WpTarget

# File lib/wpscan/wp_target.rb, line 24
def initialize(target_url, options = {})
  super(target_url)

  @verbose        = options[:verbose]
  @wp_content_dir = options[:wp_content_dir]
  @wp_plugins_dir = options[:wp_plugins_dir]
  @multisite      = nil

  Browser.instance(options.merge(:max_threads => options[:threads]))
end

# File lib/wpscan/wp_target.rb, line 74
def self.valid_response_codes
  [200, 301, 302, 401, 403, 500, 400]
end

# File lib/wpscan/wp_target.rb, line 116
def debug_log_url
  @uri.merge("#{wp_content_dir()}/debug.log").to_s
end

# File lib/wpscan/wp_target.rb, line 111
def has_debug_log?
  WebSite.has_log?(debug_log_url, %{\[[^\]]+\] PHP (?:Warning|Error|Notice):})
end

# File lib/wpscan/wp_target.rb, line 100
def has_plugin?(name, version = nil)
  WpPlugin.new(
    @uri,
    name: name,
    version: version,
    wp_content_dir: wp_content_dir,
    wp_plugins_dir: wp_plugins_dir
  ).exists?
end

# File lib/wpscan/wp_target.rb, line 61
def login_url
  url = @uri.merge('wp-login.php').to_s

  # Let's check if the login url is redirected (to https url for example)
  redirection = redirection(url)
  if redirection
    url = redirection
  end

  url
end

# File lib/wpscan/wp_target.rb, line 130
def search_replace_db_2_exists?
  resp = Browser.get(search_replace_db_2_url)
  resp.code == 200 && resp.body[%{by interconnect}]
end

# File lib/wpscan/wp_target.rb, line 125
def search_replace_db_2_url
  @uri.merge('searchreplacedb2.php').to_s
end

# File lib/wpscan/wp_target.rb, line 80
def theme
  WpTheme.find(@uri)
end

# File lib/wpscan/wp_target.rb, line 89
def version(versions_xml)
  WpVersion.find(@uri, wp_content_dir, wp_plugins_dir, versions_xml)
end

# File lib/wpscan/wp_target.rb, line 37
def wordpress?
  wordpress = false

  response = Browser.get_and_follow_location(@uri.to_s)

  if response.body =~ /["'][^"']*\/wp-content\/[^"']*["']/
    wordpress = true
  else
    response = Browser.get_and_follow_location(xml_rpc_url)

    if response.body =~ %{XML-RPC server accepts POST requests only}
      wordpress = true
    else
      response = Browser.get_and_follow_location(login_url)

      if response.code == 200 && response.body =~ %{WordPress}
        wordpress = true
      end
    end
  end

  wordpress
end