WPScan files

spec/lib/wpscan/modules/web_site_spec.rb

@@ -0,0 +1,77 @@
+shared_examples_for "WebSite" do
+  let(:fixtures_dir) { SPEC_FIXTURES_WPSCAN_MODULES_DIR + '/web_site' }
+
+  before :each do
+    @module = WpScanModuleSpec.new('http://example.localhost/')
+    @module.extend(WebSite)
+  end
+
+  describe "#login_url" do
+    it "should return the correct url : http://example.localhost/wp-login.php" do
+      @module.login_url.should === "http://example.localhost/wp-login.php"
+    end
+  end
+
+  describe "#xmlrpc_url" do
+    it "should return the correct url : http://example.localhost/xmlrpc.php" do
+      @module.xmlrpc_url.should === "http://example.localhost/xmlrpc.php"
+    end
+  end
+
+  describe "#is_wordpress?" do
+    # each url (wp-login and xmlrpc) pointed to a 404
+    before :each do
+      [@module.login_url, @module.xmlrpc_url].each do |url|
+        stub_request(:get, url).to_return(:status => 404, :body => "")
+      end
+    end
+
+    it "should return false if both files are not found (404)" do
+      @module.is_wordpress?.should be_false
+    end
+
+    it "should return true if the wp-login is found and is a valid wordpress one" do
+      stub_request(:get, @module.login_url).
+        to_return(:status => 200, :body => File.new(fixtures_dir + '/wp-login.php'))
+
+      @module.is_wordpress?.should be_true
+    end
+
+    it "should return true if the xmlrpc is found" do
+      stub_request(:get, @module.xmlrpc_url).
+        to_return(:status => 200, :body => File.new(fixtures_dir + '/xmlrpc.php'))
+
+      @module.is_wordpress?.should be_true
+    end
+  end
+
+  describe "#is_online?" do
+    it "should return false" do
+      stub_request(:get, @module.url).to_return(:status => 0)
+      @module.is_online?.should be_false
+    end
+
+    it "should return true" do
+      stub_request(:get, @module.url).to_return(:status => 200)
+      @module.is_online?.should be_true
+    end
+  end
+
+  describe "#redirection" do
+    it "should return nil if no redirection detected" do
+      stub_request(:get, @module.url).to_return(:status => 200, :body => '')
+
+      @module.redirection.should be_nil
+    end
+
+    [301, 302].each do |status_code|
+      it "should return http://new-location.com if the status code is #{status_code}" do
+        stub_request(:get, @module.url).
+          to_return(:status => status_code, :headers => { :location => "http://new-location.com" })
+
+        @module.redirection.should === "http://new-location.com"
+      end
+    end
+  end
+
+end