garfield/wpscan
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Updated documentation

Browse Source
This commit is contained in:
Christian Mehlmauer
2013-04-30 23:06:37 +02:00
parent dca987b64b
commit a38c709d74
371 changed files with 88362 additions and 38796 deletions
Download Patch File Download Diff File Expand all files Collapse all files

426
doc_yard/WpTarget/Malwares.html Normal file
View File

@@ -0,0 +1,426 @@
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>
Module: WpTarget::Malwares
&mdash; Documentation by YARD 0.8.6.1
</title>
<link rel="stylesheet" href="../css/style.css" type="text/css" charset="utf-8" />
<link rel="stylesheet" href="../css/common.css" type="text/css" charset="utf-8" />
<script type="text/javascript" charset="utf-8">
hasFrames = window.top.frames.main ? true : false;
relpath = '../';
framesUrl = "../frames.html#!" + escape(window.location.href);
</script>
<script type="text/javascript" charset="utf-8" src="../js/jquery.js"></script>
<script type="text/javascript" charset="utf-8" src="../js/app.js"></script>
</head>
<body>
<div id="header">
<div id="menu">
<a href="../_index.html">Index (M)</a> &raquo;
<span class='title'><span class='object_link'><a href="../WpTarget.html" title="WpTarget (class)">WpTarget</a></span></span>
&raquo;
<span class="title">Malwares</span>
<div class="noframes"><span class="title">(</span><a href="." target="_top">no frames</a><span class="title">)</span></div>
</div>
<div id="search">
<a class="full_list_link" id="class_list_link"
href="../class_list.html">
Class List
</a>
<a class="full_list_link" id="method_list_link"
href="../method_list.html">
Method List
</a>
<a class="full_list_link" id="file_list_link"
href="../file_list.html">
File List
</a>
</div>
<div class="clear"></div>
</div>
<iframe id="search_frame"></iframe>
<div id="content"><h1>Module: WpTarget::Malwares
</h1>
<dl class="box">
<dt class="r1">Included in:</dt>
<dd class="r1"><span class='object_link'><a href="../WpTarget.html" title="WpTarget (class)">WpTarget</a></span></dd>
<dt class="r2 last">Defined in:</dt>
<dd class="r2 last">lib/wpscan/wp_target/malwares.rb</dd>
</dl>
<div class="clear"></div>
<h2>
Class Method Summary
<small>(<a href="#" class="summary_toggle">collapse</a>)</small>
</h2>
<ul class="summary">
<li class="public ">
<span class="summary_signature">
<a href="#malware_pattern-class_method" title="malware_pattern (class method)">+ (Object) <strong>malware_pattern</strong>(url_regex) </a>
</span>
<span class="summary_desc"><div class='inline'></div></span>
</li>
<li class="public ">
<span class="summary_signature">
<a href="#malwares_file-class_method" title="malwares_file (class method)">+ (Object) <strong>malwares_file</strong>(malwares_file_path) </a>
</span>
<span class="summary_desc"><div class='inline'></div></span>
</li>
</ul>
<h2>
Instance Method Summary
<small>(<a href="#" class="summary_toggle">collapse</a>)</small>
</h2>
<ul class="summary">
<li class="public ">
<span class="summary_signature">
<a href="#has_malwares%3F-instance_method" title="#has_malwares? (instance method)">- (Boolean) <strong>has_malwares?</strong>(malwares_file_path = nil) </a>
</span>
<span class="summary_desc"><div class='inline'></div></span>
</li>
<li class="public ">
<span class="summary_signature">
<a href="#malwares-instance_method" title="#malwares (instance method)">- (Object) <strong>malwares</strong>(malwares_file_path = nil) </a>
</span>
<span class="summary_desc"><div class='inline'>
<p>return array of string (url of malwares found).</p>
</div></span>
</li>
</ul>
<div id="class_method_details" class="method_details_list">
<h2>Class Method Details</h2>
<div class="method_details first">
<h3 class="signature first" id="malware_pattern-class_method">
+ (<tt>Object</tt>) <strong>malware_pattern</strong>(url_regex)
</h3><table class="source_code">
<tr>
<td>
<pre class="lines">
44
45
46
47</pre>
</td>
<td>
<pre class="code"><span class="info file"># File 'lib/wpscan/wp_target/malwares.rb', line 44</span>
<span class='kw'>def</span> <span class='kw'>self</span><span class='period'>.</span><span class='id identifier rubyid_malware_pattern'>malware_pattern</span><span class='lparen'>(</span><span class='id identifier rubyid_url_regex'>url_regex</span><span class='rparen'>)</span>
<span class='comment'># no need to escape regex here, because malware.txt contains regex
</span> <span class='tstring'><span class='regexp_beg'>%r{</span><span class='tstring_content'>&lt;(?:script|iframe).* src=(?:&quot;|')(</span><span class='embexpr_beg'>#{</span><span class='id identifier rubyid_url_regex'>url_regex</span><span class='rbrace'>}</span><span class='tstring_content'>[^&quot;']*)(?:&quot;|')[^&gt;]*&gt;</span><span class='regexp_end'>}i</span></span>
<span class='kw'>end</span></pre>
</td>
</tr>
</table>
</div>
<div class="method_details ">
<h3 class="signature " id="malwares_file-class_method">
+ (<tt>Object</tt>) <strong>malwares_file</strong>(malwares_file_path)
</h3><table class="source_code">
<tr>
<td>
<pre class="lines">
40
41
42</pre>
</td>
<td>
<pre class="code"><span class="info file"># File 'lib/wpscan/wp_target/malwares.rb', line 40</span>
<span class='kw'>def</span> <span class='kw'>self</span><span class='period'>.</span><span class='id identifier rubyid_malwares_file'>malwares_file</span><span class='lparen'>(</span><span class='id identifier rubyid_malwares_file_path'>malwares_file_path</span><span class='rparen'>)</span>
<span class='id identifier rubyid_malwares_file_path'>malwares_file_path</span> <span class='op'>||</span> <span class='const'>DATA_DIR</span> <span class='op'>+</span> <span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>/malwares.txt</span><span class='tstring_end'>'</span></span>
<span class='kw'>end</span></pre>
</td>
</tr>
</table>
</div>
</div>
<div id="instance_method_details" class="method_details_list">
<h2>Instance Method Details</h2>
<div class="method_details first">
<h3 class="signature first" id="has_malwares?-instance_method">
- (<tt>Boolean</tt>) <strong>has_malwares?</strong>(malwares_file_path = nil)
</h3><div class="docstring">
<div class="discussion">
</div>
</div>
<div class="tags">
<p class="tag_title">Returns:</p>
<ul class="return">
<li>
<span class='type'>(<tt>Boolean</tt>)</span>
</li>
</ul>
</div><table class="source_code">
<tr>
<td>
<pre class="lines">
11
12
13</pre>
</td>
<td>
<pre class="code"><span class="info file"># File 'lib/wpscan/wp_target/malwares.rb', line 11</span>
<span class='kw'>def</span> <span class='id identifier rubyid_has_malwares?'>has_malwares?</span><span class='lparen'>(</span><span class='id identifier rubyid_malwares_file_path'>malwares_file_path</span> <span class='op'>=</span> <span class='kw'>nil</span><span class='rparen'>)</span>
<span class='op'>!</span><span class='id identifier rubyid_malwares'>malwares</span><span class='lparen'>(</span><span class='id identifier rubyid_malwares_file_path'>malwares_file_path</span><span class='rparen'>)</span><span class='period'>.</span><span class='id identifier rubyid_empty?'>empty?</span>
<span class='kw'>end</span></pre>
</td>
</tr>
</table>
</div>
<div class="method_details ">
<h3 class="signature " id="malwares-instance_method">
- (<tt>Object</tt>) <strong>malwares</strong>(malwares_file_path = nil)
</h3><div class="docstring">
<div class="discussion">
<p>return array of string (url of malwares found)</p>
</div>
</div>
<div class="tags">
</div><table class="source_code">
<tr>
<td>
<pre class="lines">
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38</pre>
</td>
<td>
<pre class="code"><span class="info file"># File 'lib/wpscan/wp_target/malwares.rb', line 16</span>
<span class='kw'>def</span> <span class='id identifier rubyid_malwares'>malwares</span><span class='lparen'>(</span><span class='id identifier rubyid_malwares_file_path'>malwares_file_path</span> <span class='op'>=</span> <span class='kw'>nil</span><span class='rparen'>)</span>
<span class='kw'>unless</span> <span class='ivar'>@malwares</span>
<span class='id identifier rubyid_malwares_found'>malwares_found</span> <span class='op'>=</span> <span class='lbracket'>[</span><span class='rbracket'>]</span>
<span class='id identifier rubyid_malwares_file'>malwares_file</span> <span class='op'>=</span> <span class='const'>Malwares</span><span class='period'>.</span><span class='id identifier rubyid_malwares_file'>malwares_file</span><span class='lparen'>(</span><span class='id identifier rubyid_malwares_file_path'>malwares_file_path</span><span class='rparen'>)</span>
<span class='id identifier rubyid_index_page_body'>index_page_body</span> <span class='op'>=</span> <span class='const'>Browser</span><span class='period'>.</span><span class='id identifier rubyid_get'>get</span><span class='lparen'>(</span><span class='ivar'>@uri</span><span class='period'>.</span><span class='id identifier rubyid_to_s'>to_s</span><span class='rparen'>)</span><span class='period'>.</span><span class='id identifier rubyid_body'>body</span>
<span class='const'>File</span><span class='period'>.</span><span class='id identifier rubyid_open'>open</span><span class='lparen'>(</span><span class='id identifier rubyid_malwares_file'>malwares_file</span><span class='comma'>,</span> <span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>r</span><span class='tstring_end'>'</span></span><span class='rparen'>)</span> <span class='kw'>do</span> <span class='op'>|</span><span class='id identifier rubyid_file'>file</span><span class='op'>|</span>
<span class='id identifier rubyid_file'>file</span><span class='period'>.</span><span class='id identifier rubyid_readlines'>readlines</span><span class='period'>.</span><span class='id identifier rubyid_collect'>collect</span> <span class='kw'>do</span> <span class='op'>|</span><span class='id identifier rubyid_url'>url</span><span class='op'>|</span>
<span class='id identifier rubyid_chomped_url'>chomped_url</span> <span class='op'>=</span> <span class='id identifier rubyid_url'>url</span><span class='period'>.</span><span class='id identifier rubyid_chomp'>chomp</span>
<span class='kw'>if</span> <span class='id identifier rubyid_chomped_url'>chomped_url</span><span class='period'>.</span><span class='id identifier rubyid_length'>length</span> <span class='op'>&gt;</span> <span class='int'>0</span>
<span class='id identifier rubyid_malwares_found'>malwares_found</span> <span class='op'>+=</span> <span class='id identifier rubyid_index_page_body'>index_page_body</span><span class='period'>.</span><span class='id identifier rubyid_scan'>scan</span><span class='lparen'>(</span><span class='const'>Malwares</span><span class='period'>.</span><span class='id identifier rubyid_malware_pattern'>malware_pattern</span><span class='lparen'>(</span><span class='id identifier rubyid_chomped_url'>chomped_url</span><span class='rparen'>)</span><span class='rparen'>)</span>
<span class='kw'>end</span>
<span class='kw'>end</span>
<span class='kw'>end</span>
<span class='id identifier rubyid_malwares_found'>malwares_found</span><span class='period'>.</span><span class='id identifier rubyid_flatten!'>flatten!</span>
<span class='id identifier rubyid_malwares_found'>malwares_found</span><span class='period'>.</span><span class='id identifier rubyid_uniq!'>uniq!</span>
<span class='ivar'>@malwares</span> <span class='op'>=</span> <span class='id identifier rubyid_malwares_found'>malwares_found</span>
<span class='kw'>end</span>
<span class='ivar'>@malwares</span>
<span class='kw'>end</span></pre>
</td>
</tr>
</table>
</div>
</div>
</div>
<div id="footer">
Generated on Tue Apr 30 23:05:04 2013 by
<a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
0.8.6.1 (ruby-1.9.3).
</div>
</body>
</html>

