611 lines
27 KiB
HTML
611 lines
27 KiB
HTML
<!DOCTYPE html>
|
|
|
|
<html>
|
|
<head>
|
|
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
|
|
|
|
<title>module WpUser::BruteForcable - RDoc Documentation</title>
|
|
|
|
<link type="text/css" media="screen" href="../rdoc.css" rel="stylesheet">
|
|
|
|
<script type="text/javascript">
|
|
var rdoc_rel_prefix = "../";
|
|
</script>
|
|
|
|
<script type="text/javascript" charset="utf-8" src="../js/jquery.js"></script>
|
|
<script type="text/javascript" charset="utf-8" src="../js/navigation.js"></script>
|
|
<script type="text/javascript" charset="utf-8" src="../js/search_index.js"></script>
|
|
<script type="text/javascript" charset="utf-8" src="../js/search.js"></script>
|
|
<script type="text/javascript" charset="utf-8" src="../js/searcher.js"></script>
|
|
<script type="text/javascript" charset="utf-8" src="../js/darkfish.js"></script>
|
|
|
|
|
|
<body id="top" class="module">
|
|
<nav id="metadata">
|
|
<nav id="home-section" class="section">
|
|
<h3 class="section-header">
|
|
<a href="../index.html">Home</a>
|
|
<a href="../table_of_contents.html#classes">Classes</a>
|
|
<a href="../table_of_contents.html#methods">Methods</a>
|
|
</h3>
|
|
</nav>
|
|
|
|
|
|
<nav id="search-section" class="section project-section" class="initially-hidden">
|
|
<form action="#" method="get" accept-charset="utf-8">
|
|
<h3 class="section-header">
|
|
<input type="text" name="search" placeholder="Search" id="search-field"
|
|
title="Type to search, Up and Down to navigate, Enter to load">
|
|
</h3>
|
|
</form>
|
|
|
|
<ul id="search-results" class="initially-hidden"></ul>
|
|
</nav>
|
|
|
|
|
|
|
|
|
|
<div id="file-metadata">
|
|
<nav id="file-list-section" class="section">
|
|
<h3 class="section-header">Defined In</h3>
|
|
<ul>
|
|
<li>lib/common/models/wp_user/brute_forcable.rb
|
|
</ul>
|
|
</nav>
|
|
|
|
|
|
</div>
|
|
|
|
<div id="class-metadata">
|
|
|
|
|
|
|
|
|
|
<!-- Method Quickref -->
|
|
<nav id="method-list-section" class="section">
|
|
<h3 class="section-header">Methods</h3>
|
|
|
|
<ul class="link-list">
|
|
|
|
<li ><a href="#method-c-passwords_from_wordlist">::passwords_from_wordlist</a>
|
|
|
|
<li ><a href="#method-i-brute_force">#brute_force</a>
|
|
|
|
<li ><a href="#method-i-login_request">#login_request</a>
|
|
|
|
<li ><a href="#method-i-progress_bar">#progress_bar</a>
|
|
|
|
<li ><a href="#method-i-valid_password-3F">#valid_password?</a>
|
|
|
|
</ul>
|
|
</nav>
|
|
|
|
</div>
|
|
|
|
<div id="project-metadata">
|
|
<nav id="fileindex-section" class="section project-section">
|
|
<h3 class="section-header">Pages</h3>
|
|
|
|
<ul>
|
|
|
|
<li class="file"><a href="../CREDITS.html">CREDITS</a>
|
|
|
|
<li class="file"><a href="../Gemfile.html">Gemfile</a>
|
|
|
|
<li class="file"><a href="../Gemfile_lock.html">Gemfile.lock</a>
|
|
|
|
<li class="file"><a href="../LICENSE.html">LICENSE</a>
|
|
|
|
<li class="file"><a href="../README.html">README</a>
|
|
|
|
<li class="file"><a href="../README_md.html">README</a>
|
|
|
|
<li class="file"><a href="../cache/browser/cookie-jar.html">cookie-jar</a>
|
|
|
|
<li class="file"><a href="../conf/browser_conf_json.html">browser.conf.json</a>
|
|
|
|
<li class="file"><a href="../generate_doc_sh.html">generate_doc.sh</a>
|
|
|
|
</ul>
|
|
</nav>
|
|
|
|
<nav id="classindex-section" class="section project-section">
