garfield/wpscan
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

HELLO v3!!!

Browse Source
This commit is contained in:
Ryan Dewhurst
2018-09-26 21:12:01 +02:00
parent 28b9c15256
commit d268a86795
1871 changed files with 988118 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

54
spec/fixtures/finders/plugins/urls_in_homepage/found.html vendored Normal file
View File

@@ -0,0 +1,54 @@
<!-- This file is malformed to make sure Nokogiri can process it -->
<head profile="http://gmpg.org/xfn/11">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
<meta property="fb:page_id" content="18968879441564"/>
<title>wp.lab</title>
<link rel="alternate" type="application/rss+xml" title="Example RSS Feed" href="http://wp.lab/feed"/>
<script type='text/javascript' src='http://platform.twitter.com/widgets.js?ver=1.0.0'></script>
<!-- plugins that should be detected -->
<link rel='stylesheet' href='http://wp.lab/wp-content/plugins/dl-1/cache/7f81.css?m=12' type='text/css' media='screen'/>
<link rel="stylesheet" href="/wp-content/plugins/dl-2/css/frontend.css?ver=3.9.2"/>
<script type='text/javascript' src='http://wp.lab/wp-content/plugins/dl-3/s2member-o.php?ws=1'></script>
<script type='text/javascript' src='/wp-content/plugins/dl-4/main.js'></script>
<!-- Duplicate, dl-4 should only be detected once -->
<script type='text/javascript' src='/wp-content/plugins/dl-4/main2.js'></script>
<a href="http://wp.lab/wp-content/plugins/somefile.php">It should not be detected</a>
<style type="text/css">
#fancybox-loading.fancybox-ie div {
background: transparent;
filter: AlphaImageLoader(src='http://wp.lab/wp-content/plugins/dc-1/fancybox/fancy_loading.png', sizingMethod='scale');
}
</style>
<style type="text/css" media="all">
/* <![CDATA[ */
@import url("https://wp.lab/wp-content/plugins/dc-2/css/plugin.css?ver=1.9.4");
@import url('/wp-content/plugins/dc-3/css/datatables.css?ver=1.9.4');
@import url(/wp-content/plugins/dc-4/css/datatables.css?ver=1.9.4);
/* ]]> */
</style>
<script type='text/javascript'>
/* <![CDATA[ */
var poll1 = {"ajax_url": "http:\/\/wp.lab\/wp-content\/plugins\/dc-5\/wp-polls.php", "text_wait": "Please wait a while ..."};
var poll2 = {"ajax_url": "\/wp-content\/plugins\/dc-6\/wp-polls.php", "text_wait": "Please wait a while ..."};
/* ]]> */
</script>
<!-- the below should not be reported twice with uniq = true -->
<script type='text/javascript'>
/* <![CDATA[ */
var poll1 = {"ajax_url": "http:\/\/wp.lab\/wp-content\/plugins\/dc-5\/wp-polls.php", "text_wait": "Please wait a while ..."};
var poll2 = {"ajax_url": "\/wp-content\/plugins\/dc-6\/wp-polls.php", "text_wait": "Please wait a while ..."};
/* ]]> */
</script>
<!--[if IE 8]><link rel="stylesheet" type="text/css" href="https://wp.lab/ie8.css" /><![endif]-->
</head>

28
spec/fixtures/finders/plugins/urls_in_homepage/none.html vendored Normal file
View File

@@ -0,0 +1,28 @@
<!-- plugins that should not be detected -->
http://wp.lab/wp-content/plugins/this-should-not-match/sub.css
href="http://wp.lab/wp-content/plugins/this-should-not-match/sub.css"
/wp-content/plugins/this-should-not-match/sub.css
//wp-content/plugins/this-should-not-match/sub.css
src='/wp-content/plugins/this-should-not-match/sub.css'
<!--[if IE 8]>
<link rel="stylesheet" type="text/css" href="https://wp.lab/wp-content/plugins/should-not-be-reported/" />
<![endif]-->
<script type="text/javascript">
var TB_pluginPath = 'http://www.welovebug.com/wp-content/plugins/js-source';
var TB_config = { 'widget_show_photos': true }
</script>
<script type='text/javascript'>
/* <![CDATA[ */
var poll3 = {"ajax_url": "\/\/g.com/wp-content\/plugins\/wp-polls\/wp-polls.php", "text_wait": "Please wait a while ..."};
/* ]]> */
</script>
<style type="text/css" media="all">
/* <![CDATA[ */
@import url(//g.com/wp-content/plugins/datatables/css/datatables.css?ver=1.9.4);
/* ]]> */
</style>