wpscan 3.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (180) hide show
  1. checksums.yaml +7 -0
  2. data/Gemfile.lock +139 -0
  3. data/LICENSE +74 -0
  4. data/README.md +146 -0
  5. data/app/app.rb +3 -0
  6. data/app/controllers.rb +6 -0
  7. data/app/controllers/brute_force.rb +126 -0
  8. data/app/controllers/core.rb +104 -0
  9. data/app/controllers/custom_directories.rb +23 -0
  10. data/app/controllers/enumeration.rb +53 -0
  11. data/app/controllers/enumeration/cli_options.rb +126 -0
  12. data/app/controllers/enumeration/enum_methods.rb +157 -0
  13. data/app/controllers/main_theme.rb +27 -0
  14. data/app/controllers/wp_version.rb +30 -0
  15. data/app/finders.rb +13 -0
  16. data/app/finders/config_backups.rb +17 -0
  17. data/app/finders/config_backups/known_filenames.rb +46 -0
  18. data/app/finders/interesting_findings.rb +33 -0
  19. data/app/finders/interesting_findings/backup_db.rb +25 -0
  20. data/app/finders/interesting_findings/debug_log.rb +20 -0
  21. data/app/finders/interesting_findings/duplicator_installer_log.rb +23 -0
  22. data/app/finders/interesting_findings/full_path_disclosure.rb +23 -0
  23. data/app/finders/interesting_findings/mu_plugins.rb +48 -0
  24. data/app/finders/interesting_findings/multisite.rb +29 -0
  25. data/app/finders/interesting_findings/readme.rb +26 -0
  26. data/app/finders/interesting_findings/registration.rb +31 -0
  27. data/app/finders/interesting_findings/tmm_db_migrate.rb +24 -0
  28. data/app/finders/interesting_findings/upload_directory_listing.rb +24 -0
  29. data/app/finders/interesting_findings/upload_sql_dump.rb +28 -0
  30. data/app/finders/main_theme.rb +22 -0
  31. data/app/finders/main_theme/css_style.rb +43 -0
  32. data/app/finders/main_theme/urls_in_homepage.rb +25 -0
  33. data/app/finders/main_theme/woo_framework_meta_generator.rb +22 -0
  34. data/app/finders/medias.rb +17 -0
  35. data/app/finders/medias/attachment_brute_forcing.rb +44 -0
  36. data/app/finders/plugin_version.rb +44 -0
  37. data/app/finders/plugin_version/layer_slider/translation_file.rb +40 -0
  38. data/app/finders/plugin_version/readme.rb +79 -0
  39. data/app/finders/plugin_version/revslider/release_log.rb +35 -0
  40. data/app/finders/plugin_version/sitepress_multilingual_cms/meta_generator.rb +27 -0
  41. data/app/finders/plugin_version/sitepress_multilingual_cms/version_parameter.rb +31 -0
  42. data/app/finders/plugin_version/w3_total_cache/headers.rb +28 -0
  43. data/app/finders/plugins.rb +24 -0
  44. data/app/finders/plugins/comments.rb +31 -0
  45. data/app/finders/plugins/headers.rb +36 -0
  46. data/app/finders/plugins/known_locations.rb +48 -0
  47. data/app/finders/plugins/urls_in_homepage.rb +29 -0
  48. data/app/finders/theme_version.rb +41 -0
  49. data/app/finders/theme_version/style.rb +43 -0
  50. data/app/finders/theme_version/woo_framework_meta_generator.rb +19 -0
  51. data/app/finders/themes.rb +20 -0
  52. data/app/finders/themes/known_locations.rb +48 -0
  53. data/app/finders/themes/urls_in_homepage.rb +23 -0
  54. data/app/finders/timthumb_version.rb +17 -0
  55. data/app/finders/timthumb_version/bad_request.rb +21 -0
  56. data/app/finders/timthumbs.rb +17 -0
  57. data/app/finders/timthumbs/known_locations.rb +56 -0