|
|
<h3 class="section-header">Class and Module Index</h3>
|
|
|
|
<ul class="link-list">
|
|
|
|
<li><a href="../Array.html">Array</a>
|
|
|
|
<li><a href="../Browser.html">Browser</a>
|
|
|
|
<li><a href="../Browser/Actions.html">Browser::Actions</a>
|
|
|
|
<li><a href="../Browser/Options.html">Browser::Options</a>
|
|
|
|
<li><a href="../CacheFileStore.html">CacheFileStore</a>
|
|
|
|
<li><a href="../CheckerPlugin.html">CheckerPlugin</a>
|
|
|
|
<li><a href="../CustomOptionParser.html">CustomOptionParser</a>
|
|
|
|
<li><a href="../Ethon.html">Ethon</a>
|
|
|
|
<li><a href="../Ethon/Easy.html">Ethon::Easy</a>
|
|
|
|
<li><a href="../Ethon/Easy/Options.html">Ethon::Easy::Options</a>
|
|
|
|
<li><a href="../File.html">File</a>
|
|
|
|
<li><a href="../Gem.html">Gem</a>
|
|
|
|
<li><a href="../GenerateList.html">GenerateList</a>
|
|
|
|
<li><a href="../GitUpdater.html">GitUpdater</a>
|
|
|
|
<li><a href="../ListGeneratorPlugin.html">ListGeneratorPlugin</a>
|
|
|
|
<li><a href="../Object.html">Object</a>
|
|
|
|
<li><a href="../Plugin.html">Plugin</a>
|
|
|
|
<li><a href="../Plugins.html">Plugins</a>
|
|
|
|
<li><a href="../StatsPlugin.html">StatsPlugin</a>
|
|
|
|
<li><a href="../SvnParser.html">SvnParser</a>
|
|
|
|
<li><a href="../SvnUpdater.html">SvnUpdater</a>
|
|
|
|
<li><a href="../Terminal.html">Terminal</a>
|
|
|
|
<li><a href="../Terminal/Table.html">Terminal::Table</a>
|
|
|
|
<li><a href="../Terminal/Table/Style.html">Terminal::Table::Style</a>
|
|
|
|
<li><a href="../Typhoeus.html">Typhoeus</a>
|
|
|
|
<li><a href="../Typhoeus/Request.html">Typhoeus::Request</a>
|
|
|
|
<li><a href="../Typhoeus/Request/Cacheable.html">Typhoeus::Request::Cacheable</a>
|
|
|
|
<li><a href="../Typhoeus/Response.html">Typhoeus::Response</a>
|
|
|
|
<li><a href="../TyphoeusCache.html">TyphoeusCache</a>
|
|
|
|
<li><a href="../URI.html">URI</a>
|
|
|
|
<li><a href="../Updater.html">Updater</a>
|
|
|
|
<li><a href="../UpdaterFactory.html">UpdaterFactory</a>
|
|
|
|
<li><a href="../VersionCompare.html">VersionCompare</a>
|
|
|
|
<li><a href="../Vulnerabilities.html">Vulnerabilities</a>
|
|
|
|
<li><a href="../Vulnerabilities/Output.html">Vulnerabilities::Output</a>
|
|
|
|
<li><a href="../Vulnerability.html">Vulnerability</a>
|
|
|
|
<li><a href="../Vulnerability/Output.html">Vulnerability::Output</a>
|
|
|
|
<li><a href="../WebSite.html">WebSite</a>
|
|
|
|
<li><a href="../WpItem.html">WpItem</a>
|
|
|
|
<li><a href="../WpItem/Existable.html">WpItem::Existable</a>
|
|
|
|
<li><a href="../WpItem/Findable.html">WpItem::Findable</a>
|
|
|
|
<li><a href="../WpItem/Infos.html">WpItem::Infos</a>
|
|
|
|
<li><a href="../WpItem/Output.html">WpItem::Output</a>
|
|
|
|
<li><a href="../WpItem/Versionable.html">WpItem::Versionable</a>
|
|
|
|
<li><a href="../WpItem/Vulnerable.html">WpItem::Vulnerable</a>
|
|
|
|
<li><a href="../WpItems.html">WpItems</a>
|
|
|
|
<li><a href="../WpItems/Detectable.html">WpItems::Detectable</a>
|
|
|
|
<li><a href="../WpItems/Output.html">WpItems::Output</a>
|
|
|
|
<li><a href="../WpPlugin.html">WpPlugin</a>
|
|
|
|
<li><a href="../WpPlugin/Vulnerable.html">WpPlugin::Vulnerable</a>
|
|
|
|
<li><a href="../WpPlugins.html">WpPlugins</a>
|
|
|
|
<li><a href="../WpPlugins/Detectable.html">WpPlugins::Detectable</a>
|
|
|
|
<li><a href="../WpTarget.html">WpTarget</a>
|
|
|
