garfield/wpscan
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Enhacements to sql export code. Thanks to javiercasares for list.

Browse Source
This commit is contained in:
Ryan Dewhurst
2018-06-08 09:56:28 +02:00
parent 0e73774bd9
commit ce5d26a220
2 changed files with 13 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
lib/wpscan/web_site/sql_file_export.rb
View File

@@ -6,21 +6,24 @@ class WebSite
# Checks if a .sql file exists
# @return [ Array ]
def sql_file_export
backup_files = []
export_files = []
self.sql_file_export_urls.each do |url|
response = Browser.get(url)
backup_files << url if response.code == 200 && response.body =~ /INSERT INTO/
export_files << url if response.code == 200 && response.body =~ /INSERT INTO/
end
backup_files
export_files
end
# Gets a .sql export file URL
# @return [ Array ]
def sql_file_export_urls
urls = []
files = ["#{@uri.host[/(^[\w|-]+)/,1]}.sql", 'backup.sql', 'database.sql', 'dump.sql']
host = @uri.host[/(^[\w|-]+)/,1]
files = ["#{host}.sql", "#{host}.sql.gz", "#{host}.zip", 'db.sql', 'site.sql', 'database.sql',
'data.sql', 'backup.sql','dump.sql', 'db_backup.sql', 'dbdump.sql', 'wordpress.sql', 'mysql.sql']
files.each do |file|
urls << @uri.clone.merge(file).to_s