garfield/wpscan
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

HELLO v3!!!

Browse Source
This commit is contained in:
Ryan Dewhurst
2018-09-26 21:12:01 +02:00
parent 28b9c15256
commit d268a86795
1871 changed files with 988118 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
spec/fixtures/finders/interesting_findings/backup_db/dir_listing.html vendored Normal file
View File

@@ -0,0 +1,15 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
<html>
<head>
<title>Index of /wordpress-4.0/wp-content/backup-db</title>
</head>
<body>
<h1>Index of /wordpress-4.0/wp-content/backup-db</h1>
<table><tr><th><img src="/icons/blank.gif" alt="[ICO]"></th><th><a href="?C=N;O=D">Name</a></th><th><a href="?C=M;O=A">Last modified</a></th><th><a href="?C=S;O=A">Size</a></th><th><a href="?C=D;O=A">Description</a></th></tr><tr><th colspan="5"><hr></th></tr>
<tr><td valign="top"><img src="/icons/back.gif" alt="[DIR]"></td><td><a href="/wordpress-4.0/wp-content/">Parent Directory</a></td><td>&nbsp;</td><td align="right"> - </td><td>&nbsp;</td></tr>
<tr><td valign="top"><img src="/icons/unknown.gif" alt="[ ]"></td><td><a href="sqldump.sql">sqldump.sql</a></td><td align="right">11-Oct-2014 18:55 </td><td align="right"> 0 </td><td>&nbsp;</td></tr>
<tr><td valign="top"><img src="/icons/text.gif" alt="[TXT]"></td><td><a href="test.txt">test.txt</a></td><td align="right">11-Oct-2014 18:55 </td><td align="right"> 7 </td><td>&nbsp;</td></tr>
<tr><th colspan="5"><hr></th></tr>
</table>
<address>Apache/2.2.16 (Debian) Server at wp.lab Port 80</address>
</body></html>

2
spec/fixtures/finders/interesting_findings/debug_log/debug.log vendored Normal file
View File

@@ -0,0 +1,2 @@
[11-Oct-2012 00:00:00] PHP Notice: Undefined index: ec_email in /var/www/wp/wp-content/plugins/easy-contact/econtact.php on line 33
[11-Oct-2012 00:00:00] PHP Notice: Undefined index: ec_url in /var/www/wp/wp-content/plugins/easy-contact/econtact.php on line 34

132
spec/fixtures/finders/interesting_findings/duplicator_installer_log/installer-log.txt vendored Normal file
View File

@@ -0,0 +1,132 @@
********************************************************************************
DUPLICATOR INSTALL-LOG
STEP1 START @ 04:10:42
NOTICE: Do NOT post to public sites or forums
********************************************************************************
VERSION: 0.5.12
PHP: 5.3.3-7+squeeze19 | SAPI: apache2handler
SERVER: Apache/2.2.16 (Debian)
DOC ROOT: /var/www/wp-test
DOC ROOT 755: true
LOG FILE 644: true
BUILD NAME: 20150115_wordpress41_54b7e2602a0a35837150115155304
REQUEST URL: http://wp.lab/wp-test/installer.php
********************************************************************************
ARCHIVE SETUP
********************************************************************************
NAME: 20150115_wordpress41_54b7e2602a0a35837150115155304_archive.zip
SIZE: 7.23MB
ZIP: Enabled (ZipArchive Support)
EXTRACTING
ZipArchive Object
(
[status] => 0
[statusSys] => 0
[numFiles] => 1395
[filename] => /var/www/wp-test/20150115_wordpress41_54b7e2602a0a35837150115155304_archive.zip
[comment] =>
)
COMPLETE: true
WEB SERVER CONFIGURATION FILE RESET:
- Backup of .htaccess/web.config made to .orig
- Reset of .htaccess/web.config files
UPDATED FILES:
- SQL FILE: '/var/www/wp-test/installer-data.sql'
- WP-CONFIG: '/var/www/wp-test/wp-config.php'
ARCHIVE RUNTIME: 0.2253 sec.
********************************************************************************
DATABASE-ROUTINES
********************************************************************************
--------------------------------------
SERVER ENVIROMENT
--------------------------------------
MYSQL VERSION: 5.1.73-1
TIMEOUT: 5000
MAXPACK: 16777216
--------------------------------------
DATABASE RESULTS
--------------------------------------
ERRORS FOUND: 0
DROP TABLE:
QUERIES RAN: 168
wp_commentmeta: (0)
wp_comments: (1)
wp_duplicator_packages: (1)
wp_links: (0)
wp_options: (129)
wp_postmeta: (1)
wp_posts: (3)
wp_term_relationships: (1)
wp_term_taxonomy: (1)
wp_terms: (1)
wp_usermeta: (15)
wp_users: (1)
Removed '28' cache/transient rows
SECTION RUNTIME: 0.0685 sec.
********************************************************************************
STEP1 COMPLETE @ 04:10:43 - TOTAL RUNTIME: 0.2973 sec.
********************************************************************************
********************************************************************************
DUPLICATOR INSTALL-LOG
STEP2 START @ 04:11:09
NOTICE: Do not post to public sites or forums
********************************************************************************
CHARSET SERVER: latin1
CHARSET CLIENT: utf8
--------------------------------------
SERIALIZER ENGINE
[*] scan every column
[~] scan only text columns
[^] no searchable columns
--------------------------------------
wp_commentmeta^ (0)
wp_comments~ (1)
wp_duplicator_packages^ (0)
wp_links^ (0)
wp_options~ (99)
wp_postmeta~ (1)
wp_posts~ (3)
wp_term_relationships~ (1)
wp_term_taxonomy~ (1)
wp_terms~ (1)
wp_usermeta~ (15)
wp_users~ (1)
--------------------------------------
SEARCH1: 'http://wp.lab/wordpress-4.1'
REPLACE1: 'http://wp.lab/wp-test'
SEARCH2: '/var/www/wordpress-4.1/'
REPLACE2: '/var/www/wp-test/'
SCANNED: Tables:12 | Rows:123 | Cells:567
UPDATED: Tables:1 | Rows:5 |Cells:6
ERRORS: 0
RUNTIME: 0.037100 sec
********************************************************************************
START FINAL CLEANUP: 04:11:10
********************************************************************************
UPDATE `wp_blogs` SET domain = 'wp.lab' WHERE domain = 'wp.lab'
--------------------------------------
WARNINGS
--------------------------------------
No Warnings Found
WEB SERVER CONFIGURATION FILE BASIC SETUP:
created basic .htaccess file. If using IIS web.config this process will need to be done manually.
********************************************************************************
STEP 2 COMPLETE @ 04:11:10 - TOTAL RUNTIME: 0.0411 sec.
********************************************************************************

