WebSite is now a class instead of a module

lib/wpscan/web_site.rb

@@ -0,0 +1,121 @@
+# encoding: UTF-8
+#--
+# WPScan - WordPress Security Scanner
+# Copyright (C) 2012-2013
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#++
+
+class WebSite
+
+  attr_reader :uri
+
+  def initialize(site_url)
+    self.url = site_url
+  end
+
+  def url=(url)
+    @uri = URI.parse(add_trailing_slash(add_http_protocol(url)))
+  end
+
+  def url
+    @uri.to_s
+  end
+
+  # Checks if the remote website is up.
+  def online?
+    Browser.instance.get(@uri.to_s).code != 0
+  end
+
+  def has_basic_auth?
+    Browser.instance.get(@uri.to_s).code == 401
+  end
+
+  def has_xml_rpc?
+    !xml_rpc_url.nil?
+  end
+
+  def xml_rpc_url
+    unless @xmlrpc_url
+      headers = Browser.instance.get(@uri.to_s).headers_hash
+      value = headers['x-pingback']
+      if value.nil? or value.empty?
+        @xmlrpc_url = nil
+      else
+        @xmlrpc_url = value
+      end
+    end
+    @xmlrpc_url
+  end
+
+  # See if the remote url returns 30x redirect
+  # This method is recursive
+  # Return a string with the redirection or nil
+  def redirection(url = nil)
+    redirection = nil
+    url ||= @uri.to_s
+    response = Browser.instance.get(url)
+
+    if response.code == 301 || response.code == 302
+      redirection = response.headers_hash['location']
+
+      # Let's check if there is a redirection in the redirection
+      if other_redirection = redirection(redirection)
+        redirection = other_redirection
+      end
+    end
+
+    redirection
+  end
+
+  # Return the MD5 hash of the page given by url
+  def self.page_hash(url)
+    Digest::MD5.hexdigest(Browser.instance.get(url).body)
+  end
+
+  def homepage_hash
+    unless @homepage_hash
+      @homepage_hash = WebSite.page_hash(@uri.to_s)
+    end
+    @homepage_hash
+  end
+
+  # Return the MD5 hash of a 404 page
+  def error_404_hash
+    unless @error_404_hash
+      non_existant_page = Digest::MD5.hexdigest(rand(999_999_999).to_s) + '.html'
+      @error_404_hash   = WebSite.page_hash(@uri.merge(non_existant_page).to_s)
+    end
+    @error_404_hash
+  end
+
+  # Will try to find the rss url in the homepage
+  # Only the first one found iw returned
+  def rss_url
+    homepage_body = Browser.instance.get(@uri.to_s).body
+    homepage_body[%r{<link .* type="application/rss\+xml" .* href="([^"]+)" />}, 1]
+  end
+
+  # Checks if a robots.txt file exists
+  def has_robots?
+    Browser.instance.get(robots_url).code == 200
+  end
+
+  # Gets a robots.txt URL
+  def robots_url
+    robots = @uri.clone
+    robots.path = '/robots.txt'
+    robots.to_s
+  end
+end