diff --git a/.rspec b/.rspec index 3eff96b7..4e1e0d2f 100644 --- a/.rspec +++ b/.rspec @@ -1,3 +1 @@ --color ---format documentation - diff --git a/.travis.yml b/.travis.yml index 9eea122a..9567f89a 100644 --- a/.travis.yml +++ b/.travis.yml @@ -2,4 +2,4 @@ language: ruby rvm: - "1.9.2" - "1.9.3" -script: bundle exec rspec spec +script: bundle exec rspec --format documentation diff --git a/data/plugin_vulns.xml b/data/plugin_vulns.xml index 724f0939..aece201c 100644 --- a/data/plugin_vulns.xml +++ b/data/plugin_vulns.xml @@ -2996,5 +2996,15 @@ File Upload Vulnerability + + + W3-Total-Cache 0.9.2.4 (or before) Username and Hash Extract + http://seclists.org/fulldisclosure/2012/Dec/242 + https://github.com/FireFart/W3TotalCacheExploit + auxiliary/gather/wp_w3_total_cache_hash_extract + UNKNOWN + + + diff --git a/data/plugins.txt b/data/plugins.txt index d9995457..173d1b23 100644 --- a/data/plugins.txt +++ b/data/plugins.txt @@ -1732,7 +1732,7 @@ visual-form-builder/readme.txt vkontakte-api/close-wp.php vm-backups/readme.txt vslider/readme.txt -w3-total-cache/index.html +w3-total-cache/readme.txt wangguard/index.php wapple-architect/architect.php wassup/badhosts-intl.txt diff --git a/spec/wpscan_spec.rb b/spec/wpscan_spec.rb new file mode 100644 index 00000000..91ba8ca6 --- /dev/null +++ b/spec/wpscan_spec.rb @@ -0,0 +1,28 @@ +#-- +# WPScan - WordPress Security Scanner +# Copyright (C) 2012-2013 +# +# This program is free software: you can redistribute it and/or modify +# it under the terms of the GNU General Public License as published by +# the Free Software Foundation, either version 3 of the License, or +# (at your option) any later version. +# +# This program is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. +# +# You should have received a copy of the GNU General Public License +# along with this program. If not, see . +#++ + +require 'spec_helper' + +describe "wpscan main checks" do + + it "check for errors on running the mainscript" do + a = %x[ruby #{ROOT_DIR}/wpscan.rb] + a.should =~ /\[ERROR\] No argument supplied/ + end + +end \ No newline at end of file