diff --git a/doc/Array.html b/doc/Array.html index f67b8512..e2dc1129 100644 --- a/doc/Array.html +++ b/doc/Array.html @@ -148,8 +148,6 @@
-# File lib/wpscan/modules/wp_login_protection.rb, line 25 -def has_login_protection? - !login_protection_plugin().nil? -end-
Checks if a login protection plugin is enabled code.google.com/p/wpscan/issues/detail?id=111 -return a WpPlugin object or nil if no one is -found
- - - --# File lib/wpscan/modules/wp_login_protection.rb, line 32 -def login_protection_plugin - unless @login_protection_plugin - protected_methods.grep(@@login_protection_method_pattern).each do |symbol_to_call| - - if send(symbol_to_call) - plugin_name = symbol_to_call[@@login_protection_method_pattern, 1].gsub('_', '-') - - return @login_protection_plugin = WpPlugin.new( - :name => plugin_name, - :url => @uri.to_s - ) - end - end - @login_protection_plugin = nil - end - @login_protection_plugin -end-
-# File lib/wpscan/modules/wp_login_protection.rb, line 67 -def better_wp_security_url - WpPlugin.create_location_url_from_name("better-wp-security", @uri) -end-
-# File lib/wpscan/modules/wp_login_protection.rb, line 103 -def bluetrait_event_viewer_url - WpPlugin.create_location_url_from_name("bluetrait-event-viewer", @uri) -end-
wordpress.org/extend/plugins/better-wp-security/
- - - --# File lib/wpscan/modules/wp_login_protection.rb, line 63 -def has_better_wp_security_protection? - Browser.instance.get(better_wp_security_url()).code != 404 -end-
wordpress.org/extend/plugins/bluetrait-event-viewer/
- - - --# File lib/wpscan/modules/wp_login_protection.rb, line 99 -def has_bluetrait_event_viewer_protection? - Browser.instance.get(bluetrait_event_viewer_url()).code != 404 -end-
wordpress.org/extend/plugins/limit-login-attempts/
- - - --# File lib/wpscan/modules/wp_login_protection.rb, line 90 -def has_limit_login_attempts_protection? - Browser.instance.get(limit_login_attempts_url()).code != 404 -end-
wordpress.org/extend/plugins/login-lock/
- - - --# File lib/wpscan/modules/wp_login_protection.rb, line 58 -def has_login_lock_protection? - Browser.instance.get(login_url()).body =~ %{LOGIN LOCK} ? true : false -end-
Thanks to Alip Aswalid for providing this method. wordpress.org/extend/plugins/login-lockdown/
- - - --# File lib/wpscan/modules/wp_login_protection.rb, line 53 -def has_login_lockdown_protection? - Browser.instance.get(login_url()).body =~ %{Login LockDown} ? true : false -end-
wordpress.org/extend/plugins/login-security-solution/
- - - --# File lib/wpscan/modules/wp_login_protection.rb, line 81 -def has_login_security_solution_protection? - Browser.instance.get(login_security_solution_url()).code != 404 -end-
wordpress.org/extend/plugins/simple-login-lockdown/
- - - --# File lib/wpscan/modules/wp_login_protection.rb, line 72 -def has_simple_login_lockdown_protection? - Browser.instance.get(simple_login_lockdown_url()).code != 404 -end-
-# File lib/wpscan/modules/wp_login_protection.rb, line 94 -def limit_login_attempts_url - WpPlugin.create_location_url_from_name("limit-login-attempts", @uri) -end-
Generated with the Darkfish - Rdoc Generator 2.