1
spec/fixtures/finders/interesting_findings/fpd/rss_functions.php vendored Normal file
View File

@@ -0,0 +1 @@
Fatal error: Call to undefined function _deprecated_file() in /blog/wp-includes/rss-functions.php on line 8

96
spec/fixtures/finders/interesting_findings/readme/readme-3.9.2.html vendored Normal file
View File

@@ -0,0 +1,96 @@
<!DOCTYPE html>
<html>
<head>
<meta name="viewport" content="width=device-width" />
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>WordPress &#8250; ReadMe</title>
<link rel="stylesheet" href="wp-admin/css/install.css?ver=20100228" type="text/css" />
</head>
<body>
<h1 id="logo">
<a href="https://wordpress.org/"><img alt="WordPress" src="wp-admin/images/wordpress-logo.png" /></a>
<br /> Version 3.9.2
</h1>
<p style="text-align: center">Semantic Personal Publishing Platform</p>
<h1>First Things First</h1>
<p>Welcome. WordPress is a very special project to me. Every developer and contributor adds something unique to the mix, and together we create something beautiful that I&#8217;m proud to be a part of. Thousands of hours have gone into WordPress, and we&#8217;re dedicated to making it better every day. Thank you for making it part of your world.</p>
<p style="text-align: right">&#8212; Matt Mullenweg</p>
<h1>Installation: Famous 5-minute install</h1>
<ol>
<li>Unzip the package in an empty directory and upload everything.</li>
<li>Open <span class="file"><a href="wp-admin/install.php">wp-admin/install.php</a></span> in your browser. It will take you through the process to set up a <code>wp-config.php</code> file with your database connection details.
<ol>
<li>If for some reason this doesn&#8217;t work, don&#8217;t worry. It doesn&#8217;t work on all web hosts. Open up <code>wp-config-sample.php</code> with a text editor like WordPad or similar and fill in your database connection details.</li>
<li>Save the file as <code>wp-config.php</code> and upload it.</li>
<li>Open <span class="file"><a href="wp-admin/install.php">wp-admin/install.php</a></span> in your browser.</li>
</ol>
</li>
<li>Once the configuration file is set up, the installer will set up the tables needed for your blog. If there is an error, double check your <code>wp-config.php</code> file, and try again. If it fails again, please go to the <a href="https://wordpress.org/support/" title="WordPress support">support forums</a> with as much data as you can gather.</li>
<li><strong>If you did not enter a password, note the password given to you.</strong> If you did not provide a username, it will be <code>admin</code>.</li>
<li>The installer should then send you to the <a href="wp-login.php">login page</a>. Sign in with the username and password you chose during the installation. If a password was generated for you, you can then click on &#8220;Profile&#8221; to change the password.</li>
</ol>
<h1>Updating</h1>
<h2>Using the Automatic Updater</h2>
<p>If you are updating from version 2.7 or higher, you can use the automatic updater:</p>
<ol>
<li>Open <span class="file"><a href="wp-admin/update-core.php">wp-admin/update-core.php</a></span> in your browser and follow the instructions.</li>
<li>You wanted more, perhaps? That&#8217;s it!</li>
</ol>
<h2>Updating Manually</h2>
<ol>
<li>Before you update anything, make sure you have backup copies of any files you may have modified such as <code>index.php</code>.</li>
<li>Delete your old WordPress files, saving ones you&#8217;ve modified.</li>
<li>Upload the new files.</li>
<li>Point your browser to <span class="file"><a href="wp-admin/upgrade.php">/wp-admin/upgrade.php</a>.</span></li>
</ol>
<h1>Migrating from other systems</h1>
<p>WordPress can <a href="http://codex.wordpress.org/Importing_Content">import from a number of systems</a>. First you need to get WordPress installed and working as described above, before using <a href="wp-admin/import.php" title="Import to WordPress">our import tools</a>.</p>
<h1>System Requirements</h1>
<ul>
<li><a href="http://php.net/">PHP</a> version <strong>5.2.4</strong> or higher.</li>
<li><a href="http://www.mysql.com/">MySQL</a> version <strong>5.0</strong> or higher.</li>