355
doc_yard/WpTarget/WpConfigBackup.html Normal file
View File

@@ -0,0 +1,355 @@
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>
Module: WpTarget::WpConfigBackup
&mdash; Documentation by YARD 0.8.6.1
</title>
<link rel="stylesheet" href="../css/style.css" type="text/css" charset="utf-8" />
<link rel="stylesheet" href="../css/common.css" type="text/css" charset="utf-8" />
<script type="text/javascript" charset="utf-8">
hasFrames = window.top.frames.main ? true : false;
relpath = '../';
framesUrl = "../frames.html#!" + escape(window.location.href);
</script>
<script type="text/javascript" charset="utf-8" src="../js/jquery.js"></script>
<script type="text/javascript" charset="utf-8" src="../js/app.js"></script>
</head>
<body>
<div id="header">
<div id="menu">
<a href="../_index.html">Index (W)</a> &raquo;
<span class='title'><span class='object_link'><a href="../WpTarget.html" title="WpTarget (class)">WpTarget</a></span></span>
&raquo;
<span class="title">WpConfigBackup</span>
<div class="noframes"><span class="title">(</span><a href="." target="_top">no frames</a><span class="title">)</span></div>
</div>
<div id="search">
<a class="full_list_link" id="class_list_link"
href="../class_list.html">
Class List
</a>
<a class="full_list_link" id="method_list_link"
href="../method_list.html">
Method List
</a>
<a class="full_list_link" id="file_list_link"
href="../file_list.html">
File List
</a>
</div>
<div class="clear"></div>
</div>
<iframe id="search_frame"></iframe>
<div id="content"><h1>Module: WpTarget::WpConfigBackup
</h1>
<dl class="box">
<dt class="r1">Included in:</dt>
<dd class="r1"><span class='object_link'><a href="../WpTarget.html" title="WpTarget (class)">WpTarget</a></span></dd>
<dt class="r2 last">Defined in:</dt>
<dd class="r2 last">lib/wpscan/wp_target/wp_config_backup.rb</dd>
</dl>
<div class="clear"></div>
<h2>
Class Method Summary
<small>(<a href="#" class="summary_toggle">collapse</a>)</small>
</h2>
<ul class="summary">
<li class="public ">
<span class="summary_signature">
<a href="#config_backup_files-class_method" title="config_backup_files (class method)">+ (Object) <strong>config_backup_files</strong> </a>
</span>
<span class="summary_desc"><div class='inline'>
<p>Array.</p>
</div></span>
</li>
</ul>
<h2>
Instance Method Summary
<small>(<a href="#" class="summary_toggle">collapse</a>)</small>
</h2>
<ul class="summary">
<li class="public ">
<span class="summary_signature">
<a href="#config_backup-instance_method" title="#config_backup (instance method)">- (Object) <strong>config_backup</strong> </a>
</span>
<span class="summary_desc"><div class='inline'>
<p>Checks to see if wp-config.php has a backup See <a
href="http://www.feross.org/cmsploit">www.feross.org/cmsploit</a>/ return
an array of backup config files url.</p>
</div></span>
</li>
</ul>
<div id="class_method_details" class="method_details_list">
<h2>Class Method Details</h2>
<div class="method_details first">
<h3 class="signature first" id="config_backup_files-class_method">
+ (<tt>Object</tt>) <strong>config_backup_files</strong>
</h3><div class="docstring">
<div class="discussion">
<p>Array</p>
</div>
</div>
<div class="tags">
<p class="tag_title">Returns:</p>
<ul class="return">
<li>
<span class='type'></span>
<div class='inline'>
<p>Array</p>
</div>
</li>
</ul>
</div><table class="source_code">
<tr>
<td>
<pre class="lines">
41
42
43
44
45
46
47</pre>
</td>
<td>
<pre class="code"><span class="info file"># File 'lib/wpscan/wp_target/wp_config_backup.rb', line 41</span>
<span class='kw'>def</span> <span class='kw'>self</span><span class='period'>.</span><span class='id identifier rubyid_config_backup_files'>config_backup_files</span>
<span class='qwords_beg'>%w{
</span><span class='tstring_content'> wp-config.php~</span><span class='words_sep'> </span><span class='tstring_content'>#wp-config.php#</span><span class='words_sep'> </span><span class='tstring_content'>wp-config.php.save</span><span class='words_sep'> </span><span class='tstring_content'>wp-config.php.swp</span><span class='words_sep'> </span><span class='tstring_content'>wp-config.php.swo</span><span class='words_sep'> </span><span class='tstring_content'>wp-config.php_bak</span><span class='words_sep'>
</span><span class='tstring_content'> wp-config.bak</span><span class='words_sep'> </span><span class='tstring_content'>wp-config.php.bak</span><span class='words_sep'> </span><span class='tstring_content'>wp-config.save</span><span class='words_sep'> </span><span class='tstring_content'>wp-config.old</span><span class='words_sep'> </span><span class='tstring_content'>wp-config.php.old</span><span class='words_sep'> </span><span class='tstring_content'>wp-config.php.orig</span><span class='words_sep'>
</span><span class='tstring_content'> wp-config.orig</span><span class='words_sep'> </span><span class='tstring_content'>wp-config.php.original</span><span class='words_sep'> </span><span class='tstring_content'>wp-config.original</span><span class='words_sep'> </span><span class='tstring_content'>wp-config.txt</span><span class='words_sep'>
</span><span class='tstring_end'> }</span></span> <span class='comment'># thanks to Feross.org for these
</span><span class='kw'>end</span></pre>
</td>
</tr>
</table>
</div>
</div>
<div id="instance_method_details" class="method_details_list">
<h2>Instance Method Details</h2>
<div class="method_details first">
<h3 class="signature first" id="config_backup-instance_method">
- (<tt>Object</tt>) <strong>config_backup</strong>
</h3><div class="docstring">
<div class="discussion">
<p>Checks to see if wp-config.php has a backup See <a
href="http://www.feross.org/cmsploit">www.feross.org/cmsploit</a>/ return
an array of backup config files url</p>
</div>
</div>
<div class="tags">
</div><table class="source_code">
<tr>
<td>
<pre class="lines">
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38</pre>
</td>
<td>
<pre class="code"><span class="info file"># File 'lib/wpscan/wp_target/wp_config_backup.rb', line 9</span>
<span class='kw'>def</span> <span class='id identifier rubyid_config_backup'>config_backup</span>
<span class='id identifier rubyid_found'>found</span> <span class='op'>=</span> <span class='lbracket'>[</span><span class='rbracket'>]</span>
<span class='id identifier rubyid_backups'>backups</span> <span class='op'>=</span> <span class='const'>WpConfigBackup</span><span class='period'>.</span><span class='id identifier rubyid_config_backup_files'>config_backup_files</span>
<span class='id identifier rubyid_browser'>browser</span> <span class='op'>=</span> <span class='const'>Browser</span><span class='period'>.</span><span class='id identifier rubyid_instance'>instance</span>
<span class='id identifier rubyid_hydra'>hydra</span> <span class='op'>=</span> <span class='id identifier rubyid_browser'>browser</span><span class='period'>.</span><span class='id identifier rubyid_hydra'>hydra</span>
<span class='id identifier rubyid_queue_count'>queue_count</span> <span class='op'>=</span> <span class='int'>0</span>
<span class='id identifier rubyid_backups'>backups</span><span class='period'>.</span><span class='id identifier rubyid_each'>each</span> <span class='kw'>do</span> <span class='op'>|</span><span class='id identifier rubyid_file'>file</span><span class='op'>|</span>
<span class='id identifier rubyid_file_url'>file_url</span> <span class='op'>=</span> <span class='ivar'>@uri</span><span class='period'>.</span><span class='id identifier rubyid_merge'>merge</span><span class='lparen'>(</span><span class='const'>URI</span><span class='period'>.</span><span class='id identifier rubyid_escape'>escape</span><span class='lparen'>(</span><span class='id identifier rubyid_file'>file</span><span class='rparen'>)</span><span class='rparen'>)</span><span class='period'>.</span><span class='id identifier rubyid_to_s'>to_s</span>
<span class='id identifier rubyid_request'>request</span> <span class='op'>=</span> <span class='id identifier rubyid_browser'>browser</span><span class='period'>.</span><span class='id identifier rubyid_forge_request'>forge_request</span><span class='lparen'>(</span><span class='id identifier rubyid_file_url'>file_url</span><span class='rparen'>)</span>
<span class='id identifier rubyid_request'>request</span><span class='period'>.</span><span class='id identifier rubyid_on_complete'>on_complete</span> <span class='kw'>do</span> <span class='op'>|</span><span class='id identifier rubyid_response'>response</span><span class='op'>|</span>
<span class='kw'>if</span> <span class='id identifier rubyid_response'>response</span><span class='period'>.</span><span class='id identifier rubyid_body'>body</span><span class='lbracket'>[</span><span class='tstring'><span class='regexp_beg'>%r{</span><span class='tstring_content'>define</span><span class='regexp_end'>}i</span></span><span class='rbracket'>]</span> <span class='kw'>and</span> <span class='kw'>not</span> <span class='id identifier rubyid_response'>response</span><span class='period'>.</span><span class='id identifier rubyid_body'>body</span><span class='lbracket'>[</span><span class='tstring'><span class='regexp_beg'>%r{</span><span class='tstring_content'>&lt;\s?html</span><span class='regexp_end'>}i</span></span><span class='rbracket'>]</span>
<span class='id identifier rubyid_found'>found</span> <span class='op'>&lt;&lt;</span> <span class='id identifier rubyid_file_url'>file_url</span>
<span class='kw'>end</span>
<span class='kw'>end</span>
<span class='id identifier rubyid_hydra'>hydra</span><span class='period'>.</span><span class='id identifier rubyid_queue'>queue</span><span class='lparen'>(</span><span class='id identifier rubyid_request'>request</span><span class='rparen'>)</span>
<span class='id identifier rubyid_queue_count'>queue_count</span> <span class='op'>+=</span> <span class='int'>1</span>
<span class='kw'>if</span> <span class='id identifier rubyid_queue_count'>queue_count</span> <span class='op'>==</span> <span class='id identifier rubyid_browser'>browser</span><span class='period'>.</span><span class='id identifier rubyid_max_threads'>max_threads</span>
<span class='id identifier rubyid_hydra'>hydra</span><span class='period'>.</span><span class='id identifier rubyid_run'>run</span>
<span class='id identifier rubyid_queue_count'>queue_count</span> <span class='op'>=</span> <span class='int'>0</span>
<span class='kw'>end</span>
<span class='kw'>end</span>
<span class='id identifier rubyid_hydra'>hydra</span><span class='period'>.</span><span class='id identifier rubyid_run'>run</span>
<span class='id identifier rubyid_found'>found</span>
<span class='kw'>end</span></pre>
</td>
</tr>
</table>
</div>
</div>
</div>
<div id="footer">
Generated on Tue Apr 30 23:05:05 2013 by
<a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
0.8.6.1 (ruby-1.9.3).
</div>
</body>
</html>

