+)/i pattern = /\bver=([0-9\.]+)/i
Nokogiri::HTML(Browser.get(target_uri.to_s).body).css('link,script').each do |tag| Nokogiri::HTML(Browser.get(target_uri.to_s).body).css('link,script').each do |tag|
%w(href src).each do |attribute| %w(href src).each do |attribute|
@@ -138,7 +138,8 @@ class WpVersion < WpItem
found.delete_if { |v, _| !wp_versions.include?(v) } found.delete_if { |v, _| !wp_versions.include?(v) }
best_guess = found.sort_by(&:last).last best_guess = found.sort_by(&:last).last
best_guess ? best_guess[0] : nil # best_guess[0]: version number, [1] numbers of occurences
best_guess && best_guess[1] > 1 ? best_guess[0] : nil
end end
# Uses data/wp_versions.xml to try to identify a # Uses data/wp_versions.xml to try to identify a