garfield/wpscan
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

HELLO v3!!!

Browse Source
This commit is contained in:
Ryan Dewhurst
2018-09-26 21:12:01 +02:00
parent 28b9c15256
commit d268a86795
1871 changed files with 988118 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
spec/fixtures/dynamic_finders/wp_version/comment_passive_all.html vendored Normal file
View File

@@ -0,0 +1,7 @@
<!-- dopdown-menu-widget -->
<!-- Dropdown Menu Widget Styles by shailan (http://metinsaylan.com) v1.9.6 on wp3.8.1 -->
<!-- strong-testimonials -->
<!-- versions: WordPress 4.0 | Strong Testimonials 2.28.4 -->

8
spec/fixtures/dynamic_finders/wp_version/header_pattern_passive_all.html vendored Normal file
View File

@@ -0,0 +1,8 @@
{
"Date": "Sun, 05 Nov 2017 12:14:25 GMT",
"Server": "Apache",
"Vary": "Accept-Encoding,User-Agent",
"Content-Length": "0",
"Content-Type": "text/html",
"WP-Version": "3.8.1"
}

57
spec/fixtures/dynamic_finders/wp_version/javascript_var_passive_all.html vendored Normal file
View File

@@ -0,0 +1,57 @@
<!-- Addthis-* New JS -->
<script data-cfasync="false" type="text/javascript">if (window.addthis_product === undefined) { window.addthis_product = "wpp"; } if (window.wp_product_version === undefined) { window.wp_product_version = "wpp-6.1.1"; } if (window.wp_blog_version === undefined) { window.wp_blog_version = "3.8.1"; } if (window.addthis_share === undefined) { window.addthis_share = {}; } if (window.addthis_config === undefined) { window.addthis_config = {"data_track_clickback":true,"ignore_server_config":true,"ui_atversion":300}; } if (window.addthis_layers === undefined) { window.addthis_layers = {}; } if (window.addthis_layers_tools === undefined) { window.addthis_layers_tools = []; } else { } if (window.addthis_plugin_info === undefined) { window.addthis_plugin_info = {"info_status":"enabled","cms_name":"WordPress","plugin_name":"Share Buttons by AddThis","plugin_version":"6.1.1","plugin_mode":"WordPress","anonymous_profile_id":"wp-7b3083b30b021a2b07908c9f8fd01f57","php_version":"5.3.3-7+squeeze19","cms_version":"3.8.1","page_info":{"template":"home","post_type":""},"sharing_enabled_on_post_via_metabox":false}; }
(function() {
var first_load_interval_id = setInterval(function () {
if (typeof window.addthis !== 'undefined') {
window.clearInterval(first_load_interval_id);
if (typeof window.addthis_layers !== 'undefined' && Object.getOwnPropertyNames(window.addthis_layers).length > 0) {
window.addthis.layers(window.addthis_layers);
}
if (Array.isArray(window.addthis_layers_tools)) {
for (i = 0; i < window.addthis_layers_tools.length; i++) {
window.addthis.layers(window.addthis_layers_tools[i]);
}
}
}
},1000)
}());
</script>
<!-- Addthis-* Old JS -->
<script data-cfasync="false" type="text/javascript">
var addthis_product = "wpp-5.3.5";
var wp_product_version = "wpp-5.3.5";
var wp_blog_version = "3.8.1";
var addthis_plugin_info = {"info_status":"enabled","cms_name":"WordPress","plugin_name":"Share Buttons by AddThis","plugin_version":"5.3.5","anonymous_profile_id":"wp-49e9c385efb167917d72688677b36778","plugin_mode":"WordPress","select_prefs":{"addthis_per_post_enabled":true,"addthis_above_enabled":false,"addthis_below_enabled":false,"addthis_sidebar_enabled":true,"addthis_mobile_toolbar_enabled":false,"addthis_above_showon_home":true,"addthis_above_showon_posts":true,"addthis_above_showon_pages":true,"addthis_above_showon_archives":true,"addthis_above_showon_categories":true,"addthis_above_showon_excerpts":true,"addthis_below_showon_home":false,"addthis_below_showon_posts":true,"addthis_below_showon_pages":true,"addthis_below_showon_archives":false,"addthis_below_showon_categories":false,"addthis_below_showon_excerpts":false,"addthis_sidebar_showon_home":true,"addthis_sidebar_showon_posts":true,"addthis_sidebar_showon_pages":true,"addthis_sidebar_showon_archives":false,"addthis_sidebar_showon_categories":false,"addthis_mobile_toolbar_showon_home":true,"addthis_mobile_toolbar_showon_posts":true,"addthis_mobile_toolbar_showon_pages":true,"addthis_mobile_toolbar_showon_archives":true,"addthis_mobile_toolbar_showon_categories":true,"sharing_enabled_on_post_via_metabox":true},"page_info":{"template":"categories","post_type":""}};
