From 4f7dec46357f66eb19a2741f1c9b21c207a1d799 Mon Sep 17 00:00:00 2001 From: Erwan Date: Thu, 12 Mar 2020 13:12:40 +0100 Subject: [PATCH 1/3] Fixes detection of Users via WP JSON when blog uses basic auth --- app/finders/users/wp_json_api.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/finders/users/wp_json_api.rb b/app/finders/users/wp_json_api.rb index 20904e95..73b23f36 100644 --- a/app/finders/users/wp_json_api.rb +++ b/app/finders/users/wp_json_api.rb @@ -21,7 +21,7 @@ module WPScan loop do current_page += 1 - res = Typhoeus.get(api_url, params: { per_page: MAX_PER_PAGE, page: current_page }) + res = Browser.get(api_url, params: { per_page: MAX_PER_PAGE, page: current_page }) total_pages ||= res.headers['X-WP-TotalPages'].to_i From 45bebc60bd97e137b2aa32d6c70a67684528879b Mon Sep 17 00:00:00 2001 From: Erwan Date: Thu, 12 Mar 2020 22:25:23 +0100 Subject: [PATCH 2/3] Fixes typo in Readme --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 3dcfea42..349ccb9d 100644 --- a/README.md +++ b/README.md @@ -130,7 +130,7 @@ cli_options: api_token: YOUR_API_TOKEN ``` -## Load APi Token From ENV +## Load API Token From ENV (since v3.7.10) The API Token will be automatically loaded from the ENV variable `WPSCAN_API_TOKEN` if present. If the `--api-token` CLI option is also provided, the value from the CLI will be used. From 88737ca6ea54e4230633f01f2a30503445efad84 Mon Sep 17 00:00:00 2001 From: Erwan Date: Fri, 13 Mar 2020 08:12:35 +0100 Subject: [PATCH 3/3] Fixes error with reference when debug log identified --- app/models/interesting_finding.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/models/interesting_finding.rb b/app/models/interesting_finding.rb index 1a2ffddd..bae84e65 100644 --- a/app/models/interesting_finding.rb +++ b/app/models/interesting_finding.rb @@ -20,7 +20,7 @@ module WPScan class DebugLog < InterestingFinding # @ return [ Hash ] def references - @references ||= { url: 'https://codex.wordpress.org/Debugging_in_WordPress' } + @references ||= { url: ['https://codex.wordpress.org/Debugging_in_WordPress'] } end end