# File lib/common_helper.rb, line 106 +# File lib/common_helper.rb, line 111 def _grep_(regexp) matches = [] self.each do |value| diff --git a/doc/Browser.html b/doc/Browser.html index 0ca3928f..cce6590c 100644 --- a/doc/Browser.html +++ b/doc/Browser.html @@ -88,7 +88,7 @@
# File lib/browser.rb, line 60 +# File lib/browser.rb, line 64 def self.instance(options = {}) unless @@instance @@instance = new(options) @@ -330,7 +330,7 @@-# File lib/browser.rb, line 67 +# File lib/browser.rb, line 71 def self.reset @@instance = nil end@@ -366,7 +366,7 @@-# File lib/browser.rb, line 167 +# File lib/browser.rb, line 178 def forge_request(url, params = {}) Typhoeus::Request.new( url.to_s, @@ -399,7 +399,7 @@-# File lib/browser.rb, line 155 +# File lib/browser.rb, line 166 def get(url, params = {}) run_request( forge_request(url, params.merge(:method => :get)) @@ -434,7 +434,7 @@ browser object, hydra will not have the new @max_threads and-# File lib/browser.rb, line 127 +# File lib/browser.rb, line 136 def load_config(config_file = nil) @config_file = config_file || @config_file @@ -472,7 +472,7 @@ browser object, hydra will not have the new @max_threads and-# File lib/browser.rb, line 96 +# File lib/browser.rb, line 101 def max_threads=(max_threads) if max_threads.nil? or max_threads <= 0 max_threads = 1 @@ -505,7 +505,7 @@ browser object, hydra will not have the new @max_threads and-# File lib/browser.rb, line 174 +# File lib/browser.rb, line 185 def merge_request_params(params = {}) if @proxy params = params.merge(:proxy => @proxy) @@ -570,7 +570,7 @@ browser object, hydra will not have the new @max_threads and-# File lib/browser.rb, line 161 +# File lib/browser.rb, line 172 def post(url, params = {}) run_request( forge_request(url, params.merge(:method => :post)) @@ -602,7 +602,7 @@ browser object, hydra will not have the new @max_threads and--# File lib/browser.rb, line 103 +# File lib/browser.rb, line 108 def proxy_auth=(auth) unless auth.nil? if auth.is_a?(Hash) @@ -612,12 +612,15 @@ browser object, hydra will not have the new @max_threads and @proxy_auth = auth elsif auth.is_a?(String) if matches = %r{([^:]+):(.*)}.match(auth) - @proxy_auth = {:proxy_username => matches[1], :proxy_password => matches[2]} + @proxy_auth = { + proxy_username: matches[1], + proxy_password: matches[2] + } else - raise_invalid_proxy_format() + raise_invalid_proxy_auth_format() end else - raise_invalid_proxy_format() + raise_invalid_proxy_auth_format() end end end@@ -631,10 +634,10 @@ browser object, hydra will not have the new @max_threads and++-- raise_invalid_proxy_formatraise_invalid_proxy_auth_format() click to toggle source@@ -646,19 +649,19 @@ browser object, hydra will not have the new @max_threads and --# File lib/browser.rb, line 122 -def raise_invalid_proxy_format - raise "Invalid proxy auth format, expected username:password or {:proxy_username => username, :proxy_password => password}" +++# File lib/browser.rb, line 130 +def raise_invalid_proxy_auth_format + raise 'Invalid proxy auth format, expected username:password or {proxy_username: username, proxy_password: password}' end-@@ -677,15 +680,15 @@ browser object, hydra will not have the new @max_threads and-# File lib/browser.rb, line 84 +# File lib/browser.rb, line 89 def user_agent case @user_agent_mode - when "semi-static" - unless @user_agent - @user_agent = @available_user_agents.sample - end - when "random" + when 'semi-static' + unless @user_agent @user_agent = @available_user_agents.sample + end + when 'random' + @user_agent = @available_user_agents.sample end @user_agent end@@ -715,14 +718,15 @@ browser object, hydra will not have the new @max_threads and-@@ -274,10 +274,10 @@ on large wordlists, although bareable. request_count = 0 password_found = false - File.open(wordlist_path, "r").each do |password| + File.open(wordlist_path, 'r').each do |password| # ignore file comments, but will miss passwords if they start with a hash... - next if password[0,1] == "#" + next if password[0, 1] == '#' # keep a count of the amount of requests to be sent request_count += 1 @@ -290,9 +290,9 @@ on large wordlists, although bareable. # the request object request = Browser.instance.forge_request(login_url, { - :method => :post, - :params => {:log => username, :pwd => password}, - :cache_timeout => 0 + method: :post, + params: { log: URI::encode(username), pwd: URI::encode(password) }, + cache_timeout: 0 } ) @@ -304,20 +304,20 @@ on large wordlists, although bareable. if response.body =~ %rlogin_error/ puts "\nIncorrect username and/or password." if @verbose elsif response.code == 302 - puts "\n " + green("[SUCCESS]") + " Username : #{username} Password : #{password}\n" if show_progression - found << { :name => username, :password => password } + puts "\n " + green('[SUCCESS]') + " Username : #{username} Password : #{password}\n" if show_progression + found << { name: username, password: password } password_found = true elsif response.timed_out? - puts red("ERROR:") + " Request timed out." if show_progression + puts red('ERROR:') + ' Request timed out.' if show_progression elsif response.code == 0 - puts red("ERROR:") + " No response from remote server. WAF/IPS?" if show_progression + puts red('ERROR:') + ' No response from remote server. WAF/IPS?' if show_progression # code is a fixnum, needs a string for regex elsif response.code.to_s =~ %r^50/ - puts red("ERROR:") + " Server error, try reducing the number of threads." if show_progression + puts red('ERROR:') + ' Server error, try reducing the number of threads.' if show_progression else - puts "\n" + red("ERROR:") + " We recieved an unknown response for #{password}..." if show_progression + puts "\n" + red('ERROR:') + " We recieved an unknown response for #{password}..." if show_progression - # ugly method to get the coverage :/ (otherwise some output is present in the rspec) + # HACK to get the coverage :/ (otherwise some output is present in the rspec) puts red("Code: #{response.code.to_s}") if @verbose puts red("Body: #{response.body}") if @verbose puts if @verbose diff --git a/doc/CacheFileStore.html b/doc/CacheFileStore.html index 8274aaa9..1b86f843 100644 --- a/doc/CacheFileStore.html +++ b/doc/CacheFileStore.html @@ -260,19 +260,23 @@# File lib/browser.rb, line 71 +# File lib/browser.rb, line 75 def user_agent_mode=(ua_mode) - ua_mode ||= "static" + ua_mode ||= 'static' if USER_AGENT_MODES.include?(ua_mode) @user_agent_mode = ua_mode - # For semi-static user agent mode, the user agent has to be nil the first time (it will be set with the getter) - @user_agent = nil if ua_mode === "semi-static" + # For semi-static user agent mode, the user agent has to + # be nil the first time (it will be set with the getter) + @user_agent = nil if ua_mode === 'semi-static' else raise "Unknow user agent mode : '#{ua_mode}'" end diff --git a/doc/BruteForce.html b/doc/BruteForce.html index d4a0c730..86a4de4e 100644 --- a/doc/BruteForce.html +++ b/doc/BruteForce.html @@ -224,7 +224,7 @@ on large wordlists, although bareable.# File lib/wpscan/modules/brute_force.rb, line 117 def self.lines_in_file(file_path) lines = 0 - File.open(file_path, 'r').each { || lines += 1 } + File.open(file_path, 'r').each { |_| lines += 1 } lines end-The serializer must have the 2 methods .load and .dump (Marshal and YAML -have them) YAML is Human Readable, contrary to Marshal which store in a -binary format Marshal does not need any “require”
+The serializer must have the 2 methods .load and .dump
+ +(Marshal and YAML have them)+ +YAML is Human Readable, contrary to Marshal which store in a binary format +Marshal does not need any “require”
-# File lib/cache_file_store.rb, line 34 +# File lib/cache_file_store.rb, line 36 def initialize(storage_path, serializer = Marshal) @storage_path = File.expand_path(storage_path) @serializer = serializer - # File.directory? for ruby <= 1.9 otherwise, it makes more sense to do Dir.exist? :/ + # File.directory? for ruby <= 1.9 otherwise, + # it makes more sense to do Dir.exist? :/ unless File.directory?(@storage_path) Dir.mkdir(@storage_path) end @@ -309,7 +313,7 @@ binary format Marshal does not need any “require”-# File lib/cache_file_store.rb, line 44 +# File lib/cache_file_store.rb, line 47 def clean Dir[File.join(@storage_path, '*')].each do |f| File.delete(f) @@ -341,7 +345,7 @@ binary format Marshal does not need any “require”-# File lib/cache_file_store.rb, line 66 +# File lib/cache_file_store.rb, line 69 def get_entry_file_path(key) @storage_path + '/' + key end@@ -371,7 +375,7 @@ binary format Marshal does not need any “require”-# File lib/cache_file_store.rb, line 50 +# File lib/cache_file_store.rb, line 53 def read_entry(key) entry_file_path = get_entry_file_path(key) @@ -405,7 +409,7 @@ binary format Marshal does not need any “require”-# File lib/cache_file_store.rb, line 58 +# File lib/cache_file_store.rb, line 61 def write_entry(key, data_to_store, cache_timeout) if cache_timeout > 0 File.open(get_entry_file_path(key), 'w') do |f| diff --git a/doc/CheckerPlugin.html b/doc/CheckerPlugin.html new file mode 100644 index 00000000..8b862477 --- /dev/null +++ b/doc/CheckerPlugin.html @@ -0,0 +1,483 @@ + + + + + + +class CheckerPlugin - RDoc Documentation + + + + + + + + + + + + + + + + +++ + + + diff --git a/doc/CustomOptionParser.html b/doc/CustomOptionParser.html new file mode 100644 index 00000000..ede810f2 --- /dev/null +++ b/doc/CustomOptionParser.html @@ -0,0 +1,474 @@ + + + + + + +class CheckerPlugin
+ ++ ++ + + + +WPScan - WordPress Security Scanner +Copyright (C) 2012-2013 + +This program is free software: you can redistribute it and/or modify +it under the terms of the GNU General Public License as published by +the Free Software Foundation, either version 3 of the License, or +(at your option) any later version. + +This program is distributed in the hope that it will be useful, +but WITHOUT ANY WARRANTY; without even the implied warranty of +MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +GNU General Public License for more details. + +You should have received a copy of the GNU General Public License +along with this program. If not, see <http://www.gnu.org/licenses/>.+ +++
+ ++ + + + + + + + + + + + ++ + +Public Class Methods
+ + ++ ++ + ++ new() + click to toggle source ++ + ++ + + + + ++ + + + +++ +# File lib/wpstools/plugins/checker/checker_plugin.rb, line 21 +def initialize + super(author: 'WPScanTeam - @erwanlr') + + register_options( + ['--check-vuln-ref-urls', '--cvru', 'Check all the vulnerabilities reference urls for 404'], + ['--check-local-vulnerable-files LOCAL_DIRECTORY', '--clvf', 'Perform a recursive scan in the LOCAL_DIRECTORY to find vulnerable files or shells'] + ) +end++ + +Public Instance Methods
+ + ++ ++ + ++ check_local_vulnerable_files(dir_to_scan) + click to toggle source ++ + ++ + + + + ++ + + + +++ +# File lib/wpstools/plugins/checker/checker_plugin.rb, line 93 +def check_local_vulnerable_files(dir_to_scan) + if Dir::exist?(dir_to_scan) + xml_file = LOCAL_FILES_FILE + local_hashes = {} + file_extension_to_scan = '*.{js,php,swf,html,htm}' + + print '[+] Generating local hashes ... ' + + Dir[File::join(dir_to_scan, '**', file_extension_to_scan)].each do |filename| + sha1sum = Digest::SHA1.file(filename).hexdigest + + if local_hashes.has_key?(sha1sum) + local_hashes[sha1sum] << filename + else + local_hashes[sha1sum] = [filename] + end + end + + puts 'done.' + + puts '[+] Checking for vulnerable files ...' + + xml = Nokogiri::XML(File.open(xml_file)) do |config| + config.noblanks + end + + xml.xpath('//hash').each do |node| + sha1sum = node.attribute('sha1').text + + if local_hashes.has_key?(sha1sum) + local_filenames = local_hashes[sha1sum] + vuln_title = node.search('title').text + vuln_filename = node.search('file').text + vuln_refrence = node.search('reference').text + + puts " #{vuln_filename} found :" + puts ' | Location(s):' + local_filenames.each do |file| + puts " | - #{file}" + end + puts ' |' + puts " | Title: #{vuln_title}" + puts " | Refrence: #{vuln_refrence}" if !vuln_refrence.empty? + puts + end + end + + puts 'done.' + + else + puts "The supplied directory '#{dir_to_scan}' does not exist" + end +end++ ++ + ++ check_vuln_ref_urls() + click to toggle source ++ + ++ + + + + ++ + + + +++ +# File lib/wpstools/plugins/checker/checker_plugin.rb, line 40 +def check_vuln_ref_urls + vuln_ref_files = [PLUGINS_VULNS_FILE, THEMES_VULNS_FILE, WP_VULNS_FILE] + error_codes = [404, 500, 403] + not_found_regexp = %r{No Results Found|error 404|ID Invalid or Not Found} + + puts '[+] Checking vulnerabilities reference urls' + + vuln_ref_files.each do |vuln_ref_file| + xml = Nokogiri::XML(File.open(vuln_ref_file)) do |config| + config.noblanks + end + + urls = [] + xml.xpath('//reference').each { |node| urls << node.text } + + urls.uniq! + + dead_urls = [] + queue_count = 0 + request_count = 0 + browser = Browser.instance + hydra = browser.hydra + number_of_urls = urls.size + + urls.each do |url| + request = browser.forge_request(url, { cache_timeout: 0, follow_location: true }) + request_count += 1 + + request.on_complete do |response| + print "\r [+] Checking #{vuln_ref_file} #{number_of_urls} total ... #{(request_count * 100) / number_of_urls}% complete." + + if error_codes.include?(response.code) or not_found_regexp.match(response.body) + dead_urls << url + end + end + + hydra.queue(request) + queue_count += 1 + + if queue_count == browser.max_threads + hydra.run + queue_count = 0 + end + end + + hydra.run + puts + unless dead_urls.empty? + dead_urls.each { |url| puts " Not Found #{url}" } + end + end +end++ ++ + ++ run(options = {}) + click to toggle source ++ + ++ + + + + ++ + + + +++ +# File lib/wpstools/plugins/checker/checker_plugin.rb, line 30 +def run(options = {}) + if options[:check_vuln_ref_urls] + check_vuln_ref_urls + end + + if options[:check_local_vulnerable_files] + check_local_vulnerable_files(options[:check_local_vulnerable_files]) + end +end+class CustomOptionParser - RDoc Documentation + + + + + + + + + + + + + + + + +++ + + + diff --git a/doc/GenerateList.html b/doc/GenerateList.html new file mode 100644 index 00000000..10029895 --- /dev/null +++ b/doc/GenerateList.html @@ -0,0 +1,518 @@ + + + + + + +class CustomOptionParser
+ ++ ++ + + + +WPScan - WordPress Security Scanner +Copyright (C) 2012-2013 + +This program is free software: you can redistribute it and/or modify +it under the terms of the GNU General Public License as published by +the Free Software Foundation, either version 3 of the License, or +(at your option) any later version. + +This program is distributed in the hope that it will be useful, +but WITHOUT ANY WARRANTY; without even the implied warranty of +MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +GNU General Public License for more details. + +You should have received a copy of the GNU General Public License +along with this program. If not, see <http://www.gnu.org/licenses/>.+ +++
+ ++ + + + + + + + + + ++ + + + + +Attributes
+ + +++ ++ symbols_used[R] ++ ++ + + +++ + +Public Class Methods
+ + ++ ++ + ++ new(banner = nil, width = 32, indent = ' ' * 4) + click to toggle source ++ + ++ + + + + ++ + + + +++ +# File lib/common/custom_option_parser.rb, line 23 +def initialize(banner = nil, width = 32, indent = ' ' * 4) + @results = {} + @symbols_used = [] + super(banner, width, indent) +end++ + +Protected Class Methods
+ + ++ ++ + ++ option_to_symbol(option) + click to toggle source ++ + ++ ++ + + + +param Array option
+ + + +++ +# File lib/common/custom_option_parser.rb, line 73 +def self.option_to_symbol(option) + option_name = nil + + option.each do |option_attr| + if option_attr =~ %r^--/ + option_name = option_attr + break + end + end + + if option_name + option_name = option_name.gsub(%r^--/, '').gsub(%r-/, '_').gsub(%r .*$/, '') + :"#{option_name}" + else + raise "Could not find the option name for #{option}" + end +end++ + +Public Instance Methods
+ + ++ ++ + ++ add(options) + click to toggle source ++ + ++ ++ + + + +param Array(Array) or Array options
+ + + +++ +# File lib/common/custom_option_parser.rb, line 31 +def add(options) + if options.is_a?(Array) + if options[0].is_a?(Array) + options.each do |option| + add_option(option) + end + else + add_option(options) + end + else + raise "Options must be at least an Array, or an Array(Array). #{options.class} supplied" + end +end++ ++ + ++ add_option(option) + click to toggle source ++ + ++ ++ + + + +param Array option
+ + + +++ +# File lib/common/custom_option_parser.rb, line 46 +def add_option(option) + if option.is_a?(Array) + option_symbol = CustomOptionParser::option_to_symbol(option) + + unless @symbols_used.include?(option_symbol) + @symbols_used << option_symbol + + self.on(*option) do |arg| + @results[option_symbol] = arg + end + else + raise "The option #{option_symbol} is already used !" + end + else + raise "The option must be an array, #{option.class} supplied : '#{option}'" + end +end++ ++ + ++ results(argv = default_argv) + click to toggle source ++ + ++ ++ + + + +return Hash
+ + + +++ +# File lib/common/custom_option_parser.rb, line 65 +def results(argv = default_argv) + self.parse!(argv) if @results.empty? + + @results +end+class GenerateList - RDoc Documentation + + + + + + + + + + + + + + + + +++ + + + diff --git a/doc/GitUpdater.html b/doc/GitUpdater.html index 2b019b75..14fb6a9e 100644 --- a/doc/GitUpdater.html +++ b/doc/GitUpdater.html @@ -234,7 +234,7 @@class GenerateList
+ ++ ++ + + + +This tool generates a list to use for plugin and theme enumeration
+ ++ + + + + + + + + + ++ + + + + +Attributes
+ + +++ ++ verbose[RW] ++ ++ + + +++ + +Public Class Methods
+ + ++ ++ + ++ new(type, verbose) + click to toggle source ++ + ++ ++ + + + +type = themes | plugins
+ + + +++ +# File lib/wpstools/plugins/list_generator/generate_list.rb, line 25 +def initialize(type, verbose) + if type =~ %rplugins/ + @type = 'plugin' + @svn_url = 'http://plugins.svn.wordpress.org/' + @popular_url = 'http://wordpress.org/extend/plugins/browse/popular/' + @popular_regex = %r{<h3><a href="http://wordpress.org/extend/plugins/(.+)/">.+</a></h3>} + elsif type =~ %rthemes/ + @type = 'theme' + @svn_url = 'http://themes.svn.wordpress.org/' + @popular_url = 'http://wordpress.org/extend/themes/browse/popular/' + @popular_regex = %r{<h3><a href="http://wordpress.org/extend/themes/(.+)">.+</a></h3>} + else + raise "Type #{type} not defined" + end + @verbose = verbose + @browser = Browser.instance + @hydra = @browser.hydra +end++ + +Public Instance Methods
+ + ++ ++ + ++ generate_full_list() + click to toggle source ++ + ++ + + + + ++ + + + +++ +# File lib/wpstools/plugins/list_generator/generate_list.rb, line 69 +def generate_full_list + set_file_name(:full) + items = SvnParser.new(@svn_url).parse + save items +end++ ++ + ++ generate_popular_list(pages) + click to toggle source ++ + ++ + + + + ++ + + + +++ +# File lib/wpstools/plugins/list_generator/generate_list.rb, line 75 +def generate_popular_list(pages) + set_file_name(:popular) + items = get_popular_items(pages) + save items +end++ ++ + ++ get_popular_items(pages) + click to toggle source ++ + ++ ++ + + + +Send a HTTP request to the WordPress most popular theme or plugin webpage +parse the response for the names.
