Parent

WpDetector

Public Class Methods

aggressive_detection(options, items = []) click to toggle source
# File lib/wpscan/wp_detector.rb, line 21
def self.aggressive_detection(options, items = [])
  WpOptions.check_options(options)

  result = items
  unless items == nil or items.length == 0
    result = passive_detection(options[:url], options[:type], options[:wp_content_dir])
  end

  enum_results = WpEnumerator.enumerate(options)
  enum_results.each do |enum_result|
    result << enum_result
  end
  result
end
passive_detection(url, type, wp_content_dir) click to toggle source

plugins and themes can be found in the source code :

<script src='http://example.com/wp-content/plugins/s2member/...' />
<link rel='stylesheet' href='http://example.com/wp-content/plugins/wp-minify/..' type='text/css' media='screen'/>
...
# File lib/wpscan/wp_detector.rb, line 40
def self.passive_detection(url, type, wp_content_dir)
  items         = []
  response      = Browser.instance.get(url)
  regex1        = %{(?:[^=:]+)\s?(?:=|:)\s?(?:"|')[^"']+\\?/}
  regex2        = %{\\?/}
  regex3        = %{\\?/([^/\\"']+)\\?(?:/|"|')}
  # Custom wp-content dir is now used in this regex
  names = response.body.scan(/#{regex1}#{wp_content_dir}#{regex2}#{type}#{regex3}/)

  names.flatten!
  names.uniq!

  names.each do |item|
    items << { :base_url =>  url, :name => item, :path => "#{type}/#{item}" }
  end
  items
end

[Validate]

Generated with the Darkfish Rdoc Generator 2.