cms_scanner 0.5.4 → 0.5.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 502fd0618a4a4de038a4223eec1aebd3154a1f7d1dfeea794d6e607a8e870444
-  data.tar.gz: 4de1cdaa81b3546c14d73ceaac37e53b990a0e1de0ca1b9a7b1bf80465440cd7
+  metadata.gz: 1020c3db6514f4858bff48444c3c1e384871069da40723f7e8ef1b56eeb7a9bf
+  data.tar.gz: 117923c60ea26e4ce392e95679c64f64289c64a8389314e5aac039c0114ddc31
 SHA512:
-  metadata.gz: f6a1747b6916ca83653d92df8d14cd118faaf446804fd7b1ea3bbc14c6f1717a4bbc1fa91b761f94b01c80db73aef8417300724755f4c6644476c4f181e13f90
-  data.tar.gz: 818db4a4b58d5b1b7d598281f172a421f6fa8047fa5c36bb245309412302e3a520788ec5349e48e8679e61f214f525e6f450566ef745b5d00461fa8a5a644ad1
+  metadata.gz: 3aabbf18bea8843817633b96c8dc5adc20029308333a2437527de1ed31dd05d4db59aa2aae578827dfcfeed05a367b2c1c9cf34d56e02c903666f67d5c70a466
+  data.tar.gz: f4d9594308a2ad74f5c74a1102a84978c4748dfb5a060396e13959f49bd1e36f575115d3d306ff8b459769e071f539ca1c9f62315470e3296a2b03d33408aadd

data/app/finders/interesting_findings/search_replace_db_2.rb

@@ -9,7 +9,7 @@ module CMSScanner
         def aggressive(_opts = {})
           path = 'searchreplacedb2.php'
 
-          return unless target.head_and_get(path).body =~ /by interconnect/i
+          return unless /by interconnect/i.match?(target.head_and_get(path).body)
 
           NS::Model::InterestingFinding.new(target.url(path),
                                             confidence: 100,

data/app/finders/interesting_findings/xml_rpc.rb

@@ -50,7 +50,7 @@ module CMSScanner
 
             res = NS::Browser.post(potential_url, body: Digest::MD5.hexdigest(rand(999_999).to_s[0..5]))
 
-            next unless res&.body =~ /<methodResponse>/i
+            next unless /<methodResponse>/i.match?(res&.body)
 
             return NS::Model::XMLRPC.new(potential_url,
                                          confidence: 100,

data/app/models/fantastico_fileslist.rb

@@ -9,7 +9,7 @@ module CMSScanner
         results = []
 
         entries.each do |entry|
-          next unless entry =~ /(?:admin|\.log|\.sql|\.db)/i
+          next unless /(?:admin|\.log|\.sql|\.db)/i.match?(entry)
 
           results << entry
         end

data/lib/cms_scanner/browser.rb

@@ -48,7 +48,7 @@ module CMSScanner
     # @return [ Hash ]
     def default_request_params
       params = {
-        headers: { 'User-Agent' => user_agent }.merge(headers || {}),
+        headers: { 'User-Agent' => user_agent, 'Referer' => url }.merge(headers || {}),
         accept_encoding: 'gzip, deflate',
         method: :get
       }

data/lib/cms_scanner/browser/options.rb

@@ -17,6 +17,7 @@ module CMSScanner
       random_user_agent
       request_timeout
       throttle
+      url
       user_agent
       user_agents_list
       vhost

data/lib/cms_scanner/formatter.rb

@@ -117,7 +117,7 @@ module CMSScanner
           tpl = "#{controller_name}/#{tpl}"
         end
 
-        raise "Wrong tpl format: '#{tpl}'" unless tpl =~ %r{\A[\w/_]+\z}
+        raise "Wrong tpl format: '#{tpl}'" unless %r{\A[\w/_]+\z}.match?(tpl)
 
         views_directories.reverse_each do |dir|
           formats.each do |format|

data/lib/cms_scanner/target/server/generic.rb

@@ -59,7 +59,7 @@ module CMSScanner
           NS::Browser.get(url(path), params).html.css(selector).each do |node|
             entry = node.text.to_s
 
-            next if entry =~ ignore
+            next if entry&.match?(ignore)
 
             found << entry
           end

data/lib/cms_scanner/version.rb

@@ -2,5 +2,5 @@
 
 # Version
 module CMSScanner
-  VERSION = '0.5.4'
+  VERSION = '0.5.5'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: cms_scanner
 version: !ruby/object:Gem::Version
-  version: 0.5.4
+  version: 0.5.5
 platform: ruby
 authors:
 - WPScanTeam
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-07-10 00:00:00.000000000 Z
+date: 2019-07-31 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: nokogiri
@@ -30,14 +30,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.7.3
+        version: 1.7.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.7.3
+        version: 1.7.4
 - !ruby/object:Gem::Dependency
   name: public_suffix
   requirement: !ruby/object:Gem::Requirement
@@ -190,14 +190,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.72.0
+        version: 0.73.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.72.0
+        version: 0.73.0
 - !ruby/object:Gem::Dependency
   name: rubocop-performance
   requirement: !ruby/object:Gem::Requirement