|
<li><a href="../WpTarget/Malwares.html">WpTarget::Malwares</a>
|
|
|
|
<li><a href="../WpTarget/WpConfigBackup.html">WpTarget::WpConfigBackup</a>
|
|
|
|
<li><a href="../WpTarget/WpCustomDirectories.html">WpTarget::WpCustomDirectories</a>
|
|
|
|
<li><a href="../WpTarget/WpFullPathDisclosure.html">WpTarget::WpFullPathDisclosure</a>
|
|
|
|
<li><a href="../WpTarget/WpLoginProtection.html">WpTarget::WpLoginProtection</a>
|
|
|
|
<li><a href="../WpTarget/WpReadme.html">WpTarget::WpReadme</a>
|
|
|
|
<li><a href="../WpTarget/WpRegistrable.html">WpTarget::WpRegistrable</a>
|
|
|
|
<li><a href="../WpTheme.html">WpTheme</a>
|
|
|
|
<li><a href="../WpTheme/Findable.html">WpTheme::Findable</a>
|
|
|
|
<li><a href="../WpTheme/Versionable.html">WpTheme::Versionable</a>
|
|
|
|
<li><a href="../WpTheme/Vulnerable.html">WpTheme::Vulnerable</a>
|
|
|
|
<li><a href="../WpThemes.html">WpThemes</a>
|
|
|
|
<li><a href="../WpThemes/Detectable.html">WpThemes::Detectable</a>
|
|
|
|
<li><a href="../WpTimthumb.html">WpTimthumb</a>
|
|
|
|
<li><a href="../WpTimthumb/Existable.html">WpTimthumb::Existable</a>
|
|
|
|
<li><a href="../WpTimthumb/Output.html">WpTimthumb::Output</a>
|
|
|
|
<li><a href="../WpTimthumb/Versionable.html">WpTimthumb::Versionable</a>
|
|
|
|
<li><a href="../WpTimthumbs.html">WpTimthumbs</a>
|
|
|
|
<li><a href="../WpTimthumbs/Detectable.html">WpTimthumbs::Detectable</a>
|
|
|
|
<li><a href="../WpUser.html">WpUser</a>
|
|
|
|
<li><a href="../WpUser/BruteForcable.html">WpUser::BruteForcable</a>
|
|
|
|
<li><a href="../WpUser/Existable.html">WpUser::Existable</a>
|
|
|
|
<li><a href="../WpUsers.html">WpUsers</a>
|
|
|
|
<li><a href="../WpUsers/BruteForcable.html">WpUsers::BruteForcable</a>
|
|
|
|
<li><a href="../WpUsers/Detectable.html">WpUsers::Detectable</a>
|
|
|
|
<li><a href="../WpUsers/Output.html">WpUsers::Output</a>
|
|
|
|
<li><a href="../WpVersion.html">WpVersion</a>
|
|
|
|
<li><a href="../WpVersion/Findable.html">WpVersion::Findable</a>
|
|
|
|
<li><a href="../WpVersion/Output.html">WpVersion::Output</a>
|
|
|
|
<li><a href="../WpVersion/Vulnerable.html">WpVersion::Vulnerable</a>
|
|
|
|
<li><a href="../WpscanOptions.html">WpscanOptions</a>
|
|
|
|
</ul>
|
|
</nav>
|
|
|
|
</div>
|
|
</nav>
|
|
|
|
<div id="documentation">
|
|
<h1 class="module">module WpUser::BruteForcable</h1>
|
|
|
|
<div id="description" class="description">
|
|
|
|
</div><!-- description -->
|
|
|
|
|
|
|
|
|
|
<section id="5Buntitled-5D" class="documentation-section">
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<!-- Methods -->
|
|
|
|
<section id="public-class-5Buntitled-5D-method-details" class="method-section section">
|
|
<h3 class="section-header">Public Class Methods</h3>
|
|
|
|
|
|
<div id="method-c-passwords_from_wordlist" class="method-detail ">
|
|
|
|
<div class="method-heading">
|
|
<span class="method-name">passwords_from_wordlist</span><span
|
|
class="method-args">(wordlist)</span>
|
|
|
|
<span class="method-click-advice">click to toggle source</span>
|
|
|
|
</div>
|
|
|
|
|
|
<div class="method-description">
|
|
|
|
<p>Load the passwords from the wordlist, which can be a file path or an array
|
|
or passwords</p>
|
|
|
|
<p><a href="../File.html">File</a> comments are ignored, but will miss
|
|
passwords if they start with a hash...</p>
|
|
|
|
