garfield/wpscan
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Detection of the wp-content directory improved

Browse Source
This commit is contained in:
Erwan
2012-09-12 17:11:21 +02:00
parent 397ee2d2be
commit 07a60071bd
3 changed files with 16 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
lib/wpscan/wp_target.rb
View File

@@ -84,10 +84,10 @@ class WpTarget
unless @wp_content_dir unless @wp_content_dir
index_body = Browser.instance.get(@uri.to_s).body index_body = Browser.instance.get(@uri.to_s).body
if index_body[%r{/wp-content/themes/}i] if index_body[%r{/wp-content/(?:themes|plugins)/}i]
@wp_content_dir = "wp-content" @wp_content_dir = "wp-content"
else else
@wp_content_dir = index_body[%r{(?:href|src)=(?:"|')#{@uri}/?(.*)/themes/.*(?:"|')}i, 1] @wp_content_dir = index_body[%r{(?:href|src)=(?:"|')#{@uri}/?([^"']+)/(?:themes|plugins)/.*(?:"|')}i, 1]
end end
end end
@wp_content_dir @wp_content_dir

8
spec/fixtures/wpscan/wp_target/wp_content_dir/wordpress-3.4.1-in-plugins.htm vendored Normal file
View File

@@ -0,0 +1,8 @@
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<link rel="stylesheet" type="text/css" href="http://wordpress-3.4.1/wp-content/plugins/wp-turbo/turbo.css" media="screen" />
<title>Hello</title>
</head>
<body />
</html>

6
spec/lib/wpscan/wp_target_spec.rb
View File

@@ -121,6 +121,12 @@ describe WpTarget do
@expected = "wp-content" @expected = "wp-content"
end end
it "should find the location even if the src or href goes in the plugins dir" do
@target_url = "http://wordpress-3.4.1-in-plugins.htm"
@fixture = fixtures_dir + "/wordpress-3.4.1-in-plugins.htm"
@expected = "wp-content"
end
end end
describe "#wp_plugins_dir" do describe "#wp_plugins_dir" do