garfield/wpscan
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Only show readme.html output when wp <= 4.8 #1127

Browse Source
This commit is contained in:
ethicalhack3r
2017-09-14 19:12:37 +02:00
parent ad364e6a2e
commit d8a9b3aa77
1 changed files with 7 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
wpscan.rb
View File

@@ -206,10 +206,6 @@ def main
end end
end end
if wp_target.has_readme?
puts warning("The WordPress '#{wp_target.readme_url}' file exists exposing a version number")
end
if wp_target.has_full_path_disclosure? if wp_target.has_full_path_disclosure?
puts warning("Full Path Disclosure (FPD) in '#{wp_target.full_path_disclosure_url}': #{wp_target.full_path_disclosure_data}") puts warning("Full Path Disclosure (FPD) in '#{wp_target.full_path_disclosure_url}': #{wp_target.full_path_disclosure_data}")
end end
@@ -271,7 +267,13 @@ def main
exclude_content: wpscan_options.exclude_content_based exclude_content: wpscan_options.exclude_content_based
} }
if wp_version = wp_target.version(WP_VERSIONS_FILE) wp_version = wp_target.version(WP_VERSIONS_FILE)
if wp_target.has_readme? && VersionCompare::lesser_or_equal?(wp_version.identifier, '4.8')
puts warning("The WordPress '#{wp_target.readme_url}' file exists exposing a version number")
end
if wp_version
wp_version.output(wpscan_options.verbose) wp_version.output(wpscan_options.verbose)
else else
puts puts