37 lines
1.0 KiB
Ruby
37 lines
1.0 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
describe WPScan::Finders::TimthumbVersion::BadRequest do
|
|
subject(:finder) { described_class.new(target) }
|
|
let(:target) { WPScan::Model::Timthumb.new(url) }
|
|
let(:url) { 'http://ex.lo/timthumb.php' }
|
|
let(:fixtures) { FINDERS_FIXTURES.join('timthumb_version', 'bad_request') }
|
|
|
|
describe '#aggressive' do
|
|
before { stub_request(:get, url).to_return(body: File.read(fixtures.join(file))) }
|
|
after { expect(finder.aggressive).to eql @expected }
|
|
|
|
context 'when no version' do
|
|
let(:file) { 'no_version.php' }
|
|
|
|
it 'returns nil' do
|
|
@expected = nil
|
|
end
|
|
end
|
|
|
|
context 'when a version' do
|
|
let(:file) { '2.8.14.php' }
|
|
|
|
it 'returns the expected version' do
|
|
@expected = WPScan::Model::Version.new(
|
|
'2.8.14',
|
|
confidence: 90,
|
|
found_by: 'Bad Request (Aggressive Detection)',
|
|
interesting_entries: [
|
|
"#{url}, TimThumb version : 2.8.14"
|
|
]
|
|
)
|
|
end
|
|
end
|
|
end
|
|
end
|