Updates deps
This commit is contained in:
@@ -15,20 +15,20 @@ module WPScan
|
|||||||
OptMultiChoices.new(
|
OptMultiChoices.new(
|
||||||
['-e', '--enumerate [OPTS]', 'Enumeration Process'],
|
['-e', '--enumerate [OPTS]', 'Enumeration Process'],
|
||||||
choices: {
|
choices: {
|
||||||
vp: OptBoolean.new(['--vulnerable-plugins']),
|
vp: OptBoolean.new(['--vulnerable-plugins']),
|
||||||
ap: OptBoolean.new(['--all-plugins']),
|
ap: OptBoolean.new(['--all-plugins']),
|
||||||
p: OptBoolean.new(['--plugins']),
|
p: OptBoolean.new(['--plugins']),
|
||||||
vt: OptBoolean.new(['--vulnerable-themes']),
|
vt: OptBoolean.new(['--vulnerable-themes']),
|
||||||
at: OptBoolean.new(['--all-themes']),
|
at: OptBoolean.new(['--all-themes']),
|
||||||
t: OptBoolean.new(['--themes']),
|
t: OptBoolean.new(['--themes']),
|
||||||
tt: OptBoolean.new(['--timthumbs']),
|
tt: OptBoolean.new(['--timthumbs']),
|
||||||
cb: OptBoolean.new(['--config-backups']),
|
cb: OptBoolean.new(['--config-backups']),
|
||||||
dbe: OptBoolean.new(['--db-exports']),
|
dbe: OptBoolean.new(['--db-exports']),
|
||||||
u: OptIntegerRange.new(['--users', 'User IDs range. e.g: u1-5'], value_if_empty: '1-10'),
|
u: OptIntegerRange.new(['--users', 'User IDs range. e.g: u1-5'], value_if_empty: '1-10'),
|
||||||
m: OptIntegerRange.new(['--medias',
|
m: OptIntegerRange.new(['--medias',
|
||||||
'Media IDs range. e.g m1-15',
|
'Media IDs range. e.g m1-15',
|
||||||
'Note: Permalink setting must be set to "Plain" for those to be detected'],
|
'Note: Permalink setting must be set to "Plain" for those to be detected'],
|
||||||
value_if_empty: '1-100')
|
value_if_empty: '1-100')
|
||||||
},
|
},
|
||||||
value_if_empty: 'vp,vt,tt,cb,dbe,u,m',
|
value_if_empty: 'vp,vt,tt,cb,dbe,u,m',
|
||||||
incompatible: [%i[vp ap p], %i[vt at t]],
|
incompatible: [%i[vp ap p], %i[vt at t]],
|
||||||
|
|||||||
@@ -3,7 +3,7 @@ module WPScan
|
|||||||
module InterestingFindings
|
module InterestingFindings
|
||||||
# UploadSQLDump finder
|
# UploadSQLDump finder
|
||||||
class UploadSQLDump < CMSScanner::Finders::Finder
|
class UploadSQLDump < CMSScanner::Finders::Finder
|
||||||
SQL_PATTERN = /(?:(?:(?:DROP|CREATE) TABLE)|INSERT INTO)/
|
SQL_PATTERN = /(?:(?:(?:DROP|CREATE) TABLE)|INSERT INTO)/.freeze
|
||||||
|
|
||||||
# @return [ InterestingFinding ]
|
# @return [ InterestingFinding ]
|
||||||
def aggressive(_opts = {})
|
def aggressive(_opts = {})
|
||||||
|
|||||||
@@ -3,9 +3,9 @@ module WPScan
|
|||||||
module MainTheme
|
module MainTheme
|
||||||
# From the WooFramework meta generators
|
# From the WooFramework meta generators
|
||||||
class WooFrameworkMetaGenerator < CMSScanner::Finders::Finder
|
class WooFrameworkMetaGenerator < CMSScanner::Finders::Finder
|
||||||
THEME_PATTERN = %r{<meta name="generator" content="([^\s"]+)\s?([^"]+)?"\s+/?>}
|
THEME_PATTERN = %r{<meta name="generator" content="([^\s"]+)\s?([^"]+)?"\s+/?>}.freeze
|
||||||
FRAMEWORK_PATTERN = %r{<meta name="generator" content="WooFramework\s?([^"]+)?"\s+/?>}
|
FRAMEWORK_PATTERN = %r{<meta name="generator" content="WooFramework\s?([^"]+)?"\s+/?>}.freeze
|
||||||
PATTERN = /#{THEME_PATTERN}\s+#{FRAMEWORK_PATTERN}/i
|
PATTERN = /#{THEME_PATTERN}\s+#{FRAMEWORK_PATTERN}/i.freeze
|
||||||
|
|
||||||
def passive(opts = {})
|
def passive(opts = {})
|
||||||
return unless target.homepage_res.body =~ PATTERN
|
return unless target.homepage_res.body =~ PATTERN
|
||||||
|
|||||||
@@ -9,7 +9,7 @@ module WPScan
|
|||||||
module WordPress
|
module WordPress
|
||||||
include CMSScanner::Target::Platform::PHP
|
include CMSScanner::Target::Platform::PHP
|
||||||
|
|
||||||
WORDPRESS_PATTERN = %r{/(?:(?:wp-content/(?:themes|(?:mu\-)?plugins|uploads))|wp-includes)/}i
|
WORDPRESS_PATTERN = %r{/(?:(?:wp-content/(?:themes|(?:mu\-)?plugins|uploads))|wp-includes)/}i.freeze
|
||||||
|
|
||||||
# These methods are used in the associated interesting_findings finders
|
# These methods are used in the associated interesting_findings finders
|
||||||
# to keep the boolean state of the finding rather than re-check the whole thing again
|
# to keep the boolean state of the finding rather than re-check the whole thing again
|
||||||
|
|||||||
@@ -32,7 +32,7 @@ Gem::Specification.new do |s|
|
|||||||
s.add_development_dependency 'rake', '~> 12.3'
|
s.add_development_dependency 'rake', '~> 12.3'
|
||||||
s.add_development_dependency 'rspec', '~> 3.8.0'
|
s.add_development_dependency 'rspec', '~> 3.8.0'
|
||||||
s.add_development_dependency 'rspec-its', '~> 1.2.0'
|
s.add_development_dependency 'rspec-its', '~> 1.2.0'
|
||||||
s.add_development_dependency 'rubocop', '~> 0.59.2'
|
s.add_development_dependency 'rubocop', '~> 0.60.0'
|
||||||
s.add_development_dependency 'simplecov', '~> 0.16.1'
|
s.add_development_dependency 'simplecov', '~> 0.16.1'
|
||||||
s.add_development_dependency 'webmock', '~> 3.4.2'
|
s.add_development_dependency 'webmock', '~> 3.4.2'
|
||||||
end
|
end
|
||||||
|
|||||||
Reference in New Issue
Block a user