garfield/wpscan
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Ref #1225 - Adds notes related to Medias enumeration

Browse Source
This commit is contained in:
erwanlr
2018-10-18 16:14:02 +01:00
parent d3e0ff1e66
commit d89fcbb68a
3 changed files with 9 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
app/controllers/enumeration/cli_options.rb
View File

@@ -25,7 +25,10 @@ module WPScan
cb: OptBoolean.new(['--config-backups']), cb: OptBoolean.new(['--config-backups']),
dbe: OptBoolean.new(['--db-exports']), dbe: OptBoolean.new(['--db-exports']),
u: OptIntegerRange.new(['--users', 'User IDs range. e.g: u1-5'], value_if_empty: '1-10'), u: OptIntegerRange.new(['--users', 'User IDs range. e.g: u1-5'], value_if_empty: '1-10'),
m: OptIntegerRange.new(['--medias', 'Media IDs range. e.g m1-15'], value_if_empty: '1-100') m: OptIntegerRange.new(['--medias',
'Media IDs range. e.g m1-15',
'Note: Permalink setting must be set to "Plain" for those to be detected'],
value_if_empty: '1-100')
}, },
value_if_empty: 'vp,vt,tt,cb,dbe,u,m', value_if_empty: 'vp,vt,tt,cb,dbe,u,m',
incompatible: [%i[vp ap p], %i[vt at t]], incompatible: [%i[vp ap p], %i[vt at t]],

5
app/controllers/enumeration/enum_methods.rb
View File

@@ -146,7 +146,10 @@ module WPScan
def enum_medias def enum_medias
opts = default_opts('medias').merge(range: parsed_options[:enumerate][:medias]) opts = default_opts('medias').merge(range: parsed_options[:enumerate][:medias])
output('@info', msg: 'Enumerating Medias') if user_interaction? if user_interaction?
output('@info', msg: 'Enumerating Medias (Permalink setting must be set to "Plain" for those to be detected)')
end
output('medias', medias: target.medias(opts)) output('medias', medias: target.medias(opts))
end end

2
app/finders/medias/attachment_brute_forcing.rb
View File

@@ -1,7 +1,7 @@
module WPScan module WPScan
module Finders module Finders
module Medias module Medias
# Medias Finder # Medias Finder, see https://github.com/wpscanteam/wpscan/issues/172
class AttachmentBruteForcing < CMSScanner::Finders::Finder class AttachmentBruteForcing < CMSScanner::Finders::Finder
include CMSScanner::Finders::Finder::Enumerator include CMSScanner::Finders::Finder::Enumerator