cms_scanner 0.8.3 → 0.8.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b0a2707a21eacc11f9dc36d247381b7a9a73ddfc77ec08b5d305f521552ee10c
-  data.tar.gz: 99dc62f737fc9291e0d629f6bcd4a3a65e924584f6777f553295674c3e36b975
+  metadata.gz: d2ba75baf0bd8f3ee38106845a617e3b82b15550d2fe389bdd8caa9e01e4ed74
+  data.tar.gz: a61488048c346fdd6f484a34b1a75b38cc8cf996c7053830c0aa9bae2d849dff
 SHA512:
-  metadata.gz: 433cd9161c29f4952885f2cf235f6782afa300e76ae3983e880cd2d6596ebe65138125956b158c05a4b7c6b651ecfec5db23b4d9913d1aca1b25dc83243a804b
-  data.tar.gz: b375a54eeee615791e94d9603333b27bfb94b72ff645cb3b07f449bf9d5c42f213848da7c2d13bf9e3854bf81b20be840f065fce10ed8995aa2b32126486f497
+  metadata.gz: 9786135ac1b578a2fdf8ce4413840c719c6e335238343e6f1b7141877bc4d57702259c8feeaecf91640d5af47e66c2a914486ee7afb836f1bf2ab162283dda18
+  data.tar.gz: 178999de4b3de5da6c01dfad1ba48e79e8757b3401742184e8cc871423907522c0e6cbcda8006635f6370651521e0a21b29c29677d9ceb8bbb39ebad9df86e55

data/app/app.rb

@@ -14,6 +14,7 @@ require_relative 'controllers/interesting_findings'
 require_relative 'models/interesting_finding'
 require_relative 'models/robots_txt'
 require_relative 'models/fantastico_fileslist'
+require_relative 'models/search_replace_db_2'
 require_relative 'models/headers'
 require_relative 'models/xml_rpc'
 require_relative 'models/version'

data/app/finders/interesting_findings/search_replace_db_2.rb

@@ -11,14 +11,7 @@ module CMSScanner
 
           return unless /by interconnect/i.match?(target.head_and_get(path).body)
 
-          NS::Model::InterestingFinding.new(target.url(path),
-                                            confidence: 100,
-                                            found_by: found_by,
-                                            references: references)
-        end
-
-        def references
-          { url: 'https://interconnectit.com/products/search-and-replace-for-wordpress-databases/' }
+          NS::Model::SearchReplaceDB2.new(target.url(path), confidence: 100, found_by: found_by)
         end
       end
     end

data/app/finders/interesting_findings/xml_rpc.rb

@@ -35,8 +35,7 @@ module CMSScanner
 
             potential_urls << url
 
-            return NS::Model::XMLRPC.new(url, confidence: 30,
-                                              found_by: 'Link Tag (Passive Detection)')
+            return NS::Model::XMLRPC.new(url, confidence: 30, found_by: 'Link Tag (Passive Detection)')
           end
           nil
         end
@@ -52,9 +51,7 @@ module CMSScanner
 
             next unless /<methodResponse>/i.match?(res&.body)
 
-            return NS::Model::XMLRPC.new(potential_url,
-                                         confidence: 100,
-                                         found_by: DIRECT_ACCESS)
+            return NS::Model::XMLRPC.new(potential_url, confidence: 100, found_by: DIRECT_ACCESS)
           end
           nil
         end

data/app/models/fantastico_fileslist.rb

@@ -17,7 +17,7 @@ module CMSScanner
       end
 
       def references
-        { url: ['http://www.acunetix.com/vulnerabilities/fantastico-fileslist/'] }
+        @references ||= { url: ['http://www.acunetix.com/vulnerabilities/fantastico-fileslist/'] }
       end
     end
   end

data/app/models/headers.rb

@@ -34,6 +34,11 @@ module CMSScanner
           x-webkit-csp x-xss-protection
         ]
       end
+
+      # @return [ String ]
+      def to_s
+        @to_s ||= 'Headers'
+      end
     end
   end
 end

data/app/models/search_replace_db_2.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+module CMSScanner
+  module Model
+    # SearchReplaceDB2
+    class SearchReplaceDB2 < InterestingFinding
+      def references
+        @references ||= { url: ['https://interconnectit.com/products/search-and-replace-for-wordpress-databases/'] }
+      end
+    end
+  end
+end

data/app/models/xml_rpc.rb

@@ -4,6 +4,11 @@ module CMSScanner
   module Model
     # XML RPC
     class XMLRPC < InterestingFinding
+      # @return [ String ]
+      def to_s
+        @to_s ||= "XML-RPC seems to be enabled: #{url}"
+      end
+
       # @return [ Browser ]
       def browser
         @browser ||= NS::Browser.instance

data/lib/cms_scanner/version.rb

@@ -2,5 +2,5 @@
 
 # Version
 module CMSScanner
-  VERSION = '0.8.3'
+  VERSION = '0.8.4'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: cms_scanner
 version: !ruby/object:Gem::Version
-  version: 0.8.3
+  version: 0.8.4
 platform: ruby
 authors:
 - WPScanTeam
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-02-29 00:00:00.000000000 Z
+date: 2020-03-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: get_process_mem
@@ -289,6 +289,7 @@ files:
 - app/models/headers.rb
 - app/models/interesting_finding.rb
 - app/models/robots_txt.rb
+- app/models/search_replace_db_2.rb
 - app/models/user.rb
 - app/models/version.rb
 - app/models/xml_rpc.rb