username detection
This commit is contained in:
Christian Mehlmauer
@@ -43,7 +43,7 @@ module WpUsernames
|
|||||||
nickname = get_nickname_from_url(url)
|
nickname = get_nickname_from_url(url)
|
||||||
elsif response.code == 200 # username in body?
|
elsif response.code == 200 # username in body?
|
||||||
# get the username from the author feed URL
|
# get the username from the author feed URL
|
||||||
username = response.body[%r{/author/([^/\b]+)/?}i, 1]
|
username = get_username_from_response(response)
|
||||||
nickname = get_nickname_from_response(response)
|
nickname = get_nickname_from_response(response)
|
||||||
end
|
end
|
||||||
|
|
||||||
@@ -76,6 +76,16 @@ module WpUsernames
|
|||||||
nickname
|
nickname
|
||||||
end
|
end
|
||||||
|
|
||||||
|
def get_username_from_response(resp)
|
||||||
|
# Feed URL with Permalinks
|
||||||
|
username = resp.body[%r{/author/([^/\b]+)/?}i, 1]
|
||||||
|
if username.nil?
|
||||||
|
# No Permalinks
|
||||||
|
username = resp.body[%r{<body class="archive author author-([^\s]+) author-(\d+)}i, 1]
|
||||||
|
end
|
||||||
|
username
|
||||||
|
end
|
||||||
|
|
||||||
def extract_nickname_from_body(body)
|
def extract_nickname_from_body(body)
|
||||||
body[%r{<title>([^<]*)</title>}i, 1]
|
body[%r{<title>([^<]*)</title>}i, 1]
|
||||||
end
|
end
|
||||||
|
|||||||
@@ -121,8 +121,8 @@ shared_examples_for 'WpUsernames' do
|
|||||||
url = 'http://example.localhost/'
|
url = 'http://example.localhost/'
|
||||||
stub_request(:get, url).to_return(status: @status, body: @content)
|
stub_request(:get, url).to_return(status: @status, body: @content)
|
||||||
resp = Browser.instance.get(url)
|
resp = Browser.instance.get(url)
|
||||||
username = @module.get_nickname_from_response(resp)
|
nickname = @module.get_nickname_from_response(resp)
|
||||||
username.should === @expected
|
nickname.should === @expected
|
||||||
end
|
end
|
||||||
|
|
||||||
it 'should return nil' do
|
it 'should return nil' do
|
||||||
@@ -150,6 +150,28 @@ shared_examples_for 'WpUsernames' do
|
|||||||
end
|
end
|
||||||
end
|
end
|
||||||
|
|
||||||
|
describe '#get_username_from_response' do
|
||||||
|
after :each do
|
||||||
|
url = @module.url
|
||||||
|
stub_request_to_fixture(url: url, fixture: File.new(@fixtures_dir + @file))
|
||||||
|
resp = Browser.instance.get(url)
|
||||||
|
username = @module.get_username_from_response(resp)
|
||||||
|
username.should === @expected
|
||||||
|
end
|
||||||
|
|
||||||
|
# No Permalinks
|
||||||
|
it 'should return admin' do
|
||||||
|
@file = '/admin.html'
|
||||||
|
@expected = 'admin'
|
||||||
|
end
|
||||||
|
|
||||||
|
# With Permalinks
|
||||||
|
it 'should return test' do
|
||||||
|
@file = '/test.html'
|
||||||
|
@expected = 'test'
|
||||||
|
end
|
||||||
|
end
|
||||||
|
|
||||||
describe '#extract_nickname_from_body' do
|
describe '#extract_nickname_from_body' do
|
||||||
after :each do
|
after :each do
|
||||||
result = @module.extract_nickname_from_body(@body)
|
result = @module.extract_nickname_from_body(@body)
|
||||||
|
|||||||
145
spec/samples/wpscan/modules/wp_usernames/admin.html
Normal file
145
spec/samples/wpscan/modules/wp_usernames/admin.html
Normal file
@@ -0,0 +1,145 @@
|
|||||||
|
<!DOCTYPE html>
|
||||||
|
<!--[if IE 6]>
|
||||||
|
<html id="ie6" dir="ltr" lang="en-US">
|
||||||
|
<![endif]-->
|
||||||
|
<!--[if IE 7]>
|
||||||
|
<html id="ie7" dir="ltr" lang="en-US">
|
||||||
|
<![endif]-->
|
||||||
|
<!--[if IE 8]>
|
||||||
|
<html id="ie8" dir="ltr" lang="en-US">
|
||||||
|
<![endif]-->
|
||||||
|
<!--[if !(IE 6) | !(IE 7) | !(IE 8) ]><!-->
|
||||||
|
<html dir="ltr" lang="en-US">
|
||||||
|
<!--<![endif]-->
|
||||||
|
<head>
|
||||||
|
<meta charset="UTF-8" />
|
||||||
|
<meta name="viewport" content="width=device-width" />
|
||||||
|
<title>admin | Wordpress 3.3.2</title>
|
||||||
|
<link rel="profile" href="http://gmpg.org/xfn/11" />
|
||||||
|
<link rel="stylesheet" type="text/css" media="all" href="http://lamp/wordpress-3.3.2/wp-content/themes/twentyeleven/style.css" />
|
||||||
|
<link rel="pingback" href="http://lamp/wordpress-3.3.2/xmlrpc.php" />
|
||||||
|
<!--[if lt IE 9]>
|
||||||
|