+ + + +++ +# File lib/wpstools/plugins/list_generator/generate_list.rb, line 83 +def get_popular_items(pages) + found_items = [] + page_count = 1 + queue_count = 0 + + (1...(pages.to_i + 1)).each do |page| + # First page has another URL + url = (page == 1) ? @popular_url : @popular_url + 'page/' + page.to_s + '/' + request = @browser.forge_request(url) + + queue_count += 1 + + request.on_complete do |response| + puts "[+] Parsing page #{page_count}" if @verbose + page_count += 1 + response.body.scan(@popular_regex).each do |item| + puts "[+] Found popular #@type: #{item}" if @verbose + found_items << item[0] + end + end + + @hydra.queue(request) + + if queue_count == @browser.max_threads + @hydra.run + queue_count = 0 + end + + end + + @hydra.run + + found_items.sort! + found_items.uniq +end++ ++ + ++ save(items) + click to toggle source ++ + ++ ++ + + + +Save the file
+ + + +++ +# File lib/wpstools/plugins/list_generator/generate_list.rb, line 120 +def save(items) + items.sort! + items.uniq! + puts "[*] We have parsed #{items.length} #@types" + File.open(@file_name, 'w') { |f| f.puts(items) } + puts "New #@file_name file created" +end++ ++ + ++ set_file_name(type) + click to toggle source ++ + ++ + + + + ++ + + + +++ +# File lib/wpstools/plugins/list_generator/generate_list.rb, line 44 +def set_file_name(type) + case @type + when 'plugin' + case type + when :full + @file_name = PLUGINS_FULL_FILE + when :popular + @file_name = PLUGINS_FILE + else + raise 'Unknown type' + end + when 'theme' + case type + when :full + @file_name = THEMES_FULL_FILE + when :popular + @file_name = THEMES_FILE + else + raise 'Unknown type' + end + else + raise "Unknown type #@type" + end +end+-# File lib/updater/git_updater.rb, line 37 +# File lib/updater/git_updater.rb, line 38 def has_local_changes? %x[git #{repo_directory_arguments()} diff --exit-code 2>&1] =~ %rdiff/ ? true : false end@@ -295,7 +295,7 @@ the last commit hash-# File lib/updater/git_updater.rb, line 28 +# File lib/updater/git_updater.rb, line 29 def local_revision_number git_log = %x[git #{repo_directory_arguments()} log -1 2>&1] git_log[%rcommit ([0-9a-z]{7})/, 1].to_s @@ -326,7 +326,7 @@ the last commit hash-# File lib/updater/git_updater.rb, line 41 +# File lib/updater/git_updater.rb, line 42 def reset_head %x[git #{repo_directory_arguments()} reset --hard HEAD] end@@ -356,7 +356,7 @@ the last commit hash-# File lib/updater/git_updater.rb, line 33 +# File lib/updater/git_updater.rb, line 34 def update %x[git #{repo_directory_arguments()} pull] end@@ -392,7 +392,7 @@ the last commit hash-# File lib/updater/git_updater.rb, line 46 +# File lib/updater/git_updater.rb, line 47 def repo_directory_arguments if @repo_directory return "--git-dir=\"#{@repo_directory}/.git\" --work-tree=\"#{@repo_directory}\"" diff --git a/doc/ListGeneratorPlugin.html b/doc/ListGeneratorPlugin.html new file mode 100644 index 00000000..bdc55889 --- /dev/null +++ b/doc/ListGeneratorPlugin.html @@ -0,0 +1,348 @@ + + + + + + +class ListGeneratorPlugin - RDoc Documentation + + + + + + + + + + + + + + + + +++ + + + diff --git a/doc/Malwares.html b/doc/Malwares.html index 2cf2d304..29040a91 100644 --- a/doc/Malwares.html +++ b/doc/Malwares.html @@ -224,7 +224,7 @@class ListGeneratorPlugin
+ ++ ++ + + + +WPScan - WordPress Security Scanner +Copyright (C) 2012-2013 + +This program is free software: you can redistribute it and/or modify +it under the terms of the GNU General Public License as published by +the Free Software Foundation, either version 3 of the License, or +(at your option) any later version. + +This program is distributed in the hope that it will be useful, +but WITHOUT ANY WARRANTY; without even the implied warranty of +MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +GNU General Public License for more details. + +You should have received a copy of the GNU General Public License +along with this program. If not, see <http://www.gnu.org/licenses/>.+ +++
+ ++ + + + + + + + + + + + ++ + +Public Class Methods
+ + ++ ++ + ++ new() + click to toggle source ++ + ++ + + + + ++ + + + +++ +# File lib/wpstools/plugins/list_generator/list_generator_plugin.rb, line 21 +def initialize + super(author: 'WPScanTeam - @FireFart') + + register_options( + ['--generate-plugin-list [NUMBER_OF_PAGES]', '--gpl', Integer, 'Generate a new data/plugins.txt file. (supply number of *pages* to parse, default : 150)'], + ['--generate-full-plugin-list', '--gfpl', 'Generate a new full data/plugins.txt file'], + + ['--generate-theme-list [NUMBER_OF_PAGES]', '--gtl', Integer, 'Generate a new data/themes.txt file. (supply number of *pages* to parse, default : 150)'], + ['--generate-full-theme-list', '--gftl', 'Generate a new full data/themes.txt file'], + + ['--generate-all', '--ga', 'Generate a new full plugins, full themes, popular plugins and popular themes list'] + ) +end++ + +Public Instance Methods
+ + ++ ++ + ++ run(options = {}) + click to toggle source ++ + ++ + + + + ++ + + + +++ +# File lib/wpstools/plugins/list_generator/list_generator_plugin.rb, line 35 +def run(options = {}) + verbose = options[:verbose] || false + generate_all = options[:generate_all] || false + + if options.has_key?(:generate_plugin_list) || generate_all + number_of_pages = options[:generate_plugin_list] || 150 + + puts '[+] Generating new most popular plugin list' + puts + GenerateList.new('plugins', verbose).generate_popular_list(number_of_pages) + end + + if options[:generate_full_plugin_list] || generate_all + puts '[+] Generating new full plugin list' + puts + GenerateList.new('plugins', verbose).generate_full_list + end + + if options.has_key?(:generate_theme_list) || generate_all + number_of_pages = options[:generate_theme_list] || 150 + + puts '[+] Generating new most popular theme list' + puts + GenerateList.new('themes', verbose).generate_popular_list(number_of_pages) + end + + if options[:generate_full_theme_list] || generate_all + puts '[+] Generating new full theme list' + puts + GenerateList.new('themes', verbose).generate_full_list + end +end+-# File lib/wpscan/modules/malwares.rb, line 56 +# File lib/wpscan/modules/malwares.rb, line 59 def self.malware_pattern(url_regex) # no need to escape regex here, because malware.txt contains regex %r{<(?:script|iframe).* src=(?:"|')(#{url_regex}[^"']*)(?:"|')[^>]*>} @@ -255,7 +255,7 @@-# File lib/wpscan/modules/malwares.rb, line 52 +# File lib/wpscan/modules/malwares.rb, line 55 def self.malwares_file(malwares_file_path) malwares_file_path || DATA_DIR + '/malwares.txt' end@@ -291,7 +291,7 @@-# File lib/wpscan/modules/malwares.rb, line 23 +# File lib/wpscan/modules/malwares.rb, line 26 def has_malwares?(malwares_file_path = nil) !malwares(malwares_file_path).empty? end@@ -321,7 +321,7 @@-# File lib/wpscan/modules/malwares.rb, line 28 +# File lib/wpscan/modules/malwares.rb, line 31 def malwares(malwares_file_path = nil) unless @malwares malwares_found = [] diff --git a/doc/Object.html b/doc/Object.html index 87064bba..c8d867b6 100644 --- a/doc/Object.html +++ b/doc/Object.html @@ -261,6 +261,16 @@+ LOCAL_FILES_FILE + + + + + LOCAL_FILES_XSD + + + + LOG_FILE @@ -311,6 +321,11 @@ + VULNS_XSD + + + + WPSCAN_LIB_DIR @@ -336,6 +351,16 @@ + WP_VERSIONS_FILE + + + + + WP_VERSIONS_XSD + + + + WP_VULNS_FILE @@ -369,7 +394,7 @@ -# File lib/common_helper.rb, line 60 +# File lib/common_helper.rb, line 65 def add_http_protocol(url) url =~ %r^https?:/ ? url : "http://#{url}" end@@ -399,7 +424,7 @@-# File lib/common_helper.rb, line 64 +# File lib/common_helper.rb, line 69 def add_trailing_slash(url) url =~ %r\/$/ ? url : "#{url}/" end@@ -429,22 +454,22 @@-# File lib/common_helper.rb, line 130 -def banner() +# File lib/common_helper.rb, line 135 +def banner puts '____________________________________________________' - puts " __ _______ _____ " - puts " \\ \\ / / __ \\ / ____| " - puts " \\ \\ /\\ / /| |__) | (___ ___ __ _ _ __ " - puts " \\ \\/ \\/ / | ___/ \\___ \\ / __|/ _` | '_ \\ " - puts " \\ /\\ / | | ____) | (__| (_| | | | |" + puts ' __ _______ _____ ' + puts ' \ \ / / __ \ / ____| ' + puts ' \ \ /\ / /| |__) | (___ ___ __ _ _ __ ' + puts ' \ \/ \/ / | ___/ \___ \ / __|/ _` | \_ \ ' + puts ' \ /\ / | | ____) | (__| (_| | | | |' puts " \\/ \\/ |_| |_____/ \\___|\\__,_|_| |_| v#{WPSCAN_VERSION}r#{REVISION}" puts - puts " WordPress Security Scanner by the WPScan Team" - puts " Sponsored by the RandomStorm Open Source Initiative" + puts ' WordPress Security Scanner by the WPScan Team' + puts ' Sponsored by the RandomStorm Open Source Initiative' puts '_____________________________________________________' puts - if RUBY_VERSION < "1.9" - puts "[WARNING] Ruby < 1.9 not officially supported, please upgrade." + if RUBY_VERSION < '1.9' + puts '[WARNING] Ruby < 1.9 not officially supported, please upgrade.' puts end end@@ -474,7 +499,7 @@-# File lib/common_helper.rb, line 149 +# File lib/common_helper.rb, line 154 def colorize(text, color_code) "\e[#{color_code}m#{text}\e[0m" end@@ -492,7 +517,7 @@get_equal_string_end(stringarray = [""]) + class="method-args">(stringarray = ['']) click to toggle source@@ -504,9 +529,9 @@-# File lib/common_helper.rb, line 69 -def get_equal_string_end(stringarray = [""]) - already_found = "" +# File lib/common_helper.rb, line 74 +def get_equal_string_end(stringarray = ['']) + already_found = '' looping = true counter = -1 if stringarray.kind_of? Array and stringarray.length > 1 @@ -554,10 +579,10 @@-@@ -586,7 +611,7 @@# File lib/common_helper.rb, line 161 +# File lib/common_helper.rb, line 166 def get_metasploit_url(module_path) # remove leading slash - module_path = module_path.sub(%r^\//, "") + module_path = module_path.sub(%r^\//, '') "http://www.metasploit.com/modules/#{module_path}" end-# File lib/common_helper.rb, line 157 +@@ -710,7 +735,7 @@# File lib/common_helper.rb, line 162 def green(text) colorize(text, 32) end@@ -617,44 +642,44 @@@@ -687,12 +712,12 @@ def output_vulnerabilities(vulns) vulns.each do |vulnerability| puts - puts " | " + red("* Title: #{vulnerability.title}") + puts ' | ' + red("* Title: #{vulnerability.title}") vulnerability.references.each do |r| - puts " | " + red("* Reference: #{r}") + puts ' | ' + red("* Reference: #{r}") end vulnerability.metasploit_modules.each do |m| - puts " | " + red("* Metasploit module: #{get_metasploit_url(m)}") + puts ' | ' + red("* Metasploit module: #{get_metasploit_url(m)}") end end end# File lib/wpscan/wpscan_helper.rb, line 73 -def help() - puts "Help :" +def help + puts 'Help :' puts - puts "Some values are settable in conf/browser.conf.json :" - puts " user-agent, proxy, proxy-auth, threads, cache timeout and request timeout" + puts 'Some values are settable in conf/browser.conf.json :' + puts ' user-agent, proxy, proxy-auth, threads, cache timeout and request timeout' puts - puts "--update Update to the latest revision" - puts "--url | -u <target url> The WordPress URL/domain to scan." - puts "--force | -f Forces WPScan to not check if the remote site is running WordPress." - puts "--enumerate | -e [option(s)] Enumeration." - puts " option :" - puts " u usernames from id 1 to 10" - puts " u[10-20] usernames from id 10 to 20 (you must write [] chars)" - puts " p plugins" - puts " vp only vulnerable plugins" - puts " ap all plugins (can take a long time)" - puts " tt timthumbs" - puts " t themes" - puts " vt only vulnerable themes" - puts " at all themes (can take a long time)" - puts " Multiple values are allowed : '-e t,p' will enumerate timthumbs and plugins" - puts " If no option is supplied, the default is 'vt,tt,u,vp'" + puts '--update Update to the latest revision' + puts '--url | -u <target url> The WordPress URL/domain to scan.' + puts '--force | -f Forces WPScan to not check if the remote site is running WordPress.' + puts '--enumerate | -e [option(s)] Enumeration.' + puts ' option :' + puts ' u usernames from id 1 to 10' + puts ' u[10-20] usernames from id 10 to 20 (you must write [] chars)' + puts ' p plugins' + puts ' vp only vulnerable plugins' + puts ' ap all plugins (can take a long time)' + puts ' tt timthumbs' + puts ' t themes' + puts ' vt only vulnerable themes' + puts ' at all themes (can take a long time)' + puts ' Multiple values are allowed : "-e t,p" will enumerate timthumbs and plugins' + puts ' If no option is supplied, the default is "vt,tt,u,vp"' puts - puts "--exclude-content-based '<regexp or string>' Used with the enumeration option, will exclude all occurence based on the regexp or string supplied" - puts " You do not need to provide the regexp delimiters, but you must write the quotes (simple or double)" - puts "--config-file | -c <config file> Use the specified config file" - puts "--follow-redirection If the target url has a redirection, it will be followed without asking if you wanted to do so or not" - puts "--wp-content-dir <wp content dir> WPScan try to find the content directory (ie wp-content) by scanning the index page, however you can specified it. Subdirectories are allowed" - puts "--wp-plugins-dir <wp plugins dir> Same thing than --wp-content-dir but for the plugins directory. If not supplied, WPScan will use wp-content-dir/plugins. Subdirectories are allowed" - puts "--proxy <[protocol://]host:port> Supply a proxy (will override the one from conf/browser.conf.json)." - puts " HTTP, SOCKS4 SOCKS4A and SOCKS5 are supported. If no protocol is given (format host:port), HTTP will be used" - puts "--proxy-auth <username:password> Supply the proxy login credentials (will override the one from conf/browser.conf.json)." - puts "--basic-auth <username:password> Set the HTTP Basic authentification" - puts "--wordlist | -w <wordlist> Supply a wordlist for the password bruter and do the brute." - puts "--threads | -t <number of threads> The number of threads to use when multi-threading requests. (will override the value from conf/browser.conf.json)" - puts "--username | -U <username> Only brute force the supplied username." - puts "--help | -h This help screen." - puts "--verbose | -v Verbose output." + puts '--exclude-content-based "<regexp or string>" Used with the enumeration option, will exclude all occurence based on the regexp or string supplied' + puts ' You do not need to provide the regexp delimiters, but you must write the quotes (simple or double)' + puts '--config-file | -c <config file> Use the specified config file' + puts '--follow-redirection If the target url has a redirection, it will be followed without asking if you wanted to do so or not' + puts '--wp-content-dir <wp content dir> WPScan try to find the content directory (ie wp-content) by scanning the index page, however you can specified it. Subdirectories are allowed' + puts '--wp-plugins-dir <wp plugins dir> Same thing than --wp-content-dir but for the plugins directory. If not supplied, WPScan will use wp-content-dir/plugins. Subdirectories are allowed' + puts '--proxy <[protocol://]host:port> Supply a proxy (will override the one from conf/browser.conf.json).' + puts ' HTTP, SOCKS4 SOCKS4A and SOCKS5 are supported. If no protocol is given (format host:port), HTTP will be used' + puts '--proxy-auth <username:password> Supply the proxy login credentials (will override the one from conf/browser.conf.json).' + puts '--basic-auth <username:password> Set the HTTP Basic authentification' + puts '--wordlist | -w <wordlist> Supply a wordlist for the password bruter and do the brute.' + puts '--threads | -t <number of threads> The number of threads to use when multi-threading requests. (will override the value from conf/browser.conf.json)' + puts '--username | -U <username> Only brute force the supplied username.' + puts '--help | -h This help screen.' + puts '--verbose | -v Verbose output.' puts endputs(o = "") + class="method-args">(o = '') click to toggle source@@ -722,12 +747,12 @@-diff --git a/doc/WpPlugins.html b/doc/WpPlugins.html index 9f7ce0a2..0997dad8 100644 --- a/doc/WpPlugins.html +++ b/doc/WpPlugins.html @@ -224,22 +224,24 @@# File lib/common_helper.rb, line 168 -def puts(o = "") +# File lib/common_helper.rb, line 173 +def puts(o = '') # remove color for logging - if o.respond_to?("gsub") + if o.respond_to?('gsub') temp = o.gsub(%r\e\[\d+m(.*)?\e\[0m/, '\1') - File.open(LOG_FILE, "a+") { |f| f.puts(temp) } + File.open(LOG_FILE, 'a+') { |f| f.puts(temp) } end super(o) end@@ -757,7 +782,7 @@-diff --git a/doc/WpLoginProtection.html b/doc/WpLoginProtection.html index 42c56bf1..526201dd 100644 --- a/doc/WpLoginProtection.html +++ b/doc/WpLoginProtection.html @@ -299,10 +299,10 @@ found plugin_name = symbol_to_call[LOGIN_PROTECTION_METHOD_PATTERN, 1].gsub('_', '-') return @login_protection_plugin = WpPlugin.new( - :name => plugin_name, - :base_url => @uri, - :path => "/plugins/#{plugin_name}/", - :wp_content_dir => @wp_content_dir + name: plugin_name, + base_url: @uri, + path: "/plugins/#{plugin_name}/", + wp_content_dir: @wp_content_dir ) end end @@ -344,10 +344,10 @@ found# File lib/common_helper.rb, line 153 +# File lib/common_helper.rb, line 158 def red(text) colorize(text, 31) end@@ -775,7 +800,7 @@require_files_from_directory(absolute_dir_path, files_pattern = "*.rb") + class="method-args">(absolute_dir_path, files_pattern = '*.rb') click to toggle source@@ -787,8 +812,8 @@-@@ -509,7 +509,7 @@# File lib/common_helper.rb, line 48 -def require_files_from_directory(absolute_dir_path, files_pattern = "*.rb") +# File lib/common_helper.rb, line 53 +def require_files_from_directory(absolute_dir_path, files_pattern = '*.rb') Dir[File.join(absolute_dir_path, files_pattern)].sort.each do |f| f = File.expand_path(f) require f @@ -822,51 +847,51 @@diff --git a/doc/Plugin.html b/doc/Plugin.html new file mode 100644 index 00000000..32a83b9a --- /dev/null +++ b/doc/Plugin.html @@ -0,0 +1,379 @@ + + + + + + +# File lib/wpscan/wpscan_helper.rb, line 24 -def usage() +def usage script_name = $0 puts - puts "Examples :" + puts 'Examples :' puts - puts "-Further help ..." + puts '-Further help ...' puts "ruby #{script_name} --help" puts puts "-Do 'non-intrusive' checks ..." puts "ruby #{script_name} --url www.example.com" puts - puts "-Do wordlist password brute force on enumerated users using 50 threads ..." + puts '-Do wordlist password brute force on enumerated users using 50 threads ...' puts "ruby #{script_name} --url www.example.com --wordlist darkc0de.lst --threads 50" puts puts "-Do wordlist password brute force on the 'admin' username only ..." puts "ruby #{script_name} --url www.example.com --wordlist darkc0de.lst --username admin" puts - puts "-Enumerate installed plugins ..." + puts '-Enumerate installed plugins ...' puts "ruby #{script_name} --url www.example.com --enumerate p" puts - puts "-Enumerate installed themes ..." + puts '-Enumerate installed themes ...' puts "ruby #{script_name} --url www.example.com --enumerate t" puts - puts "-Enumerate users ..." + puts '-Enumerate users ...' puts "ruby #{script_name} --url www.example.com --enumerate u" puts - puts "-Enumerate installed timthumbs ..." + puts '-Enumerate installed timthumbs ...' puts "ruby #{script_name} --url www.example.com --enumerate tt" puts - puts "-Use a HTTP proxy ..." + puts '-Use a HTTP proxy ...' puts "ruby #{script_name} --url www.example.com --proxy 127.0.0.1:8118" puts - puts "-Use a SOCKS5 proxy ... (cURL >= v7.21.7 needed)" + puts '-Use a SOCKS5 proxy ... (cURL >= v7.21.7 needed)' puts "ruby #{script_name} --url www.example.com --proxy socks5://127.0.0.1:9000" puts - puts "-Use custom content directory ..." + puts '-Use custom content directory ...' puts "ruby #{script_name} -u www.example.com --wp-content-dir custom-content" puts - puts "-Use custom plugins directory ..." + puts '-Use custom plugins directory ...' puts "ruby #{script_name} -u www.example.com --wp-plugins-dir wp-content/custom-plugins" puts - puts "-Update ..." + puts '-Update ...' puts "ruby #{script_name} --update" puts - puts "See README for further information." + puts 'See README for further information.' puts endclass Plugin - RDoc Documentation + + + + + + + + + + + + + + + + +++ + + + diff --git a/doc/Plugins.html b/doc/Plugins.html new file mode 100644 index 00000000..fd46d568 --- /dev/null +++ b/doc/Plugins.html @@ -0,0 +1,380 @@ + + + + + + +class Plugin
+ ++ ++ + + + +WPScan - WordPress Security Scanner +Copyright (C) 2012-2013 + +This program is free software: you can redistribute it and/or modify +it under the terms of the GNU General Public License as published by +the Free Software Foundation, either version 3 of the License, or +(at your option) any later version. + +This program is distributed in the hope that it will be useful, +but WITHOUT ANY WARRANTY; without even the implied warranty of +MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +GNU General Public License for more details. + +You should have received a copy of the GNU General Public License +along with this program. If not, see <http://www.gnu.org/licenses/>.+ +++
+ ++ + + + + + + + + + ++ + + + + +Attributes
+ + + + +++ ++ registered_options[R] ++ ++ + + +++ + +Public Class Methods
+ + ++ ++ + ++ new(infos = {}) + click to toggle source ++ + ++ + + + + ++ + + + +++ +# File lib/common/plugins/plugin.rb, line 23 +def initialize(infos = {}) + @author = infos[:author] +end++ + +Public Instance Methods
+ + ++ ++ + ++ register_options(*options) + click to toggle source ++ + ++ ++ + + + +param Array options
+ + + +++ +# File lib/common/plugins/plugin.rb, line 32 +def register_options(*options) + options.each do |option| + unless option.is_a?(Array) + raise "Each option must be an array, #{option.class} supplied" + end + end + @registered_options = options +end++ ++ + ++ run(options = {}) + click to toggle source ++ + ++ + + + + ++ + + + +++ +# File lib/common/plugins/plugin.rb, line 27 +def run(options = {}) + raise NotImplementedError +end+class Plugins - RDoc Documentation + + + + + + + + + + + + + + + + +++ + + + diff --git a/doc/SvnParser.html b/doc/SvnParser.html new file mode 100644 index 00000000..10f29a54 --- /dev/null +++ b/doc/SvnParser.html @@ -0,0 +1,341 @@ + + + + + + +class Plugins