if (typeof(addthis_config) == "undefined") {
var addthis_config = {"data_track_clickback":true,"ui_atversion":300,"ignore_server_config":true};
}
if (typeof(addthis_share) == "undefined") {
var addthis_share = {};
}
if (typeof(addthis_layers) == "undefined") {
var addthis_layers = {};
}
</script>
<script type="text/javascript">
window._wpemojiSettings = {"baseUrl":"https:\/\/s.w.org\/images\/core\/emoji\/2.3\/72x72\/","ext":".png","svgUrl":"https:\/\/s.w.org\/images\/core\/emoji\/2.3\/svg\/","svgExt":".svg","source":{"concatemoji":"https:\/\/wp.lab\/wp-includes\/js\/wp-emoji-release.min.js?ver=3.8.1"}};
!function(a,b,c){function d(a,b){var c=String.fromCharCode;l.clearRect(0,0,k.width,k.height),l.fillText(c.apply(this,a),0,0);var d=k.toDataURL();l.clearRect(0,0,k.width,k.height),l.fillText(c.apply(this,b),0,0);var e=k.toDataURL();return d===e}function e(a){var b;if(!l||!l.fillText)return!1;switch(l.textBaseline="top",l.font="600 32px Arial",a){case"flag":return!(b=d([55356,56826,55356,56819],[55356,56826,8203,55356,56819]))&&(b=d([55356,57332,56128,56423,56128,56418,56128,56421,56128,56430,56128,56423,56128,56447],[55356,57332,8203,56128,56423,8203,56128,56418,8203,56128,56421,8203,56128,56430,8203,56128,56423,8203,56128,56447]),!b);case"emoji":return b=d([55358,56794,8205,9794,65039],[55358,56794,8203,9794,65039]),!b}return!1}function f(a){var c=b.createElement("script");c.src=a,c.defer=c.type="text/javascript",b.getElementsByTagName("head")[0].appendChild(c)}var g,h,i,j,k=b.createElement("canvas"),l=k.getContext&&k.getContext("2d");for(j=Array("flag","emoji"),c.supports={everything:!0,everythingExceptFlag:!0},i=0;i<j.length;i++)c.supports[j[i]]=e(j[i]),c.supports.everything=c.supports.everything&&c.supports[j[i]],"flag"!==j[i]&&(c.supports.everythingExceptFlag=c.supports.everythingExceptFlag&&c.supports[j[i]]);c.supports.everythingExceptFlag=c.supports.everythingExceptFlag&&!c.supports.flag,c.DOMReady=!1,c.readyCallback=function(){c.DOMReady=!0},c.supports.everything||(h=function(){c.readyCallback()},b.addEventListener?(b.addEventListener("DOMContentLoaded",h,!1),a.addEventListener("load",h,!1)):(a.attachEvent("onload",h),b.attachEvent("onreadystatechange",function(){"complete"===b.readyState&&c.readyCallback()})),g=c.source||{},g.concatemoji?f(g.concatemoji):g.wpemoji&&g.twemoji&&(f(g.twemoji),f(g.wpemoji)))}(window,document,window._wpemojiSettings);
</script>
<!-- limelight-storefront -->
<script type="text/javascript">
( function( i,s,o,g,r,a,m ){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){
( i[r].q=i[r].q||[] ).push( arguments )},i[r].l=1*new Date();a=s.createElement( o ),
m=s.getElementsByTagName( o )[0];a.async=1;a.src=g;m.parentNode.insertBefore( a,m )
} )( window,document,'script','https://www.google-analytics.com/analytics.js','ga' );
ga( 'create', 'UA-80325941-3', 'auto', 'limelightTracker' );
ga( 'limelightTracker.set', 'dimension1', '' );
ga( 'limelightTracker.set', 'dimension2', '' );
ga( 'limelightTracker.set', 'dimension3', '3.8.1' );
ga( 'limelightTracker.set', 'dimension4', '1.1.3' );
ga( 'limelightTracker.set', 'userId', ':' );
ga( 'limelightTracker.send', 'pageview' );
</script>

