# File lib/wpscan/wp_detector.rb, line 21 def self.aggressive_detection(options, items = []) WpOptions.check_options(options) result = items unless items == nil or items.length == 0 result = passive_detection(options[:url], options[:type], options[:wp_content_dir]) end enum_results = WpEnumerator.enumerate(options) enum_results.each do |enum_result| result << enum_result end result end
plugins and themes can be found in the source code :
<script src='http://example.com/wp-content/plugins/s2member/...' /> <link rel='stylesheet' href='http://example.com/wp-content/plugins/wp-minify/..' type='text/css' media='screen'/> ...
# File lib/wpscan/wp_detector.rb, line 40 def self.passive_detection(url, type, wp_content_dir) items = [] response = Browser.instance.get(url) regex1 = %{(?:[^=:]+)\s?(?:=|:)\s?(?:"|')[^"']+\\?/} regex2 = %{\\?/} regex3 = %{\\?/([^/\\"']+)\\?(?:/|"|')} # Custom wp-content dir is now used in this regex names = response.body.scan(/#{regex1}#{wp_content_dir}#{regex2}#{type}#{regex3}/) names.flatten! names.uniq! names.each do |item| items << { :base_url => url, :name => item, :path => "#{type}/#{item}" } end items end
Generated with the Darkfish Rdoc Generator 2.