+ ++ ++ + + + +WPScan - WordPress Security Scanner +Copyright (C) 2012-2013 + +This program is free software: you can redistribute it and/or modify +it under the terms of the GNU General Public License as published by +the Free Software Foundation, either version 3 of the License, or +(at your option) any later version. + +This program is distributed in the hope that it will be useful, +but WITHOUT ANY WARRANTY; without even the implied warranty of +MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +GNU General Public License for more details. + +You should have received a copy of the GNU General Public License +along with this program. If not, see <http://www.gnu.org/licenses/>.+ +++
+ ++ + + + + + + + + + ++ + + + + +Attributes
+ + +++ ++ option_parser[R] ++ ++ + + +++ + +Public Class Methods
+ + ++ ++ + ++ new(option_parser = nil) + click to toggle source ++ + ++ + + + + ++ + + + +++ +# File lib/common/plugins/plugins.rb, line 23 +def initialize(option_parser = nil) + if option_parser + if option_parser.is_a?(CustomOptionParser) + @option_parser = option_parser + else + raise "The parser must be an instance of CustomOptionParser, #{option_parser.class} supplied" + end + else + @option_parser = CustomOptionParser.new + end +end++ + +Public Instance Methods
+ + ++ ++ + ++ register(*plugins) + click to toggle source ++ + ++ ++ + + + +param Array(Plugin) plugins
+ + + +++ +# File lib/common/plugins/plugins.rb, line 36 +def register(*plugins) + plugins.each do |plugin| + register_plugin(plugin) + end +end++ ++ + ++ register_plugin(plugin) + click to toggle source ++ + ++ ++ + + + +param Plugin plugin
+ + + +++ +# File lib/common/plugins/plugins.rb, line 43 +def register_plugin(plugin) + if plugin.is_a?(Plugin) + self << plugin + + # A plugin may not have options + if plugin_options = plugin.registered_options + @option_parser.add(plugin_options) + end + else + raise "The argument must be an instance of Plugin, #{plugin.class} supplied" + end +end+class SvnParser - RDoc Documentation + + + + + + + + + + + + + + + + +++ + + + diff --git a/doc/URI.html b/doc/URI.html index 4bc1f42e..9380ec73 100644 --- a/doc/URI.html +++ b/doc/URI.html @@ -218,9 +218,9 @@class SvnParser
+ ++ ++ + + + +This Class Parses SVN Repositories via HTTP
+ ++ + + + + + + + + + ++ + + + + +Attributes
+ + +++ ++ keep_empty_dirs[RW] ++ ++ + + ++++ ++ svn_root[RW] ++ ++ + + ++++ ++ verbose[RW] ++ ++ + + +++ + +Public Class Methods
+ + ++ ++ + ++ new(svn_root) + click to toggle source ++ + ++ + + + + ++ + + + +++ +# File lib/wpstools/plugins/list_generator/svn_parser.rb, line 24 +def initialize(svn_root) + @svn_root = svn_root + @svn_browser = Browser.instance + @svn_hydra = @svn_browser.hydra +end++ + +Public Instance Methods
+ + ++ ++ + ++ parse() + click to toggle source ++ + ++ + + + + ++ + + + +++ +# File lib/wpstools/plugins/list_generator/svn_parser.rb, line 30 +def parse + get_root_directories +end+-diff --git a/doc/Vulnerable.html b/doc/Vulnerable.html index 39b01b8a..ec1ae138 100644 --- a/doc/Vulnerable.html +++ b/doc/Vulnerable.html @@ -268,10 +268,10 @@ be empty) xml.xpath(@vulns_xpath).each do |node| vulnerabilities << WpVulnerability.new( - node.search("title").text, - node.search("reference").map(&:text), - node.search("type").text, - node.search("metasploit").map(&:text) + node.search('title').text, + node.search('reference').map(&:text), + node.search('type').text, + node.search('metasploit').map(&:text) ) end vulnerabilities diff --git a/doc/WebSite.html b/doc/WebSite.html index 21fc718d..98d4e479 100644 --- a/doc/WebSite.html +++ b/doc/WebSite.html @@ -275,7 +275,7 @@# File lib/common_helper.rb, line 97 +# File lib/common_helper.rb, line 102 def self.escape(str) - URI.encode_www_form_component(str).gsub("+", "%20") + URI.encode_www_form_component(str).gsub('+', '%20') end# File lib/wpscan/modules/web_site.rb, line 106 def error_404_hash unless @error_404_hash - non_existant_page = Digest::MD5.hexdigest(rand(9999999999).to_s) + ".html" + non_existant_page = Digest::MD5.hexdigest(rand(999_999_999).to_s) + '.html' @error_404_hash = WebSite.page_hash(@uri.merge(non_existant_page).to_s) end @error_404_hash @@ -511,7 +511,7 @@ returned response = Browser.instance.get( login_url(), - {:follow_location => true, :max_redirects => 2} + { follow_location: true, max_redirects: 2 } ) if response.body =~ %r{WordPress} @@ -519,7 +519,7 @@ returned else response = Browser.instance.get( xml_rpc_url, - {:follow_location => true, :max_redirects => 2} + { follow_location: true, max_redirects: 2 } ) if response.body =~ %r{XML-RPC server accepts POST requests only} @@ -559,7 +559,7 @@ returned def xml_rpc_url unless @xmlrpc_url headers = Browser.instance.get(@uri.to_s).headers_hash - value = headers["x-pingback"] + value = headers['x-pingback'] if value.nil? or value.empty? @xmlrpc_url = nil else diff --git a/doc/WpDetector.html b/doc/WpDetector.html index 60dfeefa..6dc5d84e 100644 --- a/doc/WpDetector.html +++ b/doc/WpDetector.html @@ -298,12 +298,12 @@ names.each do |item| items << WpItem.new( - :base_url => url, - :name => item, - :type => type, - :path => "#{item}/", - :wp_content_dir => wp_content_dir, - :vulns_file => "" + base_url: url, + name: item, + type: type, + path: "#{item}/", + wp_content_dir: wp_content_dir, + vulns_file: '' ) end items diff --git a/doc/WpEnumerator.html b/doc/WpEnumerator.html index b8a53df9..ad4f4183 100644 --- a/doc/WpEnumerator.html +++ b/doc/WpEnumerator.html @@ -273,7 +273,7 @@ targets.each do |target| url = target.get_full_url - request = enum_browser.forge_request(url, { :cache_timeout => 0, :follow_location => true }) + request = enum_browser.forge_request(url, { cache_timeout: 0, follow_location: true }) request_count += 1 request.on_complete do |response| @@ -351,17 +351,17 @@ unless only_vulnerable # Open and parse the 'most popular' plugin list... - File.open(file, "r") do |f| + File.open(file, 'r') do |f| f.readlines.collect do |line| l = line.strip targets_url << WpItem.new( - :base_url => url, - :path => l, - :wp_content_dir => wp_content_dir, - :name => l =~ %r.+\/.+/ ? File.dirname(l) : l.sub(%r\/$/, ""), - :vulns_file => vulns_file, - :type => type, - :wp_plugins_dir => plugins_dir + base_url: url, + path: l, + wp_content_dir: wp_content_dir, + name: l =~ %r.+\/.+/ ? File.dirname(l) : l.sub(%r\/$/, ''), + vulns_file: vulns_file, + type: type, + wp_plugins_dir: plugins_dir ) end end @@ -375,15 +375,15 @@ # We check if the plugin name from the plugin_vulns_file is already in targets, otherwise we add it xml.xpath(options[:vulns_xpath_2]).each do |node| - name = node.attribute("name").text + name = node.attribute('name').text targets_url << WpItem.new( - :base_url => url, - :path => name, - :wp_content_dir => wp_content_dir, - :name => name, - :vulns_file => vulns_file, - :type => type, - :wp_plugins_dir => plugins_dir + base_url: url, + path: name, + wp_content_dir: wp_content_dir, + name: name, + vulns_file: vulns_file, + type: type, + wp_plugins_dir: plugins_dir ) end end diff --git a/doc/WpFullPathDisclosure.html b/doc/WpFullPathDisclosure.html index f8b2a091..e927e6ea 100644 --- a/doc/WpFullPathDisclosure.html +++ b/doc/WpFullPathDisclosure.html @@ -222,7 +222,7 @@diff --git a/doc/WpItem.html b/doc/WpItem.html index 3a077536..3fcf4ba2 100644 --- a/doc/WpItem.html +++ b/doc/WpItem.html @@ -370,7 +370,7 @@# File lib/wpscan/modules/wp_full_path_disclosure.rb, line 27 def full_path_disclosure_url - @uri.merge("wp-includes/rss-functions.php").to_s + @uri.merge('wp-includes/rss-functions.php').to_s end# File lib/wpscan/wp_item.rb, line 25 def initialize(options) @type = options[:type] - @wp_content_dir = options[:wp_content_dir] ? options[:wp_content_dir].sub(%r^\//, "").sub(%r\/$/, "") : "wp-content" + @wp_content_dir = options[:wp_content_dir] ? options[:wp_content_dir].sub(%r^\//, '').sub(%r\/$/, '') : 'wp-content' @wp_plugins_dir = options[:wp_plugins_dir] || "#@wp_content_dir/plugins" @base_url = options[:base_url] @path = options[:path] @@ -378,12 +378,12 @@ @vulns_file = options[:vulns_file] @vulns_xpath = options[:vulns_xpath].sub(%r\$name\$/, @name) unless options[:vulns_xpath] == nil - raise("base_url not set") unless @base_url - raise("path not set") unless @path - raise("wp_content_dir not set") unless @wp_content_dir - raise("name not set") unless @name - raise("vulns_file not set") unless @vulns_file - raise("type not set") unless @type + raise('base_url not set') unless @base_url + raise('path not set') unless @path + raise('wp_content_dir not set') unless @wp_content_dir + raise('name not set') unless @name + raise('vulns_file not set') unless @vulns_file + raise('type not set') unless @type end@@ -600,15 +600,15 @@# File lib/wpscan/wp_item.rb, line 159 def changelog_url - get_url_without_filename.merge("changelog.txt") + get_url_without_filename.merge('changelog.txt') end@@ -922,12 +922,12 @@ href="https://github.com/wpscanteam/wpscan/issues/100">github.com/wpscanteam/wps# File lib/wpscan/wp_item.rb, line 84 def get_full_url - url = @base_url.to_s.end_with?("/") ? @base_url.to_s : "#@base_url/" + url = @base_url.to_s.end_with?('/') ? @base_url.to_s : "#@base_url/" # remove first and last / - wp_content_dir = @wp_content_dir.sub(%r^\//, "").sub(%r\/$/, "") + wp_content_dir = @wp_content_dir.sub(%r^\//, "").sub(%r\/$/, '') # remove first / - path = @path.sub(%r^\//, "") - if type =="plugins" + path = @path.sub(%r^\//, '') + if type == 'plugins' # plugins can be outside of wp-content. wp_content_dir included in wp_plugins_dir ret = URI.parse(URI.encode("#{url}#@wp_plugins_dir/#{path}")) - elsif type == "timthumbs" + elsif type == 'timthumbs' # timthumbs have folder in path variable ret = URI.parse(URI.encode("#{url}#{wp_content_dir}/#{path}")) else @@ -645,13 +645,13 @@# File lib/wpscan/wp_item.rb, line 70 def get_sub_folder case @type - when "themes" - folder = "themes" - when "timthumbs" - # not needed - folder = nil - else - raise("unknown type #@type") + when 'themes' + folder = 'themes' + when 'timthumbs' + # not needed + folder = nil + else + raise("unknown type #@type") end folder end@@ -786,7 +786,7 @@@@ -848,7 +848,7 @@# File lib/wpscan/wp_item.rb, line 154 def readme_url - get_url_without_filename.merge("readme.txt") + get_url_without_filename.merge('readme.txt') end# File lib/wpscan/wp_item.rb, line 113 def version unless @version - response = Browser.instance.get(get_full_url.merge("readme.txt").to_s) + response = Browser.instance.get(get_full_url.merge('readme.txt').to_s) @version = response.body[%r{stable tag: #{WpVersion.version_pattern}}, 1] end @version @@ -882,14 +882,14 @@# File lib/wpscan/wp_item.rb, line 57 def wp_org_item? case @type - when "themes" - file = THEMES_FULL_FILE - when "plugins" - file = PLUGINS_FULL_FILE - else - raise("Unknown type #@type") + when 'themes' + file = THEMES_FULL_FILE + when 'plugins' + file = PLUGINS_FULL_FILE + else + raise("Unknown type #@type") end - f = File.readlines(file).grep(%r^#{Regexp.escape(@name)}$/) + f = File.readlines(file, encoding: 'UTF-8').grep(%r^#{Regexp.escape(@name)}$/) f.empty? ? false : true end# File lib/wpscan/wp_item.rb, line 45 def wp_org_url case @type - when "themes" - return URI("http://wordpress.org/extend/themes/").merge("#@name/") - when "plugins" - return URI("http://wordpress.org/extend/plugins/").merge("#@name/") - else - raise("No Wordpress URL for #@type") + when 'themes' + return URI('http://wordpress.org/extend/themes/').merge("#@name/") + when 'plugins' + return URI('http://wordpress.org/extend/plugins/').merge("#@name/") + else + raise("No Wordpress URL for #@type") end end@@ -378,10 +378,10 @@ found# File lib/wpscan/modules/wp_login_protection.rb, line 69 def better_wp_security_url - WpPlugin.new(:wp_content_dir => @wp_content_dir, - :base_url => @uri, - :path => "/plugins/better-wp-security/", - :name => "better-wp-security" + WpPlugin.new(wp_content_dir: @wp_content_dir, + base_url: @uri, + path: '/plugins/better-wp-security/', + name: 'better-wp-security' ).get_url_without_filename end@@ -629,10 +629,10 @@ href="http://wordpress.org/extend/plugins/simple-login-lockdown/">wordpress.org/# File lib/wpscan/modules/wp_login_protection.rb, line 121 def bluetrait_event_viewer_url - WpPlugin.new(:wp_content_dir => @wp_content_dir, - :base_url => @uri, - :path => "/plugins/bluetrait-event-viewer/", - :name => "bluetrait-event-viewer" + WpPlugin.new(wp_content_dir: @wp_content_dir, + base_url: @uri, + path: '/plugins/bluetrait-event-viewer/', + name: 'bluetrait-event-viewer' ).get_url_without_filename end@@ -663,10 +663,10 @@ href="http://wordpress.org/extend/plugins/simple-login-lockdown/">wordpress.org/# File lib/wpscan/modules/wp_login_protection.rb, line 108 def limit_login_attempts_url - WpPlugin.new(:wp_content_dir => @wp_content_dir, - :base_url => @uri, - :path => "/plugins/limit-login-attempts/", - :name => "limit-login-attempts" + WpPlugin.new(wp_content_dir: @wp_content_dir, + base_url: @uri, + path: '/plugins/limit-login-attempts/', + name: 'limit-login-attempts' ).get_url_without_filename end@@ -697,10 +697,10 @@ href="http://wordpress.org/extend/plugins/simple-login-lockdown/">wordpress.org/# File lib/wpscan/modules/wp_login_protection.rb, line 95 def login_security_solution_url - WpPlugin.new(:wp_content_dir => @wp_content_dir, - :base_url => @uri, - :path => "/plugins/login-security-solution/", - :name => "login-security-solution" + WpPlugin.new(wp_content_dir: @wp_content_dir, + base_url: @uri, + path: '/plugins/login-security-solution/', + name: 'login-security-solution' ).get_url_without_filename enddiff --git a/doc/WpOptions.html b/doc/WpOptions.html index 504723c6..7cb8e7f0 100644 --- a/doc/WpOptions.html +++ b/doc/WpOptions.html @@ -251,16 +251,16 @@# File lib/wpscan/modules/wp_login_protection.rb, line 82 def simple_login_lockdown_url - WpPlugin.new(:wp_content_dir => @wp_content_dir, - :base_url => @uri, - :path => "/plugins/simple-login-lockdown/", - :name => "simple-login-lockdown" + WpPlugin.new(wp_content_dir: @wp_content_dir, + base_url: @uri, + path: '/plugins/simple-login-lockdown/', + name: 'simple-login-lockdown' ).get_url_without_filename end@@ -303,9 +306,9 @@ href="http://www.exploit-db.com/ghdb/3714/">www.exploit-db.com/ghdb/3714/ -# File lib/wpscan/wp_options.rb, line 34 def self.check_options(options) - raise("base_url must be set") unless options[:base_url] != nil and options[:base_url].to_s.length > 0 - raise("only_vulnerable_ones must be set") unless options[:only_vulnerable_ones] != nil - raise("file must be set") unless options[:file] != nil and options[:file].length > 0 - raise("vulns_file must be set") unless options[:vulns_file] != nil and options[:vulns_file].length > 0 - raise("vulns_xpath must be set") unless options[:vulns_xpath] != nil and options[:vulns_xpath].length > 0 - raise("vulns_xpath_2 must be set") unless options[:vulns_xpath_2] != nil and options[:vulns_xpath_2].length > 0 - raise("wp_content_dir must be set") unless options[:wp_content_dir] != nil and options[:wp_content_dir].length > 0 - raise("show_progression must be set") unless options[:show_progression] != nil - raise("error_404_hash must be set") unless options[:error_404_hash] != nil and options[:error_404_hash].length > 0 - raise("type must be set") unless options[:type] != nil and options[:type].length > 0 + raise('base_url must be set') unless options[:base_url] != nil and options[:base_url].to_s.length > 0 + raise('only_vulnerable_ones must be set') unless options[:only_vulnerable_ones] != nil + raise('file must be set') unless options[:file] != nil and options[:file].length > 0 + raise('vulns_file must be set') unless options[:vulns_file] != nil and options[:vulns_file].length > 0 + raise('vulns_xpath must be set') unless options[:vulns_xpath] != nil and options[:vulns_xpath].length > 0 + raise('vulns_xpath_2 must be set') unless options[:vulns_xpath_2] != nil and options[:vulns_xpath_2].length > 0 + raise('wp_content_dir must be set') unless options[:wp_content_dir] != nil and options[:wp_content_dir].length > 0 + raise('show_progression must be set') unless options[:show_progression] != nil + raise('error_404_hash must be set') unless options[:error_404_hash] != nil and options[:error_404_hash].length > 0 + raise('type must be set') unless options[:type] != nil and options[:type].length > 0 unless options[:type] =~ %rplugins/ or options[:type] =~ %rthemes/ or options[:type] =~ %rtimthumbs/ raise("Unknown type #{options[:type]}") diff --git a/doc/WpPlugin.html b/doc/WpPlugin.html index b60cb00a..665efca1 100644 --- a/doc/WpPlugin.html +++ b/doc/WpPlugin.html @@ -230,11 +230,14 @@@@ -272,9 +275,9 @@ href="http://www.exploit-db.com/ghdb/3714/">www.exploit-db.com/ghdb/3714/ -# File lib/wpscan/wp_plugin.rb, line 20 def initialize(options = {}) - options[:vulns_file] = (options[:vulns_file] != nil and options[:vulns_file] != "") ? - options[:vulns_file] : PLUGINS_VULNS_FILE + if options[:vulns_file].nil? or options[:vulns_file] == '' + options[:vulns_file] = PLUGINS_VULNS_FILE + end + options[:vulns_xpath] = "//plugin[@name='$name$']/vulnerability" - options[:vulns_xpath_2] = "//plugin" - options[:type] = "plugins" + options[:vulns_xpath_2] = '//plugin' + options[:type] = 'plugins' + super(options) end# File lib/wpscan/wp_plugin.rb, line 34 +# File lib/wpscan/wp_plugin.rb, line 37 def error_log? - response_body = Browser.instance.get(error_log_url(), :headers => {"range" => "bytes=0-700"}).body + response_body = Browser.instance.get(error_log_url(), headers: {'range' => 'bytes=0-700'}).body response_body[%r{PHP Fatal error}] ? true : false end# File lib/wpscan/wp_plugin.rb, line 39 +# File lib/wpscan/wp_plugin.rb, line 42 def error_log_url - get_full_url.merge("error_log").to_s + get_full_url.merge('error_log').to_s end# File lib/wpscan/modules/wp_plugins.rb, line 24 def plugins_from_aggressive_detection(options) + if options[:vulns_file].nil? or options[:vulns_file] == '' + options[:vulns_file] = PLUGINS_VULNS_FILE + end + options[:file] = options[:file] || (options[:full] ? PLUGINS_FULL_FILE : PLUGINS_FILE) - options[:vulns_file] = (options[:vulns_file] != nil and options[:vulns_file] != "") ? - options[:vulns_file] : PLUGINS_VULNS_FILE options[:vulns_xpath] = "//plugin[@name='#{@name}']/vulnerability" - options[:vulns_xpath_2] = "//plugin" - options[:type] = "plugins" + options[:vulns_xpath_2] = '//plugin' + options[:type] = 'plugins' result = WpDetector.aggressive_detection(options) plugins = [] result.each do |r| plugins << WpPlugin.new( - :base_url => r.base_url, - :path => r.path, - :wp_content_dir => r.wp_content_dir, - :name => r.name, - :type => "plugins", - :wp_plugins_dir => r.wp_plugins_dir + base_url: r.base_url, + path: r.path, + wp_content_dir: r.wp_content_dir, + name: r.name, + type: 'plugins', + wp_plugins_dir: r.wp_plugins_dir ) end plugins.sort_by { |p| p.name } @@ -278,19 +280,19 @@ plugins can be found in the source code :-@@ -478,11 +478,11 @@ unless @multisite # when multi site, there is no redirection or a redirect to the site itself # otherwise redirect to wp-login.php - url = @uri.merge("wp-signup.php") + url = @uri.merge('wp-signup.php') resp = Browser.instance.get(url) - if resp.code == 302 and resp.headers_hash["location"] =~ %rwp-login\.php\?action=register/ + if resp.code == 302 and resp.headers_hash['location'] =~ %rwp-login\.php\?action=register/ @multisite = false - elsif resp.code == 302 and resp.headers_hash["location"] =~ %rwp-signup\.php/ + elsif resp.code == 302 and resp.headers_hash['location'] =~ %rwp-signup\.php/ @multisite = true elsif resp.code == 200 @multisite = true @@ -520,7 +520,7 @@# File lib/wpscan/modules/wp_plugins.rb, line 52 +# File lib/wpscan/modules/wp_plugins.rb, line 54 def plugins_from_passive_detection(options) plugins = [] - temp = WpDetector.passive_detection(options[:base_url], "plugins", options[:wp_content_dir]) + temp = WpDetector.passive_detection(options[:base_url], 'plugins', options[:wp_content_dir]) temp.each do |item| plugins << WpPlugin.new( - :base_url => item.base_url, - :name => item.name, - :path => item.path, - :wp_content_dir => options[:wp_content_dir], - :type => "plugins", - :wp_plugins_dir => options[:wp_plugins_dir] + base_url: item.base_url, + name: item.name, + path: item.path, + wp_content_dir: options[:wp_content_dir], + type: 'plugins', + wp_plugins_dir: options[:wp_plugins_dir] ) end plugins.sort_by { |p| p.name } diff --git a/doc/WpReadme.html b/doc/WpReadme.html index ef5602d7..21feeb80 100644 --- a/doc/WpReadme.html +++ b/doc/WpReadme.html @@ -259,7 +259,7 @@ reinstated with an upgrade.diff --git a/doc/WpTarget.html b/doc/WpTarget.html index 33c062b1..51470ba7 100644 --- a/doc/WpTarget.html +++ b/doc/WpTarget.html @@ -444,7 +444,7 @@# File lib/wpscan/modules/wp_readme.rb, line 33 def readme_url - @uri.merge("readme.html").to_s + @uri.merge('readme.html').to_s end# File lib/wpscan/wp_target.rb, line 103 def has_debug_log? # We only get the first 700 bytes of the file to avoid loading huge file (like 2Go) - response_body = Browser.instance.get(debug_log_url(), :headers => {"range" => "bytes=0-700"}).body + response_body = Browser.instance.get(debug_log_url(), headers: {'range' => 'bytes=0-700'}).body response_body[%r{\[[^\]]+\] PHP (?:Warning|Error|Notice):}] ? true : false end# File lib/wpscan/wp_target.rb, line 49 def login_url - url = @uri.merge("wp-login.php").to_s + url = @uri.merge('wp-login.php').to_s # Let's check if the login url is redirected (to https url for example) redirection = redirection(url) @@ -560,7 +560,7 @@ def registration_enabled? resp = Browser.instance.get(registration_url) # redirect only on non multi sites - if resp.code == 302 and resp.headers_hash["location"] =~ %rwp-login\.php\?registration=disabled/ + if resp.code == 302 and resp.headers_hash['location'] =~ %rwp-login\.php\?registration=disabled/ enabled = false # multi site registration form elsif resp.code == 200 and resp.body =~ %r<form id="setupform" method="post" action="[^"]*wp-signup\.php[^"]*">/ @@ -602,7 +602,7 @@@@ -665,7 +665,7 @@ href="http://interconnectit.com/124/search-and-replace-for-wordpress-databases/"# File lib/wpscan/wp_target.rb, line 144 def registration_url - is_multisite? ? @uri.merge("wp-signup.php") : @uri.merge("wp-login.php?action=register") + is_multisite? ? @uri.merge('wp-signup.php') : @uri.merge('wp-login.php?action=register') end@@ -791,9 +791,9 @@ href="http://interconnectit.com/124/search-and-replace-for-wordpress-databases/" uri_path = @uri.path if index_body[%r\/wp-content\/(?:themes|plugins)\//] - @wp_content_dir = "wp-content" + @wp_content_dir = 'wp-content' else - domains_excluded = "(?:www\.)