Use valid_response_codes

This commit is contained in:
Kazuki Onishi
2023-10-14 01:21:27 +09:00
parent 99fca11958
commit 2c1eb27f79

View File

@@ -21,7 +21,7 @@ module WPScan
def aggressive(opts = {})
found = []
enumerate(potential_urls(opts), opts.merge(check_full_response: [200, 206])) do |res|
enumerate(potential_urls(opts), opts.merge(check_full_response: valid_response_codes)) do |res|
if res.effective_url.end_with?('.zip')
next unless %r{\Aapplication/zip}i.match?(res.headers['Content-Type'])
else