Christian Mehlmauer
|
d7975b6192
|
version detection
|
2015-01-20 15:14:32 +01:00 |
|
Christian Mehlmauer
|
0a0fe55427
|
improve regex and more samples
|
2015-01-20 00:35:46 +01:00 |
|
Christian Mehlmauer
|
8e08a20178
|
missing ?
|
2015-01-20 00:06:34 +01:00 |
|
Christian Mehlmauer
|
9dd44808ec
|
detect even more
|
2015-01-20 00:04:49 +01:00 |
|
Christian Mehlmauer
|
507cf1d511
|
fix regex
|
2015-01-19 23:41:51 +01:00 |
|
Christian Mehlmauer
|
53f3ce8b1f
|
advanced version detection
|
2015-01-19 23:38:26 +01:00 |
|
Christian Mehlmauer
|
82141c2535
|
refine version detection regex
|
2015-01-08 23:42:15 +01:00 |
|
Christian Mehlmauer
|
3d6de3fe75
|
refine version detection regex
|
2015-01-08 23:34:19 +01:00 |
|
erwanlr
|
03ab396353
|
Ensures that the version detected by stylesheets is present more than once. Ref #478
|
2015-01-08 23:26:36 +01:00 |
|
erwanlr
|
6221601376
|
Fixes a typo
|
2015-01-08 22:53:14 +01:00 |
|
erwanlr
|
71fdef45c9
|
Adds passive WP version detection from stylesheets. Fix #478 - Ref #750
|
2015-01-08 20:45:15 +01:00 |
|
erwanlr
|
42e8ab1680
|
Updates the version pattern to allow letters in the format - Ref #745
|
2015-01-01 20:13:33 +01:00 |
|
erwanlr
|
ab7b7de60a
|
Detects version in a release date format - Fixes #745
|
2015-01-01 19:45:10 +01:00 |
|
erwanlr
|
88808db9a5
|
Fixes the progressbar being overriden by next brute forcing attempts
|
2014-12-10 22:05:35 +01:00 |
|
erwanlr
|
dfad0fd6bd
|
Implements Firefart solution to avoid mandatory blank newline at the end of the wordlist
|
2014-12-10 21:56:45 +01:00 |
|
erwanlr
|
ac609445fb
|
Adds a statement about mendatory newlines at the end of list - Ref #739
|
2014-12-10 18:11:12 +01:00 |
|
erwanlr
|
0223f74a53
|
Adds the --usernames option - Fixes #739
|
2014-12-10 17:59:07 +01:00 |
|
erwanlr
|
e3ac331a71
|
Removes the theme version check from the readme, unrealistic scenario - Ref #737
|
2014-12-10 17:01:14 +01:00 |
|
erwanlr
|
e09b4cc76d
|
Adds some readme files to check for plugin versions - Fixes #737
|
2014-12-10 16:55:00 +01:00 |
|
erwanlr
|
c24ed707ef
|
Improves plugin/theme version detection by looking at the "Version: "- Fixes #732
|
2014-12-05 18:11:49 +01:00 |
|
ethicalhack3r
|
d230221999
|
Prevent parent theme infinite loop
|
2014-12-02 16:40:18 +01:00 |
|
Henri Salo
|
79cb9c8142
|
Remove obsolete code. If use cases are found from active installations these functions can be taken into use with proper unit tests.
