Fix #77 facebook.com detected as a custom wp-content directory

2012-12-06 21:01:14 -06:00
parent dc6c8b2eb8
commit a7df9feabf
3 changed files with 19 additions and 1 deletions
--- a/lib/wpscan/wp_target.rb
+++ b/lib/wpscan/wp_target.rb
@@ -97,7 +97,8 @@ class WpTarget
      if index_body[/\/wp-content\/(?:themes|plugins)\//i]
        @wp_content_dir = "wp-content"
      else
-        @wp_content_dir = index_body[/(?:href|src)\s*=\s*(?:"|').+#{Regexp.escape(uri_path)}([^"']+)\/(?:themes|plugins)\/.*(?:"|')/i, 1]
+        domains_excluded = "(?:www\.)?(facebook|twitter)\.com"
+        @wp_content_dir  = index_body[/(?:href|src)\s*=\s*(?:"|').+#{Regexp.escape(uri_path)}((?!#{domains_excluded})[^"']+)\/(?:themes|plugins)\/.*(?:"|')/i, 1]
      end
    end
    @wp_content_dir