Commit Graph

1098 Commits

Author SHA1 Message Date
Christian Mehlmauer
264bc834b5 remove reference 2013-08-17 11:35:53 +02:00
Christian Mehlmauer
7acea5f4b2 fix issue #266 - passive detection regex 2013-08-17 11:33:25 +02:00
Christian Mehlmauer
9015834b15 fix issue #265 - remove base64 images before passive detection 2013-08-17 10:54:56 +02:00
ethicalhack3r
086e6e86a5 ruby-progressbar Gemfile version bump 2013-08-13 10:14:52 +02:00
Christian Mehlmauer
d107613e40 fix issue #262 2013-08-12 22:01:24 +02:00
Christian Mehlmauer
8896f8bf79 docs 2013-08-11 08:58:28 +02:00
Christian Mehlmauer
6cedd672cb removed comment 2013-08-10 13:31:20 +02:00
Christian Mehlmauer
3583db6a92 banner artwork 2013-08-10 13:30:24 +02:00
Christian Mehlmauer
faf234b482 docs 2013-08-10 12:47:52 +02:00
Christian Mehlmauer
5ea911c9b3 Header names are case insensitive
Move header checks to web_site
2013-08-10 11:49:30 +02:00
Christian Mehlmauer
6c008015e9 parse robots.txt 2013-08-10 11:35:17 +02:00
Christian Mehlmauer
6c8e76060a - update headers
- show twitter usernames
2013-08-09 23:41:34 +02:00
erwanlr
57d0af562e Merge branch 'master' of github.com:wpscanteam/wpscan 2013-08-09 15:25:17 +02:00
erwanlr
94ee5e15ac Ref #260 Fixes Travis Fail, due to rspec-mock v2.14.3 2013-08-09 15:24:28 +02:00
ethicalhack3r
678184e24b Another Travis-CI possible fix... 2013-08-09 13:45:35 +02:00
ethicalhack3r
fa0e4658cb Another Travis-CI attempt to fix 2013-08-09 13:33:52 +02:00
ethicalhack3r
7951e442a8 Attempted Travis-CI fix. 2013-08-09 13:26:39 +02:00
ethicalhack3r
3870fc0b2c Typo fix. Also Travis-CI test... 2013-08-09 13:04:50 +02:00
ethicalhack3r
2a9bd99f97 Fix for xmlrpc false positive. Issue #260. 2013-08-09 12:54:10 +02:00
erwanlr
de30802491 Better-WP-Security v3.4.3 XSS vuln title & fixed_in tag 2013-08-08 13:48:13 +02:00
erwanlr
973c0da4f2 Typo 2013-08-02 16:34:13 +02:00
erwanlr
3a3cbfdf7d Typo 2013-08-02 16:18:58 +02:00
erwanlr
21663ae519 Aded plugin vuln: sharebar CSRF 2013-08-02 16:15:25 +02:00
erwanlr
3a53936a88 Aded WP vuln: 3.4 - 3.5.1 wp-admin/users.php FPD 2013-08-02 16:10:17 +02:00
erwanlr
eac24ebbc8 Aded plugin vuln: pie-register XSS 2013-08-02 16:02:34 +02:00
erwanlr
9a70b8e2af Aded plugin vuln: spicy-blogroll RFI 2013-08-02 15:51:43 +02:00
erwanlr
e9374e4fe3 Aded plugin vuln: woocommerce XSS 2013-08-02 15:49:20 +02:00
erwanlr
5afdbded7e Aded plugin vuln: citizen-space CSRF 2013-08-02 15:46:03 +02:00
erwanlr
3f6087b180 Added Refence: wp-better-security Stored XSS 2013-08-02 15:43:49 +02:00
erwanlr
1c577084b1 Added plugin vuln: duplicator XSS 2013-08-02 15:39:58 +02:00
erwanlr
a242ca094e Fix #252 Events Calendar references (& XSS Added) 2013-08-02 15:27:57 +02:00
ethicalhack3r
c3b9611f76 Added WP 3.6 advanced fingerprint hash. See Issue #255. 2013-08-02 11:31:05 +02:00
ethicalhack3r
d32b20a529 Added another fixed_in paramter 2013-07-30 21:08:49 +02:00
ethicalhack3r
f4946525bb Missed fixed_in parameter for better-wp-security plugin 2013-07-30 20:50:37 +02:00
ethicalhack3r
3eb7639ce7 Better WP Security Plugin Stored XSS. See Issue #251. 2013-07-30 20:06:00 +02:00
Christian Mehlmauer
48e6ba4a1c Merge pull request #250 from za/master
just fixing typo at data/wp_versions.xml
2013-07-29 00:43:21 -07:00
Zaki Akhmad
41f6cf1463 fix typo at wp_versions.xml comment: verions->versions 2013-07-29 14:26:12 +07:00
ethicalhack3r
1722025a2c Added SWFUpload Content Spoofing in 3.5.2 see issue #243 2013-07-26 14:45:03 +02:00
ethicalhack3r
697b72836d Missunderstood known_headers array, removed security headers 2013-07-25 20:01:55 +02:00
ethicalhack3r
b6777fd0d7 Added security headers 2013-07-25 19:56:06 +02:00
ethicalhack3r
6d2165acc3 Little refactoring 2013-07-25 19:47:16 +02:00
ethicalhack3r
c33e553175 Handle when there are 2 headers of the same name 2013-07-25 19:41:03 +02:00
erwanlr
ab1381e830 WpItems::Detectable#passive_detection Complexity Reduced 2013-07-24 14:35:15 +02:00
erwanlr
669e1458da Fix #208 - Fixed vulnerable plugins still appear in the results 2013-07-24 14:18:02 +02:00
erwanlr
73f42bb73d Merge pull request #247 from za/master
Update plugin_vulns.xml: SQL injection fixed in events-calendar version ...
2013-07-24 01:01:47 -07:00
Zaki Akhmad
f50a6477bc Update plugin_vulns.xml: SQL injection fixed in events-calendar version 6.7.10 2013-07-24 14:01:59 +07:00
Christian Mehlmauer
501fbd825a clean logfile on wpstools too 2013-07-23 19:10:51 +02:00
Christian Mehlmauer
02111bf9b4 updated data files 2013-07-23 18:17:24 +02:00
Christian Mehlmauer
0f7bc49992 wordpress.org is really unstable at the moment 2013-07-23 18:16:48 +02:00
Christian Mehlmauer
2fb6f7169a fix issue #245 2013-07-23 12:20:26 +02:00