?(facebook|twitter)\.com" + domains_excluded = '(?:www\.)?(facebook|twitter)\.com' @wp_content_dir = index_body[%r(?:href|src)\s*=\s*(?:"|').+#{Regexp.escape(uri_path)}((?!#{domains_excluded})[^"']+)\/(?:themes|plugins)\/.*(?:"|')/, 1] end end diff --git a/doc/WpTheme.html b/doc/WpTheme.html index 4e534211..82384e13 100644 --- a/doc/WpTheme.html +++ b/doc/WpTheme.html @@ -265,7 +265,7 @@# File lib/wpscan/wp_target.rb, line 116 def search_replace_db_2_url - @uri.merge("searchreplacedb2.php").to_s + @uri.merge('searchreplacedb2.php').to_s end-# File lib/wpscan/wp_theme.rb, line 44 +# File lib/wpscan/wp_theme.rb, line 47 def self.find(target_uri) self.methods.grep(%rfind_from_/).each do |method_to_call| theme = self.send(method_to_call, target_uri) @@ -302,12 +302,15 @@@@ -342,9 +345,9 @@# File lib/wpscan/wp_theme.rb, line 25 def initialize(options = {}) - options[:vulns_file] = (options[:vulns_file] != nil and options[:vulns_file] != "") ? - options[:vulns_file] : THEMES_VULNS_FILE + if options[:vulns_file].nil? or options[:vulns_file] == '' + options[:vulns_file] = THEMES_VULNS_FILE + end + options[:vulns_xpath] = "//theme[@name='$name$']/vulnerability" - options[:type] = "themes" + options[:type] = 'themes' @version = options[:version] @style_url = options[:style_url] + super(options) end-# File lib/wpscan/wp_theme.rb, line 60 +# File lib/wpscan/wp_theme.rb, line 63 def self.find_from_css_link(target_uri) - response = Browser.instance.get(target_uri.to_s, {:follow_location => true, :max_redirects => 2}) + response = Browser.instance.get(target_uri.to_s, { follow_location: true, max_redirects: 2 }) matches = %r{https?://[^"']+/([^/]+)/themes/([^"']+)/style.css}.match(response.body) if matches @@ -352,11 +355,12 @@ wp_content_dir = matches[1] theme_name = matches[2] - return new(:name => theme_name, - :style_url => style_url, - :base_url => target_uri, - :path => theme_name, - :wp_content_dir => wp_content_dir + return new( + name: theme_name, + style_url: style_url, + base_url: target_uri, + path: theme_name, + wp_content_dir: wp_content_dir ) end end@@ -387,7 +391,7 @@ href="http://code.google.com/p/wpscan/issues/detail?id=141">code.google.com/p/wp-# File lib/wpscan/wp_theme.rb, line 79 +# File lib/wpscan/wp_theme.rb, line 83 def self.find_from_wooframework(target_uri) body = Browser.instance.get(target_uri.to_s).body regexp = %r{<meta name="generator" content="([^\s"]+)\s?([^"]+)?" />\s+<meta name="generator" content="WooFramework\s?([^"]+)?" />} @@ -398,11 +402,12 @@ href="http://code.google.com/p/wpscan/issues/detail?id=141">code.google.com/p/wp woo_theme_version = matches[2] woo_framework_version = matches[3] # Not used at this time - return new(:name => woo_theme_name, - :version => woo_theme_version, - :base_url => matches[0], - :path => "", - :wp_content_dir => "" + return new( + name: woo_theme_name, + version: woo_theme_version, + base_url: matches[0], + path: '', + wp_content_dir: '' ) end end@@ -438,7 +443,7 @@ href="http://code.google.com/p/wpscan/issues/detail?id=141">code.google.com/p/wp-# File lib/wpscan/wp_theme.rb, line 53 +# File lib/wpscan/wp_theme.rb, line 56 def ===(wp_theme) wp_theme.name === @name and wp_theme.version === @version enddiff --git a/doc/WpThemes.html b/doc/WpThemes.html index a2f4cd6e..83d5159a 100644 --- a/doc/WpThemes.html +++ b/doc/WpThemes.html @@ -222,20 +222,22 @@# File lib/wpscan/modules/wp_themes.rb, line 21 def themes_from_aggressive_detection(options) + if options[:vulns_file].nil? or options[:vulns_file] == '' + options[:vulns_file] = THEMES_VULNS_FILE + end + options[:file] = options[:file] || (options[:full] ? THEMES_FULL_FILE : THEMES_FILE) - options[:vulns_file] = (options[:vulns_file] != nil and options[:vulns_file] != "") ? - options[:vulns_file] : THEMES_VULNS_FILE options[:vulns_xpath] = "//theme[@name='#{@name}']/vulnerability" - options[:vulns_xpath_2] = "//theme" - options[:type] = "themes" + options[:vulns_xpath_2] = '//theme' + options[:type] = 'themes' result = WpDetector.aggressive_detection(options) themes = [] result.each do |r| themes << WpTheme.new( - :base_url => r.base_url, - :path => r.path, - :wp_content_dir => r.wp_content_dir, - :name => r.name + base_url: r.base_url, + path: r.path, + wp_content_dir: r.wp_content_dir, + name: r.name ) end themes.sort_by { |t| t.name } @@ -266,17 +268,17 @@-# File lib/wpscan/modules/wp_themes.rb, line 41 +# File lib/wpscan/modules/wp_themes.rb, line 43 def themes_from_passive_detection(options) themes = [] - temp = WpDetector.passive_detection(options[:base_url], "themes", options[:wp_content_dir]) + temp = WpDetector.passive_detection(options[:base_url], 'themes', options[:wp_content_dir]) temp.each do |item| themes << WpTheme.new( - :base_url => item.base_url, - :name => item.name, - :path => item.path, - :wp_content_dir => options[:wp_content_dir] + base_url: item.base_url, + name: item.name, + path: item.path, + wp_content_dir: options[:wp_content_dir] ) end themes.sort_by { |t| t.name } diff --git a/doc/WpTimthumbs.html b/doc/WpTimthumbs.html index 7112a118..d167f58d 100644 --- a/doc/WpTimthumbs.html +++ b/doc/WpTimthumbs.html @@ -222,7 +222,7 @@-@@ -510,7 +510,7 @@ any remaining ‘-’ by ‘_’# File lib/wpscan/modules/wp_timthumbs.rb, line 24 +# File lib/wpscan/modules/wp_timthumbs.rb, line 27 def has_timthumbs?(theme_name, options = {}) !timthumbs(theme_name, options).empty? end@@ -252,15 +252,15 @@-diff --git a/doc/WpscanOptions.html b/doc/WpscanOptions.html index f811f947..506d4412 100644 --- a/doc/WpscanOptions.html +++ b/doc/WpscanOptions.html @@ -394,23 +394,23 @@ any remaining ‘-’ by ‘_’# File lib/wpscan/modules/wp_timthumbs.rb, line 28 +# File lib/wpscan/modules/wp_timthumbs.rb, line 31 def timthumbs(theme_name = nil, options = {}) if @wp_timthumbs.nil? - options[:type] = "timthumbs" + options[:type] = 'timthumbs' options[:only_vulnerable_ones] = false - options[:file] = options[:file] || DATA_DIR + "/timthumbs.txt" - options[:vulns_file] = "xxx" - options[:vulns_xpath] = "xxx" - options[:vulns_xpath_2] = "xxx" + options[:file] = options[:file] || DATA_DIR + '/timthumbs.txt' + options[:vulns_file] = 'xxx' + options[:vulns_xpath] = 'xxx' + options[:vulns_xpath_2] = 'xxx' WpOptions.check_options(options) if theme_name == nil @@ -304,7 +304,7 @@-@@ -594,7 +594,7 @@ feed source.# File lib/wpscan/modules/wp_timthumbs.rb, line 49 +# File lib/wpscan/modules/wp_timthumbs.rb, line 52 def targets_url_from_theme(theme_name, options) targets = [] theme_name = URI.escape(theme_name) @@ -314,13 +314,13 @@ scripts/timthumb.php tools/timthumb.php functions/timthumb.php }.each do |file| targets << WpItem.new( - :base_url => options[:base_url], - :path => "themes/#{theme_name}/#{file}", - :wp_content_dir => options[:wp_content_dir], - :name => theme_name, - :vulns_file => "XX", - :type => "timthumbs", - :wp_plugins_dir => options[:wp_plugins_dir] + base_url: options[:base_url], + path: "themes/#{theme_name}/#{file}", + wp_content_dir: options[:wp_content_dir], + name: theme_name, + vulns_file: 'XX', + type: 'timthumbs', + wp_plugins_dir: options[:wp_plugins_dir] ) end targets diff --git a/doc/WpUser.html b/doc/WpUser.html index cacff869..89a1e295 100644 --- a/doc/WpUser.html +++ b/doc/WpUser.html @@ -268,7 +268,7 @@<=>(item) + class="method-args">(other) click to toggle source@@ -281,8 +281,8 @@@@ -298,7 +298,7 @@# File lib/wpscan/wp_user.rb, line 60 -def <=>(item) - item.name <=> self.name +def <=>(other) + other.name <=> self.name end===(item) + class="method-args">(other) click to toggle source@@ -311,8 +311,8 @@@@ -328,7 +328,7 @@# File lib/wpscan/wp_user.rb, line 64 -def ===(item) - item.name === self.name and item.id === self.id and item.nickname === self.nickname +def ===(other) + other.name === self.name and other.id === self.id and other.nickname === self.nickname endeql?(item) + class="method-args">(other) click to toggle source@@ -341,8 +341,8 @@@@ -373,7 +373,7 @@# File lib/wpscan/wp_user.rb, line 68 -def eql?(item) - item.name === self.name and item.id === self.id and item.nickname === self.nickname +def eql?(other) + other.name === self.name and other.id === self.id and other.nickname === self.nickname end# File lib/wpscan/wp_user.rb, line 32 def id if @id.nil? or @id.to_s.strip.empty? - return "empty" + return 'empty' end @id end@@ -436,7 +436,7 @@# File lib/wpscan/wp_user.rb, line 21 def name if @name.nil? or @name.to_s.strip.empty? - return "empty" + return 'empty' end @name end@@ -499,7 +499,7 @@# File lib/wpscan/wp_user.rb, line 43 def nickname if @nickname.nil? or @nickname.to_s.strip.empty? - return "empty" + return 'empty' end @nickname enddiff --git a/doc/WpUsernames.html b/doc/WpUsernames.html index 1c787742..ebed9fe5 100644 --- a/doc/WpUsernames.html +++ b/doc/WpUsernames.html @@ -324,7 +324,7 @@@@ -495,7 +495,7 @@ upgrade.# File lib/wpscan/modules/wp_usernames.rb, line 60 def get_nickname_from_url(url) - resp = Browser.instance.get(url, {:follow_location => true, :max_redirects => 2}) + resp = Browser.instance.get(url, { follow_location: true, max_redirects: 2 }) nickname = nil if resp.code == 200 nickname = extract_nickname_from_body(resp.body) @@ -360,21 +360,21 @@# File lib/wpscan/modules/wp_usernames.rb, line 81 def remove_junk_from_nickname(usernames) unless usernames.kind_of? Array - raise("Need an array as input") + raise('Need an array as input') end nicknames = [] usernames.each do |u| unless u.kind_of? WpUser - raise("Items must be of type WpUser") + raise('Items must be of type WpUser') end nickname = u.nickname - unless nickname == "empty" + unless nickname == 'empty' nicknames << nickname end end junk = get_equal_string_end(nicknames) usernames.each do |u| - u.nickname = u.nickname.sub(%r#{Regexp.escape(junk)}$/, "") + u.nickname = u.nickname.sub(%r#{Regexp.escape(junk)}$/, '') end usernames enddiff --git a/doc/WpVersion.html b/doc/WpVersion.html index 67c5c85b..317f5f57 100644 --- a/doc/WpVersion.html +++ b/doc/WpVersion.html @@ -291,14 +291,14 @@ etc)# File lib/wpscan/wp_version.rb, line 39 def self.find(target_uri, wp_content_dir) options = { - :base_url => target_uri, - :wp_content_dir => wp_content_dir + base_url: target_uri, + wp_content_dir: wp_content_dir } self.methods.grep(%rfind_from_/).each do |method_to_call| version = self.send(method_to_call, options) if version - return new(version, :discovery_method => method_to_call[%r{find_from_(.*)}, 1].gsub('_', ' ')) + return new(version, discovery_method: method_to_call[%r{find_from_(.*)}, 1].gsub('_', ' ')) end end nil @@ -376,12 +376,12 @@ etc) def self.find_from_advanced_fingerprinting(options) target_uri = options[:base_url] # needed for rpsec tests - version_xml = options[:version_xml] || DATA_DIR + "/wp_versions.xml" + version_xml = options[:version_xml] || WP_VERSIONS_FILE xml = Nokogiri::XML(File.open(version_xml)) do |config| config.noblanks end - xml.xpath("//file").each do |node| + xml.xpath('//file').each do |node| wp_content = options[:wp_content_dir] wp_plugins = "#{wp_content}/plugins" file_url = target_uri.merge(node.attribute('src').text).to_s @@ -427,7 +427,7 @@ source.# File lib/wpscan/wp_version.rb, line 99 def self.find_from_atom_generator(options) target_uri = options[:base_url] - response = Browser.instance.get(target_uri.merge("feed/atom/").to_s, {:follow_location => true, :max_redirects => 2}) + response = Browser.instance.get(target_uri.merge('feed/atom/').to_s, { follow_location: true, max_redirects: 2 }) response.body[%r{<generator uri="http://wordpress.org/" version="#{WpVersion.version_pattern}">WordPress</generator>}, 1] end@@ -460,7 +460,7 @@ source.# File lib/wpscan/wp_version.rb, line 164 def self.find_from_links_opml(options) target_uri = options[:base_url] - Browser.instance.get(target_uri.merge("wp-links-opml.php").to_s).body[%r{generator="wordpress/#{WpVersion.version_pattern}"}, 1] + Browser.instance.get(target_uri.merge('wp-links-opml.php').to_s).body[%r{generator="wordpress/#{WpVersion.version_pattern}"}, 1] end# File lib/wpscan/wp_version.rb, line 61 def self.find_from_meta_generator(options) target_uri = options[:base_url] - response = Browser.instance.get(target_uri.to_s, {:follow_location => true, :max_redirects => 2}) + response = Browser.instance.get(target_uri.to_s, { follow_location: true, max_redirects: 2 }) response.body[%r{name="generator" content="wordpress #{WpVersion.version_pattern}"}, 1] end@@ -529,7 +529,7 @@ source.# File lib/wpscan/wp_version.rb, line 79 def self.find_from_rdf_generator(options) target_uri = options[:base_url] - response = Browser.instance.get(target_uri.merge("feed/rdf/").to_s, {:follow_location => true, :max_redirects => 2}) + response = Browser.instance.get(target_uri.merge('feed/rdf/').to_s, { follow_location: true, max_redirects: 2 }) response.body[%r{<admin:generatorAgent rdf:resource="http://wordpress.org/\?v=#{WpVersion.version_pattern}" />}, 1] end@@ -562,7 +562,7 @@ source.# File lib/wpscan/wp_version.rb, line 150 def self.find_from_readme(options) target_uri = options[:base_url] - Browser.instance.get(target_uri.merge("readme.html").to_s).body[%r{<br />\sversion #{WpVersion.version_pattern}}, 1] + Browser.instance.get(target_uri.merge('readme.html').to_s).body[%r{<br />\sversion #{WpVersion.version_pattern}}, 1] end# File lib/wpscan/wp_version.rb, line 70 def self.find_from_rss_generator(options) target_uri = options[:base_url] - response = Browser.instance.get(target_uri.merge("feed/").to_s, {:follow_location => true, :max_redirects => 2}) + response = Browser.instance.get(target_uri.merge('feed/').to_s, { follow_location: true, max_redirects: 2 }) response.body[%r{<generator>http://wordpress.org/\?v=#{WpVersion.version_pattern}</generator>}, 1] end@@ -630,7 +630,7 @@ href="http://code.google.com/p/wpscan/issues/detail?id=109">code.google.com/p/wp# File lib/wpscan/wp_version.rb, line 158 def self.find_from_sitemap_generator(options) target_uri = options[:base_url] - Browser.instance.get(target_uri.merge("sitemap.xml").to_s).body[%r{generator="wordpress/#{WpVersion.version_pattern}"}, 1] + Browser.instance.get(target_uri.merge('sitemap.xml').to_s).body[%r{generator="wordpress/#{WpVersion.version_pattern}"}, 1] end# File lib/wpscan/wpscan_options.rb, line 232 def self.get_opt_long GetoptLong.new( - ["--url", "-u", GetoptLong::REQUIRED_ARGUMENT], - ["--enumerate", "-e", GetoptLong::OPTIONAL_ARGUMENT], - ["--username", "-U", GetoptLong::REQUIRED_ARGUMENT], - ["--wordlist", "-w", GetoptLong::REQUIRED_ARGUMENT], - ["--threads", "-t", GetoptLong::REQUIRED_ARGUMENT], - ["--force", "-f", GetoptLong::NO_ARGUMENT], - ["--help", "-h", GetoptLong::NO_ARGUMENT], - ["--verbose", "-v", GetoptLong::NO_ARGUMENT], - ["--proxy", GetoptLong::REQUIRED_ARGUMENT], - ["--proxy-auth", GetoptLong::REQUIRED_ARGUMENT], - ["--update", GetoptLong::NO_ARGUMENT], - ["--follow-redirection", GetoptLong::NO_ARGUMENT], - ["--wp-content-dir", GetoptLong::REQUIRED_ARGUMENT], - ["--wp-plugins-dir", GetoptLong::REQUIRED_ARGUMENT], - ["--config-file", "-c", GetoptLong::REQUIRED_ARGUMENT], - ["--exclude-content-based", GetoptLong::REQUIRED_ARGUMENT], - ["--basic-auth", GetoptLong::REQUIRED_ARGUMENT] + ['--url', '-u', GetoptLong::REQUIRED_ARGUMENT], + ['--enumerate', '-e', GetoptLong::OPTIONAL_ARGUMENT], + ['--username', '-U', GetoptLong::REQUIRED_ARGUMENT], + ['--wordlist', '-w', GetoptLong::REQUIRED_ARGUMENT], + ['--threads', '-t', GetoptLong::REQUIRED_ARGUMENT], + ['--force', '-f', GetoptLong::NO_ARGUMENT], + ['--help', '-h', GetoptLong::NO_ARGUMENT], + ['--verbose', '-v', GetoptLong::NO_ARGUMENT], + ['--proxy', GetoptLong::REQUIRED_ARGUMENT], + ['--proxy-auth', GetoptLong::REQUIRED_ARGUMENT], + ['--update', GetoptLong::NO_ARGUMENT], + ['--follow-redirection', GetoptLong::NO_ARGUMENT], + ['--wp-content-dir', GetoptLong::REQUIRED_ARGUMENT], + ['--wp-plugins-dir', GetoptLong::REQUIRED_ARGUMENT], + ['--config-file', '-c', GetoptLong::REQUIRED_ARGUMENT], + ['--exclude-content-based', GetoptLong::REQUIRED_ARGUMENT], + ['--basic-auth', GetoptLong::REQUIRED_ARGUMENT] ) end@@ -542,7 +542,7 @@ any remaining ‘-’ by ‘_’# File lib/wpscan/wpscan_options.rb, line 140 def basic_auth=(basic_auth) - raise "Invalid basic authentication format, login:password expected" if basic_auth.index(':').nil? + raise 'Invalid basic authentication format, login:password expected' if basic_auth.index(':').nil? @basic_auth = "Basic #{Base64.encode64(basic_auth).chomp}" end# File lib/wpscan/wpscan_options.rb, line 108 def enumerate_all_plugins=(enumerate_all_plugins) if enumerate_all_plugins === true and (@enumerate_plugins === true or @enumerate_only_vulnerable_plugins === true) - raise "Please choose only one plugin enumeration option" + raise 'Please choose only one plugin enumeration option' else @enumerate_all_plugins = enumerate_all_plugins end @@ -576,7 +576,7 @@ any remaining ‘-’ by ‘_’# File lib/wpscan/wpscan_options.rb, line 132 def enumerate_all_themes=(enumerate_all_themes) if enumerate_all_themes === true and (@enumerate_themes === true or @enumerate_only_vulnerable_themes === true) - raise "Please choose only one theme enumeration option" + raise 'Please choose only one theme enumeration option' else @enumerate_all_themes = enumerate_all_themes end @@ -610,7 +610,7 @@ any remaining ‘-’ by ‘_’# File lib/wpscan/wpscan_options.rb, line 100 def enumerate_only_vulnerable_plugins=(enumerate_only_vulnerable_plugins) if enumerate_only_vulnerable_plugins === true and (@enumerate_all_plugins === true or @enumerate_plugins === true) - raise "Please choose only one plugin enumeration option" + raise 'Please choose only one plugin enumeration option' else @enumerate_only_vulnerable_plugins = enumerate_only_vulnerable_plugins end @@ -644,7 +644,7 @@ any remaining ‘-’ by ‘_’# File lib/wpscan/wpscan_options.rb, line 124 def enumerate_only_vulnerable_themes=(enumerate_only_vulnerable_themes) if enumerate_only_vulnerable_themes === true and (@enumerate_all_themes === true or @enumerate_themes === true) - raise "Please choose only one theme enumeration option" + raise 'Please choose only one theme enumeration option' else @enumerate_only_vulnerable_themes = enumerate_only_vulnerable_themes end @@ -683,7 +683,7 @@ href="http://1-10">u will enumerate usernames from 1 to 10 def enumerate_options_from_string(value) # Usage of self is mandatory because there are overridden setters - value = value.split(',').map{ |c| c.downcase } + value = value.split(',').map { |c| c.downcase } self.enumerate_only_vulnerable_plugins = true if value.include?