10
spec/fixtures/dynamic_finders/wp_version/opml_generator/wp-links-opml.php vendored Normal file
View File

@@ -0,0 +1,10 @@
<?xml version="1.0"?>
<opml version="1.0">
<head>
<title>Links for WordPress 4.1</title>
<dateCreated>Sun, 15 Feb 2015 13:47:27 GMT</dateCreated>
<!-- generator="WordPress/4.0" -->
</head>
<body>
</body>
</opml>

15
spec/fixtures/dynamic_finders/wp_version/query_parameter_in_install_page/wp-admin/install.php vendored Normal file
View File

@@ -0,0 +1,15 @@
<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" lang="en-US">
<head>
<meta name="viewport" content="width=device-width" />
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="robots" content="noindex,nofollow" />
<title>WordPress &rsaquo; Installation</title>
<link rel='stylesheet' id='buttons-css' href='http://wp.lab/wp-includes/css/buttons.min.css?ver=3.8.1' type='text/css' media='all' />
<link rel='stylesheet' id='install-css' href='http://wp.lab/wp-admin/css/install.min.css?ver=3.8.1' type='text/css' media='all' />
<link rel='stylesheet' id='dashicons-css' href='http://wp.lab/wp-includes/css/dashicons.min.css?ver=3.8.1' type='text/css' media='all' />
</head>
<body class="wp-core-ui">
<p id="logo"><a href="https://wordpress.org/" tabindex="-1">WordPress</a></p>
<h1>Already Installed</h1><p>You appear to have already installed WordPress. To reinstall please clear your old database tables first.</p><p class="step"><a href="http://wp.lab/wp-login.php" class="button button-large">Log In</a></p></body></html>

23
spec/fixtures/dynamic_finders/wp_version/query_parameter_in_upgrade_page/wp-admin/upgrade.php vendored Normal file
View File

@@ -0,0 +1,23 @@
<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" lang="en-US">
<head>
<meta name="viewport" content="width=device-width" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta name="robots" content="noindex,nofollow" />
<title>WordPress &rsaquo; Update</title>
<link rel='stylesheet' id='buttons-css' href='http://wp.lab/wp-includes/css/buttons.min.css?ver=3.8.1' type='text/css' media='all' />
<link rel='stylesheet' id='install-css' href='http://wp.lab/wp-admin/css/install.min.css?ver=3.8.1' type='text/css' media='all' />
<!--[if lte IE 7]>
<link rel='stylesheet' id='ie-css' href='http://wp.lab/wp-admin/css/ie.min.css?ver=3.8.1' type='text/css' media='all' />
<![endif]-->
</head>
<body class="wp-core-ui">
<p id="logo"><a href="https://wordpress.org/" tabindex="-1">WordPress</a></p>
<h1>No Update Required</h1>
<p>Your WordPress database is already up-to-date!</p>
<p class="step"><a class="button button-large" href="http://wp.lab/">Continue</a></p>
</body>
</html>

31
spec/fixtures/dynamic_finders/wp_version/query_parameter_passive_all.html vendored Normal file
View File

