Zaur
338eacd63b
Preciser reporting in bruteforcing password with bad response
...
When bruteforcing for multiple logins and passwords the bad response code reported
might indicate a match! But the reporting for it is not clear enough.
For example "Unkown response for admin" might mean a user name admin and some password
or a password 'admin' for some user.
This commit makes in unambiguous reporting a bad response, and naming which login and
which password caused it.
2017-03-25 16:18:05 +01:00
Christian Mehlmauer
0a6d430c9f
fix typo
2017-01-28 00:40:51 +01:00
Christian Mehlmauer
6e840ca920
fix #974
2016-08-08 21:40:36 +02:00
Christian Mehlmauer
e1b4b5e8e5
typo
2016-05-31 14:53:50 +02:00
Christian Mehlmauer
0243522854
more advanced version detection
2016-05-31 14:51:09 +02:00
Christian Mehlmauer
5118c68f45
fix #943
2016-05-13 21:23:22 +02:00
Christian Mehlmauer
442884b5c5
remove executable flags
2016-05-09 16:19:11 +02:00
ethicalhack3r
fe7aede458
Better output
2016-04-20 13:39:05 +02:00
ethicalhack3r
cdf2b38780
Only show changelog if verbose
2016-04-20 13:09:02 +02:00
ethicalhack3r
a09dbab6a8
Use db_file
2016-04-20 12:43:56 +02:00
ethicalhack3r
49a6d275d2
Update comment
2016-04-20 12:37:46 +02:00
ethicalhack3r
8192a4a215
Fix typo
2016-04-20 12:27:09 +02:00
ethicalhack3r
1d6593fd4d
Add WP metadata #704
2016-04-20 12:02:15 +02:00
Christian Mehlmauer
816b18b604
drop ruby 1.9 support, whitespaces
2016-02-23 18:07:20 +01:00
erwanlr
cea01d8aa0
Improves brute forcer output to avoid confustions
2016-02-13 16:44:29 +00:00
erwanlr
8f8538e9e9
Changes the order of the WP version from stylesheets check - Fixes #865
2016-01-11 16:27:22 +00:00
ethicalhack3r
380760d028
Onlt shoe theme description when there is one
2015-10-26 16:06:13 +01:00
ethicalhack3r
d8a6884ab6
Only show 'up to date' string when version found
2015-09-09 15:46:44 +02:00
Ryan Dewhurst
5ce3581386
Merge pull request #862 from wpscanteam/apiv2
...
Apiv2
2015-09-08 21:00:03 +02:00
ethicalhack3r
2208f2a8c0
Implement lesser? method #862
2015-09-08 17:54:32 +02:00
ethicalhack3r
a4a14c7e63
Better version output #862
2015-09-08 17:24:10 +02:00
erwanlr
fd0c47f5d7
Adds the latest_version, last_updated and popular? attributes - Ref #853
2015-09-06 14:26:36 +01:00
erwanlr
c03a44d225
Removes useless code
2015-09-06 13:32:13 +01:00
ethicalhack3r
d31d45ba71
Remove unneede newline
2015-09-05 14:10:08 +02:00
ethicalhack3r
e6d29f6f18
New json structure implemented #853
2015-09-03 22:04:44 +02:00
Christian Mehlmauer
ec68291bf0
fix #858
2015-08-22 21:50:31 +02:00
ethicalhack3r
57f6206aee
Implement Erwan's feedbaxk #853
2015-08-14 21:51:55 +02:00
ethicalhack3r
01c357e146
Fix specs #853
2015-08-14 16:03:21 +02:00
ethicalhack3r
c4aed0ec89
Initial attempt at implementing apiv2 #853
2015-08-14 00:19:22 +02:00
erwanlr
cc737090a2
Fixes incorrect detection of the username
2015-08-13 10:27:33 +01:00
erwanlr
4c800bacaa
Fixes #835
2015-06-24 11:46:06 +01:00
Christian Mehlmauer
f4f1390b67
fix some code styling issues
2015-06-21 10:59:57 +02:00
Christian Mehlmauer
e03f7691f2
switch to mitre
2015-05-24 09:02:26 +02:00
Christian Mehlmauer
8db06d37d2
check if method exist
2015-05-16 08:21:32 +02:00
Christian Mehlmauer
5ee5e76544
new link types
2015-05-15 22:34:24 +02:00
Christian Mehlmauer
b931df654d
fix #796
2015-05-12 21:28:12 +02:00
erwanlr
0d806e6d74
Ignores potential non version chars in theme version detection - Fixes #816
2015-05-01 09:56:18 +01:00
erwanlr
227a39d2fa
Updates the theme detection pattern - Ref #816
2015-05-01 09:50:20 +01:00
Peter
8e1ba352ee
Singular and plural sentences
2015-04-21 20:33:32 +02:00
erwanlr
deb8508ea5
Updates the Theme detection pattern - Fixes #804
2015-04-15 18:37:23 +01:00
erwanlr
a4bbf41086
Forces UTF-8 encoding when enumerating usernames - Fixes #801
2015-04-11 12:26:15 +01:00
Christian Mehlmauer
0aa8a97070
additional output
2015-04-02 07:17:58 +02:00
berotti3
42f278aafe
Available take username for wordpress 3.0 or lower.
2015-02-21 15:48:28 +09:00
Christian Mehlmauer
884f64addb
move version detection to seperate function and change line endings
2015-02-18 18:37:47 +01:00
erwanlr
f6dfe0e8dd
Avoid iterating over all the vuln items once the right one has been found
2015-02-12 18:57:16 +01:00
Christian Mehlmauer
d7975b6192
version detection
2015-01-20 15:14:32 +01:00
Christian Mehlmauer
0a0fe55427
improve regex and more samples
2015-01-20 00:35:46 +01:00
Christian Mehlmauer
8e08a20178
missing ?
2015-01-20 00:06:34 +01:00
Christian Mehlmauer
9dd44808ec
detect even more
2015-01-20 00:04:49 +01:00
Christian Mehlmauer
507cf1d511
fix regex
2015-01-19 23:41:51 +01:00
