Commit Graph

861 Commits

Author SHA1 Message Date
erwanlr
0b5d7ad147 Fix #112 Multiple redirections detection 2013-01-19 15:03:58 +01:00
erwanlr
0894b8f5b5 explot files removed 2013-01-17 13:29:19 +01:00
erwanlr
5d19bdf83d puts override reactivated 2013-01-17 13:11:21 +01:00
erwanlr
d9fd20c6fe WPSTools plugins mode activated 2013-01-17 13:08:01 +01:00
Christian Mehlmauer
1d7923c7b7 fix theme detection 2013-01-14 15:24:49 +01:00
Christian Mehlmauer
36585891a1 output wordpress url on all items 2013-01-14 14:53:24 +01:00
Christian Mehlmauer
96d82405df Bugfix in Versiondetection. Without this Fix a very long string is detected as WPVersion and wpscan crashes on determing the vulns from XML because the string is used as xpath 2013-01-14 14:27:12 +01:00
Christian Mehlmauer
91187a0db3 Fix replace regex to include ESC characters 2013-01-14 12:43:52 +01:00
erwanlr
37e4461ddd Updater cleanup 2013-01-14 10:51:25 +01:00
Christian Mehlmauer
255bbcdac2 bugfixing 2013-01-13 23:56:30 +01:00
Christian Mehlmauer
716e07803c removed debug output 2013-01-13 22:04:49 +01:00
Christian Mehlmauer
253d6e2928 added basic logging to wpscan 2013-01-13 22:02:13 +01:00
Christian Mehlmauer
8c5d960b14 Merge branch 'master' of github.com:wpscanteam/wpscan 2013-01-13 21:08:52 +01:00
Christian Mehlmauer
1377ee2653 added metasploit references 2013-01-13 21:08:07 +01:00
ethicalhack3r
7ac9f79439 Added '{repo_directory_arguments()}' to has_local_changes? 2013-01-13 20:17:14 +01:00
ethicalhack3r
ecaf0894dd Detect local changes before a git update. See issue #75. 2013-01-13 20:06:20 +01:00
ethicalhack3r
fb124f770c Changed the Copyright notice to include 2013. 2013-01-11 17:40:37 +01:00
ethicalhack3r
db2e127c4e Added the wordpress.org plugin URL. See issue #100. 2013-01-10 11:59:47 +01:00
Christian Mehlmauer
4062e4dfbc Renamed XML 2013-01-09 23:01:30 +01:00
Christian Mehlmauer
a6ad818496 Support multiple references 2013-01-09 22:48:24 +01:00
erwanlr
87d5d93030 Fix #98 wpstools options to locally scan a wp installation for vulnerable files 2013-01-07 14:24:21 +01:00
erwanlr
42c68fe683 show_progression used in brute forcing 2013-01-04 15:30:35 +01:00
erwanlr
c0eadd22db show_progress_bar renamed to show_progression 2013-01-04 15:15:14 +01:00
erwanlr
a4ace91e68 Fix #96 Username detection from header location when a trailing slash is present 2013-01-01 15:30:01 +01:00
erwanlr
9b14a8d038 Fix #54 False positive when a plugin directory redirects to the homepage 2012-12-21 12:21:40 +01:00
erwanlr
c0a05a4119 Ref #52 RSS url detection 2012-12-20 17:46:06 +01:00
erwanlr
221068ef1b Indentation 2012-12-20 17:02:43 +01:00
erwanlr
6df6cdc997 Typo & indentation 2012-12-20 16:57:17 +01:00
erwanlr
42ee4b9183 Ref #54 Implementation of WebSite.homepage_hash 2012-12-20 16:53:13 +01:00
erwanlr
b5390be6b5 WpTarget.error_404_hash moved to WebSite module 2012-12-20 16:22:04 +01:00
erwanlr
38c81384e8 WebSite module reworked 2012-12-19 17:53:11 +01:00
erwanlr
d77a312844 Merge pull request #88 from FireFart/xmlrpc
Detect XML Pingback URL
2012-12-13 08:17:59 -08:00
Christian Mehlmauer
509a400add Bugfixes and rspecs 2012-12-13 16:46:52 +01:00
erwanlr
60b1d20aa2 --proxy, --proxy-auth help updated 2012-12-13 13:42:07 +01:00
erwanlr
b775838e96 Readme updated for basic auth 2012-12-13 13:36:09 +01:00
erwanlr
809311ee04 Useless code removed 2012-12-13 13:26:04 +01:00
Christian Mehlmauer
4d852b5983 Detect XML Pingback URL 2012-12-13 11:41:08 +01:00
erwanlr
2a782e9680 Basic auth 2012-12-12 17:05:06 +01:00
erwanlr
32506ca830 Scoring system removed from version finderprinting 2012-12-11 20:29:50 +01:00
erwanlr
1663cdb301 Ref #33 Options to find dead reference urls --cvru | check-vuln-ref-urls 2012-12-07 17:16:21 +01:00
erwanlr
079b43a33d Merge pull request #78 from FireFart/users
Fixing empty usernames (#66)
2012-12-06 12:03:01 -08:00
erwanlr
a7df9feabf Fix #77 facebook.com detected as a custom wp-content directory 2012-12-06 21:01:14 -06:00
erwanlr
dc6c8b2eb8 Fix #57 Plugins form passive detection no longer loaded when enumerating only vulnerable plugins 2012-12-06 17:04:16 -06:00
erwanlr
ab59bd1eb3 Fix #24 --exclude-content-based option added 2012-12-06 16:50:59 -06:00
Christian Mehlmauer
2b6c36ff4a Fixing empty usernames 2012-12-06 20:58:40 +01:00
ethicalhack3r
fd591a0675 Some small refactoring and fix for issue #66 2012-11-30 22:00:23 +01:00
ethicalhack3r
a72ca18eac Docs updated. 2012-11-28 20:36:14 +01:00
ethicalhack3r
5ee32ba5c1 Merge pull request #74 from FireFart/check_all
Option to check all plugins/themes
2012-11-27 15:17:16 -08:00
Christian Mehlmauer
ee0e648a07 rspec 2012-11-26 22:36:07 +01:00
Christian Mehlmauer
31d2ca06eb initial commit 2012-11-26 22:30:07 +01:00