484
doc_yard/WpTarget/WpCustomDirectories.html Normal file
View File

@@ -0,0 +1,484 @@
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>
Module: WpTarget::WpCustomDirectories
&mdash; Documentation by YARD 0.8.6.1
</title>
<link rel="stylesheet" href="../css/style.css" type="text/css" charset="utf-8" />
<link rel="stylesheet" href="../css/common.css" type="text/css" charset="utf-8" />
<script type="text/javascript" charset="utf-8">
hasFrames = window.top.frames.main ? true : false;
relpath = '../';
framesUrl = "../frames.html#!" + escape(window.location.href);
</script>
<script type="text/javascript" charset="utf-8" src="../js/jquery.js"></script>
<script type="text/javascript" charset="utf-8" src="../js/app.js"></script>
</head>
<body>
<div id="header">
<div id="menu">
<a href="../_index.html">Index (W)</a> &raquo;
<span class='title'><span class='object_link'><a href="../WpTarget.html" title="WpTarget (class)">WpTarget</a></span></span>
&raquo;
<span class="title">WpCustomDirectories</span>
<div class="noframes"><span class="title">(</span><a href="." target="_top">no frames</a><span class="title">)</span></div>
</div>
<div id="search">
<a class="full_list_link" id="class_list_link"
href="../class_list.html">
Class List
</a>
<a class="full_list_link" id="method_list_link"
href="../method_list.html">
Method List
</a>
<a class="full_list_link" id="file_list_link"
href="../file_list.html">
File List
</a>
</div>
<div class="clear"></div>
</div>
<iframe id="search_frame"></iframe>
<div id="content"><h1>Module: WpTarget::WpCustomDirectories
</h1>
<dl class="box">
<dt class="r1">Included in:</dt>
<dd class="r1"><span class='object_link'><a href="../WpTarget.html" title="WpTarget (class)">WpTarget</a></span></dd>
<dt class="r2 last">Defined in:</dt>
<dd class="r2 last">lib/wpscan/wp_target/wp_custom_directories.rb</dd>
</dl>
<div class="clear"></div>
<h2>
Instance Method Summary
<small>(<a href="#" class="summary_toggle">collapse</a>)</small>
</h2>
<ul class="summary">
<li class="public ">
<span class="summary_signature">
<a href="#default_wp_content_dir_exists%3F-instance_method" title="#default_wp_content_dir_exists? (instance method)">- (Boolean) <strong>default_wp_content_dir_exists?</strong> </a>
</span>
<span class="summary_desc"><div class='inline'></div></span>
</li>
<li class="public ">
<span class="summary_signature">
<a href="#wp_content_dir-instance_method" title="#wp_content_dir (instance method)">- (String) <strong>wp_content_dir</strong> </a>
</span>
<span class="summary_desc"><div class='inline'>
<p>The wp-content directory.</p>
</div></span>
</li>
<li class="public ">
<span class="summary_signature">
<a href="#wp_plugins_dir-instance_method" title="#wp_plugins_dir (instance method)">- (String) <strong>wp_plugins_dir</strong> </a>
</span>
<span class="summary_desc"><div class='inline'>
<p>The wp-plugins directory.</p>
</div></span>
</li>
<li class="public ">
<span class="summary_signature">
<a href="#wp_plugins_dir_exists%3F-instance_method" title="#wp_plugins_dir_exists? (instance method)">- (Boolean) <strong>wp_plugins_dir_exists?</strong> </a>
</span>
<span class="summary_desc"><div class='inline'></div></span>
</li>
</ul>
<div id="instance_method_details" class="method_details_list">
<h2>Instance Method Details</h2>
<div class="method_details first">
<h3 class="signature first" id="default_wp_content_dir_exists?-instance_method">
- (<tt>Boolean</tt>) <strong>default_wp_content_dir_exists?</strong>
</h3><div class="docstring">
<div class="discussion">
</div>
</div>
<div class="tags">
<p class="tag_title">Returns:</p>
<ul class="return">
<li>
<span class='type'>(<tt>Boolean</tt>)</span>
</li>
</ul>
</div><table class="source_code">
<tr>
<td>
<pre class="lines">
24
25
26
27
28
29
30
31
32
33</pre>
</td>
<td>
<pre class="code"><span class="info file"># File 'lib/wpscan/wp_target/wp_custom_directories.rb', line 24</span>
<span class='kw'>def</span> <span class='id identifier rubyid_default_wp_content_dir_exists?'>default_wp_content_dir_exists?</span>
<span class='id identifier rubyid_response'>response</span> <span class='op'>=</span> <span class='const'>Browser</span><span class='period'>.</span><span class='id identifier rubyid_get'>get</span><span class='lparen'>(</span><span class='ivar'>@uri</span><span class='period'>.</span><span class='id identifier rubyid_merge'>merge</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>wp-content</span><span class='tstring_end'>'</span></span><span class='rparen'>)</span><span class='period'>.</span><span class='id identifier rubyid_to_s'>to_s</span><span class='rparen'>)</span>
<span class='id identifier rubyid_hash'>hash</span> <span class='op'>=</span> <span class='const'>Digest</span><span class='op'>::</span><span class='const'>MD5</span><span class='period'>.</span><span class='id identifier rubyid_hexdigest'>hexdigest</span><span class='lparen'>(</span><span class='id identifier rubyid_response'>response</span><span class='period'>.</span><span class='id identifier rubyid_body'>body</span><span class='rparen'>)</span>
<span class='kw'>if</span> <span class='const'>WpTarget</span><span class='period'>.</span><span class='id identifier rubyid_valid_response_codes'>valid_response_codes</span><span class='period'>.</span><span class='id identifier rubyid_include?'>include?</span><span class='lparen'>(</span><span class='id identifier rubyid_response'>response</span><span class='period'>.</span><span class='id identifier rubyid_code'>code</span><span class='rparen'>)</span>
<span class='kw'>return</span> <span class='kw'>true</span> <span class='kw'>if</span> <span class='id identifier rubyid_hash'>hash</span> <span class='op'>!=</span> <span class='id identifier rubyid_error_404_hash'>error_404_hash</span> <span class='kw'>and</span> <span class='id identifier rubyid_hash'>hash</span> <span class='op'>!=</span> <span class='id identifier rubyid_homepage_hash'>homepage_hash</span>
<span class='kw'>end</span>
<span class='kw'>false</span>
<span class='kw'>end</span></pre>
</td>
</tr>
</table>
</div>
<div class="method_details ">
<h3 class="signature " id="wp_content_dir-instance_method">
- (<tt>String</tt>) <strong>wp_content_dir</strong>
</h3><div class="docstring">
<div class="discussion">
<p>The wp-content directory</p>