@@ -0,0 +1,31 @@
<!-- Most Common wp-includes -->
<script type="text/javascript" src="http://wp.lab/wp-includes/js/wp-embed.min.js?ver=3.8.1"></script>
<link rel='stylesheet' id='dashicons-css' href='wp-includes/css/dashicons.min.css?ver=3.8.1' type='text/css' media='all' />
<link rel='stylesheet' id='buttons-css' href='//wp.lab/wp-includes/css/buttons.min.css?ver=3.8.1' type='text/css' media='all' />
<!-- Should not be detected -->
<link rel='stylesheet' href='http://wp.lab/wp-includes/css/buttons.min.css?ver=3.a.2' type='text/css' media='all' />
<script type='text/javascript' src='http://wp.lab/wp-includes/js/jquery/jquery.js?ver=1.12.4'></script>
<script type='text/javascript' src='http://wp.lab/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1'></script>
<!-- Common wp-includes. Not sure if they are from WP core, or plugin/theme. Investigation needed -->
<!-- sometime this one is loaded, even though it's not an admin session -->
<link rel='stylesheet' id='admin-bar-css' href="/wp-includes/css/admin-bar.min.css?ver=3.8.1" type='text/css' media='all'/>
<script type='text/javascript' src='http://wp.lab/wp-includes/js/comment-reply.min.js?ver=3.8.1'></script>
<script type='text/javascript' src='https://wp.lab/wp-includes/js/wp-util.min.js?ver=3.8.1'></script>
<script type='text/javascript' src='https://wp.lab/wp-includes/js/wp-backbone.min.js?ver=3.8.1'></script>
<script type='text/javascript' src='http://wp.lab/wp-includes/js/utils.min.js?ver=3.8.1'></script>
<link rel='stylesheet' id='thickbox-css' href='//wp.lab/wp-includes/js/thickbox/thickbox.css?ver=3.8.1' type='text/css' media='all' />
<script type='text/javascript' src='http://wp.lab/wp-includes/js/wp-a11y.min.js?ver=3.8.1'></script>
<link rel='stylesheet' id='wp-mediaelement-css' href='http://wp.lab/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=3.8.1' type='text/css' media='all' />
<script type='text/javascript' src='http://wp.lab/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=3.8.1'></script>
<script type='text/javascript' src='http://wp.lab/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=3.8.1'></script>
<script type='text/javascript' src='http://wp.lab/wp-includes/js/mediaelement/wp-playlist.min.js?ver=3.8.1'></script>
<script type='text/javascript' src='http://wp.lab/wp-includes/js/wp-ajax-response.min.js?ver=3.8.1'></script>
<link rel='stylesheet' id='wp-pointer-css' href='http://wp.lab/wp-includes/css/wp-pointer.min.css?ver=3.8.1' type='text/css' media='all' />

3
spec/fixtures/dynamic_finders/wp_version/sitemap_generator/sitemap.xml vendored Normal file
View File

@@ -0,0 +1,3 @@
<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="http://wp,lab/wp-content/plugins/google-sitemap-generator/sitemap.xsl"?><!-- generator="Wordpress/4.0" -->
<!-- sitemap-generator-url="http://www.arnebrachhold.de" sitemap-generator-version="3.2.8" -->
<!-- generated-on="21 January, 2013 12:14 pm" -->

38
spec/fixtures/dynamic_finders/wp_version/wp_item_query_parameter_passive_all.html vendored Normal file
View File

