cms_scanner 0.12.0 → 0.13.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7a8c1343f1468a7f2c486b3a4e01ab78908a3148463a06f1368e53e748a6c269
-  data.tar.gz: 9613a2df1e556a49a8f6dc9c7e934c2cd35a7aed0fbba4d42c22300901dd6b6b
+  metadata.gz: fffe0c16f6997feb9d468326198beacc87eebffbf420704f06d4f0fcf75a1041
+  data.tar.gz: a3bd4c7f63fb7b623a06a9d31383900dc00d0a28bbb4d453a22423feb28a8e82
 SHA512:
-  metadata.gz: 7e7c1b97e79859d7bc38a3b9022ddc461ed0d9a91d275255f1f2430998ae46a2c591514165d6e21e6e6304b1f032eb8e9bf5f581bdc8e49f0dba43dceb640573
-  data.tar.gz: 25745b31c7217ce451cf30833fc180f2416af4cb5842cece2c0e73f543d8a9a021cbd5d03fcef8a2e3e06f29868987dd2fa02723d1fe98e0d22e9460105ad7da
+  metadata.gz: 4bffc3ece3ecd360750bb67e82718b1bb13f7026d0c7aa84786db2f85122033b6df1273c558879c48feb364b69ea08e3d4c4df69580e39001bf63dc375a45490
+  data.tar.gz: 57ccf22b7947670c969b72720e302c819c7aab0943a252c33b049d11664bc4f3b5c718dc3bd7c1904d48ba3d7c5c5b7ae0fbfe79402429e267ce55484e7f7f92

data/app/controllers/core.rb

@@ -43,7 +43,7 @@ module CMSScanner
         when 401
           raise Error::HTTPAuthRequired
         when 403
-          raise Error::AccessForbidden, NS::ParsedCli.random_user_agent
+          raise Error::AccessForbidden, NS::ParsedCli.random_user_agent unless NS::ParsedCli.force
         when 407
           raise Error::ProxyAuthRequired
         end

data/app/controllers/core/cli_options.rb

@@ -10,7 +10,8 @@ module CMSScanner
         [
           OptURL.new(['-u', '--url URL', 'The URL to scan'],
                      required_unless: %i[help hh version],
-                     default_protocol: 'http')
+                     default_protocol: 'http'),
+          OptBoolean.new(['--force', 'Do not check if target returns a 403'])
         ] + mixed_cli_options + [
           OptFilePath.new(['-o', '--output FILE', 'Output to FILE'], writable: true, exists: false),
           OptChoice.new(['-f', '--format FORMAT',

data/app/models/fantastico_fileslist.rb

@@ -2,8 +2,16 @@
 
 module CMSScanner
   module Model
-    # FantasticoFileslist
+    # Fantastico is a commercial script library that automates the installation of web applications to a website.
+    # Fantastico scripts are executed from the administration area of a website control panel such as cPanel.
+    # It creates a file named fantastico_fileslist.txt that is publicly available and contains a list of all the
+    # files from the current directory. The contents of this file may expose sensitive information to an attacker.
     class FantasticoFileslist < InterestingFinding
+      # @return [ String ]
+      def to_s
+        @to_s ||= "Fantastico list found: #{url}"
+      end
+
       # @return [ Array<String> ] The interesting files/dirs detected
       def interesting_entries
         results = []
@@ -17,7 +25,9 @@ module CMSScanner
       end
 
       def references
-        @references ||= { url: ['http://www.acunetix.com/vulnerabilities/fantastico-fileslist/'] }
+        @references ||= {
+          url: ['https://web.archive.org/web/20140518040021/http://www.acunetix.com/vulnerabilities/fantastico-fileslist/']
+        }
       end
     end
   end

data/app/models/robots_txt.rb

@@ -4,6 +4,11 @@ module CMSScanner
   module Model
     # Robots.txt
     class RobotsTxt < InterestingFinding
+      # @return [ String ]
+      def to_s
+        @to_s ||= "robots.txt found: #{url}"
+      end
+
       # @todo Better detection, currently everything not empty or / is returned
       #
       # @return [ Array<String> ] The interesting Allow/Disallow rules detected

data/app/models/search_replace_db_2.rb

@@ -4,6 +4,11 @@ module CMSScanner
   module Model
     # SearchReplaceDB2
     class SearchReplaceDB2 < InterestingFinding
+      # @return [ String ]
+      def to_s
+        @to_s ||= "Search Replace DB script found: #{url}"
+      end
+
       def references
         @references ||= { url: ['https://interconnectit.com/products/search-and-replace-for-wordpress-databases/'] }
       end