<p>@param [ String, <a href="../Array.html">Array</a><String> ] wordlist</p>
|
|
|
|
<p>@return [ <a href="../Array.html">Array</a><String> ]</p>
|
|
|
|
|
|
|
|
|
|
<div class="method-source-code" id="passwords_from_wordlist-source">
|
|
<pre><span class="ruby-comment"># File lib/common/models/wp_user/brute_forcable.rb, line 123</span>
|
|
<span class="ruby-keyword">def</span> <span class="ruby-keyword">self</span>.<span class="ruby-identifier">passwords_from_wordlist</span>(<span class="ruby-identifier">wordlist</span>)
|
|
<span class="ruby-keyword">if</span> <span class="ruby-identifier">wordlist</span>.<span class="ruby-identifier">is_a?</span>(<span class="ruby-constant">String</span>)
|
|
<span class="ruby-identifier">passwords</span> = []
|
|
<span class="ruby-identifier">charset</span> = <span class="ruby-constant">File</span>.<span class="ruby-identifier">charset</span>(<span class="ruby-identifier">wordlist</span>).<span class="ruby-identifier">upcase</span>
|
|
<span class="ruby-identifier">opt</span> = <span class="ruby-node">"r:#{charset}"</span>
|
|
<span class="ruby-comment"># To remove warning when charset = UTF-8</span>
|
|
<span class="ruby-comment"># Ignoring internal encoding UTF-8: it is identical to external encoding utf-8</span>
|
|
<span class="ruby-identifier">opt</span> <span class="ruby-operator">+=</span> <span class="ruby-string">':UTF-8'</span> <span class="ruby-keyword">if</span> <span class="ruby-identifier">charset</span> <span class="ruby-operator">!=</span> <span class="ruby-string">'UTF-8'</span>
|
|
|
|
<span class="ruby-constant">File</span>.<span class="ruby-identifier">open</span>(<span class="ruby-identifier">wordlist</span>, <span class="ruby-identifier">opt</span>).<span class="ruby-identifier">each</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">line</span><span class="ruby-operator">|</span>
|
|
<span class="ruby-keyword">next</span> <span class="ruby-keyword">if</span> <span class="ruby-identifier">line</span>[<span class="ruby-value">0</span>,<span class="ruby-value">1</span>] <span class="ruby-operator">==</span> <span class="ruby-string">'#'</span>
|
|
|
|
<span class="ruby-identifier">passwords</span> <span class="ruby-operator"><<</span> <span class="ruby-identifier">line</span>.<span class="ruby-identifier">strip</span>
|
|
<span class="ruby-keyword">end</span>
|
|
<span class="ruby-keyword">elsif</span> <span class="ruby-identifier">wordlist</span>.<span class="ruby-identifier">is_a?</span>(<span class="ruby-constant">Array</span>)
|
|
<span class="ruby-identifier">passwords</span> = <span class="ruby-identifier">wordlist</span>
|
|
<span class="ruby-keyword">else</span>
|
|
<span class="ruby-identifier">raise</span> <span class="ruby-string">'Invalid wordlist, expected String or Array'</span>
|
|
<span class="ruby-keyword">end</span>
|
|
|
|
<span class="ruby-identifier">passwords</span>
|
|
<span class="ruby-keyword">end</span></pre>
|
|
</div><!-- passwords_from_wordlist-source -->
|
|
|
|
</div>
|
|
|
|
|
|
|
|
|
|
</div><!-- passwords_from_wordlist-method -->
|
|
|
|
|
|
</section><!-- public-class-method-details -->
|
|
|
|
<section id="public-instance-5Buntitled-5D-method-details" class="method-section section">
|
|
<h3 class="section-header">Public Instance Methods</h3>
|
|
|
|
|
|
<div id="method-i-brute_force" class="method-detail ">
|
|
|
|
<div class="method-heading">
