garfield/wpscan
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Adds more improvements re passive scanning when there are a lot of urls

Browse Source
This commit is contained in:
erwanlr
2020-02-13 15:36:42 +00:00
parent 7d2b8a2a8b
commit 72d699b39a
18 changed files with 214 additions and 38 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
spec/fixtures/finders/interesting_findings/mu_plugins/match_href.html vendored Normal file
View File

@@ -0,0 +1,16 @@
<!DOCTYPE html>
<html lang="en-US" class="no-js">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width">
<link rel="profile" href="http://gmpg.org/xfn/11">
<link rel="pingback" href="http://ex.lo/xmlrpc.php">
<script>(function(){document.documentElement.className='js'})();</script>
<title>WP 5.3.2 | Just another WordPress site</title>
<meta name='robots' content='noindex,follow' />
<link rel="alternate" type="application/rss+xml" title="WP 5.3.2 &raquo; Feed" href="http://ex.lo/feed/" />
<link rel="alternate" type="application/rss+xml" title="WP 5.3.2 &raquo; Comments Feed" href="http://ex.lo/comments/feed/" />
<link rel='stylesheet' id='twentyfifteen-style-css' href='http://g.com/wp-content/themes/twentyfifteen/style.css?ver=5.3.2' type='text/css' media='all' />
<link rel='stylesheet' id='wbb-css' href='https://ex.lo/wp-content/mu-plugins/bb-mods/css/style.css' type='text/css' media='all' />

16
spec/fixtures/finders/interesting_findings/mu_plugins/match_src.html vendored Normal file
View File

@@ -0,0 +1,16 @@
<!DOCTYPE html>
<html lang="en-US" class="no-js">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width">
<link rel="profile" href="http://gmpg.org/xfn/11">
<link rel="pingback" href="http://ex.lo/xmlrpc.php">
<script>(function(){document.documentElement.className='js'})();</script>
<title>WP 5.3.2 | Just another WordPress site</title>
<meta name='robots' content='noindex,follow' />
<link rel="alternate" type="application/rss+xml" title="WP 5.3.2 &raquo; Feed" href="http://ex.lo/feed/" />
<link rel="alternate" type="application/rss+xml" title="WP 5.3.2 &raquo; Comments Feed" href="http://ex.lo/comments/feed/" />
<link rel='stylesheet' id='twentyfifteen-style-css' href='http://g.com/wp-content/themes/twentyfifteen/style.css?ver=5.3.2' type='text/css' media='all' />
<script type='text/javascript' src='https://ex.lo/wp-content/mu-plugins/library/js/jquery-core.js'></script>

13
spec/fixtures/finders/interesting_findings/mu_plugins/no_match.html vendored Normal file
View File

@@ -0,0 +1,13 @@
<!DOCTYPE html>
<html lang="en-US" class="no-js">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width">
<link rel="profile" href="http://gmpg.org/xfn/11">
<link rel="pingback" href="http://ex.lo/xmlrpc.php">
<script>(function(){document.documentElement.className='js'})();</script>
<title>WP 5.3.2 | Just another WordPress site</title>
<meta name='robots' content='noindex,follow' />
<link rel="alternate" type="application/rss+xml" title="WP 5.3.2 &raquo; Feed" href="http://ex.lo/feed/" />
<link rel="alternate" type="application/rss+xml" title="WP 5.3.2 &raquo; Comments Feed" href="http://ex.lo/comments/feed/" />
<link rel='stylesheet' id='twentyfifteen-style-css' href='http://g.com/wp-content/themes/twentyfifteen/style.css?ver=5.3.2' type='text/css' media='all' />

6
spec/fixtures/finders/users/author_id_brute_forcing/4.1.1-permalink.html vendored
View File

@@ -15,8 +15,12 @@
<meta name='robots' content='noindex,follow' />
<link rel="alternate" type="application/rss+xml" title="WP 4.1.1 &raquo; Feed" href="http://wp.lab/wordpress-4.1.1/feed/" />
<link rel="alternate" type="application/rss+xml" title="WP 4.1.1 &raquo; Comments Feed" href="http://wp.lab/wordpress-4.1.1/comments/feed/" />
<link rel="alternate" type="application/rss+xml" title="WP 4.1.1 &raquo; Comments Feed" href="http://wp.lab/wordpress-4.1.1/comments
/feed/" />
<a href="https://wp.lab/?s=/author/should-not-be-detected/">Link</a>
<link rel="alternate" type="application/rss+xml" title="WP 4.1.1 &raquo; Posts by admin display_name Feed" href="http://wp.lab/wordpress-4.1.1/author/admin/feed/" />
<link rel='stylesheet' id='twentyfifteen-fonts-css' href='//fonts.googleapis.com/css?family=Noto+Sans%3A400italic%2C700italic%2C400%2C700%7CNoto+Serif%3A400italic%2C700italic%2C400%2C700%7CInconsolata%3A400%2C700&#038;subset=latin%2Clatin-ext' type='text/css' media='all' />
<link rel='stylesheet' id='genericons-css' href='http://wp.lab/wordpress-4.1.1/wp-content/themes/twentyfifteen/genericons/genericons.css?ver=3.2' type='text/css' media='all' />
<link rel='stylesheet' id='twentyfifteen-style-css' href='http://wp.lab/wordpress-4.1.1/wp-content/themes/twentyfifteen/style.css?ver=4.1.1' type='text/css' media='all' />

4
spec/fixtures/target/platform/wordpress/wordpress_hosted/matches.html → spec/fixtures/target/platform/wordpress/wordpress_hosted/match_href.html vendored
View File

@@ -215,10 +215,6 @@ div.break_footer
document.adoffset = 0;
document.adPopupFile = '/cnn_adspaces/adsPopup2.html';
</script>
<script type="text/javascript" src="https://s2.wp.com/wp-content/themes/vip/lab/js/jquery-1.8.3.min.js"></script>
<script type="text/javascript" src="https://s2.wp.com/wp-content/themes/vip/lab/js/jquery.vticker-min.js"></script>
<script type="text/javascript" src="https://s2.wp.com/wp-content/themes/vip/lab/js/adspaces.js"></script>
<script type="text/javascript" src="https://s2.wp.com/wp-content/themes/vip/lab/js/nbaOmEvent.js"></script>
<script type="text/javascript" src="http://i.cdn.turner.com/ads/adfuel/ais/nba-ais.js"></script>
<script language="JavaScript">

12
spec/fixtures/target/platform/wordpress/wordpress_hosted/match_src.html vendored Normal file
View File

@@ -0,0 +1,12 @@
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
<head profile="http://gmpg.org/xfn/11">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<title>WP Lab</title>
<script type="text/javascript" src="https://s2.wp.com/wp-content/themes/vip/lab/js/jquery-1.8.3.min.js"></script>
<script type="text/javascript" src="https://s2.wp.com/wp-content/themes/vip/lab/js/jquery.vticker-min.js"></script>
<script type="text/javascript" src="https://s2.wp.com/wp-content/themes/vip/lab/js/adspaces.js"></script>
<script type="text/javascript" src="https://s2.wp.com/wp-content/themes/vip/lab/js/nbaOmEvent.js"></script>