Improves detection of WP Version, Plugins etc by checking 404

2019-10-31 19:56:05 +00:00
parent 85aa9f61cd
commit 6b5e016770
44 changed files with 456 additions and 146 deletions
--- a/lib/wpscan/finders/dynamic_finder/wp_items/finder.rb
+++ b/lib/wpscan/finders/dynamic_finder/wp_items/finder.rb
@@ -31,9 +31,11 @@ module WPScan

            passive_configs.each do |slug, configs|
              configs.each do |klass, config|
-                item = process_response(opts, target.homepage_res, slug, klass, config)
+                [target.homepage_res, target.error_404_res].each do |page_res|
+                  item = process_response(opts, page_res, slug, klass, config)

-                found << item if item.is_a?(Model::WpItem)
+                  found << item if item.is_a?(Model::WpItem)
+                end
              end
            end