Detection of the wp-content directory improved

2012-09-12 17:11:21 +02:00
parent 397ee2d2be
commit 07a60071bd
3 changed files with 16 additions and 2 deletions
--- a/lib/wpscan/wp_target.rb
+++ b/lib/wpscan/wp_target.rb
@@ -84,10 +84,10 @@ class WpTarget
    unless @wp_content_dir
      index_body = Browser.instance.get(@uri.to_s).body

-      if index_body[%r{/wp-content/themes/}i]
+      if index_body[%r{/wp-content/(?:themes|plugins)/}i]
        @wp_content_dir = "wp-content"
      else
-        @wp_content_dir = index_body[%r{(?:href|src)=(?:"|')#{@uri}/?(.*)/themes/.*(?:"|')}i, 1]
+        @wp_content_dir = index_body[%r{(?:href|src)=(?:"|')#{@uri}/?([^"']+)/(?:themes|plugins)/.*(?:"|')}i, 1]
      end
    end
    @wp_content_dir