erwanlr
|
722f3ce384
|
Adds config file to check - Ref #689
|
2014-09-17 18:03:25 +02:00 |
|
erwanlr
|
9d084a7b2f
|
Merges the db-update branch
|
2014-09-17 16:12:12 +02:00 |
|
erwanlr
|
c31a06e255
|
Removes the source code updaters
|
2014-09-17 16:01:41 +02:00 |
|
erwanlr
|
ea36c79c26
|
Adds a missing verbose output
|
2014-09-13 14:00:59 +02:00 |
|
erwanlr
|
cbe33caeef
|
Removes the ListGenerator plugin from WPStools
|
2014-09-13 13:57:45 +02:00 |
|
erwanlr
|
3e94ca11df
|
DB Update: fixes a bug due to .chomp, Adds verbose output
|
2014-09-12 19:18:56 +02:00 |
|
erwanlr
|
f818778e0a
|
Removes all files from data/
|
2014-09-12 18:46:30 +02:00 |
|
erwanlr
|
93b1234d0f
|
Removes useless code
|
2014-09-12 12:47:55 +02:00 |
|
erwanlr
|
91de353307
|
Adds the db update system
|
2014-09-12 12:43:06 +02:00 |
|
Christian Mehlmauer
|
451c6c07ca
|
new generate method, fix #657
|
2014-09-11 21:03:16 +02:00 |
|
erwanlr
|
a6b0548426
|
Potenial fix for 'marshal data too short' error - Ref #685
|
2014-09-11 20:04:24 +02:00 |
|
Sullivan SENECHAL
|
d271b63aa4
|
Re-build redirection url if begin with slash '/'
|
2014-09-11 15:35:00 +02:00 |
|
erwanlr
|
f2d205e576
|
Adds DB update system
|
2014-09-10 16:31:04 +02:00 |
|
erwanlr
|
d1a7a0ee1f
|
Db Update draft
|
2014-09-10 12:52:52 +02:00 |
|
Christian Mehlmauer
|
eb73025338
|
directory listing
|
2014-09-05 18:27:06 +02:00 |
|
Christian Mehlmauer
|
66cd3e08a0
|
Detect directory listing in upload folder
|
2014-09-05 18:25:46 +02:00 |
|
erwanlr
|
bd8e6db092
|
Don't try to play with the comments in passive detection, just ignore them
|
2014-09-02 20:42:17 +02:00 |
|
erwanlr
|
96ae8ade5d
|
Fixes the remove_conditional_comments function
|
2014-09-02 18:34:01 +02:00 |
|
erwanlr
|
03618f38b5
|
Improves the Plugins & Themes passive detection, fixes #674
|
2014-09-01 18:28:09 +02:00 |
|
Christian Mehlmauer
|
12dfc60f75
|
Added detection for Yoast Wordpress SEO plugin
|
2014-08-30 12:18:31 +02:00 |
|
Christian Mehlmauer
|
3131c6cb5d
|
fix #673
|
2014-08-29 07:27:29 +02:00 |
|
erwanlr
|
5f53297f58
|
Also ensure to not process empty Location headers
|
2014-08-15 23:00:42 +02:00 |
|
erwanlr
|
cebd808674
|
Ensures a nil location is not processed when enumerating usernames
|
2014-08-15 22:54:17 +02:00 |
|
erwanlr
|
30a07f037e
|
Fixes #661 - Don't hash directories named like a file
|
2014-08-14 17:42:08 +02:00 |
|
ethicalhack3r
|
1578ce2ebd
|
Fix for infinite loop in wpstools #653
|
2014-08-07 23:05:46 +02:00 |
|
Christian Mehlmauer
|
391fd6c960
|
Fix Travis
|
2014-08-07 22:18:22 +02:00 |
|
Christian Mehlmauer
|
ef7ac1d77b
|
Fix #626
|
2014-08-07 22:01:23 +02:00 |
|
ethicalhack3r
|
ca100ef7e9
|
Merge branch 'json_data'
Conflicts:
data/plugin_vulns.xml
data/theme_vulns.xml
|
2014-08-01 13:34:34 +02:00 |
|
ethicalhack3r
|
ac90ad0129
|
Dont use fail
|
2014-07-31 15:39:48 +02:00 |
|
ethicalhack3r
|
6b61e273a0
|
Use fail
|
2014-07-31 15:38:02 +02:00 |
|
ethicalhack3r
|
aab8e85f9d
|
Implement FireFart's feedback
|
2014-07-31 15:31:07 +02:00 |
|
ethicalhack3r
|
3959892c20
|
Fix wpstools check-vuln-ref-urls
|
2014-07-31 15:26:13 +02:00 |
|
ethicalhack3r
|
420ad6cd37
|
Fix rspecs for new json
|
2014-07-31 14:08:49 +02:00 |
|
ethicalhack3r
|
187e2f1330
|
Correct wp_vulns file
|
2014-07-31 12:07:33 +02:00 |
|
ethicalhack3r
|
8d2ec115f5
|
Changed vuln data references to url
|
2014-07-31 11:56:14 +02:00 |
|
ethicalhack3r
|
08dfa4cab2
|
Implemented Erwan's feedback
|
2014-07-31 11:14:22 +02:00 |
|
ethicalhack3r
|
14be7dead5
|
Work on json database file parsing, still needs some work.
|
2014-07-30 18:34:42 +02:00 |
|
erwanlr
|
ab2e368c6f
|
Fixes #625 - Only parse styles when needed
|
2014-07-30 15:36:00 +01:00 |
|
erwanlr
|
1e6b5a1e4d
|
Improves the version comparison
|
2014-07-30 12:11:04 +01:00 |
|
Christian Mehlmauer
|
26e0066c82
|
Only output if different from style_url
|
2014-07-16 18:38:39 +02:00 |
|
Christian Mehlmauer
|
6ebb9b6f66
|
Fixed false positive theme detection
|
2014-07-16 18:25:35 +02:00 |
|
ethicalhack3r
|
a8a716e0bd
|
Change metasploit url to updated one
|
2014-07-15 14:35:56 +02:00 |
|
Christian Mehlmauer
|
479b21a722
|
Replace all occurences
|
2014-07-10 00:30:33 +02:00 |
|
Christian Mehlmauer
|
ceeaeaf487
|
better username extraction
|
2014-07-10 00:24:20 +02:00 |
|
erwanlr
|
98d9e87356
|
Changes VersionCompare#is_newer_or_same? by lesser_or_equal?
|
2014-07-03 12:33:27 +02:00 |
|
erwanlr
|
d9b86f9922
|
Fix Timthumb RCE detection for version 2.0 (which was excluded)
|
2014-07-02 12:17:14 +02:00 |
|
erwanlr
|
605e9cfe6d
|
Changes the vulnerable version of timthumb to 1.33 instead of 1.34
|
2014-07-01 22:10:01 +02:00 |
|
erwanlr
|
dd53c7b200
|
Fix #506 - Timthumbs WebShot RCE detection
|
2014-07-01 21:44:39 +02:00 |
|
Christian Mehlmauer
|
6b8436f825
|
Replace some '/' by File.join
|
2014-05-31 15:59:05 +02:00 |
|
erwanlr
|
8d3907ff65
|
Fixes the location of the robots.txt check
|
2014-05-22 17:45:10 +02:00 |
|