</div>
</div>
<div class="tags">
<p class="tag_title">Returns:</p>
<ul class="return">
<li>
<span class='type'>(<tt>String</tt>)</span>
&mdash;
<div class='inline'>
<p>The wp-content directory</p>
</div>
</li>
</ul>
</div><table class="source_code">
<tr>
<td>
<pre class="lines">
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21</pre>
</td>
<td>
<pre class="code"><span class="info file"># File 'lib/wpscan/wp_target/wp_custom_directories.rb', line 7</span>
<span class='kw'>def</span> <span class='id identifier rubyid_wp_content_dir'>wp_content_dir</span>
<span class='kw'>unless</span> <span class='ivar'>@wp_content_dir</span>
<span class='id identifier rubyid_index_body'>index_body</span> <span class='op'>=</span> <span class='const'>Browser</span><span class='period'>.</span><span class='id identifier rubyid_get'>get</span><span class='lparen'>(</span><span class='ivar'>@uri</span><span class='period'>.</span><span class='id identifier rubyid_to_s'>to_s</span><span class='rparen'>)</span><span class='period'>.</span><span class='id identifier rubyid_body'>body</span>
<span class='id identifier rubyid_uri_path'>uri_path</span> <span class='op'>=</span> <span class='ivar'>@uri</span><span class='period'>.</span><span class='id identifier rubyid_path'>path</span> <span class='comment'># Only use the path because domain can be text or an IP
</span>
<span class='kw'>if</span> <span class='id identifier rubyid_index_body'>index_body</span><span class='lbracket'>[</span><span class='tstring'><span class='regexp_beg'>/</span><span class='tstring_content'>\/wp-content\/(?:themes|plugins)\/</span><span class='regexp_end'>/i</span></span><span class='rbracket'>]</span> <span class='op'>||</span> <span class='id identifier rubyid_default_wp_content_dir_exists?'>default_wp_content_dir_exists?</span>
<span class='ivar'>@wp_content_dir</span> <span class='op'>=</span> <span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>wp-content</span><span class='tstring_end'>'</span></span>
<span class='kw'>else</span>
<span class='id identifier rubyid_domains_excluded'>domains_excluded</span> <span class='op'>=</span> <span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>(?:www\.)?(facebook|twitter)\.com</span><span class='tstring_end'>'</span></span>
<span class='ivar'>@wp_content_dir</span> <span class='op'>=</span> <span class='id identifier rubyid_index_body'>index_body</span><span class='lbracket'>[</span><span class='tstring'><span class='regexp_beg'>/</span><span class='tstring_content'>(?:href|src)\s*=\s*(?:&quot;|').+</span><span class='embexpr_beg'>#{</span><span class='const'>Regexp</span><span class='period'>.</span><span class='id identifier rubyid_escape'>escape</span><span class='lparen'>(</span><span class='id identifier rubyid_uri_path'>uri_path</span><span class='rparen'>)</span><span class='rbrace'>}</span><span class='tstring_content'>((?!</span><span class='embexpr_beg'>#{</span><span class='id identifier rubyid_domains_excluded'>domains_excluded</span><span class='rbrace'>}</span><span class='tstring_content'>)[^&quot;']+)\/(?:themes|plugins)\/.*(?:&quot;|')</span><span class='regexp_end'>/i</span></span><span class='comma'>,</span> <span class='int'>1</span><span class='rbracket'>]</span>
<span class='kw'>end</span>
<span class='kw'>end</span>
<span class='ivar'>@wp_content_dir</span>
<span class='kw'>end</span></pre>
</td>
</tr>
</table>
</div>
<div class="method_details ">
<h3 class="signature " id="wp_plugins_dir-instance_method">
- (<tt>String</tt>) <strong>wp_plugins_dir</strong>
</h3><div class="docstring">
<div class="discussion">
<p>The wp-plugins directory</p>
</div>
</div>
<div class="tags">
<p class="tag_title">Returns:</p>
<ul class="return">
<li>
<span class='type'>(<tt>String</tt>)</span>
&mdash;
<div class='inline'>
<p>The wp-plugins directory</p>
</div>
</li>
</ul>
</div><table class="source_code">
<tr>
<td>
<pre class="lines">
36
37
38
39
40
41</pre>
</td>
<td>
<pre class="code"><span class="info file"># File 'lib/wpscan/wp_target/wp_custom_directories.rb', line 36</span>
<span class='kw'>def</span> <span class='id identifier rubyid_wp_plugins_dir'>wp_plugins_dir</span>
<span class='kw'>unless</span> <span class='ivar'>@wp_plugins_dir</span>
<span class='ivar'>@wp_plugins_dir</span> <span class='op'>=</span> <span class='tstring'><span class='tstring_beg'>&quot;</span><span class='embexpr_beg'>#{</span><span class='id identifier rubyid_wp_content_dir'>wp_content_dir</span><span class='rbrace'>}</span><span class='tstring_content'>/plugins</span><span class='tstring_end'>&quot;</span></span>
<span class='kw'>end</span>
<span class='ivar'>@wp_plugins_dir</span>
<span class='kw'>end</span></pre>
</td>
</tr>
</table>
</div>
<div class="method_details ">
<h3 class="signature " id="wp_plugins_dir_exists?-instance_method">
- (<tt>Boolean</tt>) <strong>wp_plugins_dir_exists?</strong>
</h3><div class="docstring">
<div class="discussion">
</div>
</div>
<div class="tags">
<p class="tag_title">Returns:</p>
<ul class="return">
<li>
<span class='type'>(<tt>Boolean</tt>)</span>
</li>
</ul>
</div><table class="source_code">
<tr>
<td>
<pre class="lines">
44
45
46</pre>
</td>
<td>
<pre class="code"><span class="info file"># File 'lib/wpscan/wp_target/wp_custom_directories.rb', line 44</span>
<span class='kw'>def</span> <span class='id identifier rubyid_wp_plugins_dir_exists?'>wp_plugins_dir_exists?</span>
<span class='const'>Browser</span><span class='period'>.</span><span class='id identifier rubyid_get'>get</span><span class='lparen'>(</span><span class='ivar'>@uri</span><span class='period'>.</span><span class='id identifier rubyid_merge'>merge</span><span class='lparen'>(</span><span class='id identifier rubyid_wp_plugins_dir'>wp_plugins_dir</span><span class='rparen'>)</span><span class='period'>.</span><span class='id identifier rubyid_to_s'>to_s</span><span class='rparen'>)</span><span class='period'>.</span><span class='id identifier rubyid_code'>code</span> <span class='op'>!=</span> <span class='int'>404</span>
<span class='kw'>end</span></pre>
</td>
</tr>
</table>
</div>
</div>
</div>
<div id="footer">
Generated on Tue Apr 30 23:05:05 2013 by
<a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
0.8.6.1 (ruby-1.9.3).
</div>
</body>
</html>