('vp') @@ -738,7 +738,7 @@ href="http://1-10">u will enumerate usernames from 1 to 10# File lib/wpscan/wpscan_options.rb, line 92 def enumerate_plugins=(enumerate_plugins) if enumerate_plugins === true and (@enumerate_all_plugins === true or @enumerate_only_vulnerable_plugins === true) - raise "Please choose only one plugin enumeration option" + raise 'Please choose only one plugin enumeration option' else @enumerate_plugins = enumerate_plugins end @@ -772,7 +772,7 @@ href="http://1-10">u will enumerate usernames from 1 to 10# File lib/wpscan/wpscan_options.rb, line 116 def enumerate_themes=(enumerate_themes) if enumerate_themes === true and (@enumerate_all_themes === true or @enumerate_only_vulnerable_themes === true) - raise "Please choose only one theme enumeration option" + raise 'Please choose only one theme enumeration option' else @enumerate_themes = enumerate_themes end @@ -836,7 +836,7 @@ href="http://1-10">u will enumerate usernames from 1 to 10# File lib/wpscan/wpscan_options.rb, line 76 def proxy=(proxy) if proxy.index(':') == nil - raise "Invalid proxy format. Should be host:port." + raise 'Invalid proxy format. Should be host:port.' else @proxy = proxy end @@ -870,7 +870,7 @@ href="http://1-10">u will enumerate usernames from 1 to 10# File lib/wpscan/wpscan_options.rb, line 84 def proxy_auth=(auth) if auth.index(':') == nil - raise "Invalid proxy auth format, username:password expected" + raise 'Invalid proxy auth format, username:password expected' else @proxy_auth = auth end @@ -910,9 +910,9 @@ value WpscanOptions.option_to_instance_variable_setter(cli_option), cli_value ) - elsif cli_option === "--enumerate" # Special cases + elsif cli_option === '--enumerate' # Special cases # Default value if no argument is given - cli_value = "vt,tt,u,vp" if cli_value.length == 0 + cli_value = 'vt,tt,u,vp' if cli_value.length == 0 enumerate_options_from_string(cli_value) else @@ -1016,7 +1016,7 @@ value# File lib/wpscan/wpscan_options.rb, line 58 def url=(url) - raise "Empty URL given" if !url + raise 'Empty URL given' if !url @url = URI.parse(add_http_protocol(url)).to_s enddiff --git a/doc/created.rid b/doc/created.rid index fd5ff4e1..902e9de0 100644 --- a/doc/created.rid +++ b/doc/created.rid @@ -1,47 +1,47 @@ -Sat, 19 Jan 2013 21:42:06 +0100 +Sun, 27 Jan 2013 01:14:27 +0100 ./CREDITS Fri, 11 Jan 2013 21:40:57 +0100 ./Gemfile Wed, 09 Jan 2013 21:35:00 +0100 -./lib/browser.rb Fri, 11 Jan 2013 21:40:57 +0100 -./lib/cache_file_store.rb Fri, 11 Jan 2013 21:40:57 +0100 -./lib/common/custom_option_parser.rb Sat, 19 Jan 2013 12:52:13 +0100 -./lib/common/plugins/plugin.rb Sat, 19 Jan 2013 12:52:13 +0100 -./lib/common/plugins/plugins.rb Sat, 19 Jan 2013 12:52:13 +0100 -./lib/common_helper.rb Sat, 19 Jan 2013 21:27:22 +0100 -./lib/environment.rb Sat, 19 Jan 2013 12:52:13 +0100 -./lib/updater/git_updater.rb Sun, 13 Jan 2013 21:08:52 +0100 -./lib/updater/svn_updater.rb Fri, 11 Jan 2013 21:40:57 +0100 -./lib/updater/updater.rb Mon, 14 Jan 2013 12:42:10 +0100 -./lib/updater/updater_factory.rb Fri, 11 Jan 2013 21:40:57 +0100 -./lib/wpscan/modules/brute_force.rb Fri, 11 Jan 2013 21:40:57 +0100 -./lib/wpscan/modules/malwares.rb Fri, 11 Jan 2013 21:40:57 +0100 -./lib/wpscan/modules/web_site.rb Sat, 19 Jan 2013 18:50:05 +0100 -./lib/wpscan/modules/wp_config_backup.rb Fri, 11 Jan 2013 21:40:57 +0100 -./lib/wpscan/modules/wp_full_path_disclosure.rb Fri, 11 Jan 2013 21:40:57 +0100 -./lib/wpscan/modules/wp_login_protection.rb Fri, 11 Jan 2013 21:40:57 +0100 -./lib/wpscan/modules/wp_plugins.rb Sat, 19 Jan 2013 21:26:26 +0100 -./lib/wpscan/modules/wp_readme.rb Fri, 11 Jan 2013 21:40:57 +0100 -./lib/wpscan/modules/wp_themes.rb Sat, 19 Jan 2013 21:29:48 +0100 -./lib/wpscan/modules/wp_timthumbs.rb Fri, 11 Jan 2013 21:40:57 +0100 -./lib/wpscan/modules/wp_usernames.rb Fri, 11 Jan 2013 21:40:57 +0100 -./lib/wpscan/vulnerable.rb Sun, 13 Jan 2013 20:53:11 +0100 -./lib/wpscan/wp_detector.rb Fri, 11 Jan 2013 21:40:57 +0100 -./lib/wpscan/wp_enumerator.rb Sat, 19 Jan 2013 20:52:04 +0100 -./lib/wpscan/wp_item.rb Sat, 19 Jan 2013 21:29:12 +0100 -./lib/wpscan/wp_options.rb Fri, 11 Jan 2013 21:40:57 +0100 -./lib/wpscan/wp_plugin.rb Sat, 19 Jan 2013 21:26:18 +0100 -./lib/wpscan/wp_target.rb Sat, 19 Jan 2013 18:50:29 +0100 -./lib/wpscan/wp_theme.rb Sat, 19 Jan 2013 21:29:43 +0100 -./lib/wpscan/wp_user.rb Fri, 11 Jan 2013 21:40:57 +0100 -./lib/wpscan/wp_version.rb Sat, 19 Jan 2013 21:30:10 +0100 -./lib/wpscan/wp_vulnerability.rb Sun, 13 Jan 2013 20:53:26 +0100 -./lib/wpscan/wpscan_helper.rb Fri, 11 Jan 2013 21:40:57 +0100 -./lib/wpscan/wpscan_options.rb Fri, 11 Jan 2013 21:40:57 +0100 -./lib/wpstools/plugins/checker/checker_plugin.rb Sat, 19 Jan 2013 21:27:43 +0100 -./lib/wpstools/plugins/list_generator/generate_list.rb Sat, 19 Jan 2013 21:29:25 +0100 -./lib/wpstools/plugins/list_generator/list_generator_plugin.rb Sat, 19 Jan 2013 12:52:13 +0100 -./lib/wpstools/plugins/list_generator/svn_parser.rb Sat, 19 Jan 2013 20:52:04 +0100 -./lib/wpstools/wpstools_helper.rb Sat, 19 Jan 2013 12:52:13 +0100 -./log.txt Sat, 19 Jan 2013 21:33:28 +0100 +./lib/browser.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/cache_file_store.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/common/custom_option_parser.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/common/plugins/plugin.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/common/plugins/plugins.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/common_helper.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/environment.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/updater/git_updater.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/updater/svn_updater.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/updater/updater.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/updater/updater_factory.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/wpscan/modules/brute_force.rb Sun, 27 Jan 2013 00:31:13 +0100 +./lib/wpscan/modules/malwares.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/wpscan/modules/web_site.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/wpscan/modules/wp_config_backup.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/wpscan/modules/wp_full_path_disclosure.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/wpscan/modules/wp_login_protection.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/wpscan/modules/wp_plugins.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/wpscan/modules/wp_readme.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/wpscan/modules/wp_themes.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/wpscan/modules/wp_timthumbs.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/wpscan/modules/wp_usernames.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/wpscan/vulnerable.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/wpscan/wp_detector.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/wpscan/wp_enumerator.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/wpscan/wp_item.rb Fri, 25 Jan 2013 22:39:51 +0100 +./lib/wpscan/wp_options.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/wpscan/wp_plugin.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/wpscan/wp_target.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/wpscan/wp_theme.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/wpscan/wp_user.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/wpscan/wp_version.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/wpscan/wp_vulnerability.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/wpscan/wpscan_helper.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/wpscan/wpscan_options.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/wpstools/plugins/checker/checker_plugin.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/wpstools/plugins/list_generator/generate_list.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/wpstools/plugins/list_generator/list_generator_plugin.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/wpstools/plugins/list_generator/svn_parser.rb Thu, 24 Jan 2013 22:19:29 +0100 +./lib/wpstools/wpstools_helper.rb Thu, 24 Jan 2013 22:19:29 +0100 +./log.txt Sun, 27 Jan 2013 00:31:06 +0100 ./README Sat, 19 Jan 2013 18:50:05 +0100 -./wpscan.rb Sat, 19 Jan 2013 21:10:11 +0100 -./wpstools.rb Sat, 19 Jan 2013 13:13:52 +0100 +./wpscan.rb Thu, 24 Jan 2013 22:19:29 +0100 +./wpstools.rb Thu, 24 Jan 2013 22:19:29 +0100 diff --git a/doc/js/search_index.js b/doc/js/search_index.js index a11042ed..736519c3 100644 --- a/doc/js/search_index.js +++ b/doc/js/search_index.js @@ -1 +1 @@ -var search_data = {"index":{"searchIndex":["array","browser","bruteforce","cachefilestore","checkerplugin","customoptionparser","generatelist","gitupdater","listgeneratorplugin","malwares","object","plugin","plugins","svnparser","svnupdater","uri","updater","updaterfactory","vulnerable","website","wpconfigbackup","wpdetector","wpenumerator","wpfullpathdisclosure","wpitem","wploginprotection","wpoptions","wpplugin","wpplugins","wpreadme","wptarget","wptheme","wpthemes","wptimthumbs","wpuser","wpusernames","wpversion","wpvulnerability","wpscanoptions","<=>()","<=>()","==()","===()","===()","===()","_grep_()","add()","add_http_protocol()","add_option()","add_trailing_slash()","aggressive_detection()","author_url()","available_updaters_classes()","banner()","basic_auth=()","better_wp_security_url()","bluetrait_event_viewer_url()","brute_force()","changelog_url()","check_local_vulnerable_files()","check_options()","check_vuln_ref_urls()","clean()","clean_option()","colorize()","config_backup()","config_backup_files()","debug_log_url()","directory_listing?()","enumerate()","enumerate_all_plugins=()","enumerate_all_themes=()","enumerate_only_vulnerable_plugins=()","enumerate_only_vulnerable_themes=()","enumerate_options_from_string()","enumerate_plugins=()","enumerate_themes=()","eql?()","error_404_hash()","error_log?()","error_log_url()","escape()","extract_name_from_url()","extract_nickname_from_body()","find()","find()","find_from_advanced_fingerprinting()","find_from_atom_generator()","find_from_css_link()","find_from_links_opml()","find_from_meta_generator()","find_from_rdf_generator()","find_from_readme()","find_from_rss_generator()","find_from_sitemap_generator()","find_from_wooframework()","forge_request()","full_path_disclosure_url()","generate_full_list()","generate_items()","generate_popular_list()","get()","get_entry_file_path()","get_equal_string_end()","get_full_url()","get_metasploit_url()","get_nickname_from_response()","get_nickname_from_url()","get_opt_long()","get_popular_items()","get_sub_folder()","get_updater()","get_url_without_filename()","green()","grep()","has_basic_auth?()","has_better_wp_security_protection?()","has_bluetrait_event_viewer_protection?()","has_changelog?()","has_debug_log?()","has_full_path_disclosure?()","has_limit_login_attempts_protection?()","has_local_changes?()","has_login_lock_protection?()","has_login_lockdown_protection?()","has_login_protection?()","has_login_security_solution_protection?()","has_malwares?()","has_options?()","has_readme?()","has_readme?()","has_simple_login_lockdown_protection?()","has_timthumbs?()","has_xml_rpc?()","help()","homepage_hash()","id()","id=()","instance()","is_installed?()","is_installed?()","is_installed?()","is_long_option?()","is_multisite?()","limit_login_attempts_url()","lines_in_file()","load_config()","load_from_arguments()","local_revision_number()","local_revision_number()","local_revision_number()","login_protection_plugin()","login_security_solution_url()","login_url()","malware_pattern()","malwares()","malwares_file()","max_threads=()","merge_request_params()","name()","name=()","new()","new()","new()","new()","new()","new()","new()","new()","new()","new()","new()","new()","new()","new()","new()","new()","new()","nickname()","nickname=()","online?()","option_to_instance_variable_setter()","option_to_symbol()","output_vulnerabilities()","page_hash()","parse()","passive_detection()","plugins_from_aggressive_detection()","plugins_from_passive_detection()","post()","proxy=()","proxy_auth=()","proxy_auth=()","puts()","raise_invalid_proxy_format()","read_entry()","readme_url()","readme_url()","red()","redirection()","register()","register_options()","register_plugin()","registration_enabled?()","registration_url()","remove_junk_from_nickname()","repo_directory_arguments()","require_files_from_directory()","reset()","reset_head()","results()","rss_url()","run()","run()","run()","save()","search_replace_db_2_exists?()","search_replace_db_2_url()","set_file_name()","set_option_from_cli()","simple_login_lockdown_url()","targets_url_from_theme()","theme()","themes_from_aggressive_detection()","themes_from_passive_detection()","threads=()","timthumbs()","to_h()","to_s()","update()","update()","update()","url()","url=()","usage()","user_agent()","user_agent_mode=()","usernames()","valid_response_codes()","version()","version()","version_pattern()","vulnerabilities()","wordlist=()","wordpress?()","wp_content_dir()","wp_org_item?()","wp_org_url()","wp_plugins_dir()","wp_plugins_dir_exists?()","write_entry()","xml_rpc_url()","credits","gemfile","readme","log"],"longSearchIndex":["array","browser","bruteforce","cachefilestore","checkerplugin","customoptionparser","generatelist","gitupdater","listgeneratorplugin","malwares","object","plugin","plugins","svnparser","svnupdater","uri","updater","updaterfactory","vulnerable","website","wpconfigbackup","wpdetector","wpenumerator","wpfullpathdisclosure","wpitem","wploginprotection","wpoptions","wpplugin","wpplugins","wpreadme","wptarget","wptheme","wpthemes","wptimthumbs","wpuser","wpusernames","wpversion","wpvulnerability","wpscanoptions","wpitem#<=>()","wpuser#<=>()","wpitem#==()","wpitem#===()","wptheme#===()","wpuser#===()","array#_grep_()","customoptionparser#add()","object#add_http_protocol()","customoptionparser#add_option()","object#add_trailing_slash()","wpdetector::aggressive_detection()","wpusernames#author_url()","updaterfactory::available_updaters_classes()","object#banner()","wpscanoptions#basic_auth=()","wploginprotection#better_wp_security_url()","wploginprotection#bluetrait_event_viewer_url()","bruteforce#brute_force()","wpitem#changelog_url()","checkerplugin#check_local_vulnerable_files()","wpoptions::check_options()","checkerplugin#check_vuln_ref_urls()","cachefilestore#clean()","wpscanoptions::clean_option()","object#colorize()","wpconfigbackup#config_backup()","wpconfigbackup::config_backup_files()","wptarget#debug_log_url()","wpitem#directory_listing?()","wpenumerator::enumerate()","wpscanoptions#enumerate_all_plugins=()","wpscanoptions#enumerate_all_themes=()","wpscanoptions#enumerate_only_vulnerable_plugins=()","wpscanoptions#enumerate_only_vulnerable_themes=()","wpscanoptions#enumerate_options_from_string()","wpscanoptions#enumerate_plugins=()","wpscanoptions#enumerate_themes=()","wpuser#eql?()","website#error_404_hash()","wpplugin#error_log?()","wpplugin#error_log_url()","uri::escape()","wpitem#extract_name_from_url()","wpusernames#extract_nickname_from_body()","wptheme::find()","wpversion::find()","wpversion::find_from_advanced_fingerprinting()","wpversion::find_from_atom_generator()","wptheme::find_from_css_link()","wpversion::find_from_links_opml()","wpversion::find_from_meta_generator()","wpversion::find_from_rdf_generator()","wpversion::find_from_readme()","wpversion::find_from_rss_generator()","wpversion::find_from_sitemap_generator()","wptheme::find_from_wooframework()","browser#forge_request()","wpfullpathdisclosure#full_path_disclosure_url()","generatelist#generate_full_list()","wpenumerator::generate_items()","generatelist#generate_popular_list()","browser#get()","cachefilestore#get_entry_file_path()","object#get_equal_string_end()","wpitem#get_full_url()","object#get_metasploit_url()","wpusernames#get_nickname_from_response()","wpusernames#get_nickname_from_url()","wpscanoptions::get_opt_long()","generatelist#get_popular_items()","wpitem#get_sub_folder()","updaterfactory::get_updater()","wpitem#get_url_without_filename()","object#green()","array#grep()","website#has_basic_auth?()","wploginprotection#has_better_wp_security_protection?()","wploginprotection#has_bluetrait_event_viewer_protection?()","wpitem#has_changelog?()","wptarget#has_debug_log?()","wpfullpathdisclosure#has_full_path_disclosure?()","wploginprotection#has_limit_login_attempts_protection?()","gitupdater#has_local_changes?()","wploginprotection#has_login_lock_protection?()","wploginprotection#has_login_lockdown_protection?()","wploginprotection#has_login_protection?()","wploginprotection#has_login_security_solution_protection?()","malwares#has_malwares?()","wpscanoptions#has_options?()","wpitem#has_readme?()","wpreadme#has_readme?()","wploginprotection#has_simple_login_lockdown_protection?()","wptimthumbs#has_timthumbs?()","website#has_xml_rpc?()","object#help()","website#homepage_hash()","wpuser#id()","wpuser#id=()","browser::instance()","gitupdater#is_installed?()","svnupdater#is_installed?()","updater#is_installed?()","wpscanoptions::is_long_option?()","wptarget#is_multisite?()","wploginprotection#limit_login_attempts_url()","bruteforce::lines_in_file()","browser#load_config()","wpscanoptions::load_from_arguments()","gitupdater#local_revision_number()","svnupdater#local_revision_number()","updater#local_revision_number()","wploginprotection#login_protection_plugin()","wploginprotection#login_security_solution_url()","wptarget#login_url()","malwares::malware_pattern()","malwares#malwares()","malwares::malwares_file()","browser#max_threads=()","browser#merge_request_params()","wpuser#name()","wpuser#name=()","cachefilestore::new()","checkerplugin::new()","customoptionparser::new()","generatelist::new()","listgeneratorplugin::new()","plugin::new()","plugins::new()","svnparser::new()","updater::new()","wpitem::new()","wpplugin::new()","wptarget::new()","wptheme::new()","wpuser::new()","wpversion::new()","wpvulnerability::new()","wpscanoptions::new()","wpuser#nickname()","wpuser#nickname=()","website#online?()","wpscanoptions::option_to_instance_variable_setter()","customoptionparser::option_to_symbol()","object#output_vulnerabilities()","website::page_hash()","svnparser#parse()","wpdetector::passive_detection()","wpplugins#plugins_from_aggressive_detection()","wpplugins#plugins_from_passive_detection()","browser#post()","wpscanoptions#proxy=()","browser#proxy_auth=()","wpscanoptions#proxy_auth=()","object#puts()","browser#raise_invalid_proxy_format()","cachefilestore#read_entry()","wpitem#readme_url()","wpreadme#readme_url()","object#red()","website#redirection()","plugins#register()","plugin#register_options()","plugins#register_plugin()","wptarget#registration_enabled?()","wptarget#registration_url()","wpusernames#remove_junk_from_nickname()","gitupdater#repo_directory_arguments()","object#require_files_from_directory()","browser::reset()","gitupdater#reset_head()","customoptionparser#results()","website#rss_url()","checkerplugin#run()","listgeneratorplugin#run()","plugin#run()","generatelist#save()","wptarget#search_replace_db_2_exists?()","wptarget#search_replace_db_2_url()","generatelist#set_file_name()","wpscanoptions#set_option_from_cli()","wploginprotection#simple_login_lockdown_url()","wptimthumbs#targets_url_from_theme()","wptarget#theme()","wpthemes#themes_from_aggressive_detection()","wpthemes#themes_from_passive_detection()","wpscanoptions#threads=()","wptimthumbs#timthumbs()","wpscanoptions#to_h()","wpitem#to_s()","gitupdater#update()","svnupdater#update()","updater#update()","wptarget#url()","wpscanoptions#url=()","object#usage()","browser#user_agent()","browser#user_agent_mode=()","wpusernames#usernames()","wptarget::valid_response_codes()","wpitem#version()","wptarget#version()","wpversion::version_pattern()","vulnerable#vulnerabilities()","wpscanoptions#wordlist=()","website#wordpress?()","wptarget#wp_content_dir()","wpitem#wp_org_item?()","wpitem#wp_org_url()","wptarget#wp_plugins_dir()","wptarget#wp_plugins_dir_exists?()","cachefilestore#write_entry()","website#xml_rpc_url()","","","",""],"info":[["Array","","Array.html","",""],["Browser","","Browser.html","",""],["BruteForce","","BruteForce.html","",""],["CacheFileStore","","CacheFileStore.html","",""],["CheckerPlugin","","CheckerPlugin.html","","\nWPScan - WordPress Security Scanner\nCopyright (C) 2012-2013\n\nThis program is free software: you can redistribute ...\n"],["CustomOptionParser","","CustomOptionParser.html","","\nWPScan - WordPress Security Scanner\nCopyright (C) 2012-2013\n\nThis program is free software: you can redistribute ...\n"],["GenerateList","","GenerateList.html","","This tool generates a list to use for plugin and theme enumeration\n"],["GitUpdater","","GitUpdater.html","",""],["ListGeneratorPlugin","","ListGeneratorPlugin.html","","\n
WPScan - WordPress Security Scanner\nCopyright (C) 2012-2013\n\nThis program is free software: you can redistribute ...\n"],["Malwares","","Malwares.html","",""],["Object","","Object.html","",""],["Plugin","","Plugin.html","","\nWPScan - WordPress Security Scanner\nCopyright (C) 2012-2013\n\nThis program is free software: you can redistribute ...\n"],["Plugins","","Plugins.html","","\nWPScan - WordPress Security Scanner\nCopyright (C) 2012-2013\n\nThis program is free software: you can redistribute ...\n"],["SvnParser","","SvnParser.html","","This Class Parses SVN Repositories via HTTP\n"],["SvnUpdater","","SvnUpdater.html","",""],["URI","","URI.html","",""],["Updater","","Updater.html","","
This class act as an absract one\n"],["UpdaterFactory","","UpdaterFactory.html","",""],["Vulnerable","","Vulnerable.html","",""],["WebSite","","WebSite.html","",""],["WpConfigBackup","","WpConfigBackup.html","",""],["WpDetector","","WpDetector.html","",""],["WpEnumerator","","WpEnumerator.html","","
Enumerate over a given set of items and check if they exist\n"],["WpFullPathDisclosure","","WpFullPathDisclosure.html","",""],["WpItem","","WpItem.html","",""],["WpLoginProtection","","WpLoginProtection.html","",""],["WpOptions","","WpOptions.html","","
Options Hash\n
Options\n
url- The base URL of the WordPress site\n"],["WpPlugin","","WpPlugin.html","",""],["WpPlugins","","WpPlugins.html","",""],["WpReadme","","WpReadme.html","",""],["WpTarget","","WpTarget.html","",""],["WpTheme","","WpTheme.html","",""],["WpThemes","","WpThemes.html","",""],["WpTimthumbs","","WpTimthumbs.html","",""],["WpUser","","WpUser.html","",""],["WpUsernames","","WpUsernames.html","",""],["WpVersion","","WpVersion.html","",""],["WpVulnerability","","WpVulnerability.html","",""],["WpscanOptions","","WpscanOptions.html","",""],["<=>","WpItem","WpItem.html#method-i-3C-3D-3E","(other)","Compare\n"],["<=>","WpUser","WpUser.html#method-i-3C-3D-3E","(item)",""],["==","WpItem","WpItem.html#method-i-3D-3D","(other)","
Compare\n"],["===","WpItem","WpItem.html#method-i-3D-3D-3D","(other)","
Compare\n"],["===","WpTheme","WpTheme.html#method-i-3D-3D-3D","(wp_theme)",""],["===","WpUser","WpUser.html#method-i-3D-3D-3D","(item)",""],["_grep_","Array","Array.html#method-i-_grep_","(regexp)","
Fix for grep with symbols in ruby <= 1.8.7\n"],["add","CustomOptionParser","CustomOptionParser.html#method-i-add","(options)","
param Array(Array) or Array options\n"],["add_http_protocol","Object","Object.html#method-i-add_http_protocol","(url)","
Add protocol\n"],["add_option","CustomOptionParser","CustomOptionParser.html#method-i-add_option","(option)","
param Array option\n"],["add_trailing_slash","Object","Object.html#method-i-add_trailing_slash","(url)",""],["aggressive_detection","WpDetector","WpDetector.html#method-c-aggressive_detection","(options, items = [])",""],["author_url","WpUsernames","WpUsernames.html#method-i-author_url","(author_id)",""],["available_updaters_classes","UpdaterFactory","UpdaterFactory.html#method-c-available_updaters_classes","()","
return array of class symbols\n"],["banner","Object","Object.html#method-i-banner","()","
