cms_scanner 0.5.8 → 0.6.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 89a9a8926786633c33826a0b17aba20f0969b30d88c08db2b188050ad07a57c1
-  data.tar.gz: d9a07649b204329b5bd12665fafb7b6074e46eedb37f9a8ca2bde30b41a7ea0f
+  metadata.gz: ca37ab68087ef1b53d298a9438a57fd56986e347f421ab39cc5966fe8d438683
+  data.tar.gz: 44463983165dfa3b71f5d285d81fe53dff50f443736cd5f136bfe6f9ff60b468
 SHA512:
-  metadata.gz: 32da62d1914178ecdedf5f869501d60909a0cfab65755f54f2c349a561c762ba69207818ece75ca159fe8a4ad7b1c8d5ba8812ace2bf5da938dcfcdc872df8f4
-  data.tar.gz: 855753f004bfa699f241fbe78bf095e841eb405ad601187c2b09d8d1c4bdb93e39dcf2b4f33088fe5fa8c4b0a30d048accec34b357ffc8190d23508d83af37f9
+  metadata.gz: 21711ffc321d799fdd866c8f495df55a2de5228dfcb5b4ae0fc4d82ee0c151d1d726ae60038f9c4891923cebd1d48309dc0a82fa5ede9f054622c2b529284b58
+  data.tar.gz: 8208a51454f004bdc72ee7d32a100302877d82f91d6f115a125b0fb7dd5ada0784b4acaf6ed9b454e715f557e23672c20e25e6b2540afc7e6bb4c5caa694af7a

data/app/controllers/core/cli_options.rb

@@ -59,7 +59,9 @@ module CMSScanner
                                  default: 60),
           OptPositiveInteger.new(['--connect-timeout SECONDS', 'The connection timeout in seconds'],
                                  default: 30),
-          OptBoolean.new(['--disable-tls-checks', 'Disables SSL/TLS certificate verification'])
+          OptBoolean.new(['--disable-tls-checks',
+                          'Disables SSL/TLS certificate verification, and downgrade to TLS1.0+ ' \
+                          '(requires cURL 7.66 for the latter)'])
         ] + cli_browser_proxy_options + cli_browser_cookies_options + cli_browser_cache_options
       end
 

data/lib/cms_scanner/browser.rb

@@ -57,6 +57,8 @@ module CMSScanner
         # See http://curl.haxx.se/libcurl/c/CURLOPT_SSL_VERIFYHOST.html
         params[:ssl_verifypeer] = false
         params[:ssl_verifyhost] = 0
+        # TLSv1.0 and plus, allows to use a protocol potentially lower than the OS default
+        params[:sslversion] = :tlsv1
       end
 
       typhoeus_to_browser_opts.each do |typhoeus_opt, browser_opt|

data/lib/cms_scanner/controllers.rb

@@ -9,14 +9,16 @@ module CMSScanner
     def initialize(option_parser = OptParseValidator::OptParser.new(nil, 40))
       @option_parser = option_parser
 
-      register_options_files
+      register_config_files
+
+      option_parser.config_files.result_key = 'cli_options'
     end
 
     # Adds the potential option file paths to the option_parser
-    def register_options_files
+    def register_config_files
       [Dir.home, Dir.pwd].each do |dir|
-        option_parser.options_files.class.supported_extensions.each do |ext|
-          @option_parser.options_files << Pathname.new(dir).join(".#{NS.app_name}", "cli_options.#{ext}").to_s
+        option_parser.config_files.class.supported_extensions.each do |ext|
+          option_parser.config_files << Pathname.new(dir).join(".#{NS.app_name}", "scan.#{ext}").to_s
         end
       end
     end

data/lib/cms_scanner/version.rb

@@ -2,5 +2,5 @@
 
 # Version
 module CMSScanner
-  VERSION = '0.5.8'
+  VERSION = '0.6.0'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: cms_scanner
 version: !ruby/object:Gem::Version
-  version: 0.5.8
+  version: 0.6.0
 platform: ruby
 authors:
 - WPScanTeam
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-08-24 00:00:00.000000000 Z
+date: 2019-09-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: nokogiri
@@ -30,14 +30,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.7.4
+        version: 1.8.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.7.4
+        version: 1.8.0
 - !ruby/object:Gem::Dependency
   name: public_suffix
   requirement: !ruby/object:Gem::Requirement
@@ -232,14 +232,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.6.0
+        version: 3.7.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.6.0
+        version: 3.7.0
 description: Framework to provide an easy way to implement CMS Scanners
 email:
 - team@wpscan.org