@@ -0,0 +1,38 @@
<!-- From Plugins and Themes -->
<link rel='stylesheet' id='twentyfifteen-style-css' href='http://wp.lab/wp-content/themes/twentyfifteen/style.css?ver=3.8.1' type='text/css' media='all' />
<script type="text/javascript" src="http://wp.lab/wp-content/plugins/job-postings/include/../js/script.js?v=1.4.1&amp;ver=3.8.1"></script>
<link rel="stylesheet" id="acx_fsmi_styles-css" href="http://wp.lab/wp-content/plugins/floating-social-media-icon/css/style.css?v=3.8.1&amp;ver=3.8.1" type="text/css" media="all">
<!-- Should not be detected -->
<link rel='stylesheet' id='genericons-css' href='http://wp.lab/wp-content/themes/twentyfifteen/genericons/genericons.css?ver=3.2' type='text/css' media='all' />
<link rel='stylesheet' href='http://wp.lab/wp-includes/css/buttons.min.css?ver=3.a.2' type='text/css' media='all' />
<script type='text/javascript' src='http://wp.lab/wp-includes/js/jquery/jquery.js?ver=1.12.4'></script>
<script type='text/javascript' src='http://wp.lab/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.8.1'></script>
<!-- junk -->
<!DOCTYPE html>
<html lang="en-US" class="no-js">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width">
<link rel="profile" href="http://gmpg.org/xfn/11">
<link rel="pingback" href="http://wp.lab/xmlrpc.php">
<!--[if lt IE 9]>
<script src="http://wp.lab/wp-content/themes/twentyfifteen/js/html5.js"></script>
<![endif]-->
<script>(function(html){html.className = html.className.replace(/\bno-js\b/,'js')})(document.documentElement);</script>
<title>WPVersionFinder &#8211; Just another WordPress site</title>
<link rel='dns-prefetch' href='//fonts.googleapis.com' />
<link rel='dns-prefetch' href='//s.w.org' />
<link href='https://fonts.gstatic.com' crossorigin rel='preconnect' />
<link rel="alternate" type="application/rss+xml" title="WPVersionFinder &raquo; Feed" href="http://wp.local/WpVersionFinder/wordpress/feed" />
<link rel="alternate" type="application/rss+xml" title="WPVersionFinder &raquo; Comments Feed" href="http://wp.local/WpVersionFinder/wordpress/comments/feed" />
<script type="text/javascript">
window._wpemojiSettings = {"baseUrl":"https:\/\/s.w.org\/images\/core\/emoji\/2.3\/72x72\/","ext":".png","svgUrl":"https:\/\/s.w.org\/images\/core\/emoji\/2.3\/svg\/","svgExt":".svg","source":{"concatemoji":"http:\/\/wp.lab\/wp-includes\/js\/wp-emoji-release.min.js?ver=3.8.1"}};
!function(a,b,c){function d(a,b){var c=String.fromCharCode;l.clearRect(0,0,k.width,k.height),l.fillText(c.apply(this,a),0,0);var d=k.toDataURL();l.clearRect(0,0,k.width,k.height),l.fillText(c.apply(this,b),0,0);var e=k.toDataURL();return d===e}function e(a){var b;if(!l||!l.fillText)return!1;switch(l.textBaseline="top",l.font="600 32px Arial",a){case"flag":return!(b=d([55356,56826,55356,56819],[55356,56826,8203,55356,56819]))&&(b=d([55356,57332,56128,56423,56128,56418,56128,56421,56128,56430,56128,56423,56128,56447],[55356,57332,8203,56128,56423,8203,56128,56418,8203,56128,56421,8203,56128,56430,8203,56128,56423,8203,56128,56447]),!b);case"emoji":return b=d([55358,56794,8205,9794,65039],[55358,56794,8203,9794,65039]),!b}return!1}function f(a){var c=b.createElement("script");c.src=a,c.defer=c.type="text/javascript",b.getElementsByTagName("head")[0].appendChild(c)}var g,h,i,j,k=b.createElement("canvas"),l=k.getContext&&k.getContext("2d");for(j=Array("flag","emoji"),c.supports={everything:!0,everythingExceptFlag:!0},i=0;i<j.length;i++)c.supports[j[i]]=e(j[i]),c.supports.everything=c.supports.everything&&c.supports[j[i]],"flag"!==j[i]&&(c.supports.everythingExceptFlag=c.supports.everythingExceptFlag&&c.supports[j[i]]);c.supports.everythingExceptFlag=c.supports.everythingExceptFlag&&!c.supports.flag,c.DOMReady=!1,c.readyCallback=function(){c.DOMReady=!0},c.supports.everything||(h=function(){c.readyCallback()},b.addEventListener?(b.addEventListener("DOMContentLoaded",h,!1),a.addEventListener("load",h,!1)):(a.attachEvent("onload",h),b.attachEvent("onreadystatechange",function(){"complete"===b.readyState&&c.readyCallback()})),g=c.source||{},g.concatemoji?f(g.concatemoji):g.wpemoji&&g.twemoji&&(f(g.twemoji),f(g.wpemoji)))}(window,document,window._wpemojiSettings);
</script>
<link rel='stylesheet' id='twentyfifteen-fonts-css' href='https://fonts.googleapis.com/css?family=Noto+Sans%3A400italic%2C700italic%2C400%2C700%7CNoto+Serif%3A400italic%2C700italic%2C400%2C700%7CInconsolata%3A400%2C700&#038;subset=latin%2Clatin-ext' type='text/css' media='all' />

4
spec/fixtures/dynamic_finders/wp_version/xpath_passive_all.html vendored Normal file
View File

@@ -0,0 +1,4 @@
<meta name="generator" content="WordPress 3.8.1" />
<meta name="generator" content="WordPress 4.0, fitted with the WordPress Mobile Pack 1.2.5" />