|
|
<span class="method-name">brute_force</span><span
|
|
class="method-args">(wordlist, options = {})</span>
|
|
|
|
<span class="method-click-advice">click to toggle source</span>
|
|
|
|
</div>
|
|
|
|
|
|
<div class="method-description">
|
|
|
|
<p>Brute force the user with the wordlist supplied</p>
|
|
|
|
<p>It can take a long time to queue 2 million requests, for that reason, we
|
|
queue browser.max_threads, send browser.max_threads, queue
|
|
browser.max_threads and so on.</p>
|
|
|
|
<p>hydra.run only returns when it has recieved all of its, responses. This
|
|
means that while we are waiting for browser.max_threads, responses, we are
|
|
waiting…</p>
|
|
|
|
<p>@param [ String, <a href="../Array.html">Array</a><String> ] wordlist
|
|
The wordlist path @param [ Hash ] options @option options [ Boolean ]
|
|
:verbose @option options [ Boolean ] :show_progression</p>
|
|
|
|
<p>@return [ void ]</p>
|
|
|
|
|
|
|
|
|
|
<div class="method-source-code" id="brute_force-source">
|
|
<pre><span class="ruby-comment"># File lib/common/models/wp_user/brute_forcable.rb, line 21</span>
|
|
<span class="ruby-keyword">def</span> <span class="ruby-identifier">brute_force</span>(<span class="ruby-identifier">wordlist</span>, <span class="ruby-identifier">options</span> = {})
|
|
<span class="ruby-identifier">browser</span> = <span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>
|
|
<span class="ruby-identifier">hydra</span> = <span class="ruby-identifier">browser</span>.<span class="ruby-identifier">hydra</span>
|
|
<span class="ruby-identifier">passwords</span> = <span class="ruby-constant">BruteForcable</span>.<span class="ruby-identifier">passwords_from_wordlist</span>(<span class="ruby-identifier">wordlist</span>)
|
|
<span class="ruby-identifier">queue_count</span> = <span class="ruby-value">0</span>
|
|
<span class="ruby-identifier">found</span> = <span class="ruby-keyword">false</span>
|
|
<span class="ruby-identifier">progress_bar</span> = <span class="ruby-keyword">self</span>.<span class="ruby-identifier">progress_bar</span>(<span class="ruby-identifier">passwords</span>.<span class="ruby-identifier">size</span>, <span class="ruby-identifier">options</span>)
|
|
|
|
<span class="ruby-identifier">passwords</span>.<span class="ruby-identifier">each</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">password</span><span class="ruby-operator">|</span>
|
|
<span class="ruby-identifier">request</span> = <span class="ruby-identifier">login_request</span>(<span class="ruby-identifier">password</span>)
|
|
|
|
<span class="ruby-identifier">request</span>.<span class="ruby-identifier">on_complete</span> <span class="ruby-keyword">do</span> <span class="ruby-operator">|</span><span class="ruby-identifier">response</span><span class="ruby-operator">|</span>
|
|
<span class="ruby-identifier">progress_bar</span>.<span class="ruby-identifier">progress</span> <span class="ruby-operator">+=</span> <span class="ruby-value">1</span> <span class="ruby-keyword">if</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:show_progression</span>] <span class="ruby-operator">&&</span> <span class="ruby-operator">!</span><span class="ruby-identifier">found</span>
|
|
|
|
<span class="ruby-identifier">puts</span> <span class="ruby-node">"\n Trying Username : #{login} Password : #{password}"</span> <span class="ruby-keyword">if</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:verbose</span>]