280
doc_yard/WpTarget/WpFullPathDisclosure.html Normal file
View File

@@ -0,0 +1,280 @@
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>
Module: WpTarget::WpFullPathDisclosure
&mdash; Documentation by YARD 0.8.6.1
</title>
<link rel="stylesheet" href="../css/style.css" type="text/css" charset="utf-8" />
<link rel="stylesheet" href="../css/common.css" type="text/css" charset="utf-8" />
<script type="text/javascript" charset="utf-8">
hasFrames = window.top.frames.main ? true : false;
relpath = '../';
framesUrl = "../frames.html#!" + escape(window.location.href);
</script>
<script type="text/javascript" charset="utf-8" src="../js/jquery.js"></script>
<script type="text/javascript" charset="utf-8" src="../js/app.js"></script>
</head>
<body>
<div id="header">
<div id="menu">
<a href="../_index.html">Index (W)</a> &raquo;
<span class='title'><span class='object_link'><a href="../WpTarget.html" title="WpTarget (class)">WpTarget</a></span></span>
&raquo;
<span class="title">WpFullPathDisclosure</span>
<div class="noframes"><span class="title">(</span><a href="." target="_top">no frames</a><span class="title">)</span></div>
</div>
<div id="search">
<a class="full_list_link" id="class_list_link"
href="../class_list.html">
Class List
</a>
<a class="full_list_link" id="method_list_link"
href="../method_list.html">
Method List
</a>
<a class="full_list_link" id="file_list_link"
href="../file_list.html">
File List
</a>
</div>
<div class="clear"></div>
</div>
<iframe id="search_frame"></iframe>
<div id="content"><h1>Module: WpTarget::WpFullPathDisclosure
</h1>
<dl class="box">
<dt class="r1">Included in:</dt>
<dd class="r1"><span class='object_link'><a href="../WpTarget.html" title="WpTarget (class)">WpTarget</a></span></dd>
<dt class="r2 last">Defined in:</dt>
<dd class="r2 last">lib/wpscan/wp_target/wp_full_path_disclosure.rb</dd>
</dl>
<div class="clear"></div>
<h2>
Instance Method Summary
<small>(<a href="#" class="summary_toggle">collapse</a>)</small>
</h2>
<ul class="summary">
<li class="public ">
<span class="summary_signature">
<a href="#full_path_disclosure_url-instance_method" title="#full_path_disclosure_url (instance method)">- (String) <strong>full_path_disclosure_url</strong> </a>
</span>
<span class="summary_desc"><div class='inline'></div></span>
</li>
<li class="public ">
<span class="summary_signature">
<a href="#has_full_path_disclosure%3F-instance_method" title="#has_full_path_disclosure? (instance method)">- (Boolean) <strong>has_full_path_disclosure?</strong> </a>
</span>
<span class="summary_desc"><div class='inline'>
<p>Check for Full Path Disclosure (FPD).</p>
</div></span>
</li>
</ul>
<div id="instance_method_details" class="method_details_list">
<h2>Instance Method Details</h2>
<div class="method_details first">
<h3 class="signature first" id="full_path_disclosure_url-instance_method">
- (<tt>String</tt>) <strong>full_path_disclosure_url</strong>
</h3><div class="docstring">
<div class="discussion">
</div>
</div>
<div class="tags">
<p class="tag_title">Returns:</p>
<ul class="return">
<li>
<span class='type'>(<tt>String</tt>)</span>
</li>
</ul>
</div><table class="source_code">
<tr>
<td>
<pre class="lines">
15
16
17</pre>
</td>
<td>
<pre class="code"><span class="info file"># File 'lib/wpscan/wp_target/wp_full_path_disclosure.rb', line 15</span>
<span class='kw'>def</span> <span class='id identifier rubyid_full_path_disclosure_url'>full_path_disclosure_url</span>
<span class='ivar'>@uri</span><span class='period'>.</span><span class='id identifier rubyid_merge'>merge</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>wp-includes/rss-functions.php</span><span class='tstring_end'>'</span></span><span class='rparen'>)</span><span class='period'>.</span><span class='id identifier rubyid_to_s'>to_s</span>
<span class='kw'>end</span></pre>
</td>
</tr>
</table>
</div>
<div class="method_details ">
<h3 class="signature " id="has_full_path_disclosure?-instance_method">
- (<tt>Boolean</tt>) <strong>has_full_path_disclosure?</strong>
</h3><div class="docstring">
<div class="discussion">
<p>Check for Full Path Disclosure (FPD)</p>
</div>
</div>
<div class="tags">
<p class="tag_title">Returns:</p>
<ul class="return">
<li>
<span class='type'>(<tt>Boolean</tt>)</span>
</li>
</ul>
</div><table class="source_code">
<tr>
<td>
<pre class="lines">
9
10
11
12</pre>
</td>
<td>
<pre class="code"><span class="info file"># File 'lib/wpscan/wp_target/wp_full_path_disclosure.rb', line 9</span>
<span class='kw'>def</span> <span class='id identifier rubyid_has_full_path_disclosure?'>has_full_path_disclosure?</span>
<span class='id identifier rubyid_response'>response</span> <span class='op'>=</span> <span class='const'>Browser</span><span class='period'>.</span><span class='id identifier rubyid_get'>get</span><span class='lparen'>(</span><span class='id identifier rubyid_full_path_disclosure_url'>full_path_disclosure_url</span><span class='lparen'>(</span><span class='rparen'>)</span><span class='rparen'>)</span>
<span class='id identifier rubyid_response'>response</span><span class='period'>.</span><span class='id identifier rubyid_body'>body</span><span class='lbracket'>[</span><span class='tstring'><span class='regexp_beg'>%r{</span><span class='tstring_content'>Fatal error</span><span class='regexp_end'>}i</span></span><span class='rbracket'>]</span> <span class='op'>?</span> <span class='kw'>true</span> <span class='op'>:</span> <span class='kw'>false</span>
<span class='kw'>end</span></pre>
</td>
</tr>
</table>
</div>
</div>
</div>
<div id="footer">
Generated on Tue Apr 30 23:05:05 2013 by
<a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
0.8.6.1 (ruby-1.9.3).
</div>
</body>
</html>

1194
doc_yard/WpTarget/WpLoginProtection.html Normal file
View File

File diff suppressed because it is too large Load Diff

300
doc_yard/WpTarget/WpReadme.html Normal file