--# File lib/wpscan/wp_target.rb, line 36 +# File lib/wpscan/wp_target.rb, line 35 def initialize(target_url, options = {}) @uri = URI.parse(add_trailing_slash(add_http_protocol(target_url))) @verbose = options[:verbose] @@ -371,7 +365,7 @@-# File lib/wpscan/wp_target.rb, line 76 +# File lib/wpscan/wp_target.rb, line 75 def self.valid_response_codes [200, 403, 301, 302, 500] end@@ -410,7 +404,7 @@-# File lib/wpscan/wp_target.rb, line 116 +# File lib/wpscan/wp_target.rb, line 115 def debug_log_url @uri.merge("#{wp_content_dir()}/debug.log").to_s end@@ -443,7 +437,7 @@-# File lib/wpscan/wp_target.rb, line 63 +# File lib/wpscan/wp_target.rb, line 62 def error_404_hash unless @error_404_hash non_existant_page = Digest::MD5.hexdigest(rand(9999999999).to_s) + ".html" @@ -484,7 +478,7 @@-# File lib/wpscan/wp_target.rb, line 110 +# File lib/wpscan/wp_target.rb, line 109 def has_debug_log? # We only get the first 700 bytes of the file to avoid loading huge file (like 2Go) response_body = Browser.instance.get(debug_log_url(), :headers => { "range" => "bytes=0-700"}).body @@ -519,7 +513,7 @@-# File lib/wpscan/wp_target.rb, line 50 +# File lib/wpscan/wp_target.rb, line 49 def login_url url = @uri.merge("wp-login.php").to_s @@ -560,7 +554,7 @@-# File lib/wpscan/wp_target.rb, line 81 +# File lib/wpscan/wp_target.rb, line 80 def theme WpTheme.find(@uri) end@@ -593,7 +587,7 @@-# File lib/wpscan/wp_target.rb, line 46 +# File lib/wpscan/wp_target.rb, line 45 def url @uri.to_s end@@ -626,7 +620,7 @@-# File lib/wpscan/wp_target.rb, line 86 +# File lib/wpscan/wp_target.rb, line 85 def version WpVersion.find(@uri, wp_content_dir) end@@ -659,7 +653,7 @@-# File lib/wpscan/wp_target.rb, line 90 +# File lib/wpscan/wp_target.rb, line 89 def wp_content_dir unless @wp_content_dir index_body = Browser.instance.get(@uri.to_s).body @@ -701,7 +695,7 @@-# File lib/wpscan/wp_target.rb, line 103 +# File lib/wpscan/wp_target.rb, line 102 def wp_plugins_dir unless @wp_plugins_dir @wp_plugins_dir = wp_content_dir() + "/plugins" diff --git a/doc/WpTheme.html b/doc/WpTheme.html index 1165a15e..767d2651 100644 --- a/doc/WpTheme.html +++ b/doc/WpTheme.html @@ -154,8 +154,6 @@WpItem -WpLoginProtection -WpOptions WpPlugin diff --git a/doc/WpTimthumbs.html b/doc/WpTimthumbs.html index 63071a0b..758869bf 100644 --- a/doc/WpTimthumbs.html +++ b/doc/WpTimthumbs.html @@ -142,8 +142,6 @@WpItem -WpLoginProtection -WpOptions WpPlugin diff --git a/doc/WpUsernames.html b/doc/WpUsernames.html index 26911eff..bbafcd16 100644 --- a/doc/WpUsernames.html +++ b/doc/WpUsernames.html @@ -140,8 +140,6 @@WpItem -WpLoginProtection -WpOptions WpPlugin diff --git a/doc/WpVersion.html b/doc/WpVersion.html index c0e2275b..de990390 100644 --- a/doc/WpVersion.html +++ b/doc/WpVersion.html @@ -160,8 +160,6 @@WpItem -WpLoginProtection -WpOptions WpPlugin diff --git a/doc/WpVulnerability.html b/doc/WpVulnerability.html index 4ac3b571..1ed30cbe 100644 --- a/doc/WpVulnerability.html +++ b/doc/WpVulnerability.html @@ -146,8 +146,6 @@WpItem -WpLoginProtection -WpOptions