module WpFullPathDisclosure

Public Instance Methods

full_path_disclosure_url() click to toggle source

# File lib/wpscan/modules/wp_full_path_disclosure.rb, line 27
def full_path_disclosure_url
  @uri.merge('wp-includes/rss-functions.php').to_s
end

has_full_path_disclosure?() click to toggle source

Check for Full Path Disclosure (FPD)

# File lib/wpscan/modules/wp_full_path_disclosure.rb, line 22
def has_full_path_disclosure?
  response = Browser.instance.get(full_path_disclosure_url())
  response.body[%r{Fatal error}]
end