data/app/views/json/scan_aborted.erb

@@ -1,4 +1,5 @@
 "scan_aborted": <%= @reason.to_json %>,
+"target_url": <%= @url.to_json %>,
 <% if @verbose -%>
 "trace": <%= @trace.to_json %>,
 <% end %>

data/lib/cms_scanner/cache/file_store.rb

@@ -59,7 +59,7 @@ module CMSScanner
       #
       # @return [ String ] The expiration file path associated to the key
       def entry_expiration_path(key)
-        entry_path(key) + '.expiration'
+        "#{entry_path(key)}.expiration"
       end
 
       private

data/lib/cms_scanner/errors/http.rb

@@ -44,7 +44,7 @@ module CMSScanner
 
       def to_s
         msg = if random_user_agent_used
-                'Well... --random-user-agent didn\'t work, you\'re on your own now!'
+                'Well... --random-user-agent didn\'t work, use --force to skip this check if needed.'
               else
                 'Please re-try with --random-user-agent'
               end

data/lib/cms_scanner/finders/finder.rb

@@ -57,10 +57,12 @@ module CMSScanner
       # @param [String, Class ] klass
       # @return [ String ]
       def found_by(klass = self.class)
+        labels = %w[aggressive passive]
+
         caller_locations.each do |call|
           label = call.label
 
-          next unless %w[aggressive passive].include? label
+          next unless labels.include? label
 
           title = klass.to_s.demodulize.gsub(/(\d+)[a-z]+/i, '_\0').titleize(keep_id_suffix: true)
 

data/lib/cms_scanner/finders/finder/breadth_first_dictionary_attack.rb

@@ -30,8 +30,7 @@ module CMSScanner
 
           users.each { |u| user_requests_count[u.username] = 0 }
 
-          File.foreach(wordlist) do |password|
-            password.chomp!
+          File.foreach(wordlist, chomp: true) do |password|
             remaining_users = users.select { |u| u.password.nil? }
 
             break if remaining_users.empty?

data/lib/cms_scanner/numeric.rb

@@ -8,6 +8,6 @@ class Numeric
     e     = abs.zero? ? abs : (Math.log(abs) / Math.log(1024)).floor
     s     = format('%<s>.3f', s: (abs.to_f / 1024**e))
 
-    s.sub(/\.?0*$/, ' ' + units[e])
+    s.sub(/\.?0*$/, " #{units[e]}")
   end
 end

data/lib/cms_scanner/references.rb

@@ -86,7 +86,7 @@ module CMSScanner
 
     # @return [ String ] The URL to the metasploit module page
     def msf_url(mod)
-      "https://www.rapid7.com/db/modules/#{mod.sub(%r{^/}, '')}"
+      "https://www.rapid7.com/db/modules/#{mod.sub(%r{^/}, '')}/"
     end
 
     # @return [ Array<String> ] The Packetstormsecurity IDs

data/lib/cms_scanner/scan.rb

@@ -29,11 +29,15 @@ module CMSScanner
     rescue NoMemoryError, ScriptError, SecurityError, SignalException, StandardError, SystemStackError => e
       @run_error = e
 
-      formatter.output('@scan_aborted',
-                       reason: e.is_a?(Interrupt) ? 'Canceled by User' : e.message,
-                       trace: e.backtrace,
-                       verbose: NS::ParsedCli.verbose ||
-                                run_error_exit_code == NS::ExitCode::EXCEPTION)
+      output_params = {
+        reason: e.is_a?(Interrupt) ? 'Canceled by User' : e.message,
+        trace: e.backtrace,
+        verbose: NS::ParsedCli.verbose || run_error_exit_code == NS::ExitCode::EXCEPTION
+      }
+
+      output_params[:url] = controllers.first.target.url if NS::ParsedCli.url
+
+      formatter.output('@scan_aborted', output_params)
     ensure
       formatter.beautify
     end

data/lib/cms_scanner/target.rb

@@ -105,11 +105,11 @@ module CMSScanner
         next unless attr_value && !attr_value.empty?
 
         node_uri = begin
-                     uri.join(attr_value.strip)
-                   rescue StandardError
-                     # Skip potential malformed URLs etc.
-                     next
-                   end
+          uri.join(attr_value.strip)
+        rescue StandardError
+          # Skip potential malformed URLs etc.
+          next
+        end
 
         next unless node_uri.host
 

data/lib/cms_scanner/target/scope.rb

@@ -60,7 +60,7 @@ module CMSScanner
 
       domains.map! { |d| Regexp.escape(d.delete_suffix('/')).gsub('\*', '.*').gsub('/', '\\\\\?/') }
 
-      domains[0].gsub!(Regexp.escape(uri.host), Regexp.escape(uri.host) + '(?::\\d+)?') if uri.port
+      domains[0].gsub!(Regexp.escape(uri.host), "#{Regexp.escape(uri.host)}(?::\\d+)?") if uri.port
 