<script src="http://lamp/wordpress-3.3.2/wp-content/themes/twentyeleven/js/html5.js" type="text/javascript"></script>
|
||||||
|
<![endif]-->
|
||||||
|
<meta name='robots' content='noindex,nofollow' />
|
||||||
|
<link rel="alternate" type="application/rss+xml" title="Wordpress 3.3.2 » Feed" href="http://lamp/wordpress-3.3.2/?feed=rss2" />
|
||||||
|
<link rel="alternate" type="application/rss+xml" title="Wordpress 3.3.2 » Comments Feed" href="http://lamp/wordpress-3.3.2/?feed=comments-rss2" />
|
||||||
|
<link rel="alternate" type="application/rss+xml" title="Wordpress 3.3.2 » Posts by admin Feed" href="http://lamp/wordpress-3.3.2/?feed=rss2&author=1" />
|
||||||
|
<link rel="EditURI" type="application/rsd+xml" title="RSD" href="http://lamp/wordpress-3.3.2/xmlrpc.php?rsd" />
|
||||||
|
<link rel="wlwmanifest" type="application/wlwmanifest+xml" href="http://lamp/wordpress-3.3.2/wp-includes/wlwmanifest.xml" />
|
||||||
|
<meta name="generator" content="WordPress 3.3.2" />
|
||||||
|
<style type="text/css">.recentcomments a{display:inline !important;padding:0 !important;margin:0 !important;}</style>
|
||||||
|
</head>
|
||||||
|
|
||||||
|
<body class="archive author author-admin author-1 single-author two-column right-sidebar">
|
||||||
|
<div id="page" class="hfeed">
|
||||||
|
<header id="branding" role="banner">
|
||||||
|
<hgroup>
|
||||||
|
<h1 id="site-title"><span><a href="http://lamp/wordpress-3.3.2/" title="Wordpress 3.3.2" rel="home">Wordpress 3.3.2</a></span></h1>
|
||||||
|
<h2 id="site-description">Just another WordPress site</h2>
|
||||||
|
</hgroup>
|
||||||
|
|
||||||
|
<a href="http://lamp/wordpress-3.3.2/">
|
||||||
|
<img src="http://lamp/wordpress-3.3.2/wp-content/themes/twentyeleven/images/headers/chessboard.jpg" width="1000" height="288" alt="" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<form method="get" id="searchform" action="http://lamp/wordpress-3.3.2/">
|
||||||
|
<label for="s" class="assistive-text">Search</label>
|
||||||
|
<input type="text" class="field" name="s" id="s" placeholder="Search" />
|
||||||
|
<input type="submit" class="submit" name="submit" id="searchsubmit" value="Search" />
|
||||||
|
</form>
|
||||||
|
|
||||||
|
<nav id="access" role="navigation">
|
||||||
|
<h3 class="assistive-text">Main menu</h3>
|
||||||
|
<div class="skip-link"><a class="assistive-text" href="#content" title="Skip to primary content">Skip to primary content</a></div>
|
||||||
|
<div class="skip-link"><a class="assistive-text" href="#secondary" title="Skip to secondary content">Skip to secondary content</a></div>
|
||||||
|
<div class="menu"><ul><li ><a href="http://lamp/wordpress-3.3.2/" title="Home">Home</a></li><li class="page_item page-item-2"><a href="http://lamp/wordpress-3.3.2/?page_id=2">Sample Page</a></li></ul></div>
|
||||||
|
</nav><!-- #access -->
|
||||||
|
</header><!-- #branding -->
|
||||||
|
|
||||||
|
|
||||||
|
<div id="main">
|
||||||
|
<section id="primary">
|
||||||
|
<div id="content" role="main">
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
<header class="page-header">
|
||||||
|
<h1 class="page-title author">Author Archives: <span class="vcard"><a class="url fn n" href="http://lamp/wordpress-3.3.2/?author=1" title="admin" rel="me">admin</a></span></h1>
|
||||||
|
</header>
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
<article id="post-1" class="post-1 post type-post status-publish format-standard hentry category-uncategorized">
|
||||||
|
<header class="entry-header">
|
||||||
|
<h1 class="entry-title"><a href="http://lamp/wordpress-3.3.2/?p=1" title="Permalink to Hello world!" rel="bookmark">Hello world!</a></h1>
|
||||||
|
|
||||||
|
<div class="entry-meta">
|
||||||
|
<span class="sep">Posted on </span><a href="http://lamp/wordpress-3.3.2/?p=1" title="1:05 pm" rel="bookmark"><time class="entry-date" datetime="2012-05-02T13:05:44+00:00" pubdate>May 2, 2012</time></a><span class="by-author"> <span class="sep"> by </span> <span class="author vcard"><a class="url fn n" href="http://lamp/wordpress-3.3.2/?author=1" title="View all posts by admin" rel="author">admin</a></span></span> </div><!-- .entry-meta -->
