Compare commits

..

1 Commits

Author SHA1 Message Date
dependabot[bot]
c58a1e2177 Bump docker/setup-buildx-action from 2 to 3
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 2 to 3.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-27 10:15:23 +00:00
7 changed files with 6 additions and 16 deletions

View File

@@ -9,7 +9,7 @@ jobs:
strategy: strategy:
matrix: matrix:
ruby: [2.7, '3.0', 3.1, 3.2] ruby: [2.7, '3.0', 3.1]
steps: steps:
- name: Checkout code - name: Checkout code

View File

@@ -37,7 +37,7 @@ jobs:
uses: docker/setup-qemu-action@v2 uses: docker/setup-qemu-action@v2
- name: Set up Docker Buildx - name: Set up Docker Buildx
uses: docker/setup-buildx-action@v2 uses: docker/setup-buildx-action@v3
id: buildx id: buildx
with: with:
install: true install: true

View File

@@ -38,9 +38,7 @@ When using a pentesting distubution (such as Kali Linux), it is recommended to i
### In macOSX via Homebrew ### In macOSX via Homebrew
```shell `brew install wpscanteam/tap/wpscan`
brew install wpscanteam/tap/wpscan
```
### From RubyGems ### From RubyGems

View File

@@ -7,10 +7,6 @@ module WPScan
class KnownLocations < CMSScanner::Finders::Finder class KnownLocations < CMSScanner::Finders::Finder
include CMSScanner::Finders::Finder::Enumerator include CMSScanner::Finders::Finder::Enumerator
def valid_response_codes
@valid_response_codes ||= [200, 206].freeze
end
SQL_PATTERN = /(?:DROP|(?:UN)?LOCK|CREATE|ALTER) (?:TABLE|DATABASE)|INSERT INTO/.freeze SQL_PATTERN = /(?:DROP|(?:UN)?LOCK|CREATE|ALTER) (?:TABLE|DATABASE)|INSERT INTO/.freeze
# @param [ Hash ] opts # @param [ Hash ] opts
@@ -21,7 +17,7 @@ module WPScan
def aggressive(opts = {}) def aggressive(opts = {})
found = [] found = []
enumerate(potential_urls(opts), opts.merge(check_full_response: valid_response_codes)) do |res| enumerate(potential_urls(opts), opts.merge(check_full_response: 200)) do |res|
if res.effective_url.end_with?('.zip') if res.effective_url.end_with?('.zip')
next unless %r{\Aapplication/zip}i.match?(res.headers['Content-Type']) next unless %r{\Aapplication/zip}i.match?(res.headers['Content-Type'])
else else

View File

@@ -92,7 +92,7 @@ module WPScan
tags: 'Tags', tags: 'Tags',
text_domain: 'Text Domain' text_domain: 'Text Domain'
}.each do |attribute, tag| }.each do |attribute, tag|
instance_variable_set(:"@#{attribute}", parse_style_tag(style_body, tag)&.force_encoding('UTF-8')) instance_variable_set(:"@#{attribute}", parse_style_tag(style_body, tag))
end end
end end

View File

@@ -16,8 +16,5 @@ def classify_slug(slug)
classified = slug.to_s.gsub(/[^a-z\d\-]/i, '-').gsub(/-{1,}/, '_').camelize.to_s classified = slug.to_s.gsub(/[^a-z\d\-]/i, '-').gsub(/-{1,}/, '_').camelize.to_s
classified = "D_#{classified}" if /\d/.match?(classified[0]) classified = "D_#{classified}" if /\d/.match?(classified[0])
# Special case for slugs with all non-latin characters.
classified = "HexSlug_#{slug.bytes.map { |i| i.to_s(16) }.join}" if classified.empty?
classified.to_sym classified.to_sym
end end

View File

@@ -7,8 +7,7 @@ describe '#classify_slug' do
'12-slug' => :D_12Slug, '12-slug' => :D_12Slug,
'slug.s' => :SlugS, 'slug.s' => :SlugS,
'slug yolo $' => :SlugYolo, 'slug yolo $' => :SlugYolo,
'slug $ ab.cd/12' => :SlugAbCd12, 'slug $ ab.cd/12' => :SlugAbCd12
'カスタムテーマ' => :HexSlug_e382abe382b9e382bfe383a0e38386e383bce3839e
}.each do |slug, expected_symbol| }.each do |slug, expected_symbol|
context "when #{slug}" do context "when #{slug}" do
it "returns #{expected_symbol}" do it "returns #{expected_symbol}" do