Adds security-protection plugin detection - Fixes #747

2015-01-25 15:16:11 +01:00
parent 9361cf4b00
commit 585d22be46
3 changed files with 105 additions and 25 deletions
--- a/lib/wpscan/wp_target/wp_login_protection.rb
+++ b/lib/wpscan/wp_target/wp_login_protection.rb
@@ -99,5 +99,12 @@ class WpTarget < WebSite
      plugin_url('bluetrait-event-viewer')
    end

+    # https://wordpress.org/plugins/security-protection/
+    def has_security_protection_protection?
+      Nokogiri::HTML(Browser.get(login_url).body).css('script').each do |node|
+        return true if node['src'] =~ /security-protection.js/i
+      end
+      false
+    end
  end
 end