       @scope_url_pattern = %r{https?:\\?/\\?/(?:#{domains.join('|')})\\?/?}i
     end

data/lib/cms_scanner/target/server/generic.rb

@@ -41,7 +41,7 @@ module CMSScanner
         def directory_listing?(path = nil, params = {})
           res = NS::Browser.get(url(path), params)
 
-          res.code == 200 && res.body.include?('<h1>Index of') ? true : false
+          res.code == 200 && res.body.include?('<h1>Index of')
         end
 
         # @param [ String ] path

data/lib/cms_scanner/version.rb

@@ -2,5 +2,5 @@
 
 # Version
 module CMSScanner
-  VERSION = '0.12.0'
+  VERSION = '0.13.2'
 end

data/lib/cms_scanner/vulnerability.rb

@@ -5,7 +5,7 @@ module CMSScanner
   class Vulnerability
     include References
 
-    attr_reader :title, :type, :fixed_in, :cvss
+    attr_reader :title, :type, :fixed_in, :introduced_in, :cvss
 
     # @param [ String ] title
     # @param [ Hash ] references
@@ -18,14 +18,16 @@ module CMSScanner
     # @option references [ Array<String> ] :youtube
     # @param [ String ] type
     # @param [ String ] fixed_in
+    # @param [ String ] introduced_in
     # @param [ HashSymbol ] cvss
     # @option cvss [ String ] :score
     # @option cvss [ String ] :vector
-    def initialize(title, references: {}, type: nil, fixed_in: nil, cvss: nil)
-      @title    = title
-      @type     = type
-      @fixed_in = fixed_in
-      @cvss     = { score: cvss[:score], vector: cvss[:vector] } if cvss
+    def initialize(title, references: {}, type: nil, fixed_in: nil, introduced_in: nil, cvss: nil)
+      @title         = title
+      @type          = type
+      @fixed_in      = fixed_in
+      @introduced_in = introduced_in
+      @cvss          = { score: cvss[:score], vector: cvss[:vector] } if cvss
 
       self.references = references
     end

data/lib/cms_scanner/web_site.rb

@@ -62,7 +62,7 @@ module CMSScanner
 
     # @return [ String ] The URL of an unlikely existant page
     def error_404_url
-      @error_404_url ||= uri.join(Digest::MD5.hexdigest(rand(999_999).to_s)[0..6] + '.html').to_s
+      @error_404_url ||= uri.join("#{Digest::MD5.hexdigest(rand(999_999).to_s)[0..6]}.html").to_s
     end
 
     # Checks if the remote website is up.

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: cms_scanner
 version: !ruby/object:Gem::Version
-  version: 0.12.0
+  version: 0.13.2
 platform: ruby
 authors:
 - WPScanTeam
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-07-16 00:00:00.000000000 Z
+date: 2021-03-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: get_process_mem
@@ -30,28 +30,28 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.10.8
+        version: 1.11.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.10.8
+        version: 1.11.0
 - !ruby/object:Gem::Dependency
   name: opt_parse_validator
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.9.1
+        version: 1.9.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.9.1
+        version: 1.9.4
 - !ruby/object:Gem::Dependency
   name: public_suffix
   requirement: !ruby/object:Gem::Requirement
@@ -70,16 +70,22 @@ dependencies:
   name: ruby-progressbar
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: 1.10.0
+        version: '1.10'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '1.12'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: 1.10.0
+        version: '1.10'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '1.12'
 - !ruby/object:Gem::Dependency
   name: typhoeus
   requirement: !ruby/object:Gem::Requirement
@@ -176,14 +182,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.9.0
+        version: 3.10.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.9.0
+        version: 3.10.0
 - !ruby/object:Gem::Dependency
   name: rspec-its
   requirement: !ruby/object:Gem::Requirement
@@ -204,42 +210,42 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.88.0
+        version: 1.11.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.88.0
+        version: 1.11.0
 - !ruby/object:Gem::Dependency
   name: rubocop-performance
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.7.0
+        version: 1.10.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.7.0
+        version: 1.10.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.18.2
+        version: 0.21.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.18.2
+        version: 0.21.0
 - !ruby/object:Gem::Dependency
   name: simplecov-lcov
   requirement: !ruby/object:Gem::Requirement
@@ -260,17 +266,17 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.8.0
+        version: 3.12.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.8.0
+        version: 3.12.0
 description: Framework to provide an easy way to implement CMS Scanners
 email:
-- team@wpscan.org
+- contact@wpscan.com
 executables: []
 extensions: []
 extra_rdoc_files: []