</ul>
<h2>System Recommendations</h2>
<ul>
<li>The <a href="http://httpd.apache.org/docs/2.2/mod/mod_rewrite.html">mod_rewrite</a> Apache module.</li>
<li>A link to <a href="https://wordpress.org/">https://wordpress.org</a> on your site.</li>
</ul>
<h1>Online Resources</h1>
<p>If you have any questions that aren&#8217;t addressed in this document, please take advantage of WordPress&#8217; numerous online resources:</p>
<dl>
<dt><a href="http://codex.wordpress.org/">The WordPress Codex</a></dt>
<dd>The Codex is the encyclopedia of all things WordPress. It is the most comprehensive source of information for WordPress available.</dd>
<dt><a href="https://wordpress.org/news/">The WordPress Blog</a></dt>
<dd>This is where you&#8217;ll find the latest updates and news related to WordPress. Recent WordPress news appears in your administrative dashboard by default.</dd>
<dt><a href="http://planet.wordpress.org/">WordPress Planet</a></dt>
<dd>The WordPress Planet is a news aggregator that brings together posts from WordPress blogs around the web.</dd>
<dt><a href="https://wordpress.org/support/">WordPress Support Forums</a></dt>
<dd>If you&#8217;ve looked everywhere and still can&#8217;t find an answer, the support forums are very active and have a large community ready to help. To help them help you be sure to use a descriptive thread title and describe your question in as much detail as possible.</dd>
<dt><a href="http://codex.wordpress.org/IRC">WordPress <abbr title="Internet Relay Chat">IRC</abbr> Channel</a></dt>
<dd>There is an online chat channel that is used for discussion among people who use WordPress and occasionally support topics. The above wiki page should point you in the right direction. (<a href="irc://irc.freenode.net/wordpress">irc.freenode.net #wordpress</a>)</dd>
</dl>
<h1>Final Notes</h1>
<ul>
<li>If you have any suggestions, ideas, or comments, or if you (gasp!) found a bug, join us in the <a href="https://wordpress.org/support/">Support Forums</a>.</li>
<li>WordPress has a robust plugin <abbr title="application programming interface">API</abbr> that makes extending the code easy. If you are a developer interested in utilizing this, see the <a href="http://codex.wordpress.org/Plugin_API" title="WordPress plugin API">plugin documentation in the Codex</a>. You shouldn&#8217;t modify any of the core code.</li>
</ul>
<h1>Share the Love</h1>
<p>WordPress has no multi-million dollar marketing campaign or celebrity sponsors, but we do have something even better&#8212;you. If you enjoy WordPress please consider telling a friend, setting it up for someone less knowledgable than yourself, or writing the author of a media article that overlooks us.</p>
<p>WordPress is the official continuation of <a href="http://cafelog.com/">b2/caf&#233;log</a>, which came from Michel V. The work has been continued by the <a href="https://wordpress.org/about/">WordPress developers</a>. If you would like to support WordPress, please consider <a href="https://wordpress.org/donate/" title="Donate to WordPress">donating</a>.</p>
<h1>License</h1>
<p>WordPress is free software, and is released under the terms of the <abbr title="GNU General Public License">GPL</abbr> version 2 or (at your option) any later version. See <a href="license.txt">license.txt</a>.</p>
</body>
</html>

17
spec/fixtures/finders/interesting_findings/upload_sql_dump/dump.sql vendored Normal file
View File

@@ -0,0 +1,17 @@
-- phpMyAdmin SQL Dump
-- http://www.phpmyadmin.net
--
-- Serveur: localhost
SET SQL_MODE="NO_AUTO_VALUE_ON_ZERO";
DROP TABLE IF EXISTS `wp_commentmeta`;
CREATE TABLE IF NOT EXISTS `wp_commentmeta` (
`meta_id` bigint(20) unsigned NOT NULL AUTO_INCREMENT,
`comment_id` bigint(20) unsigned NOT NULL DEFAULT '0',
`meta_key` varchar(255) DEFAULT NULL,
`meta_value` longtext,
PRIMARY KEY (`meta_id`),
KEY `comment_id` (`comment_id`),
KEY `meta_key` (`meta_key`(191))
) ENGINE=MyISAM DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ;

1
spec/fixtures/finders/interesting_findings/upload_sql_dump/not_sql.txt vendored Normal file
View File

@@ -0,0 +1 @@
Clearly not a SQL dump.