|
2014-11-26 01:18:12 +02:00 |
|
ethicalhack3r
|
4a7b4754f0
|
Fix wpvulndb url #700
|
2014-09-29 12:51:48 +02:00 |
|
ethicalhack3r
|
33149caede
|
Update url
|
2014-09-26 10:20:38 +02:00 |
|
ethicalhack3r
|
67bec7136b
|
Merge branch 'vdb_intergration'
Conflicts:
lib/common/models/vulnerability.rb
spec/lib/common/models/vulnerability_spec.rb
spec/lib/common/models/wp_item_spec.rb
spec/lib/common/models/wp_plugin_spec.rb
spec/lib/common/models/wp_theme_spec.rb
spec/lib/common/models/wp_version_spec.rb
|
2014-09-26 10:15:36 +02:00 |
|
Christian Mehlmauer
|
7f9e178f75
|
changed some colors
|
2014-09-22 23:34:42 +02:00 |
|
ethicalhack3r
|
b19696090f
|
Fix for #694
|
2014-09-21 22:02:30 +02:00 |
|
ethicalhack3r
|
d7488bd402
|
Fix bug in output
|
2014-09-21 21:05:49 +02:00 |
|
ethicalhack3r
|
604299a1ac
|
Update VDB url
|
2014-09-20 10:09:35 +02:00 |
|
ethicalhack3r
|
6800d51347
|
Undo changes, seem to work with new json ref arrays
|
2014-09-20 09:32:13 +02:00 |
|
ethicalhack3r
|
7cecd249a8
|
Update json parsing to reflect new reference arrays
|
2014-09-20 09:28:48 +02:00 |
|
ethicalhack3r
|
884a19b13d
|
Link to new vdb in references output
|
2014-09-18 10:24:55 +02:00 |
|
Christian Mehlmauer
|
eb73025338
|
directory listing
|
2014-09-05 18:27:06 +02:00 |
|
Christian Mehlmauer
|
3131c6cb5d
|
fix #673
|
2014-08-29 07:27:29 +02:00 |
|
erwanlr
|
5f53297f58
|
Also ensure to not process empty Location headers
|
2014-08-15 23:00:42 +02:00 |
|
erwanlr
|
cebd808674
|
Ensures a nil location is not processed when enumerating usernames
|
2014-08-15 22:54:17 +02:00 |
|
ethicalhack3r
|
ca100ef7e9
|
Merge branch 'json_data'
Conflicts:
data/plugin_vulns.xml
data/theme_vulns.xml
|
2014-08-01 13:34:34 +02:00 |
|
ethicalhack3r
|
8d2ec115f5
|
Changed vuln data references to url
|
2014-07-31 11:56:14 +02:00 |
|
ethicalhack3r
|
08dfa4cab2
|
Implemented Erwan's feedback
|
2014-07-31 11:14:22 +02:00 |
|
ethicalhack3r
|
14be7dead5
|
Work on json database file parsing, still needs some work.
|
2014-07-30 18:34:42 +02:00 |
|
erwanlr
|
ab2e368c6f
|
Fixes #625 - Only parse styles when needed
|
2014-07-30 15:36:00 +01:00 |
|
Christian Mehlmauer
|
26e0066c82
|
Only output if different from style_url
|
2014-07-16 18:38:39 +02:00 |
|
Christian Mehlmauer
|
6ebb9b6f66
|
Fixed false positive theme detection
|
2014-07-16 18:25:35 +02:00 |
|
ethicalhack3r
|
a8a716e0bd
|
Change metasploit url to updated one
|
2014-07-15 14:35:56 +02:00 |
|
Christian Mehlmauer
|
479b21a722
|
Replace all occurences
|
2014-07-10 00:30:33 +02:00 |
|
Christian Mehlmauer
|
ceeaeaf487
|
better username extraction
|
2014-07-10 00:24:20 +02:00 |
|
erwanlr
|
98d9e87356
|
Changes VersionCompare#is_newer_or_same? by lesser_or_equal?
|
2014-07-03 12:33:27 +02:00 |
|
erwanlr
|
d9b86f9922
|
Fix Timthumb RCE detection for version 2.0 (which was excluded)
|
2014-07-02 12:17:14 +02:00 |
|
erwanlr
|
605e9cfe6d
|
Changes the vulnerable version of timthumb to 1.33 instead of 1.34
|
2014-07-01 22:10:01 +02:00 |
|
erwanlr
|
dd53c7b200
|
Fix #506 - Timthumbs WebShot RCE detection
|
2014-07-01 21:44:39 +02:00 |
|