garfield/wpscan
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fixes #1411

Browse Source
This commit is contained in:
erwanlr
2019-10-11 14:32:00 +01:00
parent b236138fb5
commit 62600b3a66
3 changed files with 8 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
lib/wpscan/target/platform/wordpress/custom_directories.rb
View File

@@ -17,7 +17,7 @@ module WPScan
def content_dir def content_dir
unless @content_dir unless @content_dir
# scope_url_pattern is from CMSScanner::Target # scope_url_pattern is from CMSScanner::Target
pattern = %r{#{scope_url_pattern}([\w\s\-/]+)\\?/(?:themes|plugins|uploads|cache)\\?/}i pattern = %r{#{scope_url_pattern}([\w\s\-/]+?)\\?/(?:themes|plugins|uploads|cache)\\?/}i
in_scope_uris(homepage_res) do |uri| in_scope_uris(homepage_res) do |uri|
return @content_dir = Regexp.last_match[1] if uri.to_s.match(pattern) return @content_dir = Regexp.last_match[1] if uri.to_s.match(pattern)

5
spec/fixtures/target/platform/wordpress/custom_directories/themes_path_plugin_folder.html vendored Normal file
View File

@@ -0,0 +1,5 @@
<link rel="stylesheet" href="http://ex.lo/wp-content/plugins/wp-lightbox/js/lightbox/themes/default/jquery.lightbox.css" type="text/css" media="all"/>
<!--[if IE 6]>
<link rel="stylesheet" href="http://ex.lo/wp-content/plugins/wp-lightbox/js/lightbox/themes/default/jquery.lightbox.ie6.css" type="text/css" media="all"/>
<![endif]-->

3
spec/shared_examples/target/platform/wordpress/custom_directories.rb
View File

@@ -8,7 +8,8 @@ shared_examples 'WordPress::CustomDirectories' do
default: 'wp-content', https: 'wp-content', custom_w_spaces: 'custom content spaces', default: 'wp-content', https: 'wp-content', custom_w_spaces: 'custom content spaces',
relative_one: 'wp-content', relative_two: 'wp-content', cache: 'wp-content', relative_one: 'wp-content', relative_two: 'wp-content', cache: 'wp-content',
in_raw_js: 'wp-content', in_raw_js_escaped: 'wp-content', with_sub_dir: 'app', in_raw_js: 'wp-content', in_raw_js_escaped: 'wp-content', with_sub_dir: 'app',
relative_two_sub_dir: 'cms/wp-content', in_meta_content: 'wp-content' relative_two_sub_dir: 'cms/wp-content', in_meta_content: 'wp-content',
themes_path_plugin_folder: 'wp-content'
}.each do |file, expected| }.each do |file, expected|
it "returns #{expected} for #{file}.html" do it "returns #{expected} for #{file}.html" do
stub_request(:get, target.url).to_return(body: File.read(fixtures.join("#{file}.html"))) stub_request(:get, target.url).to_return(body: File.read(fixtures.join("#{file}.html")))