garfield/wpscan
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fixed FP in rss version fingerprint. See Issue: #48

Browse Source
This commit is contained in:
ethicalhack3r
2012-10-26 13:10:48 +02:00
parent ad8b5e78ba
commit 68027cbd17
5 changed files with 337 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
lib/wpscan/wp_version.rb
View File

@@ -62,14 +62,14 @@ class WpVersion < Vulnerable
target_uri = options[:base_url]
response = Browser.instance.get(target_uri.to_s, {:follow_location => true, :max_redirects => 2})
response.body[%r{name="generator" content="wordpress ([^"]+)"}i, 1]
response.body[%r{name="generator" content="wordpress (#{WpVersion.version_pattern})"}i, 1]
end
def self.find_from_rss_generator(options)
target_uri = options[:base_url]
response = Browser.instance.get(target_uri.merge("feed/").to_s, {:follow_location => true, :max_redirects => 2})
response.body[%r{<generator>http://wordpress.org/\?v=([^<]+)</generator>}i, 1]
response.body[%r{<generator>http://wordpress.org/\?v=(#{WpVersion.version_pattern})</generator>}i, 1]
end
# Uses data/wp_versions.xml to try to identify a