View File

@@ -0,0 +1,300 @@
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>
Module: WpTarget::WpReadme
&mdash; Documentation by YARD 0.8.6.1
</title>
<link rel="stylesheet" href="../css/style.css" type="text/css" charset="utf-8" />
<link rel="stylesheet" href="../css/common.css" type="text/css" charset="utf-8" />
<script type="text/javascript" charset="utf-8">
hasFrames = window.top.frames.main ? true : false;
relpath = '../';
framesUrl = "../frames.html#!" + escape(window.location.href);
</script>
<script type="text/javascript" charset="utf-8" src="../js/jquery.js"></script>
<script type="text/javascript" charset="utf-8" src="../js/app.js"></script>
</head>
<body>
<div id="header">
<div id="menu">
<a href="../_index.html">Index (W)</a> &raquo;
<span class='title'><span class='object_link'><a href="../WpTarget.html" title="WpTarget (class)">WpTarget</a></span></span>
&raquo;
<span class="title">WpReadme</span>
<div class="noframes"><span class="title">(</span><a href="." target="_top">no frames</a><span class="title">)</span></div>
</div>
<div id="search">
<a class="full_list_link" id="class_list_link"
href="../class_list.html">
Class List
</a>
<a class="full_list_link" id="method_list_link"
href="../method_list.html">
Method List
</a>
<a class="full_list_link" id="file_list_link"
href="../file_list.html">
File List
</a>
</div>
<div class="clear"></div>
</div>
<iframe id="search_frame"></iframe>
<div id="content"><h1>Module: WpTarget::WpReadme
</h1>
<dl class="box">
<dt class="r1">Included in:</dt>
<dd class="r1"><span class='object_link'><a href="../WpTarget.html" title="WpTarget (class)">WpTarget</a></span></dd>
<dt class="r2 last">Defined in:</dt>
<dd class="r2 last">lib/wpscan/wp_target/wp_readme.rb</dd>
</dl>
<div class="clear"></div>
<h2>
Instance Method Summary
<small>(<a href="#" class="summary_toggle">collapse</a>)</small>
</h2>
<ul class="summary">
<li class="public ">
<span class="summary_signature">
<a href="#has_readme%3F-instance_method" title="#has_readme? (instance method)">- (Boolean) <strong>has_readme?</strong> </a>
</span>
<span class="summary_desc"><div class='inline'>
<p>Checks to see if the readme.html file exists.</p>
</div></span>
</li>
<li class="public ">
<span class="summary_signature">
<a href="#readme_url-instance_method" title="#readme_url (instance method)">- (String) <strong>readme_url</strong> </a>
</span>
<span class="summary_desc"><div class='inline'>
<p>The readme URL.</p>
</div></span>
</li>
</ul>
<div id="instance_method_details" class="method_details_list">
<h2>Instance Method Details</h2>
<div class="method_details first">
<h3 class="signature first" id="has_readme?-instance_method">
- (<tt>Boolean</tt>) <strong>has_readme?</strong>
</h3><div class="docstring">
<div class="discussion">
<p>Checks to see if the readme.html file exists</p>
<p>This file comes by default in a wordpress installation, and if deleted is
reinstated with an upgrade.</p>
</div>
</div>
<div class="tags">
<p class="tag_title">Returns:</p>
<ul class="return">
<li>
<span class='type'>(<tt>Boolean</tt>)</span>
</li>
</ul>
</div><table class="source_code">
<tr>
<td>
<pre class="lines">
12
13
14
15
16
17
18
19</pre>
</td>
<td>
<pre class="code"><span class="info file"># File 'lib/wpscan/wp_target/wp_readme.rb', line 12</span>
<span class='kw'>def</span> <span class='id identifier rubyid_has_readme?'>has_readme?</span>
<span class='id identifier rubyid_response'>response</span> <span class='op'>=</span> <span class='const'>Browser</span><span class='period'>.</span><span class='id identifier rubyid_get'>get</span><span class='lparen'>(</span><span class='id identifier rubyid_readme_url'>readme_url</span><span class='lparen'>(</span><span class='rparen'>)</span><span class='rparen'>)</span>
<span class='kw'>unless</span> <span class='id identifier rubyid_response'>response</span><span class='period'>.</span><span class='id identifier rubyid_code'>code</span> <span class='op'>==</span> <span class='int'>404</span>
<span class='kw'>return</span> <span class='id identifier rubyid_response'>response</span><span class='period'>.</span><span class='id identifier rubyid_body'>body</span> <span class='op'>=~</span> <span class='tstring'><span class='regexp_beg'>%r{</span><span class='tstring_content'>wordpress</span><span class='regexp_end'>}i</span></span> <span class='op'>?</span> <span class='kw'>true</span> <span class='op'>:</span> <span class='kw'>false</span>
<span class='kw'>end</span>
<span class='kw'>false</span>
<span class='kw'>end</span></pre>
</td>
</tr>
</table>
</div>
<div class="method_details ">
<h3 class="signature " id="readme_url-instance_method">
- (<tt>String</tt>) <strong>readme_url</strong>
</h3><div class="docstring">
<div class="discussion">
<p>The readme URL</p>
</div>
</div>
<div class="tags">
<p class="tag_title">Returns:</p>
<ul class="return">
<li>
<span class='type'>(<tt>String</tt>)</span>
&mdash;
<div class='inline'>
<p>The readme URL</p>
</div>
</li>
</ul>
</div><table class="source_code">
<tr>
<td>
<pre class="lines">
22
23
24</pre>
</td>
<td>
<pre class="code"><span class="info file"># File 'lib/wpscan/wp_target/wp_readme.rb', line 22</span>
<span class='kw'>def</span> <span class='id identifier rubyid_readme_url'>readme_url</span>
<span class='ivar'>@uri</span><span class='period'>.</span><span class='id identifier rubyid_merge'>merge</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>readme.html</span><span class='tstring_end'>'</span></span><span class='rparen'>)</span><span class='period'>.</span><span class='id identifier rubyid_to_s'>to_s</span>
<span class='kw'>end</span></pre>
</td>
</tr>
</table>
</div>
</div>
</div>
<div id="footer">
Generated on Tue Apr 30 23:05:04 2013 by
<a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
0.8.6.1 (ruby-1.9.3).
</div>
</body>
</html>

