Use valid_response_codes
This commit is contained in:
@@ -21,7 +21,7 @@ module WPScan
|
|||||||
def aggressive(opts = {})
|
def aggressive(opts = {})
|
||||||
found = []
|
found = []
|
||||||
|
|
||||||
enumerate(potential_urls(opts), opts.merge(check_full_response: [200, 206])) do |res|
|
enumerate(potential_urls(opts), opts.merge(check_full_response: valid_response_codes)) do |res|
|
||||||
if res.effective_url.end_with?('.zip')
|
if res.effective_url.end_with?('.zip')
|
||||||
next unless %r{\Aapplication/zip}i.match?(res.headers['Content-Type'])
|
next unless %r{\Aapplication/zip}i.match?(res.headers['Content-Type'])
|
||||||
else
|
else
|
||||||
|
|||||||
Reference in New Issue
Block a user