cms_scanner 0.0.28 → 0.0.29

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: ae683c66a4944bbb795dd2226eb508bb5cd4b605
-  data.tar.gz: 1a857e71e73e5e2b3fff2b72c9f405ca6bf840db
+  metadata.gz: 441069f2ffae8a62a08841e3361ea5461d5c38cd
+  data.tar.gz: 7fefe3f58187c7ad841d7e737e27ddf62adc9bc9
 SHA512:
-  metadata.gz: eb2ba5e94e801de333e9e92d9fb1116999a15e19db246f7916bad6d5a28ed5e4b31d2c1d7a4610d9e06c8917ea258dbbfc017425c35af21468108e734f11ae9c
-  data.tar.gz: 55afc0d62d3aefdba80e1057bfc99fb57b74a291beb1270bb1005da3856baefbc5f85ea8d5f40a74bbe22ee19733b11398edf7951a9d0432d4c3685c115a7ac4
+  metadata.gz: f57bedae28d9c4fae20faa71d44f10e87ccdeda7114a49763508fa973569db20313525ec6d60fb64ce5c2c09b86b2ab61c5e636d1ca22ce981246d064b7362e2
+  data.tar.gz: a567650f2e688d00f0414ed425db25446ca3d9e33bf8b4ef43b517e66c6396eb466788b006bde0698d3119494aa9921ea28364f9f87164b6bef9871f11adc07c

data/app/finders/interesting_findings/xml_rpc.rb

@@ -20,7 +20,7 @@ module CMSScanner
           return unless target.in_scope?(url)
           potential_urls << url
 
-          NS::XMLRPC.new(url, confidence: 30, found_by: 'Headers (passive detection)')
+          NS::XMLRPC.new(url, confidence: 30, found_by: 'Headers (Passive Detection)')
         end
 
         # @return [ XMLRPC ]
@@ -32,7 +32,7 @@ module CMSScanner
             potential_urls << url
 
             return NS::XMLRPC.new(url, confidence: 30,
-                                       found_by: 'Link Tag (passive detection)')
+                                       found_by: 'Link Tag (Passive Detection)')
           end
           nil
         end

data/lib/cms_scanner/browser.rb

@@ -38,7 +38,7 @@ module CMSScanner
     def default_request_params
       params = {
         ssl_verifypeer: false, ssl_verifyhost: 2, # Disable SSL-Certificate checks
-        headers: { 'User-Agent' => user_agent },
+        headers: { 'Accept-Encoding' => 'gzip, deflate', 'User-Agent' => user_agent },
         method: :get
       }
 

data/lib/cms_scanner/target.rb

@@ -45,5 +45,35 @@ module CMSScanner
 
       matches
     end
+
+    # @param [ Typhoeus::Response, String ] page
+    # @param [ String ] xpath
+    # @param [ Array<String> ] attributes
+    #
+    # @yield [ String, Nokogiri::XML::Element ] The url and its associated tag
+    #
+    # @return [ Array<String> ] The absolute URLs detected in the response's body from the HTML tags
+    def urls_from_page(page = nil, xpath = '//link|//script|//style|//img|//a', attributes = %w(href src))
+      page    = NS::Browser.get(url(page)) unless page.is_a?(Typhoeus::Response)
+      found   = []
+
+      page.html.xpath(xpath).each do |tag|
+        attributes.each do |attribute|
+          attr_value = tag[attribute]
+
+          next unless attr_value && !attr_value.empty?
+
+          tag_uri = uri.join(attr_value.strip) rescue next
+
+          next unless tag_uri.host
+
+          yield tag_uri.to_s, tag if block_given? && !found.include?(tag_uri.to_s)
+
+          found << tag_uri.to_s
+        end
+      end
+
+      found.uniq
+    end
   end
 end

data/lib/cms_scanner/target/scope.rb

@@ -25,23 +25,15 @@ module CMSScanner
     def in_scope_urls(res, xpath = '//link|//script|//style|//img|//a', attributes = %w(href src))
       found = []
 
-      res.html.xpath(xpath).each do |tag|
-        attributes.each do |attribute|
-          attr_value = tag[attribute]
+      urls_from_page(res, xpath, attributes) do |url, tag|
+        next unless in_scope?(url)
 
-          next unless attr_value && !attr_value.empty?
+        yield url, tag if block_given?
 