|
||||||
|
|
||||||
|
<div class="comments-link">
|
||||||
|
<a href="http://lamp/wordpress-3.3.2/?p=1#comments" title="Comment on Hello world!">2</a> </div>
|
||||||
|
</header><!-- .entry-header -->
|
||||||
|
|
||||||
|
<div class="entry-content">
|
||||||
|
<p>Welcome to WordPress. This is your first post. Edit or delete it, then start blogging!</p>
|
||||||
|
</div><!-- .entry-content -->
|
||||||
|
|
||||||
|
<footer class="entry-meta">
|
||||||
|
<span class="cat-links">
|
||||||
|
<span class="entry-utility-prep entry-utility-prep-cat-links">Posted in</span> <a href="http://lamp/wordpress-3.3.2/?cat=1" title="View all posts in Uncategorized" rel="category">Uncategorized</a> </span>
|
||||||
|
|
||||||
|
<span class="sep"> | </span>
|
||||||
|
<span class="comments-link"><a href="http://lamp/wordpress-3.3.2/?p=1#comments" title="Comment on Hello world!"><b>2</b> Replies</a></span>
|
||||||
|
|
||||||
|
</footer><!-- #entry-meta -->
|
||||||
|
</article><!-- #post-1 -->
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
</div><!-- #content -->
|
||||||
|
</section><!-- #primary -->
|
||||||
|
|
||||||
|
<div id="secondary" class="widget-area" role="complementary">
|
||||||
|
<aside id="search-2" class="widget widget_search"> <form method="get" id="searchform" action="http://lamp/wordpress-3.3.2/">
|
||||||
|
<label for="s" class="assistive-text">Search</label>
|
||||||
|
<input type="text" class="field" name="s" id="s" placeholder="Search" />
|
||||||
|
<input type="submit" class="submit" name="submit" id="searchsubmit" value="Search" />
|
||||||
|
</form>
|
||||||
|
</aside> <aside id="recent-posts-2" class="widget widget_recent_entries"> <h3 class="widget-title">Recent Posts</h3> <ul>
|
||||||
|
<li><a href="http://lamp/wordpress-3.3.2/?p=1" title="Hello world!">Hello world!</a></li>
|
||||||
|
</ul>
|
||||||
|
</aside><aside id="recent-comments-2" class="widget widget_recent_comments"><h3 class="widget-title">Recent Comments</h3><ul id="recentcomments"><li class="recentcomments">Pwet on <a href="http://lamp/wordpress-3.3.2/?p=1#comment-2">Hello world!</a></li><li class="recentcomments"><a href='http://wordpress.org/' rel='external nofollow' class='url'>Mr WordPress</a> on <a href="http://lamp/wordpress-3.3.2/?p=1#comment-1">Hello world!</a></li></ul></aside><aside id="archives-2" class="widget widget_archive"><h3 class="widget-title">Archives</h3> <ul>
|
||||||
|
<li><a href='http://lamp/wordpress-3.3.2/?m=201205' title='May 2012'>May 2012</a></li>
|
||||||
|
</ul>
|
||||||
|
</aside><aside id="categories-2" class="widget widget_categories"><h3 class="widget-title">Categories</h3> <ul>
|
||||||
|
<li class="cat-item cat-item-1"><a href="http://lamp/wordpress-3.3.2/?cat=1" title="View all posts filed under Uncategorized">Uncategorized</a>
|
||||||
|
</li>
|
||||||
|
</ul>
|
||||||
|
</aside><aside id="meta-2" class="widget widget_meta"><h3 class="widget-title">Meta</h3> <ul>
|
||||||
|
<li><a href="http://lamp/wordpress-3.3.2/wp-login.php">Log in</a></li>
|
||||||
|
<li><a href="http://lamp/wordpress-3.3.2/?feed=rss2" title="Syndicate this site using RSS 2.0">Entries <abbr title="Really Simple Syndication">RSS</abbr></a></li>
|
||||||
|
<li><a href="http://lamp/wordpress-3.3.2/?feed=comments-rss2" title="The latest comments to all posts in RSS">Comments <abbr title="Really Simple Syndication">RSS</abbr></a></li>
|
||||||
|
<li><a href="http://wordpress.org/" title="Powered by WordPress, state-of-the-art semantic personal publishing platform.">WordPress.org</a></li>
|
||||||
|
</ul>
|
||||||
|
</aside> </div><!-- #secondary .widget-area -->
|
||||||
|
|
||||||
|
</div><!-- #main -->
|
||||||
|
|
||||||
|
<footer id="colophon" role="contentinfo">
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
<div id="site-generator">
|
||||||
|
<a href="http://wordpress.org/" title="Semantic Personal Publishing Platform" rel="generator">Proudly powered by WordPress</a>
|
||||||
|
</div>
|
||||||
|
</footer><!-- #colophon -->
|
||||||
|
</div><!-- #page -->
|
||||||
|
|
||||||
|
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
Reference in New Issue
Block a user