Sullivan SENECHAL
|
d271b63aa4
|
Re-build redirection url if begin with slash '/'
|
2014-09-11 15:35:00 +02:00 |
|
erwanlr
|
f2d205e576
|
Adds DB update system
|
2014-09-10 16:31:04 +02:00 |
|
erwanlr
|
d1a7a0ee1f
|
Db Update draft
|
2014-09-10 12:52:52 +02:00 |
|
Christian Mehlmauer
|
eb73025338
|
directory listing
|
2014-09-05 18:27:06 +02:00 |
|
Christian Mehlmauer
|
66cd3e08a0
|
Detect directory listing in upload folder
|
2014-09-05 18:25:46 +02:00 |
|
erwanlr
|
bd8e6db092
|
Don't try to play with the comments in passive detection, just ignore them
|
2014-09-02 20:42:17 +02:00 |
|
erwanlr
|
96ae8ade5d
|
Fixes the remove_conditional_comments function
|
2014-09-02 18:34:01 +02:00 |
|
erwanlr
|
03618f38b5
|
Improves the Plugins & Themes passive detection, fixes #674
|
2014-09-01 18:28:09 +02:00 |
|
Christian Mehlmauer
|
12dfc60f75
|
Added detection for Yoast Wordpress SEO plugin
|
2014-08-30 12:18:31 +02:00 |
|
Christian Mehlmauer
|
3131c6cb5d
|
fix #673
|
2014-08-29 07:27:29 +02:00 |
|
erwanlr
|
5f53297f58
|
Also ensure to not process empty Location headers
|
2014-08-15 23:00:42 +02:00 |
|
erwanlr
|
cebd808674
|
Ensures a nil location is not processed when enumerating usernames
|
2014-08-15 22:54:17 +02:00 |
|
erwanlr
|
30a07f037e
|
Fixes #661 - Don't hash directories named like a file
|
2014-08-14 17:42:08 +02:00 |
|
ethicalhack3r
|
1578ce2ebd
|
Fix for infinite loop in wpstools #653
|
2014-08-07 23:05:46 +02:00 |
|
Christian Mehlmauer
|
391fd6c960
|
Fix Travis
|
2014-08-07 22:18:22 +02:00 |
|
Christian Mehlmauer
|
ef7ac1d77b
|
Fix #626
|
2014-08-07 22:01:23 +02:00 |
|
ethicalhack3r
|
ca100ef7e9
|
Merge branch 'json_data'
Conflicts:
data/plugin_vulns.xml
data/theme_vulns.xml
|
2014-08-01 13:34:34 +02:00 |
|
ethicalhack3r
|
ac90ad0129
|
Dont use fail
|
2014-07-31 15:39:48 +02:00 |
|
ethicalhack3r
|
6b61e273a0
|
Use fail
|
2014-07-31 15:38:02 +02:00 |
|
ethicalhack3r
|
aab8e85f9d
|
Implement FireFart's feedback
|
2014-07-31 15:31:07 +02:00 |
|
ethicalhack3r
|
3959892c20
|
Fix wpstools check-vuln-ref-urls
|
2014-07-31 15:26:13 +02:00 |
|
ethicalhack3r
|
420ad6cd37
|
Fix rspecs for new json
|
2014-07-31 14:08:49 +02:00 |
|
ethicalhack3r
|
187e2f1330
|
Correct wp_vulns file
|
2014-07-31 12:07:33 +02:00 |
|
ethicalhack3r
|
8d2ec115f5
|
Changed vuln data references to url
|
2014-07-31 11:56:14 +02:00 |
|
ethicalhack3r
|
08dfa4cab2
|
Implemented Erwan's feedback
|
2014-07-31 11:14:22 +02:00 |
|
ethicalhack3r
|
14be7dead5
|
Work on json database file parsing, still needs some work.
|
2014-07-30 18:34:42 +02:00 |
|
erwanlr
|
ab2e368c6f
|
Fixes #625 - Only parse styles when needed
|
2014-07-30 15:36:00 +01:00 |
|
erwanlr
|
1e6b5a1e4d
|
Improves the version comparison
|
2014-07-30 12:11:04 +01:00 |
|
Christian Mehlmauer
|
26e0066c82
|
Only output if different from style_url
|
2014-07-16 18:38:39 +02:00 |
|
Christian Mehlmauer
|
6ebb9b6f66
|
Fixed false positive theme detection
|
2014-07-16 18:25:35 +02:00 |
|
ethicalhack3r
|
a8a716e0bd
|
Change metasploit url to updated one
|
2014-07-15 14:35:56 +02:00 |
|
Christian Mehlmauer
|
479b21a722
|
Replace all occurences
|
2014-07-10 00:30:33 +02:00 |
|
Christian Mehlmauer
|
ceeaeaf487
|
better username extraction
|
2014-07-10 00:24:20 +02:00 |
|
erwanlr
|
98d9e87356
|
Changes VersionCompare#is_newer_or_same? by lesser_or_equal?
|
2014-07-03 12:33:27 +02:00 |
|
erwanlr
|
d9b86f9922
|
Fix Timthumb RCE detection for version 2.0 (which was excluded)
|
2014-07-02 12:17:14 +02:00 |
|
erwanlr
|
605e9cfe6d
|
Changes the vulnerable version of timthumb to 1.33 instead of 1.34
|
2014-07-01 22:10:01 +02:00 |
|
erwanlr
|
dd53c7b200
|
Fix #506 - Timthumbs WebShot RCE detection
|
2014-07-01 21:44:39 +02:00 |
|
Christian Mehlmauer
|
6b8436f825
|
Replace some '/' by File.join
|
2014-05-31 15:59:05 +02:00 |
|
erwanlr
|
8d3907ff65
|
Fixes the location of the robots.txt check
|
2014-05-22 17:45:10 +02:00 |
|
erwanlr
|
af0319cc66
|
Adds a --cookie option. Ref #485
|
2014-05-22 17:34:09 +02:00 |
|
erwanlr
|
79f07b7350
|
Properly removes the colour sequence from log. Fixes #480
|
2014-05-14 18:33:23 +02:00 |
|
erwanlr
|
dda328210c
|
Bumps the version
|
2014-05-10 16:10:57 +02:00 |
|
erwanlr
|
302f1da066
|
Ensures a clean abort of Hydra, Ref #461
|
2014-05-10 10:23:24 +02:00 |
|
Peter
|
ce57db9526
|
Fixed vulnerabilities in statistics
|
2014-05-05 18:42:36 +02:00 |
|
Peter
|
a87a261b80
|
Markup the command help
|
2014-05-02 15:31:09 +02:00 |
|
Peter
|
989d561679
|
Small updates for the --no-color argument switch
|
2014-05-02 15:04:59 +02:00 |
|
Peter
|
b349990b19
|
Added a --no-color argument switch
|
2014-05-02 14:43:16 +02:00 |
|
Peter
|
2104b49cee
|
Output: Give 'Fixed in' an informational tag'
|
2014-05-02 13:42:10 +02:00 |
|
erwanlr
|
a00f0d8367
|
Fixes #464 - Readmes updated to reflect recent changes about the config file & batch mode
|
2014-04-30 16:59:17 +02:00 |
|
Peter
|
82ebb82a5f
|
Small change in code
|
2014-04-27 15:40:12 +02:00 |
|