|
|
|
|
<span class="ruby-keyword">if</span> <span class="ruby-identifier">valid_password?</span>(<span class="ruby-identifier">response</span>, <span class="ruby-identifier">password</span>, <span class="ruby-identifier">options</span>)
|
|
<span class="ruby-identifier">found</span> = <span class="ruby-keyword">true</span>
|
|
<span class="ruby-keyword">self</span>.<span class="ruby-identifier">password</span> = <span class="ruby-identifier">password</span>
|
|
<span class="ruby-keyword">return</span>
|
|
<span class="ruby-keyword">end</span>
|
|
<span class="ruby-keyword">end</span>
|
|
|
|
<span class="ruby-identifier">hydra</span>.<span class="ruby-identifier">queue</span>(<span class="ruby-identifier">request</span>)
|
|
<span class="ruby-identifier">queue_count</span> <span class="ruby-operator">+=</span> <span class="ruby-value">1</span>
|
|
|
|
<span class="ruby-keyword">if</span> <span class="ruby-identifier">queue_count</span> <span class="ruby-operator">>=</span> <span class="ruby-identifier">browser</span>.<span class="ruby-identifier">max_threads</span>
|
|
<span class="ruby-identifier">hydra</span>.<span class="ruby-identifier">run</span>
|
|
<span class="ruby-identifier">queue_count</span> = <span class="ruby-value">0</span>
|
|
<span class="ruby-identifier">puts</span> <span class="ruby-node">"Sent #{browser.max_threads} requests ..."</span> <span class="ruby-keyword">if</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:verbose</span>]
|
|
<span class="ruby-keyword">end</span>
|
|
<span class="ruby-keyword">end</span>
|
|
|
|
<span class="ruby-comment"># run all of the remaining requests</span>
|
|
<span class="ruby-identifier">hydra</span>.<span class="ruby-identifier">run</span>
|
|
<span class="ruby-keyword">end</span></pre>
|
|
</div><!-- brute_force-source -->
|
|
|
|
</div>
|
|
|
|
|
|
|
|
|
|
</div><!-- brute_force-method -->
|
|
|
|
|
|
<div id="method-i-login_request" class="method-detail ">
|
|
|
|
<div class="method-heading">
|
|
<span class="method-name">login_request</span><span
|
|
class="method-args">(password)</span>
|
|
|
|
<span class="method-click-advice">click to toggle source</span>
|
|
|
|
</div>
|
|
|
|
|
|
<div class="method-description">
|
|
|
|
<p>@param [ String ] password</p>
|
|
|
|
<p>@return [ <a href="../Typhoeus/Request.html">Typhoeus::Request</a> ]</p>
|
|
|
|
|
|
|
|
|
|
<div class="method-source-code" id="login_request-source">
|
|
<pre><span class="ruby-comment"># File lib/common/models/wp_user/brute_forcable.rb, line 77</span>
|
|
<span class="ruby-keyword">def</span> <span class="ruby-identifier">login_request</span>(<span class="ruby-identifier">password</span>)
|
|
<span class="ruby-constant">Browser</span>.<span class="ruby-identifier">instance</span>.<span class="ruby-identifier">forge_request</span>(<span class="ruby-identifier">login_url</span>,
|
|
<span class="ruby-identifier">method</span><span class="ruby-operator">:</span> <span class="ruby-value">:post</span>,
|
|
<span class="ruby-identifier">body</span><span class="ruby-operator">:</span> { <span class="ruby-identifier">log</span><span class="ruby-operator">:</span> <span class="ruby-identifier">login</span>, <span class="ruby-identifier">pwd</span><span class="ruby-operator">:</span> <span class="ruby-identifier">password</span> },