-          url = uri.join(attr_value.strip).to_s
-
-          next unless in_scope?(url)
-
-          yield url, tag if block_given? && !found.include?(url)
-
-          found << url
-        end
+        found << url
       end
 
-      found.uniq
+      found
     end
 
     # Scope Implementation

data/lib/cms_scanner/version.rb

@@ -1,4 +1,4 @@
 # Version
 module CMSScanner
-  VERSION = '0.0.28'
+  VERSION = '0.0.29'
 end

data/lib/cms_scanner/vulnerability/references.rb

@@ -3,7 +3,8 @@ module CMSScanner
   class Vulnerability
     # @return [ Array<String> ] All the references URLs
     def references_urls
-      cve_urls + secunia_urls + osvdb_urls + exploitdb_urls + urls + msf_urls + packetstorm_urls
+      cve_urls + secunia_urls + osvdb_urls + exploitdb_urls + urls + msf_urls +
+        packetstorm_urls + securityfocus_urls
     end
 
     # @return [ Array<String> ] The CVEs
@@ -18,7 +19,7 @@ module CMSScanner
 
     # @return [ String ] The URL to the CVE
     def cve_url(cve)
-      "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-#{cve}"
+      "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-#{cve}"
     end
 
     # @return [ Array<String> ] The Secunia IDs
@@ -33,7 +34,7 @@ module CMSScanner
 
     # @return [ String ] The URL to the Secunia advisory
     def secunia_url(id)
-      "https://secunia.com/advisories/#{id}"
+      "https://secunia.com/advisories/#{id}/"
     end
 
     # @return [ Array<String> ] The OSVDB IDs
@@ -48,7 +49,7 @@ module CMSScanner
 
     # @return [ String ] The URL to the ExploitDB advisory
     def osvdb_url(id)
-      "http://osvdb.org/#{id}"
+      "http://osvdb.org/show/osvdb/#{id}"
     end
 
     # @return [ Array<String> ] The ExploitDB ID
@@ -83,10 +84,10 @@ module CMSScanner
 
     # @return [ String ] The URL to the metasploit module page
     def msf_url(mod)
-      "http://www.rapid7.com/db/modules/#{mod.sub(%r{^/}, '')}"
+      "https://www.rapid7.com/db/modules/#{mod.sub(%r{^/}, '')}"
     end
 
-    # @return [ Array<String> ] The Packetstormsecurity ID
+    # @return [ Array<String> ] The Packetstormsecurity IDs
     def packetstorm_ids
       @packetstorm_ids ||= [*references[:packetstorm]].map(&:to_s)
     end
@@ -100,5 +101,20 @@ module CMSScanner
     def packetstorm_url(id)
       "http://packetstormsecurity.com/files/#{id}/"
     end
+
+    # @return [ Array<String> ] The Security Focus IDs
+    def securityfocus_ids
+      @securityfocus_ids ||= [*references[:securityfocus]].map(&:to_s)
+    end
+
+    # @return [ Array<String> ]
+    def securityfocus_urls
+      securityfocus_ids.reduce([]) { |a, e| a << securityfocus_url(e) }
+    end
+
+    # @return [ String ]
+    def securityfocus_url(id)
+      "http://www.securityfocus.com/bid/#{id}/"
+    end
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: cms_scanner
 version: !ruby/object:Gem::Version
-  version: 0.0.28
+  version: 0.0.29
 platform: ruby
 authors:
 - WPScanTeam - Erwan Le Rousseau
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-05-03 00:00:00.000000000 Z
+date: 2015-05-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: opt_parse_validator