garfield/wpscan
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

wp-content directory detection

Browse Source
This commit is contained in:
Christian Mehlmauer
2012-09-20 17:26:42 +02:00
parent 7a1ebb1942
commit 2c4069921b
1 changed files with 4 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
lib/wpscan/wp_target.rb
View File

@@ -90,15 +90,13 @@ class WpTarget
def wp_content_dir def wp_content_dir
unless @wp_content_dir unless @wp_content_dir
index_body = Browser.instance.get(@uri.to_s).body index_body = Browser.instance.get(@uri.to_s).body
# Only use the path because domain can be text or an ip
uri_path = @uri.path
if index_body[%r{#@uri/?wp-content/(?:themes|plugins)/}i] if index_body[/#{uri_path}\/wp-content\/(?:themes|plugins)\//i]
@wp_content_dir = "wp-content" @wp_content_dir = "wp-content"
else else
@wp_content_dir = index_body[%r{(?:href|src)=(?:"|')#@uri/?([^"']+)/(?:themes|plugins)/.*(?:"|')}i, 1] @wp_content_dir = index_body[/(?:href|src)\s*=\s*(?:"|').+#{uri_path}([^"']+)\/(?:themes|plugins)\/.*(?:"|')/i, 1]
# Bug: Some themes and plugins render incorrect with custom wp-content dir, so only take the first folder
# Exmaple:
# /wordpress/wp-custom/plugins/usr/share/wordpress/wp-content/plugins/contact-form-7/includes/js/jquery.form.js?
@wp_content_dir = @wp_content_dir[%r{([^/]+).*}i, 1]
end end
end end
@wp_content_dir @wp_content_dir