|
|
<span class="ruby-identifier">cache_ttl</span><span class="ruby-operator">:</span> <span class="ruby-value">0</span>
|
|
)
|
|
<span class="ruby-keyword">end</span></pre>
|
|
</div><!-- login_request-source -->
|
|
|
|
</div>
|
|
|
|
|
|
|
|
|
|
</div><!-- login_request-method -->
|
|
|
|
|
|
<div id="method-i-progress_bar" class="method-detail ">
|
|
|
|
<div class="method-heading">
|
|
<span class="method-name">progress_bar</span><span
|
|
class="method-args">(passwords_size, options)</span>
|
|
|
|
<span class="method-click-advice">click to toggle source</span>
|
|
|
|
</div>
|
|
|
|
|
|
<div class="method-description">
|
|
|
|
<p>@param [ Integer ] targets_size @param [ Hash ] options</p>
|
|
|
|
<p>@return [ ProgressBar ] :nocov:</p>
|
|
|
|
|
|
|
|
|
|
<div class="method-source-code" id="progress_bar-source">
|
|
<pre><span class="ruby-comment"># File lib/common/models/wp_user/brute_forcable.rb, line 63</span>
|
|
<span class="ruby-keyword">def</span> <span class="ruby-identifier">progress_bar</span>(<span class="ruby-identifier">passwords_size</span>, <span class="ruby-identifier">options</span>)
|
|
<span class="ruby-keyword">if</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:show_progression</span>]
|
|
<span class="ruby-constant">ProgressBar</span>.<span class="ruby-identifier">create</span>(
|
|
<span class="ruby-identifier">format</span><span class="ruby-operator">:</span> <span class="ruby-string">'%t %a <%B> (%c / %C) %P%% %e'</span>,
|
|
<span class="ruby-identifier">title</span><span class="ruby-operator">:</span> <span class="ruby-node">" Brute Forcing '#{login}'"</span>,
|
|
<span class="ruby-identifier">total</span><span class="ruby-operator">:</span> <span class="ruby-identifier">passwords_size</span>
|
|
)
|
|
<span class="ruby-keyword">end</span>
|
|
<span class="ruby-keyword">end</span></pre>
|
|
</div><!-- progress_bar-source -->
|
|
|
|
</div>
|
|
|
|
|
|
|
|
|
|
</div><!-- progress_bar-method -->
|
|
|
|
|
|
<div id="method-i-valid_password-3F" class="method-detail ">
|
|
|
|
<div class="method-heading">
|
|
<span class="method-name">valid_password?</span><span
|
|
class="method-args">(response, password, options = {})</span>
|
|
|
|
<span class="method-click-advice">click to toggle source</span>
|
|
|
|
</div>
|
|
|
|
|
|
<div class="method-description">
|
|
|
|
<p>@param [ <a href="../Typhoeus/Response.html">Typhoeus::Response</a> ]
|
|
response @param [ String ] password @param [ Hash ] options @option options
|
|
[ Boolean ] :verbose @option options [ Boolean ] :show_progression</p>
|
|
|
|
<p>@return [ Boolean ]</p>
|
|
|
|
|
|
|
|
|
|
<div class="method-source-code" id="valid_password-3F-source">
|
|
<pre><span class="ruby-comment"># File lib/common/models/wp_user/brute_forcable.rb, line 92</span>
|
|
<span class="ruby-keyword">def</span> <span class="ruby-identifier">valid_password?</span>(<span class="ruby-identifier">response</span>, <span class="ruby-identifier">password</span>, <span class="ruby-identifier">options</span> = {})
|
|
<span class="ruby-keyword">if</span> <span class="ruby-identifier">response</span>.<span class="ruby-identifier">code</span> <span class="ruby-operator">==</span> <span class="ruby-value">302</span>
|
|