our 1337 banner\n"],["basic_auth=","WpscanOptions","WpscanOptions.html#method-i-basic_auth-3D","(basic_auth)",""],["better_wp_security_url","WpLoginProtection","WpLoginProtection.html#method-i-better_wp_security_url","()",""],["bluetrait_event_viewer_url","WpLoginProtection","WpLoginProtection.html#method-i-bluetrait_event_viewer_url","()",""],["brute_force","BruteForce","BruteForce.html#method-i-brute_force","(logins, wordlist_path, options = {})","
param array of string logins param string wordlist_path param hash options\n\n
boolean :show_progression If ...\n"],["changelog_url","WpItem","WpItem.html#method-i-changelog_url","()","Url for changelog.txt\n"],["check_local_vulnerable_files","CheckerPlugin","CheckerPlugin.html#method-i-check_local_vulnerable_files","(dir_to_scan)",""],["check_options","WpOptions","WpOptions.html#method-c-check_options","(options)",""],["check_vuln_ref_urls","CheckerPlugin","CheckerPlugin.html#method-i-check_vuln_ref_urls","()",""],["clean","CacheFileStore","CacheFileStore.html#method-i-clean","()",""],["clean_option","WpscanOptions","WpscanOptions.html#method-c-clean_option","(option)","
Will removed the ‘-’ or ‘–’ chars at the beginning of option and replace\nany remaining ‘-’ by ‘_’\n
param …\n"],["colorize","Object","Object.html#method-i-colorize","(text, color_code)",""],["config_backup","WpConfigBackup","WpConfigBackup.html#method-i-config_backup","()","
Checks to see if wp-config.php has a backup See www.feross.org/cmsploit/\nreturn an array of backup config …\n"],["config_backup_files","WpConfigBackup","WpConfigBackup.html#method-c-config_backup_files","()","
@return Array\n"],["debug_log_url","WpTarget","WpTarget.html#method-i-debug_log_url","()",""],["directory_listing?","WpItem","WpItem.html#method-i-directory_listing-3F","()","
Is directory listing enabled?\n"],["enumerate","WpEnumerator","WpEnumerator.html#method-c-enumerate","(options = {}, items = nil)","
Enumerate the given Targets\n
Attributes\n
targets- targets to enumerate\n"],["enumerate_all_plugins=","WpscanOptions","WpscanOptions.html#method-i-enumerate_all_plugins-3D","(enumerate_all_plugins)",""],["enumerate_all_themes=","WpscanOptions","WpscanOptions.html#method-i-enumerate_all_themes-3D","(enumerate_all_themes)",""],["enumerate_only_vulnerable_plugins=","WpscanOptions","WpscanOptions.html#method-i-enumerate_only_vulnerable_plugins-3D","(enumerate_only_vulnerable_plugins)",""],["enumerate_only_vulnerable_themes=","WpscanOptions","WpscanOptions.html#method-i-enumerate_only_vulnerable_themes-3D","(enumerate_only_vulnerable_themes)",""],["enumerate_options_from_string","WpscanOptions","WpscanOptions.html#method-i-enumerate_options_from_string","(value)","Will set enumerate_* from the string value IE : if value = vp =>\n:enumerate_only_vulnerable_plugins …\n"],["enumerate_plugins=","WpscanOptions","WpscanOptions.html#method-i-enumerate_plugins-3D","(enumerate_plugins)",""],["enumerate_themes=","WpscanOptions","WpscanOptions.html#method-i-enumerate_themes-3D","(enumerate_themes)",""],["eql?","WpUser","WpUser.html#method-i-eql-3F","(item)",""],["error_404_hash","WebSite","WebSite.html#method-i-error_404_hash","()","
Return the MD5 hash of a 404 page\n"],["error_log?","WpPlugin","WpPlugin.html#method-i-error_log-3F","()","
Discover any error_log files created by WordPress These are created by the\nWordPress error_log() function …\n"],["error_log_url","WpPlugin","WpPlugin.html#method-i-error_log_url","()",""],["escape","URI","URI.html#method-c-escape","(str)",""],["extract_name_from_url","WpItem","WpItem.html#method-i-extract_name_from_url","()","
Extract item name from a url\n"],["extract_nickname_from_body","WpUsernames","WpUsernames.html#method-i-extract_nickname_from_body","(body)",""],["find","WpTheme","WpTheme.html#method-c-find","(target_uri)",""],["find","WpVersion","WpVersion.html#method-c-find","(target_uri, wp_content_dir)","
Will use all method self.find_from_* to try to detect the version Once the\nversion is found, it will …\n"],["find_from_advanced_fingerprinting","WpVersion","WpVersion.html#method-c-find_from_advanced_fingerprinting","(options)","
Uses data/wp_versions.xml to try to identify a wordpress version.\n
It does this by using client side file …\n"],["find_from_atom_generator","WpVersion","WpVersion.html#method-c-find_from_atom_generator","(options)","
Attempts to find the WordPress version from, the generator tag in the Atom\nsource.\n"],["find_from_css_link","WpTheme","WpTheme.html#method-c-find_from_css_link","(target_uri)","
Discover the wordpress theme name by parsing the css link rel\n"],["find_from_links_opml","WpVersion","WpVersion.html#method-c-find_from_links_opml","(options)","
Attempts to find the WordPress version from the p-links-opml.php file.\n"],["find_from_meta_generator","WpVersion","WpVersion.html#method-c-find_from_meta_generator","(options)","
Attempts to find the wordpress version from, the generator meta tag in the\nhtml source.\n
The meta tag can …\n"],["find_from_rdf_generator","WpVersion","WpVersion.html#method-c-find_from_rdf_generator","(options)","
Attempts to find WordPress version from, the generator tag in the RDF feed\nsource.\n"],["find_from_readme","WpVersion","WpVersion.html#method-c-find_from_readme","(options)","
Attempts to find the WordPress version from the readme.html file.\n"],["find_from_rss_generator","WpVersion","WpVersion.html#method-c-find_from_rss_generator","(options)","
Attempts to find the WordPress version from, the generator tag in the RSS\nfeed source.\n"],["find_from_sitemap_generator","WpVersion","WpVersion.html#method-c-find_from_sitemap_generator","(options)","
Attempts to find the WordPress version from the sitemap.xml file.\n
See: code.google.com/p/wpscan/issues/detail?id=109 …\n"],["find_from_wooframework","WpTheme","WpTheme.html#method-c-find_from_wooframework","(target_uri)","
code.google.com/p/wpscan/issues/detail?id=141\n"],["forge_request","Browser","Browser.html#method-i-forge_request","(url, params = {})",""],["full_path_disclosure_url","WpFullPathDisclosure","WpFullPathDisclosure.html#method-i-full_path_disclosure_url","()",""],["generate_full_list","GenerateList","GenerateList.html#method-i-generate_full_list","()",""],["generate_items","WpEnumerator","WpEnumerator.html#method-c-generate_items","(options = {})",""],["generate_popular_list","GenerateList","GenerateList.html#method-i-generate_popular_list","(pages)",""],["get","Browser","Browser.html#method-i-get","(url, params = {})",""],["get_entry_file_path","CacheFileStore","CacheFileStore.html#method-i-get_entry_file_path","(key)",""],["get_equal_string_end","Object","Object.html#method-i-get_equal_string_end","(stringarray = [\"\"])","
Gets the string all elements in stringarray ends with\n"],["get_full_url","WpItem","WpItem.html#method-i-get_full_url","()","
Get the full url for this item\n"],["get_metasploit_url","Object","Object.html#method-i-get_metasploit_url","(module_path)",""],["get_nickname_from_response","WpUsernames","WpUsernames.html#method-i-get_nickname_from_response","(resp)",""],["get_nickname_from_url","WpUsernames","WpUsernames.html#method-i-get_nickname_from_url","(url)",""],["get_opt_long","WpscanOptions","WpscanOptions.html#method-c-get_opt_long","()","
Even if a short option is given (IE : -u), the long one will be returned\n(IE : –url)\n"],["get_popular_items","GenerateList","GenerateList.html#method-i-get_popular_items","(pages)","
Send a HTTP request to the WordPress most popular theme or plugin webpage\nparse the response for the …\n"],["get_sub_folder","WpItem","WpItem.html#method-i-get_sub_folder","()",""],["get_updater","UpdaterFactory","UpdaterFactory.html#method-c-get_updater","(repo_directory)",""],["get_url_without_filename","WpItem","WpItem.html#method-i-get_url_without_filename","()","
Gets the full url for this item without filenames\n"],["green","Object","Object.html#method-i-green","(text)",""],["grep","Array","Array.html#method-i-grep","(regexp)",""],["has_basic_auth?","WebSite","WebSite.html#method-i-has_basic_auth-3F","()",""],["has_better_wp_security_protection?","WpLoginProtection","WpLoginProtection.html#method-i-has_better_wp_security_protection-3F","()","
wordpress.org/extend/plugins/better-wp-security/\n"],["has_bluetrait_event_viewer_protection?","WpLoginProtection","WpLoginProtection.html#method-i-has_bluetrait_event_viewer_protection-3F","()","
wordpress.org/extend/plugins/bluetrait-event-viewer/\n"],["has_changelog?","WpItem","WpItem.html#method-i-has_changelog-3F","()","
changelog.txt present?\n"],["has_debug_log?","WpTarget","WpTarget.html#method-i-has_debug_log-3F","()",""],["has_full_path_disclosure?","WpFullPathDisclosure","WpFullPathDisclosure.html#method-i-has_full_path_disclosure-3F","()","
Check for Full Path Disclosure (FPD)\n"],["has_limit_login_attempts_protection?","WpLoginProtection","WpLoginProtection.html#method-i-has_limit_login_attempts_protection-3F","()","
wordpress.org/extend/plugins/limit-login-attempts/\n"],["has_local_changes?","GitUpdater","GitUpdater.html#method-i-has_local_changes-3F","()",""],["has_login_lock_protection?","WpLoginProtection","WpLoginProtection.html#method-i-has_login_lock_protection-3F","()","
wordpress.org/extend/plugins/login-lock/\n"],["has_login_lockdown_protection?","WpLoginProtection","WpLoginProtection.html#method-i-has_login_lockdown_protection-3F","()","
Thanks to Alip Aswalid for providing this method.\nwordpress.org/extend/plugins/login-lockdown/\n"],["has_login_protection?","WpLoginProtection","WpLoginProtection.html#method-i-has_login_protection-3F","()",""],["has_login_security_solution_protection?","WpLoginProtection","WpLoginProtection.html#method-i-has_login_security_solution_protection-3F","()","
wordpress.org/extend/plugins/login-security-solution/\n"],["has_malwares?","Malwares","Malwares.html#method-i-has_malwares-3F","(malwares_file_path = nil)",""],["has_options?","WpscanOptions","WpscanOptions.html#method-i-has_options-3F","()",""],["has_readme?","WpItem","WpItem.html#method-i-has_readme-3F","()","
readme.txt present?\n"],["has_readme?","WpReadme","WpReadme.html#method-i-has_readme-3F","()","
Checks to see if the readme.html file exists\n
This file comes by default in a wordpress installation, and …\n"],["has_simple_login_lockdown_protection?","WpLoginProtection","WpLoginProtection.html#method-i-has_simple_login_lockdown_protection-3F","()","
wordpress.org/extend/plugins/simple-login-lockdown/\n"],["has_timthumbs?","WpTimthumbs","WpTimthumbs.html#method-i-has_timthumbs-3F","(theme_name, options = {})",""],["has_xml_rpc?","WebSite","WebSite.html#method-i-has_xml_rpc-3F","()",""],["help","Object","Object.html#method-i-help","()","
command help\n"],["homepage_hash","WebSite","WebSite.html#method-i-homepage_hash","()",""],["id","WpUser","WpUser.html#method-i-id","()",""],["id=","WpUser","WpUser.html#method-i-id-3D","(new_id)",""],["instance","Browser","Browser.html#method-c-instance","(options = {})",""],["is_installed?","GitUpdater","GitUpdater.html#method-i-is_installed-3F","()",""],["is_installed?","SvnUpdater","SvnUpdater.html#method-i-is_installed-3F","()",""],["is_installed?","Updater","Updater.html#method-i-is_installed-3F","()",""],["is_long_option?","WpscanOptions","WpscanOptions.html#method-c-is_long_option-3F","(option)",""],["is_multisite?","WpTarget","WpTarget.html#method-i-is_multisite-3F","()",""],["limit_login_attempts_url","WpLoginProtection","WpLoginProtection.html#method-i-limit_login_attempts_url","()",""],["lines_in_file","BruteForce","BruteForce.html#method-c-lines_in_file","(file_path)","
Counts the number of lines in the wordlist It can take a couple of minutes\non large wordlists, although …\n"],["load_config","Browser","Browser.html#method-i-load_config","(config_file = nil)","
TODO reload hydra (if the .load_config is called on a browser object, hydra\nwill not have the new @max_threads …\n"],["load_from_arguments","WpscanOptions","WpscanOptions.html#method-c-load_from_arguments","()","
Will load the options from ARGV return WpscanOptions\n"],["local_revision_number","GitUpdater","GitUpdater.html#method-i-local_revision_number","()","
Git has not a revsion number like SVN, so we will take the 7 first chars of\nthe last commit hash\n"],["local_revision_number","SvnUpdater","SvnUpdater.html#method-i-local_revision_number","()",""],["local_revision_number","Updater","Updater.html#method-i-local_revision_number","()",""],["login_protection_plugin","WpLoginProtection","WpLoginProtection.html#method-i-login_protection_plugin","()","
Checks if a login protection plugin is enabled\ncode.google.com/p/wpscan/issues/detail?id=111 return a …\n"],["login_security_solution_url","WpLoginProtection","WpLoginProtection.html#method-i-login_security_solution_url","()",""],["login_url","WpTarget","WpTarget.html#method-i-login_url","()",""],["malware_pattern","Malwares","Malwares.html#method-c-malware_pattern","(url_regex)",""],["malwares","Malwares","Malwares.html#method-i-malwares","(malwares_file_path = nil)","
return array of string (url of malwares found)\n"],["malwares_file","Malwares","Malwares.html#method-c-malwares_file","(malwares_file_path)",""],["max_threads=","Browser","Browser.html#method-i-max_threads-3D","(max_threads)",""],["merge_request_params","Browser","Browser.html#method-i-merge_request_params","(params = {})",""],["name","WpUser","WpUser.html#method-i-name","()",""],["name=","WpUser","WpUser.html#method-i-name-3D","(new_name)",""],["new","CacheFileStore","CacheFileStore.html#method-c-new","(storage_path, serializer = Marshal)","
The serializer must have the 2 methods .load and .dump (Marshal and YAML\nhave them) YAML is Human Readable …\n"],["new","CheckerPlugin","CheckerPlugin.html#method-c-new","()",""],["new","CustomOptionParser","CustomOptionParser.html#method-c-new","(banner = nil, width = 32, indent = ' ' * 4)",""],["new","GenerateList","GenerateList.html#method-c-new","(type, verbose)","
type = themes | plugins\n"],["new","ListGeneratorPlugin","ListGeneratorPlugin.html#method-c-new","()",""],["new","Plugin","Plugin.html#method-c-new","(infos = {})",""],["new","Plugins","Plugins.html#method-c-new","(option_parser = nil)",""],["new","SvnParser","SvnParser.html#method-c-new","(svn_root)",""],["new","Updater","Updater.html#method-c-new","(repo_directory = nil)","
TODO : add a last ‘/ to repo_directory if it’s not present\n"],["new","WpItem","WpItem.html#method-c-new","(options)",""],["new","WpPlugin","WpPlugin.html#method-c-new","(options = {})",""],["new","WpTarget","WpTarget.html#method-c-new","(target_url, options = {})",""],["new","WpTheme","WpTheme.html#method-c-new","(options = {})",""],["new","WpUser","WpUser.html#method-c-new","(name, id, nickname)",""],["new","WpVersion","WpVersion.html#method-c-new","(number, options = {})",""],["new","WpVulnerability","WpVulnerability.html#method-c-new","(title, references, type, metasploit_modules)",""],["new","WpscanOptions","WpscanOptions.html#method-c-new","()",""],["nickname","WpUser","WpUser.html#method-i-nickname","()",""],["nickname=","WpUser","WpUser.html#method-i-nickname-3D","(new_nickname)",""],["online?","WebSite","WebSite.html#method-i-online-3F","()","
Checks if the remote website is up.\n"],["option_to_instance_variable_setter","WpscanOptions","WpscanOptions.html#method-c-option_to_instance_variable_setter","(option)",""],["option_to_symbol","CustomOptionParser","CustomOptionParser.html#method-c-option_to_symbol","(option)","
param Array option\n"],["output_vulnerabilities","Object","Object.html#method-i-output_vulnerabilities","(vulns)",""],["page_hash","WebSite","WebSite.html#method-c-page_hash","(url)","
Return the MD5 hash of the page given by url\n"],["parse","SvnParser","SvnParser.html#method-i-parse","()",""],["passive_detection","WpDetector","WpDetector.html#method-c-passive_detection","(url, type, wp_content_dir)","
plugins and themes can be found in the source code :\n\n
<script src='http://example.com/wp-content/plugins/s2member/...' ...\n"],["plugins_from_aggressive_detection","WpPlugins","WpPlugins.html#method-i-plugins_from_aggressive_detection","(options)","Enumerate installed plugins.\n
return array of WpPlugin\n"],["plugins_from_passive_detection","WpPlugins","WpPlugins.html#method-i-plugins_from_passive_detection","(options)","
code.google.com/p/wpscan/issues/detail?id=42 plugins can be found in the\nsource code :\n\n
<script src='http://example.com/wp-content/plugins/s2member/...' ...\n"],["post","Browser","Browser.html#method-i-post","(url, params = {})",""],["proxy=","WpscanOptions","WpscanOptions.html#method-i-proxy-3D","(proxy)",""],["proxy_auth=","Browser","Browser.html#method-i-proxy_auth-3D","(auth)",""],["proxy_auth=","WpscanOptions","WpscanOptions.html#method-i-proxy_auth-3D","(auth)",""],["puts","Object","Object.html#method-i-puts","(o = \"\")","Override for puts to enable logging\n"],["raise_invalid_proxy_format","Browser","Browser.html#method-i-raise_invalid_proxy_format","()",""],["read_entry","CacheFileStore","CacheFileStore.html#method-i-read_entry","(key)",""],["readme_url","WpItem","WpItem.html#method-i-readme_url","()","
Url for readme.txt\n"],["readme_url","WpReadme","WpReadme.html#method-i-readme_url","()",""],["red","Object","Object.html#method-i-red","(text)",""],["redirection","WebSite","WebSite.html#method-i-redirection","(url = nil)","
See if the remote url returns 30x redirect This method is recursive Return\na string with the redirection …\n"],["register","Plugins","Plugins.html#method-i-register","(*plugins)","
param Array(Plugin) plugins\n"],["register_options","Plugin","Plugin.html#method-i-register_options","(*options)","
param Array options\n"],["register_plugin","Plugins","Plugins.html#method-i-register_plugin","(plugin)","
param Plugin plugin\n"],["registration_enabled?","WpTarget","WpTarget.html#method-i-registration_enabled-3F","()","
Should check wp-login.php if registration is enabled or not\n"],["registration_url","WpTarget","WpTarget.html#method-i-registration_url","()",""],["remove_junk_from_nickname","WpUsernames","WpUsernames.html#method-i-remove_junk_from_nickname","(usernames)",""],["repo_directory_arguments","GitUpdater","GitUpdater.html#method-i-repo_directory_arguments","()",""],["require_files_from_directory","Object","Object.html#method-i-require_files_from_directory","(absolute_dir_path, files_pattern = \"*.rb\")","
TODO : add an exclude pattern ?\n"],["reset","Browser","Browser.html#method-c-reset","()",""],["reset_head","GitUpdater","GitUpdater.html#method-i-reset_head","()",""],["results","CustomOptionParser","CustomOptionParser.html#method-i-results","(argv = default_argv)","
return Hash\n"],["rss_url","WebSite","WebSite.html#method-i-rss_url","()","
Will try to find the rss url in the homepage Only the first one found iw\nreturned\n"],["run","CheckerPlugin","CheckerPlugin.html#method-i-run","(options = {})",""],["run","ListGeneratorPlugin","ListGeneratorPlugin.html#method-i-run","(options = {})",""],["run","Plugin","Plugin.html#method-i-run","(options = {})",""],["save","GenerateList","GenerateList.html#method-i-save","(items)","
Save the file\n"],["search_replace_db_2_exists?","WpTarget","WpTarget.html#method-i-search_replace_db_2_exists-3F","()",""],["search_replace_db_2_url","WpTarget","WpTarget.html#method-i-search_replace_db_2_url","()","
Script for replacing strings in wordpress databases reveals databse\ncredentials after hitting submit …\n"],["set_file_name","GenerateList","GenerateList.html#method-i-set_file_name","(type)",""],["set_option_from_cli","WpscanOptions","WpscanOptions.html#method-i-set_option_from_cli","(cli_option, cli_value)","
string cli_option : –url, -u, –proxy etc string cli_value : the option\nvalue\n"],["simple_login_lockdown_url","WpLoginProtection","WpLoginProtection.html#method-i-simple_login_lockdown_url","()",""],["targets_url_from_theme","WpTimthumbs","WpTimthumbs.html#method-i-targets_url_from_theme","(theme_name, options)",""],["theme","WpTarget","WpTarget.html#method-i-theme","()","
return WpTheme\n"],["themes_from_aggressive_detection","WpThemes","WpThemes.html#method-i-themes_from_aggressive_detection","(options)",""],["themes_from_passive_detection","WpThemes","WpThemes.html#method-i-themes_from_passive_detection","(options)",""],["threads=","WpscanOptions","WpscanOptions.html#method-i-threads-3D","(threads)",""],["timthumbs","WpTimthumbs","WpTimthumbs.html#method-i-timthumbs","(theme_name = nil, options = {})",""],["to_h","WpscanOptions","WpscanOptions.html#method-i-to_h","()","
return Hash\n"],["to_s","WpItem","WpItem.html#method-i-to_s","()","
To string. Adds a version number if detected\n"],["update","GitUpdater","GitUpdater.html#method-i-update","()",""],["update","SvnUpdater","SvnUpdater.html#method-i-update","()",""],["update","Updater","Updater.html#method-i-update","()",""],["url","WpTarget","WpTarget.html#method-i-url","()","
Alias of @uri.to_s\n"],["url=","WpscanOptions","WpscanOptions.html#method-i-url-3D","(url)",""],["usage","Object","Object.html#method-i-usage","()","
wpscan usage\n"],["user_agent","Browser","Browser.html#method-i-user_agent","()","
return the user agent, according to the user_agent_mode\n"],["user_agent_mode=","Browser","Browser.html#method-i-user_agent_mode-3D","(ua_mode)",""],["usernames","WpUsernames","WpUsernames.html#method-i-usernames","(options = {})","
Enumerate wordpress usernames by using Veronica Valeros’s technique:\nseclists.org/fulldisclosure/2011/May/493 …\n"],["valid_response_codes","WpTarget","WpTarget.html#method-c-valid_response_codes","()","
Valid HTTP return codes\n"],["version","WpItem","WpItem.html#method-i-version","()","
Returns version number from readme.txt if it exists\n"],["version","WpTarget","WpTarget.html#method-i-version","()","
