Adds wp-cron.php detection - Fixes #1299
This commit is contained in:
30
spec/app/finders/interesting_findings/wp_cron_spec.rb
Normal file
30
spec/app/finders/interesting_findings/wp_cron_spec.rb
Normal file
@@ -0,0 +1,30 @@
|
||||
describe WPScan::Finders::InterestingFindings::WPCron do
|
||||
subject(:finder) { described_class.new(target) }
|
||||
let(:target) { WPScan::Target.new(url) }
|
||||
let(:url) { 'http://ex.lo/' }
|
||||
let(:wp_content) { 'wp-content' }
|
||||
|
||||
before { expect(target).to receive(:sub_dir).at_least(1).and_return(false) }
|
||||
|
||||
describe '#aggressive' do
|
||||
before { stub_request(:get, finder.wp_cron_url).to_return(status: status) }
|
||||
|
||||
context 'when 200' do
|
||||
let(:status) { 200 }
|
||||
|
||||
it 'returns the InterestingFinding' do
|
||||
expect(finder.aggressive).to eql WPScan::WPCron.new(
|
||||
finder.wp_cron_url,
|
||||
confidence: 100,
|
||||
found_by: described_class::DIRECT_ACCESS
|
||||
)
|
||||
end
|
||||
end
|
||||
|
||||
context 'otherwise' do
|
||||
let(:status) { 403 }
|
||||
|
||||
its(:aggressive) { should be_nil }
|
||||
end
|
||||
end
|
||||
end
|
||||
Reference in New Issue
Block a user