diff --git a/lib/common/common_helper.rb b/lib/common/common_helper.rb index 47f071c3..658423b8 100644 --- a/lib/common/common_helper.rb +++ b/lib/common/common_helper.rb @@ -21,6 +21,7 @@ WPSCAN_PLUGINS_DIR = File.join(WPSCAN_LIB_DIR, 'plugins') # Not used ATM WORDPRESSES_FILE = File.join(DATA_DIR, 'wordpresses.json') PLUGINS_FILE = File.join(DATA_DIR, 'plugins.json') THEMES_FILE = File.join(DATA_DIR, 'themes.json') +TIMTHUMBS_FILE = File.join(DATA_DIR, 'timthumbs.txt') WP_VERSIONS_FILE = File.join(DATA_DIR, 'wp_versions.xml') LOCAL_FILES_FILE = File.join(DATA_DIR, 'local_vulnerable_files.xml') WP_VERSIONS_XSD = File.join(DATA_DIR, 'wp_versions.xsd') diff --git a/wpscan.rb b/wpscan.rb index 055a4ebb..87905311 100755 --- a/wpscan.rb +++ b/wpscan.rb @@ -399,7 +399,7 @@ def main wp_timthumbs = WpTimthumbs.aggressive_detection(wp_target, enum_options.merge( - file: DATA_DIR + '/timthumbs.txt', + file: TIMTHUMBS_FILE, theme_name: wp_theme ? wp_theme.name : nil ) )