<span class="ruby-identifier">progression</span> = <span class="ruby-node">"#{green('[SUCCESS]')} Login : #{login} Password : #{password}\n\n"</span>
|
|
<span class="ruby-identifier">valid</span> = <span class="ruby-keyword">true</span>
|
|
<span class="ruby-keyword">elsif</span> <span class="ruby-identifier">response</span>.<span class="ruby-identifier">body</span> <span class="ruby-operator">=~</span> <span class="ruby-regexp">/login_error/</span>
|
|
<span class="ruby-identifier">verbose</span> = <span class="ruby-string">"\n Incorrect login and/or password."</span>
|
|
<span class="ruby-keyword">elsif</span> <span class="ruby-identifier">response</span>.<span class="ruby-identifier">timed_out?</span>
|
|
<span class="ruby-identifier">progression</span> = <span class="ruby-node">"#{red('ERROR:')} Request timed out."</span>
|
|
<span class="ruby-keyword">elsif</span> <span class="ruby-identifier">response</span>.<span class="ruby-identifier">code</span> <span class="ruby-operator">==</span> <span class="ruby-value">0</span>
|
|
<span class="ruby-identifier">progression</span> = <span class="ruby-node">"#{red('ERROR:')} No response from remote server. WAF/IPS?"</span>
|
|
<span class="ruby-keyword">elsif</span> <span class="ruby-identifier">response</span>.<span class="ruby-identifier">code</span>.<span class="ruby-identifier">to_s</span> <span class="ruby-operator">=~</span> <span class="ruby-regexp">/^50/</span>
|
|
<span class="ruby-identifier">progression</span> = <span class="ruby-node">"#{red('ERROR:')} Server error, try reducing the number of threads."</span>
|
|
<span class="ruby-keyword">else</span>
|
|
<span class="ruby-identifier">progression</span> = <span class="ruby-node">"#{red('ERROR:')} We received an unknown response for #{password}..."</span>
|
|
<span class="ruby-identifier">verbose</span> = <span class="ruby-identifier">red</span>(<span class="ruby-node">" Code: #{response.code}\n Body: #{response.body}\n"</span>)
|
|
<span class="ruby-keyword">end</span>
|
|
|
|
<span class="ruby-identifier">puts</span> <span class="ruby-string">"\n "</span> <span class="ruby-operator">+</span> <span class="ruby-identifier">progression</span> <span class="ruby-keyword">if</span> <span class="ruby-identifier">progression</span> <span class="ruby-operator">&&</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:show_progression</span>]
|
|
<span class="ruby-identifier">puts</span> <span class="ruby-identifier">verbose</span> <span class="ruby-keyword">if</span> <span class="ruby-identifier">verbose</span> <span class="ruby-operator">&&</span> <span class="ruby-identifier">options</span>[<span class="ruby-value">:verbose</span>]
|
|
|
|
<span class="ruby-identifier">valid</span> <span class="ruby-operator">||</span> <span class="ruby-keyword">false</span>
|
|
<span class="ruby-keyword">end</span></pre>
|
|
</div><!-- valid_password-3F-source -->
|
|
|
|
</div>
|
|
|
|
|
|
|
|
|
|
</div><!-- valid_password-3F-method -->
|
|
|
|
|
|
</section><!-- public-instance-method-details -->
|
|
|
|
</section><!-- 5Buntitled-5D -->
|
|
|
|
</div><!-- documentation -->
|
|
|
|
|
|
<footer id="validator-badges">
|
|
<p><a href="http://validator.w3.org/check/referer">[Validate]</a>
|
|
<p>Generated by <a href="https://github.com/rdoc/rdoc">RDoc</a> 4.0.1.
|
|
<p>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish Rdoc Generator</a> 3.
|
|
</footer>
|
|
|