Commit Graph

535 Commits

Author SHA1 Message Date
erwanlr
e058b204f4 Typhoeus::Response hack moved to hacks.rb, ignoring hacks.rb in coverage 2013-03-22 18:37:28 +01:00
erwanlr
d937b20d79 Vulnerability::Output specs 2013-03-22 18:26:27 +01:00
erwanlr
af4ecc4084 WpVersion specs 2013-03-22 18:08:56 +01:00
erwanlr
92414d0c2f WpUser specs 2013-03-22 17:57:31 +01:00
erwanlr
cb9717f6e7 WpTheme specs 2013-03-22 17:33:57 +01:00
erwanlr
a635b3aef6 WpPlugin specs 2013-03-22 16:56:37 +01:00
erwanlr
ad6ff2f7f0 WpItem specs 2013-03-21 15:08:16 +01:00
erwanlr
4d687544d2 sample renamed 2013-03-20 20:24:22 +01:00
erwanlr
543a6fbaa2 Vulnerability specs 2013-03-20 19:29:34 +01:00
erwanlr
4c5f02865f Output the timthumb version if found 2013-03-19 23:53:43 +01:00
erwanlr
dfcfaa2041 Missing statement 2013-03-19 23:22:28 +01:00
erwanlr
d016d33747 New enumeration system 2013-03-19 22:59:20 +01:00
erwanlr
634a6222f7 Added occasions CSRF 2013-03-19 21:35:39 +01:00
erwanlr
0db4740a82 Added count-per-day XSS 2013-03-19 21:31:09 +01:00
erwanlr
3201620700 Added simply-poll multiple vulnerabilities 2013-03-18 16:33:10 +01:00
Christian Mehlmauer
17eb43df64 fix issue 147 2013-03-18 09:58:30 +01:00
Christian Mehlmauer
08f9d0e67a Added checks for old ruby. Otherwise there will be syntax errors 2013-03-17 22:05:34 +01:00
erwanlr
5e36be4f63 Added bp-gallery XSS 2013-03-16 14:06:46 +01:00
erwanlr
a795b3b124 Added o2s-gallery XSS 2013-03-16 14:05:00 +01:00
erwanlr
696a1262a8 Added wp-e-commerce XSS 2013-03-16 14:02:59 +01:00
erwanlr
692c8e27fa Add leaguemanager 3.8 SQLi 2013-03-15 09:58:18 +01:00
erwanlr
b6188cb0ba New line char has to be double quoted 2013-03-12 15:37:51 +01:00
erwanlr
28300814f5 More error details for XSD checks 2013-03-12 15:34:25 +01:00
erwanlr
a298e431cc Add line & column of the malformation in XML checks 2013-03-12 15:12:32 +01:00
erwanlr
0a50bcadc2 Add terillion-reviews XSS 2013-03-12 15:00:04 +01:00
erwanlr
de3d62ba92 Creation of a function xml instead of a hack for Nokogiri::XML 2013-03-11 17:59:26 +01:00
erwanlr
64c3c29597 StatsPlugin code factoring 2013-03-11 17:52:19 +01:00
erwanlr
ae61b95707 Most popular plugins updated 2013-03-11 17:44:50 +01:00
erwanlr
669bb3892e ListGeneratorPlugin code factoring 2013-03-11 17:44:20 +01:00
erwanlr
c0312bbbe5 WpUser code factoring 2013-03-11 17:28:32 +01:00
erwanlr
2f14be09b5 All hacks moved to hacks.rb 2013-03-11 17:21:09 +01:00
erwanlr
9b5ee28f04 Missing file 2013-03-11 17:18:48 +01:00
erwanlr
2043adb76e Nokogiri::XML hack to set the default option to NOBLANKS 2013-03-11 17:18:05 +01:00
erwanlr
eaffb139ef Bug Fix : Wp 3.5 & 3.5.1 not detected from advanced fingerprinting. Trying to reduce the complexity of WpVersion::find_from_advanced_fingerprinting 2013-03-11 16:53:05 +01:00
erwanlr
763bd5a10c scan_url_for_pattern renamed to scan_url 2013-03-11 16:17:25 +01:00
erwanlr
5f7ca09e55 WpVersion code factoring 2013-03-11 15:59:38 +01:00
erwanlr
eadebd387a Fixes #145 : vkontakte-api XSS added 2013-03-11 10:59:59 +01:00
ethicalhack3r
9434db242b Fixed syntax error. 2013-03-10 23:54:07 +01:00
ethicalhack3r
97ec9a6aa7 Refactored #default_wp_content_dir_exists? spec. 2013-03-10 23:52:36 +01:00
ethicalhack3r
7a9a72d285 Added CVE number to CVE-2013-1808 plugin vulns. 2013-03-10 12:30:45 +01:00
ethicalhack3r
ae6485bfd1 Added snazzy-archives plugin vuln, see Issue #143. 2013-03-10 12:25:44 +01:00
ethicalhack3r
19d7c3122d Added more CVE-2013-1808 vulns, see Issue #142. Thanks Henri! 2013-03-10 12:22:48 +01:00
ethicalhack3r
ed2eb44b38 Added default wp-content dir detection, see Issue #141. 2013-03-10 12:08:49 +01:00
Christian Mehlmauer
7c110bf6d3 added checks for well formed xml 2013-03-05 21:52:41 +01:00
ethicalhack3r
a4656c1837 Fixed stupid mistake where I broke the XML. >.< 2013-03-05 20:42:50 +01:00
ethicalhack3r
fd4359433c Added themes vulnerable to ZeroClipboard XSS. 2013-03-05 20:39:48 +01:00
ethicalhack3r
8d5ae7f94f Added plugins affected by ZeroClipboard XSS. 2013-03-05 20:23:00 +01:00
erwanlr
08e66a86ce Fixes code coverage for common libs 2013-03-05 14:21:13 +01:00
erwanlr
9525b33988 Require homogenization 2013-03-05 14:13:15 +01:00
erwanlr
b8ccfa23d9 Fixes #140 xml_rpc_url in the body 2013-03-05 13:49:47 +01:00