output interesting http-headers

lib/common/browser/actions.rb

@@ -19,6 +19,14 @@ class Browser
       process(url, params.merge(method: :post))
     end
 
+    # @param [ String ] url
+    # @param [ Hash ] params
+    #
+    # @return [ Typhoeus::Response ]
+    def head(url, params = {})
+      process(url, params.merge(method: :head))
+    end
+
     # @param [ String ] url
     # @param [ Hash ] params
     #

lib/wpscan/wp_target.rb

@@ -6,6 +6,7 @@ require 'wp_target/wp_readme'
 require 'wp_target/wp_registrable'
 require 'wp_target/wp_config_backup'
 require 'wp_target/wp_login_protection'
+require 'wp_target/interesting_headers'
 require 'wp_target/wp_custom_directories'
 require 'wp_target/wp_full_path_disclosure'
 
@@ -15,6 +16,7 @@ class WpTarget < WebSite
   include WpTarget::WpRegistrable
   include WpTarget::WpConfigBackup
   include WpTarget::WpLoginProtection
+  include WpTarget::InterestingHeaders
   include WpTarget::WpCustomDirectories
   include WpTarget::WpFullPathDisclosure
 

lib/wpscan/wp_target/interesting_headers.rb

@@ -0,0 +1,36 @@
+# encoding: UTF-8
+
+class WpTarget < WebSite
+  module InterestingHeaders
+
+    # Checks for interesting headers
+    def interesting_headers
+      response = Browser.head(@uri.to_s)
+      headers = response.headers
+      InterestingHeaders.known_headers.each do |h|
+          headers.delete(h)
+      end
+      headers.to_a.compact.sort
+    end
+
+    protected
+
+    # @return Array
+    def self.known_headers
+      %w{
+        Location
+        Date
+        Content-Type
+        Content-Length
+        Connection
+        Etag
+        Expires
+        Last-Modified
+        Pragma
+        Vary
+        Cache-Control
+      }
+    end
+
+  end
+end