419
doc_yard/WpTarget/WpRegistrable.html Normal file
View File

@@ -0,0 +1,419 @@
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>
Module: WpTarget::WpRegistrable
&mdash; Documentation by YARD 0.8.6.1
</title>
<link rel="stylesheet" href="../css/style.css" type="text/css" charset="utf-8" />
<link rel="stylesheet" href="../css/common.css" type="text/css" charset="utf-8" />
<script type="text/javascript" charset="utf-8">
hasFrames = window.top.frames.main ? true : false;
relpath = '../';
framesUrl = "../frames.html#!" + escape(window.location.href);
</script>
<script type="text/javascript" charset="utf-8" src="../js/jquery.js"></script>
<script type="text/javascript" charset="utf-8" src="../js/app.js"></script>
</head>
<body>
<div id="header">
<div id="menu">
<a href="../_index.html">Index (W)</a> &raquo;
<span class='title'><span class='object_link'><a href="../WpTarget.html" title="WpTarget (class)">WpTarget</a></span></span>
&raquo;
<span class="title">WpRegistrable</span>
<div class="noframes"><span class="title">(</span><a href="." target="_top">no frames</a><span class="title">)</span></div>
</div>
<div id="search">
<a class="full_list_link" id="class_list_link"
href="../class_list.html">
Class List
</a>
<a class="full_list_link" id="method_list_link"
href="../method_list.html">
Method List
</a>
<a class="full_list_link" id="file_list_link"
href="../file_list.html">
File List
</a>
</div>
<div class="clear"></div>
</div>
<iframe id="search_frame"></iframe>
<div id="content"><h1>Module: WpTarget::WpRegistrable
</h1>
<dl class="box">
<dt class="r1">Included in:</dt>
<dd class="r1"><span class='object_link'><a href="../WpTarget.html" title="WpTarget (class)">WpTarget</a></span></dd>
<dt class="r2 last">Defined in:</dt>
<dd class="r2 last">lib/wpscan/wp_target/wp_registrable.rb</dd>
</dl>
<div class="clear"></div>
<h2>
Instance Method Summary
<small>(<a href="#" class="summary_toggle">collapse</a>)</small>
</h2>
<ul class="summary">
<li class="public ">
<span class="summary_signature">
<a href="#multisite%3F-instance_method" title="#multisite? (instance method)">- (Boolean) <strong>multisite?</strong> </a>
</span>
<span class="summary_desc"><div class='inline'></div></span>
</li>
<li class="public ">
<span class="summary_signature">
<a href="#registration_enabled%3F-instance_method" title="#registration_enabled? (instance method)">- (Boolean) <strong>registration_enabled?</strong> </a>
</span>
<span class="summary_desc"><div class='inline'>
<p>Should check wp-login.php if registration is enabled or not.</p>
</div></span>
</li>
<li class="public ">
<span class="summary_signature">
<a href="#registration_url-instance_method" title="#registration_url (instance method)">- (String) <strong>registration_url</strong> </a>
</span>
<span class="summary_desc"><div class='inline'>
<p>The registration URL.</p>
</div></span>
</li>
</ul>
<div id="instance_method_details" class="method_details_list">
<h2>Instance Method Details</h2>
<div class="method_details first">
<h3 class="signature first" id="multisite?-instance_method">
- (<tt>Boolean</tt>) <strong>multisite?</strong>
</h3><div class="docstring">
<div class="discussion">
</div>
</div>
<div class="tags">
<p class="tag_title">Returns:</p>
<ul class="return">
<li>
<span class='type'>(<tt>Boolean</tt>)</span>
</li>
</ul>
</div><table class="source_code">
<tr>
<td>
<pre class="lines">
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50</pre>
</td>
<td>
<pre class="code"><span class="info file"># File 'lib/wpscan/wp_target/wp_registrable.rb', line 33</span>
<span class='kw'>def</span> <span class='id identifier rubyid_multisite?'>multisite?</span>
<span class='kw'>unless</span> <span class='ivar'>@multisite</span>
<span class='comment'># when multi site, there is no redirection or a redirect to the site itself
</span> <span class='comment'># otherwise redirect to wp-login.php
</span> <span class='id identifier rubyid_resp'>resp</span> <span class='op'>=</span> <span class='const'>Browser</span><span class='period'>.</span><span class='id identifier rubyid_get'>get</span><span class='lparen'>(</span><span class='ivar'>@uri</span><span class='period'>.</span><span class='id identifier rubyid_merge'>merge</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>wp-signup.php</span><span class='tstring_end'>'</span></span><span class='rparen'>)</span><span class='period'>.</span><span class='id identifier rubyid_to_s'>to_s</span><span class='rparen'>)</span>
<span class='kw'>if</span> <span class='id identifier rubyid_resp'>resp</span><span class='period'>.</span><span class='id identifier rubyid_code'>code</span> <span class='op'>==</span> <span class='int'>302</span> <span class='kw'>and</span> <span class='id identifier rubyid_resp'>resp</span><span class='period'>.</span><span class='id identifier rubyid_headers_hash'>headers_hash</span><span class='lbracket'>[</span><span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>location</span><span class='tstring_end'>'</span></span><span class='rbracket'>]</span> <span class='op'>=~</span> <span class='tstring'><span class='regexp_beg'>/</span><span class='tstring_content'>wp-login\.php\?action=register</span><span class='regexp_end'>/</span></span>
<span class='ivar'>@multisite</span> <span class='op'>=</span> <span class='kw'>false</span>
<span class='kw'>elsif</span> <span class='id identifier rubyid_resp'>resp</span><span class='period'>.</span><span class='id identifier rubyid_code'>code</span> <span class='op'>==</span> <span class='int'>302</span> <span class='kw'>and</span> <span class='id identifier rubyid_resp'>resp</span><span class='period'>.</span><span class='id identifier rubyid_headers_hash'>headers_hash</span><span class='lbracket'>[</span><span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>location</span><span class='tstring_end'>'</span></span><span class='rbracket'>]</span> <span class='op'>=~</span> <span class='tstring'><span class='regexp_beg'>/</span><span class='tstring_content'>wp-signup\.php</span><span class='regexp_end'>/</span></span>
<span class='ivar'>@multisite</span> <span class='op'>=</span> <span class='kw'>true</span>
<span class='kw'>elsif</span> <span class='id identifier rubyid_resp'>resp</span><span class='period'>.</span><span class='id identifier rubyid_code'>code</span> <span class='op'>==</span> <span class='int'>200</span>