return WpVersion\n"],["version_pattern","WpVersion","WpVersion.html#method-c-version_pattern","()","
Used to check if the version is correct: must contain at least one dot.\n"],["vulnerabilities","Vulnerable","Vulnerable.html#method-i-vulnerabilities","()","
@return an array of WpVulnerability (can be empty)\n"],["wordlist=","WpscanOptions","WpscanOptions.html#method-i-wordlist-3D","(wordlist)",""],["wordpress?","WebSite","WebSite.html#method-i-wordpress-3F","()","
check if the remote website is actually running wordpress.\n"],["wp_content_dir","WpTarget","WpTarget.html#method-i-wp_content_dir","()",""],["wp_org_item?","WpItem","WpItem.html#method-i-wp_org_item-3F","()","
returns true if this theme or plugin is hosted on wordpress.org\n"],["wp_org_url","WpItem","WpItem.html#method-i-wp_org_url","()","
The wordpress.org plugins directory URL See:\ngithub.com/wpscanteam/wpscan/issues/100\n"],["wp_plugins_dir","WpTarget","WpTarget.html#method-i-wp_plugins_dir","()",""],["wp_plugins_dir_exists?","WpTarget","WpTarget.html#method-i-wp_plugins_dir_exists-3F","()",""],["write_entry","CacheFileStore","CacheFileStore.html#method-i-write_entry","(key, data_to_store, cache_timeout)",""],["xml_rpc_url","WebSite","WebSite.html#method-i-xml_rpc_url","()",""],["CREDITS","","CREDITS.html","","
*CREDITS*\n
This file is to give credit to WPScan’s contributors. If you feel your name\nshould be in here, …\n"],["Gemfile","","Gemfile.html","","
source “rubygems.org”\n
gem “typhoeus”, “0.4.2” gem “nokogiri” gem …\n"],["README","","README.html","","
__\n\n
__ _______ _____\n\\ \\ / / __ \\ / ____|\n \\ \\ /\\ / /| |__) | (___ ___ __ _ _ __ ...\n"],["log","","log_txt.html","","__\n\n
__ _______ _____ \n\\ \\ / / __ \\ / ____| \n \\ \\ /\\ ...\n"]]}} \ No newline at end of file +var search_data = {"index":{"searchIndex":["array","browser","bruteforce","cachefilestore","checkerplugin","customoptionparser","generatelist","gitupdater","listgeneratorplugin","malwares","object","plugin","plugins","svnparser","svnupdater","uri","updater","updaterfactory","vulnerable","website","wpconfigbackup","wpdetector","wpenumerator","wpfullpathdisclosure","wpitem","wploginprotection","wpoptions","wpplugin","wpplugins","wpreadme","wptarget","wptheme","wpthemes","wptimthumbs","wpuser","wpusernames","wpversion","wpvulnerability","wpscanoptions","<=>()","<=>()","==()","===()","===()","===()","_grep_()","add()","add_http_protocol()","add_option()","add_trailing_slash()","aggressive_detection()","author_url()","available_updaters_classes()","banner()","basic_auth=()","better_wp_security_url()","bluetrait_event_viewer_url()","brute_force()","changelog_url()","check_local_vulnerable_files()","check_options()","check_vuln_ref_urls()","clean()","clean_option()","colorize()","config_backup()","config_backup_files()","debug_log_url()","directory_listing?()","enumerate()","enumerate_all_plugins=()","enumerate_all_themes=()","enumerate_only_vulnerable_plugins=()","enumerate_only_vulnerable_themes=()","enumerate_options_from_string()","enumerate_plugins=()","enumerate_themes=()","eql?()","error_404_hash()","error_log?()","error_log_url()","escape()","extract_name_from_url()","extract_nickname_from_body()","find()","find()","find_from_advanced_fingerprinting()","find_from_atom_generator()","find_from_css_link()","find_from_links_opml()","find_from_meta_generator()","find_from_rdf_generator()","find_from_readme()","find_from_rss_generator()","find_from_sitemap_generator()","find_from_wooframework()","forge_request()","full_path_disclosure_url()","generate_full_list()","generate_items()","generate_popular_list()","get()","get_entry_file_path()","get_equal_string_end()","get_full_url()","get_metasploit_url()","get_nickname_from_response()","get_nickname_from_url()","get_opt_long()","get_popular_items()","get_sub_folder()","get_updater()","get_url_without_filename()","green()","grep()","has_basic_auth?()","has_better_wp_security_protection?()","has_bluetrait_event_viewer_protection?()","has_changelog?()","has_debug_log?()","has_full_path_disclosure?()","has_limit_login_attempts_protection?()","has_local_changes?()","has_login_lock_protection?()","has_login_lockdown_protection?()","has_login_protection?()","has_login_security_solution_protection?()","has_malwares?()","has_options?()","has_readme?()","has_readme?()","has_simple_login_lockdown_protection?()","has_timthumbs?()","has_xml_rpc?()","help()","homepage_hash()","id()","id=()","instance()","is_installed?()","is_installed?()","is_installed?()","is_long_option?()","is_multisite?()","limit_login_attempts_url()","lines_in_file()","load_config()","load_from_arguments()","local_revision_number()","local_revision_number()","local_revision_number()","login_protection_plugin()","login_security_solution_url()","login_url()","malware_pattern()","malwares()","malwares_file()","max_threads=()","merge_request_params()","name()","name=()","new()","new()","new()","new()","new()","new()","new()","new()","new()","new()","new()","new()","new()","new()","new()","new()","new()","nickname()","nickname=()","online?()","option_to_instance_variable_setter()","option_to_symbol()","output_vulnerabilities()","page_hash()","parse()","passive_detection()","plugins_from_aggressive_detection()","plugins_from_passive_detection()","post()","proxy=()","proxy_auth=()","proxy_auth=()","puts()","raise_invalid_proxy_auth_format()","read_entry()","readme_url()","readme_url()","red()","redirection()","register()","register_options()","register_plugin()","registration_enabled?()","registration_url()","remove_junk_from_nickname()","repo_directory_arguments()","require_files_from_directory()","reset()","reset_head()","results()","rss_url()","run()","run()","run()","save()","search_replace_db_2_exists?()","search_replace_db_2_url()","set_file_name()","set_option_from_cli()","simple_login_lockdown_url()","targets_url_from_theme()","theme()","themes_from_aggressive_detection()","themes_from_passive_detection()","threads=()","timthumbs()","to_h()","to_s()","update()","update()","update()","url()","url=()","usage()","user_agent()","user_agent_mode=()","usernames()","valid_response_codes()","version()","version()","version_pattern()","vulnerabilities()","wordlist=()","wordpress?()","wp_content_dir()","wp_org_item?()","wp_org_url()","wp_plugins_dir()","wp_plugins_dir_exists?()","write_entry()","xml_rpc_url()","credits","gemfile","readme","log"],"longSearchIndex":["array","browser","bruteforce","cachefilestore","checkerplugin","customoptionparser","generatelist","gitupdater","listgeneratorplugin","malwares","object","plugin","plugins","svnparser","svnupdater","uri","updater","updaterfactory","vulnerable","website","wpconfigbackup","wpdetector","wpenumerator","wpfullpathdisclosure","wpitem","wploginprotection","wpoptions","wpplugin","wpplugins","wpreadme","wptarget","wptheme","wpthemes","wptimthumbs","wpuser","wpusernames","wpversion","wpvulnerability","wpscanoptions","wpitem#<=>()","wpuser#<=>()","wpitem#==()","wpitem#===()","wptheme#===()","wpuser#===()","array#_grep_()","customoptionparser#add()","object#add_http_protocol()","customoptionparser#add_option()","object#add_trailing_slash()","wpdetector::aggressive_detection()","wpusernames#author_url()","updaterfactory::available_updaters_classes()","object#banner()","wpscanoptions#basic_auth=()","wploginprotection#better_wp_security_url()","wploginprotection#bluetrait_event_viewer_url()","bruteforce#brute_force()","wpitem#changelog_url()","checkerplugin#check_local_vulnerable_files()","wpoptions::check_options()","checkerplugin#check_vuln_ref_urls()","cachefilestore#clean()","wpscanoptions::clean_option()","object#colorize()","wpconfigbackup#config_backup()","wpconfigbackup::config_backup_files()","wptarget#debug_log_url()","wpitem#directory_listing?()","wpenumerator::enumerate()","wpscanoptions#enumerate_all_plugins=()","wpscanoptions#enumerate_all_themes=()","wpscanoptions#enumerate_only_vulnerable_plugins=()","wpscanoptions#enumerate_only_vulnerable_themes=()","wpscanoptions#enumerate_options_from_string()","wpscanoptions#enumerate_plugins=()","wpscanoptions#enumerate_themes=()","wpuser#eql?()","website#error_404_hash()","wpplugin#error_log?()","wpplugin#error_log_url()","uri::escape()","wpitem#extract_name_from_url()","wpusernames#extract_nickname_from_body()","wptheme::find()","wpversion::find()","wpversion::find_from_advanced_fingerprinting()","wpversion::find_from_atom_generator()","wptheme::find_from_css_link()","wpversion::find_from_links_opml()","wpversion::find_from_meta_generator()","wpversion::find_from_rdf_generator()","wpversion::find_from_readme()","wpversion::find_from_rss_generator()","wpversion::find_from_sitemap_generator()","wptheme::find_from_wooframework()","browser#forge_request()","wpfullpathdisclosure#full_path_disclosure_url()","generatelist#generate_full_list()","wpenumerator::generate_items()","generatelist#generate_popular_list()","browser#get()","cachefilestore#get_entry_file_path()","object#get_equal_string_end()","wpitem#get_full_url()","object#get_metasploit_url()","wpusernames#get_nickname_from_response()","wpusernames#get_nickname_from_url()","wpscanoptions::get_opt_long()","generatelist#get_popular_items()","wpitem#get_sub_folder()","updaterfactory::get_updater()","wpitem#get_url_without_filename()","object#green()","array#grep()","website#has_basic_auth?()","wploginprotection#has_better_wp_security_protection?()","wploginprotection#has_bluetrait_event_viewer_protection?()","wpitem#has_changelog?()","wptarget#has_debug_log?()","wpfullpathdisclosure#has_full_path_disclosure?()","wploginprotection#has_limit_login_attempts_protection?()","gitupdater#has_local_changes?()","wploginprotection#has_login_lock_protection?()","wploginprotection#has_login_lockdown_protection?()","wploginprotection#has_login_protection?()","wploginprotection#has_login_security_solution_protection?()","malwares#has_malwares?()","wpscanoptions#has_options?()","wpitem#has_readme?()","wpreadme#has_readme?()","wploginprotection#has_simple_login_lockdown_protection?()","wptimthumbs#has_timthumbs?()","website#has_xml_rpc?()","object#help()","website#homepage_hash()","wpuser#id()","wpuser#id=()","browser::instance()","gitupdater#is_installed?()","svnupdater#is_installed?()","updater#is_installed?()","wpscanoptions::is_long_option?()","wptarget#is_multisite?()","wploginprotection#limit_login_attempts_url()","bruteforce::lines_in_file()","browser#load_config()","wpscanoptions::load_from_arguments()","gitupdater#local_revision_number()","svnupdater#local_revision_number()","updater#local_revision_number()","wploginprotection#login_protection_plugin()","wploginprotection#login_security_solution_url()","wptarget#login_url()","malwares::malware_pattern()","malwares#malwares()","malwares::malwares_file()","browser#max_threads=()","browser#merge_request_params()","wpuser#name()","wpuser#name=()","cachefilestore::new()","checkerplugin::new()","customoptionparser::new()","generatelist::new()","listgeneratorplugin::new()","plugin::new()","plugins::new()","svnparser::new()","updater::new()","wpitem::new()","wpplugin::new()","wptarget::new()","wptheme::new()","wpuser::new()","wpversion::new()","wpvulnerability::new()","wpscanoptions::new()","wpuser#nickname()","wpuser#nickname=()","website#online?()","wpscanoptions::option_to_instance_variable_setter()","customoptionparser::option_to_symbol()","object#output_vulnerabilities()","website::page_hash()","svnparser#parse()","wpdetector::passive_detection()","wpplugins#plugins_from_aggressive_detection()","wpplugins#plugins_from_passive_detection()","browser#post()","wpscanoptions#proxy=()","browser#proxy_auth=()","wpscanoptions#proxy_auth=()","object#puts()","browser#raise_invalid_proxy_auth_format()","cachefilestore#read_entry()","wpitem#readme_url()","wpreadme#readme_url()","object#red()","website#redirection()","plugins#register()","plugin#register_options()","plugins#register_plugin()","wptarget#registration_enabled?()","wptarget#registration_url()","wpusernames#remove_junk_from_nickname()","gitupdater#repo_directory_arguments()","object#require_files_from_directory()","browser::reset()","gitupdater#reset_head()","customoptionparser#results()","website#rss_url()","checkerplugin#run()","listgeneratorplugin#run()","plugin#run()","generatelist#save()","wptarget#search_replace_db_2_exists?()","wptarget#search_replace_db_2_url()","generatelist#set_file_name()","wpscanoptions#set_option_from_cli()","wploginprotection#simple_login_lockdown_url()","wptimthumbs#targets_url_from_theme()","wptarget#theme()","wpthemes#themes_from_aggressive_detection()","wpthemes#themes_from_passive_detection()","wpscanoptions#threads=()","wptimthumbs#timthumbs()","wpscanoptions#to_h()","wpitem#to_s()","gitupdater#update()","svnupdater#update()","updater#update()","wptarget#url()","wpscanoptions#url=()","object#usage()","browser#user_agent()","browser#user_agent_mode=()","wpusernames#usernames()","wptarget::valid_response_codes()","wpitem#version()","wptarget#version()","wpversion::version_pattern()","vulnerable#vulnerabilities()","wpscanoptions#wordlist=()","website#wordpress?()","wptarget#wp_content_dir()","wpitem#wp_org_item?()","wpitem#wp_org_url()","wptarget#wp_plugins_dir()","wptarget#wp_plugins_dir_exists?()","cachefilestore#write_entry()","website#xml_rpc_url()","","","",""],"info":[["Array","","Array.html","",""],["Browser","","Browser.html","",""],["BruteForce","","BruteForce.html","",""],["CacheFileStore","","CacheFileStore.html","",""],["CheckerPlugin","","CheckerPlugin.html","","\nWPScan - WordPress Security Scanner\nCopyright (C) 2012-2013\n\nThis program is free software: you can redistribute ...\n"],["CustomOptionParser","","CustomOptionParser.html","","\nWPScan - WordPress Security Scanner\nCopyright (C) 2012-2013\n\nThis program is free software: you can redistribute ...\n"],["GenerateList","","GenerateList.html","","This tool generates a list to use for plugin and theme enumeration\n"],["GitUpdater","","GitUpdater.html","",""],["ListGeneratorPlugin","","ListGeneratorPlugin.html","","\n
WPScan - WordPress Security Scanner\nCopyright (C) 2012-2013\n\nThis program is free software: you can redistribute ...\n"],["Malwares","","Malwares.html","",""],["Object","","Object.html","",""],["Plugin","","Plugin.html","","\nWPScan - WordPress Security Scanner\nCopyright (C) 2012-2013\n\nThis program is free software: you can redistribute ...\n"],["Plugins","","Plugins.html","","\nWPScan - WordPress Security Scanner\nCopyright (C) 2012-2013\n\nThis program is free software: you can redistribute ...\n"],["SvnParser","","SvnParser.html","","This Class Parses SVN Repositories via HTTP\n"],["SvnUpdater","","SvnUpdater.html","",""],["URI","","URI.html","",""],["Updater","","Updater.html","","
This class act as an absract one\n"],["UpdaterFactory","","UpdaterFactory.html","",""],["Vulnerable","","Vulnerable.html","",""],["WebSite","","WebSite.html","",""],["WpConfigBackup","","WpConfigBackup.html","",""],["WpDetector","","WpDetector.html","",""],["WpEnumerator","","WpEnumerator.html","","
Enumerate over a given set of items and check if they exist\n"],["WpFullPathDisclosure","","WpFullPathDisclosure.html","",""],["WpItem","","WpItem.html","",""],["WpLoginProtection","","WpLoginProtection.html","",""],["WpOptions","","WpOptions.html","","
Options Hash\n
Options\n
url- The base URL of the WordPress site\n"],["WpPlugin","","WpPlugin.html","",""],["WpPlugins","","WpPlugins.html","",""],["WpReadme","","WpReadme.html","",""],["WpTarget","","WpTarget.html","",""],["WpTheme","","WpTheme.html","",""],["WpThemes","","WpThemes.html","",""],["WpTimthumbs","","WpTimthumbs.html","",""],["WpUser","","WpUser.html","",""],["WpUsernames","","WpUsernames.html","",""],["WpVersion","","WpVersion.html","",""],["WpVulnerability","","WpVulnerability.html","",""],["WpscanOptions","","WpscanOptions.html","",""],["<=>","WpItem","WpItem.html#method-i-3C-3D-3E","(other)","Compare\n"],["<=>","WpUser","WpUser.html#method-i-3C-3D-3E","(other)",""],["==","WpItem","WpItem.html#method-i-3D-3D","(other)","
Compare\n"],["===","WpItem","WpItem.html#method-i-3D-3D-3D","(other)","
Compare\n"],["===","WpTheme","WpTheme.html#method-i-3D-3D-3D","(wp_theme)",""],["===","WpUser","WpUser.html#method-i-3D-3D-3D","(other)",""],["_grep_","Array","Array.html#method-i-_grep_","(regexp)","
Fix for grep with symbols in ruby <= 1.8.7\n"],["add","CustomOptionParser","CustomOptionParser.html#method-i-add","(options)","
param Array(Array) or Array options\n"],["add_http_protocol","Object","Object.html#method-i-add_http_protocol","(url)","
Add protocol\n"],["add_option","CustomOptionParser","CustomOptionParser.html#method-i-add_option","(option)","
param Array option\n"],["add_trailing_slash","Object","Object.html#method-i-add_trailing_slash","(url)",""],["aggressive_detection","WpDetector","WpDetector.html#method-c-aggressive_detection","(options, items = [])",""],["author_url","WpUsernames","WpUsernames.html#method-i-author_url","(author_id)",""],["available_updaters_classes","UpdaterFactory","UpdaterFactory.html#method-c-available_updaters_classes","()","
return array of class symbols\n"],["banner","Object","Object.html#method-i-banner","()","
our 1337 banner\n"],["basic_auth=","WpscanOptions","WpscanOptions.html#method-i-basic_auth-3D","(basic_auth)",""],["better_wp_security_url","WpLoginProtection","WpLoginProtection.html#method-i-better_wp_security_url","()",""],["bluetrait_event_viewer_url","WpLoginProtection","WpLoginProtection.html#method-i-bluetrait_event_viewer_url","()",""],["brute_force","BruteForce","BruteForce.html#method-i-brute_force","(logins, wordlist_path, options = {})","
param array of string logins param string wordlist_path param hash options\n\n
boolean :show_progression If ...\n"],["changelog_url","WpItem","WpItem.html#method-i-changelog_url","()","Url for changelog.txt\n"],["check_local_vulnerable_files","CheckerPlugin","CheckerPlugin.html#method-i-check_local_vulnerable_files","(dir_to_scan)",""],["check_options","WpOptions","WpOptions.html#method-c-check_options","(options)",""],["check_vuln_ref_urls","CheckerPlugin","CheckerPlugin.html#method-i-check_vuln_ref_urls","()",""],["clean","CacheFileStore","CacheFileStore.html#method-i-clean","()",""],["clean_option","WpscanOptions","WpscanOptions.html#method-c-clean_option","(option)","
Will removed the ‘-’ or ‘–’ chars at the beginning of option and replace\nany remaining ‘-’ by ‘_’\n
param …\n"],["colorize","Object","Object.html#method-i-colorize","(text, color_code)",""],["config_backup","WpConfigBackup","WpConfigBackup.html#method-i-config_backup","()","
Checks to see if wp-config.php has a backup See www.feross.org/cmsploit/\nreturn an array of backup config …\n"],["config_backup_files","WpConfigBackup","WpConfigBackup.html#method-c-config_backup_files","()","
@return Array\n"],["debug_log_url","WpTarget","WpTarget.html#method-i-debug_log_url","()",""],["directory_listing?","WpItem","WpItem.html#method-i-directory_listing-3F","()","
Is directory listing enabled?\n"],["enumerate","WpEnumerator","WpEnumerator.html#method-c-enumerate","(options = {}, items = nil)","
Enumerate the given Targets\n
Attributes\n
targets- targets to enumerate\n"],["enumerate_all_plugins=","WpscanOptions","WpscanOptions.html#method-i-enumerate_all_plugins-3D","(enumerate_all_plugins)",""],["enumerate_all_themes=","WpscanOptions","WpscanOptions.html#method-i-enumerate_all_themes-3D","(enumerate_all_themes)",""],["enumerate_only_vulnerable_plugins=","WpscanOptions","WpscanOptions.html#method-i-enumerate_only_vulnerable_plugins-3D","(enumerate_only_vulnerable_plugins)",""],["enumerate_only_vulnerable_themes=","WpscanOptions","WpscanOptions.html#method-i-enumerate_only_vulnerable_themes-3D","(enumerate_only_vulnerable_themes)",""],["enumerate_options_from_string","WpscanOptions","WpscanOptions.html#method-i-enumerate_options_from_string","(value)","Will set enumerate_* from the string value IE : if value = vp =>\n:enumerate_only_vulnerable_plugins …\n"],["enumerate_plugins=","WpscanOptions","WpscanOptions.html#method-i-enumerate_plugins-3D","(enumerate_plugins)",""],["enumerate_themes=","WpscanOptions","WpscanOptions.html#method-i-enumerate_themes-3D","(enumerate_themes)",""],["eql?","WpUser","WpUser.html#method-i-eql-3F","(other)",""],["error_404_hash","WebSite","WebSite.html#method-i-error_404_hash","()","
Return the MD5 hash of a 404 page\n"],["error_log?","WpPlugin","WpPlugin.html#method-i-error_log-3F","()","
Discover any error_log files created by WordPress These are created by the\nWordPress error_log() function …\n"],["error_log_url","WpPlugin","WpPlugin.html#method-i-error_log_url","()",""],["escape","URI","URI.html#method-c-escape","(str)",""],["extract_name_from_url","WpItem","WpItem.html#method-i-extract_name_from_url","()","
Extract item name from a url\n"],["extract_nickname_from_body","WpUsernames","WpUsernames.html#method-i-extract_nickname_from_body","(body)",""],["find","WpTheme","WpTheme.html#method-c-find","(target_uri)",""],["find","WpVersion","WpVersion.html#method-c-find","(target_uri, wp_content_dir)","
Will use all method self.find_from_* to try to detect the version Once the\nversion is found, it will …\n"],["find_from_advanced_fingerprinting","WpVersion","WpVersion.html#method-c-find_from_advanced_fingerprinting","(options)","
Uses data/wp_versions.xml to try to identify a wordpress version.\n
It does this by using client side file …\n"],["find_from_atom_generator","WpVersion","WpVersion.html#method-c-find_from_atom_generator","(options)","
Attempts to find the WordPress version from, the generator tag in the Atom\nsource.\n"],["find_from_css_link","WpTheme","WpTheme.html#method-c-find_from_css_link","(target_uri)","