WpPlugin diff --git a/doc/WpscanOptions.html b/doc/WpscanOptions.html index dc0b6921..1cd81b83 100644 --- a/doc/WpscanOptions.html +++ b/doc/WpscanOptions.html @@ -180,8 +180,6 @@WpItem -WpLoginProtection -WpOptions WpPlugin @@ -797,7 +795,7 @@ value ) elsif cli_option === "--enumerate" # Special cases # Default value if no argument is given - cli_value = "Ttup!" if cli_value.length == 0 + cli_value = "Ttup" if cli_value.length == 0 enumerate_options_from_string(cli_value) else diff --git a/doc/created.rid b/doc/created.rid index e9d3b50b..7f836cb6 100644 --- a/doc/created.rid +++ b/doc/created.rid @@ -1,4 +1,4 @@ -Mon, 17 Sep 2012 22:40:58 +0200 +Mon, 17 Sep 2012 23:33:41 +0200 ./CREDITS Mon, 17 Sep 2012 20:18:24 +0200 ./lib/browser.rb Sun, 16 Sep 2012 15:18:58 +0200 ./lib/cache_file_store.rb Sat, 15 Sep 2012 08:04:03 +0200 @@ -14,7 +14,6 @@ Mon, 17 Sep 2012 22:40:58 +0200 ./lib/wpscan/modules/web_site.rb Sat, 15 Sep 2012 08:01:06 +0200 ./lib/wpscan/modules/wp_config_backup.rb Sat, 15 Sep 2012 08:01:11 +0200 ./lib/wpscan/modules/wp_full_path_disclosure.rb Sat, 15 Sep 2012 08:01:17 +0200 -./lib/wpscan/modules/wp_login_protection.rb Sun, 16 Sep 2012 10:26:51 +0200 ./lib/wpscan/modules/wp_plugins.rb Sun, 16 Sep 2012 12:02:47 +0200 ./lib/wpscan/modules/wp_readme.rb Sat, 15 Sep 2012 08:01:52 +0200 ./lib/wpscan/modules/wp_themes.rb Sun, 16 Sep 2012 12:03:41 +0200 @@ -27,12 +26,12 @@ Mon, 17 Sep 2012 22:40:58 +0200 ./lib/wpscan/wp_item.rb Mon, 17 Sep 2012 22:04:16 +0200 ./lib/wpscan/wp_options.rb Sun, 16 Sep 2012 23:02:21 +0200 ./lib/wpscan/wp_plugin.rb Mon, 17 Sep 2012 22:03:47 +0200 -./lib/wpscan/wp_target.rb Sun, 16 Sep 2012 23:48:55 +0200 +./lib/wpscan/wp_target.rb Mon, 17 Sep 2012 22:51:21 +0200 ./lib/wpscan/wp_theme.rb Mon, 17 Sep 2012 22:23:12 +0200 ./lib/wpscan/wp_version.rb Sun, 16 Sep 2012 23:48:18 +0200 ./lib/wpscan/wp_vulnerability.rb Sat, 15 Sep 2012 08:03:09 +0200 ./lib/wpscan/wpscan_helper.rb Sat, 15 Sep 2012 21:19:30 +0200 -./lib/wpscan/wpscan_options.rb Sun, 16 Sep 2012 10:10:51 +0200 +./lib/wpscan/wpscan_options.rb Mon, 17 Sep 2012 22:44:37 +0200 ./lib/wpstools/generate_list.rb Sat, 15 Sep 2012 08:03:43 +0200 ./lib/wpstools/parse_svn.rb Sat, 15 Sep 2012 23:36:25 +0200 ./lib/wpstools/wpstools_helper.rb Sat, 15 Sep 2012 08:03:49 +0200 diff --git a/doc/index.html b/doc/index.html index 6beb79b9..c384ff0a 100644 --- a/doc/index.html +++ b/doc/index.html @@ -82,8 +82,6 @@WpItem -WpLoginProtection -WpOptions WpPlugin @@ -169,10 +167,10 @@::new — WpVulnerability -::new — WpItem -::new — RpcClient +::new — WpItem +::new — Updater ::new — Svn_Parser @@ -213,10 +211,6 @@#banner — Object -#better_wp_security_url — WpLoginProtection - -#bluetrait_event_viewer_url — WpLoginProtection -#brute_force — BruteForce #changelog_url — WpItem @@ -281,35 +275,19 @@#grep — Array -#has_better_wp_security_protection? — WpLoginProtection - -#has_bluetrait_event_viewer_protection? — WpLoginProtection -#has_changelog? — WpItem #has_debug_log? — WpTarget #has_full_path_disclosure? — WpFullPathDisclosure -#has_limit_login_attempts_protection? — WpLoginProtection - -#has_login_lock_protection? — WpLoginProtection - -#has_login_lockdown_protection? — WpLoginProtection - -#has_login_protection? — WpLoginProtection - -#has_login_security_solution_protection? — WpLoginProtection -#has_malwares? — Malwares #has_options? — WpscanOptions -#has_readme? — WpItem -#has_readme? — WpReadme -#has_simple_login_lockdown_protection? — WpLoginProtection +#has_readme? — WpItem #has_timthumbs? — WpTimthumbs @@ -317,10 +295,10 @@#is_installed? — SvnUpdater -#is_installed? — GitUpdater -#is_installed? — Updater +#is_installed? — GitUpdater +#is_online? — WebSite #is_wordpress? — WebSite @@ -329,28 +307,22 @@#jobs — RpcClient -#kill_session — Exploit -#kill_session — RpcClient +#kill_session — Exploit +#last_session_id — Exploit -#limit_login_attempts_url — WpLoginProtection -#load_config — Browser -#local_revision_number — Updater - -#local_revision_number — SvnUpdater -#local_revision_number — GitUpdater +#local_revision_number — SvnUpdater + +#local_revision_number — Updater +#login — RpcClient -#login_protection_plugin — WpLoginProtection - -#login_security_solution_url — WpLoginProtection -#login_url — WpTarget #malwares — Malwares @@ -385,10 +357,10 @@#read_shell — Exploit -#readme_url — WpReadme -#readme_url — WpItem +#readme_url — WpReadme +#redirection — WebSite #repo_directory_arguments — GitUpdater @@ -399,13 +371,11 @@#session_count — Exploit -#sessions — Exploit -#sessions — RpcClient -#set_option_from_cli — WpscanOptions +#sessions — Exploit -#simple_login_lockdown_url — WpLoginProtection +#set_option_from_cli — WpscanOptions #start — Exploit @@ -425,12 +395,12 @@#to_s — WpItem -#update — GitUpdater -#update — Updater #update — SvnUpdater +#update — GitUpdater +#url — WpTarget #url= — WpscanOptions @@ -443,10 +413,10 @@#usernames — WpUsernames -#version — WpTarget -#version — WpItem +#version — WpTarget +#vulnerabilities — Vulnerable #wordlist= — WpscanOptions diff --git a/doc/lib/wpscan/modules/wp_login_protection_rb.html b/doc/lib/wpscan/modules/wp_login_protection_rb.html deleted file mode 100644 index 7fb2830f..00000000 --- a/doc/lib/wpscan/modules/wp_login_protection_rb.html +++ /dev/null @@ -1,52 +0,0 @@ - - - - - - - -File: wp_login_protection.rb [RDoc Documentation] - - - - - - - - - - --- --
-- Last Modified
-- 2012-09-16 10:26:51 +0200
- - -- Requires
-- -
- - - -- -
-- -- - - diff --git a/doc/lib/wpscan/wp_target_rb.html b/doc/lib/wpscan/wp_target_rb.html index a97fc655..b1980082 100644 --- a/doc/lib/wpscan/wp_target_rb.html +++ b/doc/lib/wpscan/wp_target_rb.html @@ -24,7 +24,7 @@-- -Description
- -
- Last Modified
-- 2012-09-16 23:48:55 +0200
+- 2012-09-17 22:51:21 +0200
- Requires
diff --git a/doc/lib/wpscan/wpscan_options_rb.html b/doc/lib/wpscan/wpscan_options_rb.html index a26386c6..48ad414b 100644 --- a/doc/lib/wpscan/wpscan_options_rb.html +++ b/doc/lib/wpscan/wpscan_options_rb.html @@ -24,7 +24,7 @@
- Last Modified
-- 2012-09-16 10:10:51 +0200
+- 2012-09-17 22:44:37 +0200
- Requires