<span class='ivar'>@multisite</span> <span class='op'>=</span> <span class='kw'>true</span>
<span class='kw'>else</span>
<span class='ivar'>@multisite</span> <span class='op'>=</span> <span class='kw'>false</span>
<span class='kw'>end</span>
<span class='kw'>end</span>
<span class='ivar'>@multisite</span>
<span class='kw'>end</span></pre>
</td>
</tr>
</table>
</div>
<div class="method_details ">
<h3 class="signature " id="registration_enabled?-instance_method">
- (<tt>Boolean</tt>) <strong>registration_enabled?</strong>
</h3><div class="docstring">
<div class="discussion">
<p>Should check wp-login.php if registration is enabled or not</p>
</div>
</div>
<div class="tags">
<p class="tag_title">Returns:</p>
<ul class="return">
<li>
<span class='type'>(<tt>Boolean</tt>)</span>
</li>
</ul>
</div><table class="source_code">
<tr>
<td>
<pre class="lines">
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25</pre>
</td>
<td>
<pre class="code"><span class="info file"># File 'lib/wpscan/wp_target/wp_registrable.rb', line 9</span>
<span class='kw'>def</span> <span class='id identifier rubyid_registration_enabled?'>registration_enabled?</span>
<span class='id identifier rubyid_resp'>resp</span> <span class='op'>=</span> <span class='const'>Browser</span><span class='period'>.</span><span class='id identifier rubyid_get'>get</span><span class='lparen'>(</span><span class='id identifier rubyid_registration_url'>registration_url</span><span class='rparen'>)</span>
<span class='comment'># redirect only on non multi sites
</span> <span class='kw'>if</span> <span class='id identifier rubyid_resp'>resp</span><span class='period'>.</span><span class='id identifier rubyid_code'>code</span> <span class='op'>==</span> <span class='int'>302</span> <span class='kw'>and</span> <span class='id identifier rubyid_resp'>resp</span><span class='period'>.</span><span class='id identifier rubyid_headers_hash'>headers_hash</span><span class='lbracket'>[</span><span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>location</span><span class='tstring_end'>'</span></span><span class='rbracket'>]</span> <span class='op'>=~</span> <span class='tstring'><span class='regexp_beg'>/</span><span class='tstring_content'>wp-login\.php\?registration=disabled</span><span class='regexp_end'>/i</span></span>
<span class='id identifier rubyid_enabled'>enabled</span> <span class='op'>=</span> <span class='kw'>false</span>
<span class='comment'># multi site registration form
</span> <span class='kw'>elsif</span> <span class='id identifier rubyid_resp'>resp</span><span class='period'>.</span><span class='id identifier rubyid_code'>code</span> <span class='op'>==</span> <span class='int'>200</span> <span class='kw'>and</span> <span class='id identifier rubyid_resp'>resp</span><span class='period'>.</span><span class='id identifier rubyid_body'>body</span> <span class='op'>=~</span> <span class='tstring'><span class='regexp_beg'>/</span><span class='tstring_content'>&lt;form id=&quot;setupform&quot; method=&quot;post&quot; action=&quot;[^&quot;]*wp-signup\.php[^&quot;]*&quot;&gt;</span><span class='regexp_end'>/i</span></span>
<span class='id identifier rubyid_enabled'>enabled</span> <span class='op'>=</span> <span class='kw'>true</span>
<span class='comment'># normal registration form
</span> <span class='kw'>elsif</span> <span class='id identifier rubyid_resp'>resp</span><span class='period'>.</span><span class='id identifier rubyid_code'>code</span> <span class='op'>==</span> <span class='int'>200</span> <span class='kw'>and</span> <span class='id identifier rubyid_resp'>resp</span><span class='period'>.</span><span class='id identifier rubyid_body'>body</span> <span class='op'>=~</span> <span class='tstring'><span class='regexp_beg'>/</span><span class='tstring_content'>&lt;form name=&quot;registerform&quot; id=&quot;registerform&quot; action=&quot;[^&quot;]*wp-login\.php[^&quot;]*&quot;</span><span class='regexp_end'>/i</span></span>
<span class='id identifier rubyid_enabled'>enabled</span> <span class='op'>=</span> <span class='kw'>true</span>
<span class='comment'># registration disabled
</span> <span class='kw'>else</span>
<span class='id identifier rubyid_enabled'>enabled</span> <span class='op'>=</span> <span class='kw'>false</span>
<span class='kw'>end</span>
<span class='id identifier rubyid_enabled'>enabled</span>
<span class='kw'>end</span></pre>
</td>
</tr>
</table>
</div>
<div class="method_details ">
<h3 class="signature " id="registration_url-instance_method">
- (<tt>String</tt>) <strong>registration_url</strong>
</h3><div class="docstring">
<div class="discussion">
<p>The registration URL</p>
</div>
</div>
<div class="tags">
<p class="tag_title">Returns:</p>
<ul class="return">
<li>
<span class='type'>(<tt>String</tt>)</span>
&mdash;
<div class='inline'>
<p>The registration URL</p>
</div>
</li>
</ul>
</div><table class="source_code">
<tr>
<td>
<pre class="lines">
28
29
30</pre>
</td>
<td>
<pre class="code"><span class="info file"># File 'lib/wpscan/wp_target/wp_registrable.rb', line 28</span>
<span class='kw'>def</span> <span class='id identifier rubyid_registration_url'>registration_url</span>
<span class='id identifier rubyid_multisite?'>multisite?</span> <span class='op'>?</span> <span class='ivar'>@uri</span><span class='period'>.</span><span class='id identifier rubyid_merge'>merge</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>wp-signup.php</span><span class='tstring_end'>'</span></span><span class='rparen'>)</span><span class='period'>.</span><span class='id identifier rubyid_to_s'>to_s</span> <span class='op'>:</span> <span class='ivar'>@uri</span><span class='period'>.</span><span class='id identifier rubyid_merge'>merge</span><span class='lparen'>(</span><span class='tstring'><span class='tstring_beg'>'</span><span class='tstring_content'>wp-login.php?action=register</span><span class='tstring_end'>'</span></span><span class='rparen'>)</span><span class='period'>.</span><span class='id identifier rubyid_to_s'>to_s</span>
<span class='kw'>end</span></pre>
</td>
</tr>
</table>
</div>
</div>
</div>
<div id="footer">
Generated on Tue Apr 30 23:05:04 2013 by
<a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
0.8.6.1 (ruby-1.9.3).
</div>
</body>
</html>