Discover the wordpress theme name by parsing the css link rel\n"],["find_from_links_opml","WpVersion","WpVersion.html#method-c-find_from_links_opml","(options)","
Attempts to find the WordPress version from the p-links-opml.php file.\n"],["find_from_meta_generator","WpVersion","WpVersion.html#method-c-find_from_meta_generator","(options)","
Attempts to find the wordpress version from, the generator meta tag in the\nhtml source.\n
The meta tag can …\n"],["find_from_rdf_generator","WpVersion","WpVersion.html#method-c-find_from_rdf_generator","(options)","
Attempts to find WordPress version from, the generator tag in the RDF feed\nsource.\n"],["find_from_readme","WpVersion","WpVersion.html#method-c-find_from_readme","(options)","
Attempts to find the WordPress version from the readme.html file.\n"],["find_from_rss_generator","WpVersion","WpVersion.html#method-c-find_from_rss_generator","(options)","
Attempts to find the WordPress version from, the generator tag in the RSS\nfeed source.\n"],["find_from_sitemap_generator","WpVersion","WpVersion.html#method-c-find_from_sitemap_generator","(options)","
Attempts to find the WordPress version from the sitemap.xml file.\n
See: code.google.com/p/wpscan/issues/detail?id=109 …\n"],["find_from_wooframework","WpTheme","WpTheme.html#method-c-find_from_wooframework","(target_uri)","
code.google.com/p/wpscan/issues/detail?id=141\n"],["forge_request","Browser","Browser.html#method-i-forge_request","(url, params = {})",""],["full_path_disclosure_url","WpFullPathDisclosure","WpFullPathDisclosure.html#method-i-full_path_disclosure_url","()",""],["generate_full_list","GenerateList","GenerateList.html#method-i-generate_full_list","()",""],["generate_items","WpEnumerator","WpEnumerator.html#method-c-generate_items","(options = {})",""],["generate_popular_list","GenerateList","GenerateList.html#method-i-generate_popular_list","(pages)",""],["get","Browser","Browser.html#method-i-get","(url, params = {})",""],["get_entry_file_path","CacheFileStore","CacheFileStore.html#method-i-get_entry_file_path","(key)",""],["get_equal_string_end","Object","Object.html#method-i-get_equal_string_end","(stringarray = [''])","
Gets the string all elements in stringarray ends with\n"],["get_full_url","WpItem","WpItem.html#method-i-get_full_url","()","
Get the full url for this item\n"],["get_metasploit_url","Object","Object.html#method-i-get_metasploit_url","(module_path)",""],["get_nickname_from_response","WpUsernames","WpUsernames.html#method-i-get_nickname_from_response","(resp)",""],["get_nickname_from_url","WpUsernames","WpUsernames.html#method-i-get_nickname_from_url","(url)",""],["get_opt_long","WpscanOptions","WpscanOptions.html#method-c-get_opt_long","()","
Even if a short option is given (IE : -u), the long one will be returned\n(IE : –url)\n"],["get_popular_items","GenerateList","GenerateList.html#method-i-get_popular_items","(pages)","
Send a HTTP request to the WordPress most popular theme or plugin webpage\nparse the response for the …\n"],["get_sub_folder","WpItem","WpItem.html#method-i-get_sub_folder","()",""],["get_updater","UpdaterFactory","UpdaterFactory.html#method-c-get_updater","(repo_directory)",""],["get_url_without_filename","WpItem","WpItem.html#method-i-get_url_without_filename","()","
Gets the full url for this item without filenames\n"],["green","Object","Object.html#method-i-green","(text)",""],["grep","Array","Array.html#method-i-grep","(regexp)",""],["has_basic_auth?","WebSite","WebSite.html#method-i-has_basic_auth-3F","()",""],["has_better_wp_security_protection?","WpLoginProtection","WpLoginProtection.html#method-i-has_better_wp_security_protection-3F","()","
wordpress.org/extend/plugins/better-wp-security/\n"],["has_bluetrait_event_viewer_protection?","WpLoginProtection","WpLoginProtection.html#method-i-has_bluetrait_event_viewer_protection-3F","()","
wordpress.org/extend/plugins/bluetrait-event-viewer/\n"],["has_changelog?","WpItem","WpItem.html#method-i-has_changelog-3F","()","
changelog.txt present?\n"],["has_debug_log?","WpTarget","WpTarget.html#method-i-has_debug_log-3F","()",""],["has_full_path_disclosure?","WpFullPathDisclosure","WpFullPathDisclosure.html#method-i-has_full_path_disclosure-3F","()","
Check for Full Path Disclosure (FPD)\n"],["has_limit_login_attempts_protection?","WpLoginProtection","WpLoginProtection.html#method-i-has_limit_login_attempts_protection-3F","()","
wordpress.org/extend/plugins/limit-login-attempts/\n"],["has_local_changes?","GitUpdater","GitUpdater.html#method-i-has_local_changes-3F","()",""],["has_login_lock_protection?","WpLoginProtection","WpLoginProtection.html#method-i-has_login_lock_protection-3F","()","
wordpress.org/extend/plugins/login-lock/\n"],["has_login_lockdown_protection?","WpLoginProtection","WpLoginProtection.html#method-i-has_login_lockdown_protection-3F","()","
Thanks to Alip Aswalid for providing this method.\nwordpress.org/extend/plugins/login-lockdown/\n"],["has_login_protection?","WpLoginProtection","WpLoginProtection.html#method-i-has_login_protection-3F","()",""],["has_login_security_solution_protection?","WpLoginProtection","WpLoginProtection.html#method-i-has_login_security_solution_protection-3F","()","
wordpress.org/extend/plugins/login-security-solution/\n"],["has_malwares?","Malwares","Malwares.html#method-i-has_malwares-3F","(malwares_file_path = nil)",""],["has_options?","WpscanOptions","WpscanOptions.html#method-i-has_options-3F","()",""],["has_readme?","WpItem","WpItem.html#method-i-has_readme-3F","()","
readme.txt present?\n"],["has_readme?","WpReadme","WpReadme.html#method-i-has_readme-3F","()","
Checks to see if the readme.html file exists\n
This file comes by default in a wordpress installation, and …\n"],["has_simple_login_lockdown_protection?","WpLoginProtection","WpLoginProtection.html#method-i-has_simple_login_lockdown_protection-3F","()","
wordpress.org/extend/plugins/simple-login-lockdown/\n"],["has_timthumbs?","WpTimthumbs","WpTimthumbs.html#method-i-has_timthumbs-3F","(theme_name, options = {})",""],["has_xml_rpc?","WebSite","WebSite.html#method-i-has_xml_rpc-3F","()",""],["help","Object","Object.html#method-i-help","()","
command help\n"],["homepage_hash","WebSite","WebSite.html#method-i-homepage_hash","()",""],["id","WpUser","WpUser.html#method-i-id","()",""],["id=","WpUser","WpUser.html#method-i-id-3D","(new_id)",""],["instance","Browser","Browser.html#method-c-instance","(options = {})",""],["is_installed?","GitUpdater","GitUpdater.html#method-i-is_installed-3F","()",""],["is_installed?","SvnUpdater","SvnUpdater.html#method-i-is_installed-3F","()",""],["is_installed?","Updater","Updater.html#method-i-is_installed-3F","()",""],["is_long_option?","WpscanOptions","WpscanOptions.html#method-c-is_long_option-3F","(option)",""],["is_multisite?","WpTarget","WpTarget.html#method-i-is_multisite-3F","()",""],["limit_login_attempts_url","WpLoginProtection","WpLoginProtection.html#method-i-limit_login_attempts_url","()",""],["lines_in_file","BruteForce","BruteForce.html#method-c-lines_in_file","(file_path)","
Counts the number of lines in the wordlist It can take a couple of minutes\non large wordlists, although …\n"],["load_config","Browser","Browser.html#method-i-load_config","(config_file = nil)","
TODO reload hydra (if the .load_config is called on a browser object, hydra\nwill not have the new @max_threads …\n"],["load_from_arguments","WpscanOptions","WpscanOptions.html#method-c-load_from_arguments","()","
Will load the options from ARGV return WpscanOptions\n"],["local_revision_number","GitUpdater","GitUpdater.html#method-i-local_revision_number","()","
Git has not a revsion number like SVN, so we will take the 7 first chars of\nthe last commit hash\n"],["local_revision_number","SvnUpdater","SvnUpdater.html#method-i-local_revision_number","()",""],["local_revision_number","Updater","Updater.html#method-i-local_revision_number","()",""],["login_protection_plugin","WpLoginProtection","WpLoginProtection.html#method-i-login_protection_plugin","()","
Checks if a login protection plugin is enabled\ncode.google.com/p/wpscan/issues/detail?id=111 return a …\n"],["login_security_solution_url","WpLoginProtection","WpLoginProtection.html#method-i-login_security_solution_url","()",""],["login_url","WpTarget","WpTarget.html#method-i-login_url","()",""],["malware_pattern","Malwares","Malwares.html#method-c-malware_pattern","(url_regex)",""],["malwares","Malwares","Malwares.html#method-i-malwares","(malwares_file_path = nil)","
return array of string (url of malwares found)\n"],["malwares_file","Malwares","Malwares.html#method-c-malwares_file","(malwares_file_path)",""],["max_threads=","Browser","Browser.html#method-i-max_threads-3D","(max_threads)",""],["merge_request_params","Browser","Browser.html#method-i-merge_request_params","(params = {})",""],["name","WpUser","WpUser.html#method-i-name","()",""],["name=","WpUser","WpUser.html#method-i-name-3D","(new_name)",""],["new","CacheFileStore","CacheFileStore.html#method-c-new","(storage_path, serializer = Marshal)","
The serializer must have the 2 methods .load and .dump\n\n
(Marshal and YAML have them)\nYAML is Human Readable …\n"],["new","CheckerPlugin","CheckerPlugin.html#method-c-new","()",""],["new","CustomOptionParser","CustomOptionParser.html#method-c-new","(banner = nil, width = 32, indent = ' ' * 4)",""],["new","GenerateList","GenerateList.html#method-c-new","(type, verbose)","
type = themes | plugins\n"],["new","ListGeneratorPlugin","ListGeneratorPlugin.html#method-c-new","()",""],["new","Plugin","Plugin.html#method-c-new","(infos = {})",""],["new","Plugins","Plugins.html#method-c-new","(option_parser = nil)",""],["new","SvnParser","SvnParser.html#method-c-new","(svn_root)",""],["new","Updater","Updater.html#method-c-new","(repo_directory = nil)","
TODO : add a last ‘/ to repo_directory if it’s not present\n"],["new","WpItem","WpItem.html#method-c-new","(options)",""],["new","WpPlugin","WpPlugin.html#method-c-new","(options = {})",""],["new","WpTarget","WpTarget.html#method-c-new","(target_url, options = {})",""],["new","WpTheme","WpTheme.html#method-c-new","(options = {})",""],["new","WpUser","WpUser.html#method-c-new","(name, id, nickname)",""],["new","WpVersion","WpVersion.html#method-c-new","(number, options = {})",""],["new","WpVulnerability","WpVulnerability.html#method-c-new","(title, references, type, metasploit_modules)",""],["new","WpscanOptions","WpscanOptions.html#method-c-new","()",""],["nickname","WpUser","WpUser.html#method-i-nickname","()",""],["nickname=","WpUser","WpUser.html#method-i-nickname-3D","(new_nickname)",""],["online?","WebSite","WebSite.html#method-i-online-3F","()","
Checks if the remote website is up.\n"],["option_to_instance_variable_setter","WpscanOptions","WpscanOptions.html#method-c-option_to_instance_variable_setter","(option)",""],["option_to_symbol","CustomOptionParser","CustomOptionParser.html#method-c-option_to_symbol","(option)","
param Array option\n"],["output_vulnerabilities","Object","Object.html#method-i-output_vulnerabilities","(vulns)",""],["page_hash","WebSite","WebSite.html#method-c-page_hash","(url)","
Return the MD5 hash of the page given by url\n"],["parse","SvnParser","SvnParser.html#method-i-parse","()",""],["passive_detection","WpDetector","WpDetector.html#method-c-passive_detection","(url, type, wp_content_dir)","
plugins and themes can be found in the source code :\n\n
<script src='http://example.com/wp-content/plugins/s2member/...' ...\n"],["plugins_from_aggressive_detection","WpPlugins","WpPlugins.html#method-i-plugins_from_aggressive_detection","(options)","Enumerate installed plugins.\n
return array of WpPlugin\n"],["plugins_from_passive_detection","WpPlugins","WpPlugins.html#method-i-plugins_from_passive_detection","(options)","
code.google.com/p/wpscan/issues/detail?id=42 plugins can be found in the\nsource code :\n\n
<script src='http://example.com/wp-content/plugins/s2member/...' ...\n"],["post","Browser","Browser.html#method-i-post","(url, params = {})",""],["proxy=","WpscanOptions","WpscanOptions.html#method-i-proxy-3D","(proxy)",""],["proxy_auth=","Browser","Browser.html#method-i-proxy_auth-3D","(auth)",""],["proxy_auth=","WpscanOptions","WpscanOptions.html#method-i-proxy_auth-3D","(auth)",""],["puts","Object","Object.html#method-i-puts","(o = '')","Override for puts to enable logging\n"],["raise_invalid_proxy_auth_format","Browser","Browser.html#method-i-raise_invalid_proxy_auth_format","()",""],["read_entry","CacheFileStore","CacheFileStore.html#method-i-read_entry","(key)",""],["readme_url","WpItem","WpItem.html#method-i-readme_url","()","
Url for readme.txt\n"],["readme_url","WpReadme","WpReadme.html#method-i-readme_url","()",""],["red","Object","Object.html#method-i-red","(text)",""],["redirection","WebSite","WebSite.html#method-i-redirection","(url = nil)","
See if the remote url returns 30x redirect This method is recursive Return\na string with the redirection …\n"],["register","Plugins","Plugins.html#method-i-register","(*plugins)","
param Array(Plugin) plugins\n"],["register_options","Plugin","Plugin.html#method-i-register_options","(*options)","
param Array options\n"],["register_plugin","Plugins","Plugins.html#method-i-register_plugin","(plugin)","
param Plugin plugin\n"],["registration_enabled?","WpTarget","WpTarget.html#method-i-registration_enabled-3F","()","
Should check wp-login.php if registration is enabled or not\n"],["registration_url","WpTarget","WpTarget.html#method-i-registration_url","()",""],["remove_junk_from_nickname","WpUsernames","WpUsernames.html#method-i-remove_junk_from_nickname","(usernames)",""],["repo_directory_arguments","GitUpdater","GitUpdater.html#method-i-repo_directory_arguments","()",""],["require_files_from_directory","Object","Object.html#method-i-require_files_from_directory","(absolute_dir_path, files_pattern = '*.rb')","
TODO : add an exclude pattern ?\n"],["reset","Browser","Browser.html#method-c-reset","()",""],["reset_head","GitUpdater","GitUpdater.html#method-i-reset_head","()",""],["results","CustomOptionParser","CustomOptionParser.html#method-i-results","(argv = default_argv)","
return Hash\n"],["rss_url","WebSite","WebSite.html#method-i-rss_url","()","
Will try to find the rss url in the homepage Only the first one found iw\nreturned\n"],["run","CheckerPlugin","CheckerPlugin.html#method-i-run","(options = {})",""],["run","ListGeneratorPlugin","ListGeneratorPlugin.html#method-i-run","(options = {})",""],["run","Plugin","Plugin.html#method-i-run","(options = {})",""],["save","GenerateList","GenerateList.html#method-i-save","(items)","
Save the file\n"],["search_replace_db_2_exists?","WpTarget","WpTarget.html#method-i-search_replace_db_2_exists-3F","()",""],["search_replace_db_2_url","WpTarget","WpTarget.html#method-i-search_replace_db_2_url","()","
Script for replacing strings in wordpress databases reveals databse\ncredentials after hitting submit …\n"],["set_file_name","GenerateList","GenerateList.html#method-i-set_file_name","(type)",""],["set_option_from_cli","WpscanOptions","WpscanOptions.html#method-i-set_option_from_cli","(cli_option, cli_value)","
string cli_option : –url, -u, –proxy etc string cli_value : the option\nvalue\n"],["simple_login_lockdown_url","WpLoginProtection","WpLoginProtection.html#method-i-simple_login_lockdown_url","()",""],["targets_url_from_theme","WpTimthumbs","WpTimthumbs.html#method-i-targets_url_from_theme","(theme_name, options)",""],["theme","WpTarget","WpTarget.html#method-i-theme","()","
return WpTheme\n"],["themes_from_aggressive_detection","WpThemes","WpThemes.html#method-i-themes_from_aggressive_detection","(options)",""],["themes_from_passive_detection","WpThemes","WpThemes.html#method-i-themes_from_passive_detection","(options)",""],["threads=","WpscanOptions","WpscanOptions.html#method-i-threads-3D","(threads)",""],["timthumbs","WpTimthumbs","WpTimthumbs.html#method-i-timthumbs","(theme_name = nil, options = {})",""],["to_h","WpscanOptions","WpscanOptions.html#method-i-to_h","()","
return Hash\n"],["to_s","WpItem","WpItem.html#method-i-to_s","()","
To string. Adds a version number if detected\n"],["update","GitUpdater","GitUpdater.html#method-i-update","()",""],["update","SvnUpdater","SvnUpdater.html#method-i-update","()",""],["update","Updater","Updater.html#method-i-update","()",""],["url","WpTarget","WpTarget.html#method-i-url","()","
Alias of @uri.to_s\n"],["url=","WpscanOptions","WpscanOptions.html#method-i-url-3D","(url)",""],["usage","Object","Object.html#method-i-usage","()","
wpscan usage\n"],["user_agent","Browser","Browser.html#method-i-user_agent","()","
return the user agent, according to the user_agent_mode\n"],["user_agent_mode=","Browser","Browser.html#method-i-user_agent_mode-3D","(ua_mode)",""],["usernames","WpUsernames","WpUsernames.html#method-i-usernames","(options = {})","
Enumerate wordpress usernames by using Veronica Valeros’s technique:\nseclists.org/fulldisclosure/2011/May/493 …\n"],["valid_response_codes","WpTarget","WpTarget.html#method-c-valid_response_codes","()","
Valid HTTP return codes\n"],["version","WpItem","WpItem.html#method-i-version","()","
Returns version number from readme.txt if it exists\n"],["version","WpTarget","WpTarget.html#method-i-version","()","
return WpVersion\n"],["version_pattern","WpVersion","WpVersion.html#method-c-version_pattern","()","
Used to check if the version is correct: must contain at least one dot.\n"],["vulnerabilities","Vulnerable","Vulnerable.html#method-i-vulnerabilities","()","
@return an array of WpVulnerability (can be empty)\n"],["wordlist=","WpscanOptions","WpscanOptions.html#method-i-wordlist-3D","(wordlist)",""],["wordpress?","WebSite","WebSite.html#method-i-wordpress-3F","()","
check if the remote website is actually running wordpress.\n"],["wp_content_dir","WpTarget","WpTarget.html#method-i-wp_content_dir","()",""],["wp_org_item?","WpItem","WpItem.html#method-i-wp_org_item-3F","()","
returns true if this theme or plugin is hosted on wordpress.org\n"],["wp_org_url","WpItem","WpItem.html#method-i-wp_org_url","()","
The wordpress.org plugins directory URL See:\ngithub.com/wpscanteam/wpscan/issues/100\n"],["wp_plugins_dir","WpTarget","WpTarget.html#method-i-wp_plugins_dir","()",""],["wp_plugins_dir_exists?","WpTarget","WpTarget.html#method-i-wp_plugins_dir_exists-3F","()",""],["write_entry","CacheFileStore","CacheFileStore.html#method-i-write_entry","(key, data_to_store, cache_timeout)",""],["xml_rpc_url","WebSite","WebSite.html#method-i-xml_rpc_url","()",""],["CREDITS","","CREDITS.html","","
*CREDITS*\n
This file is to give credit to WPScan’s contributors. If you feel your name\nshould be in here, …\n"],["Gemfile","","Gemfile.html","","
source “rubygems.org”\n
gem “typhoeus”, “0.4.2” gem “nokogiri” gem …\n"],["README","","README.html","","
__\n\n
__ _______ _____\n\\ \\ / / __ \\ / ____|\n \\ \\ /\\ / /| |__) | (___ ___ __ _ _ __ ...\n"],["log","","log_txt.html","","__\n\n
__ _______ _____ \n\\ \\ / / __ \\ / ____| \n \\ \\ /\\ ...\n"]]}} \ No newline at end of file diff --git a/doc/log_txt.html b/doc/log_txt.html new file mode 100644 index 00000000..b57d25a1 --- /dev/null +++ b/doc/log_txt.html @@ -0,0 +1,239 @@ + + + + + + +log - RDoc Documentation + + + + + + + + + + + + + + + + ++ ++ + + + + diff --git a/doc/table_of_contents.html b/doc/table_of_contents.html index f7e38ced..a838c566 100644 --- a/doc/table_of_contents.html +++ b/doc/table_of_contents.html @@ -501,7 +501,7 @@__
+ +__ _______ _____ +\ \ / / __ \ / ____| + \ \ /\ / /| |__) | (___ ___ __ _ _ __ + \ \/ \/ / | ___/ \___ \ / __|/ _` | '_ \ + \ /\ / | | ____) | (__| (_| | | | | + \/ \/ |_| |_____/ \___|\__,_|_| |_| v2.0r60a6f16 + + WordPress Security Scanner by the WPScan Team +Sponsored by the RandomStorm Open Source Initiative+ +_
+ +Examples :
+ +-Further help … ruby /Users/firefart/Coding/wpscan_master/wpscan.rb –help
+ +-Do ‘non-intrusive’ checks … ruby +/Users/firefart/Coding/wpscan_master/wpscan.rb –url www.example.com
+ +-Do wordlist password brute force on enumerated users using 50 threads … +ruby /Users/firefart/Coding/wpscan_master/wpscan.rb –url www.example.com –wordlist darkc0de.lst +–threads 50
+ +-Do wordlist password brute force on the ‘admin’ username only … ruby +/Users/firefart/Coding/wpscan_master/wpscan.rb –url www.example.com –wordlist darkc0de.lst +–username admin
+ +-Enumerate installed plugins … ruby +/Users/firefart/Coding/wpscan_master/wpscan.rb –url www.example.com –enumerate p
+ +-Enumerate installed themes … ruby +/Users/firefart/Coding/wpscan_master/wpscan.rb –url www.example.com –enumerate t
+ +-Enumerate users … ruby /Users/firefart/Coding/wpscan_master/wpscan.rb –url +www.example.com –enumerate u
+ +-Enumerate installed timthumbs … ruby +/Users/firefart/Coding/wpscan_master/wpscan.rb –url www.example.com –enumerate tt
+ +-Use a HTTP proxy … ruby /Users/firefart/Coding/wpscan_master/wpscan.rb +–url www.example.com –proxy +127.0.0.1:8118
+ +-Use a SOCKS5 proxy … (cURL >= v7.21.7 needed) ruby +/Users/firefart/Coding/wpscan_master/wpscan.rb –url www.example.com –proxy +socks5://127.0.0.1:9000
+ +-Use custom content directory … ruby +/Users/firefart/Coding/wpscan_master/wpscan.rb -u www.example.com –wp-content-dir +custom-content
+ +-Use custom plugins directory … ruby +/Users/firefart/Coding/wpscan_master/wpscan.rb -u www.example.com –wp-plugins-dir +wp-content/custom-plugins
+ +-Update … ruby /Users/firefart/Coding/wpscan_master/wpscan.rb –update
+ +See README for further information.
+ +[31m No argument supplied [0m Trace : +/Users/firefart/Coding/wpscan_master/wpscan.rb:46:in `<main>‘ +Coverage report generated for RSpec to +/Users/firefart/Coding/wpscan_master/coverage. 1040 / 1113 LOC (93.44%) +covered.
+ +#puts — Object - #raise_invalid_proxy_format — Browser + #raise_invalid_proxy_auth_format — Browser #read_entry — CacheFileStore