  58. data/app/finders/users.rb +24 -0
  59. data/app/finders/users/author_id_brute_forcing.rb +111 -0
  60. data/app/finders/users/author_posts.rb +61 -0
  61. data/app/finders/users/login_error_messages.rb +50 -0
  62. data/app/finders/users/wp_json_api.rb +31 -0
  63. data/app/finders/wp_items.rb +1 -0
  64. data/app/finders/wp_items/urls_in_homepage.rb +68 -0
  65. data/app/finders/wp_version.rb +34 -0
  66. data/app/finders/wp_version/atom_generator.rb +40 -0
  67. data/app/finders/wp_version/meta_generator.rb +27 -0
  68. data/app/finders/wp_version/opml_generator.rb +23 -0
  69. data/app/finders/wp_version/rdf_generator.rb +38 -0
  70. data/app/finders/wp_version/readme.rb +28 -0
  71. data/app/finders/wp_version/rss_generator.rb +43 -0
  72. data/app/finders/wp_version/sitemap_generator.rb +23 -0
  73. data/app/finders/wp_version/stylesheets.rb +55 -0
  74. data/app/finders/wp_version/unique_fingerprinting.rb +64 -0
  75. data/app/models.rb +10 -0
  76. data/app/models/config_backup.rb +5 -0
  77. data/app/models/interesting_finding.rb +6 -0
  78. data/app/models/media.rb +5 -0
  79. data/app/models/plugin.rb +25 -0
  80. data/app/models/theme.rb +99 -0
  81. data/app/models/timthumb.rb +74 -0
  82. data/app/models/user.rb +31 -0
  83. data/app/models/wp_item.rb +142 -0
  84. data/app/models/wp_version.rb +49 -0
  85. data/app/models/xml_rpc.rb +19 -0
  86. data/app/views/cli/brute_force/error.erb +1 -0
  87. data/app/views/cli/brute_force/found.erb +2 -0
  88. data/app/views/cli/brute_force/users.erb +9 -0
  89. data/app/views/cli/core/banner.erb +14 -0
  90. data/app/views/cli/core/db_update_finished.erb +8 -0
  91. data/app/views/cli/core/db_update_started.erb +1 -0
  92. data/app/views/cli/core/not_fully_configured.erb +1 -0
  93. data/app/views/cli/enumeration/config_backups.erb +11 -0
  94. data/app/views/cli/enumeration/medias.erb +11 -0
  95. data/app/views/cli/enumeration/plugins.erb +35 -0
  96. data/app/views/cli/enumeration/themes.erb +11 -0
  97. data/app/views/cli/enumeration/timthumbs.erb +18 -0
  98. data/app/views/cli/enumeration/users.erb +11 -0
  99. data/app/views/cli/finding.erb +32 -0
  100. data/app/views/cli/info.erb +1 -0
  101. data/app/views/cli/main_theme/theme.erb +6 -0
  102. data/app/views/cli/notice.erb +1 -0
  103. data/app/views/cli/theme.erb +64 -0
  104. data/app/views/cli/usage.erb +3 -0
  105. data/app/views/cli/vulnerability.erb +14 -0
  106. data/app/views/cli/wp_version/version.erb +6 -0
  107. data/app/views/json/brute_force/users.erb +10 -0
  108. data/app/views/json/core/banner.erb +12 -0
  109. data/app/views/json/core/db_update_finished.erb +2 -0
  110. data/app/views/json/core/db_update_started.erb +1 -0
  111. data/app/views/json/core/not_fully_configured.erb +1 -0
  112. data/app/views/json/enumeration/config_backups.erb +10 -0
  113. data/app/views/json/enumeration/medias.erb +10 -0
  114. data/app/views/json/enumeration/plugins.erb +25 -0
  115. data/app/views/json/enumeration/themes.erb +10 -0
  116. data/app/views/json/enumeration/timthumbs.erb +19 -0
  117. data/app/views/json/enumeration/users.erb +11 -0
  118. data/app/views/json/finding.erb +26 -0
  119. data/app/views/json/main_theme/theme.erb +7 -0
  120. data/app/views/json/theme.erb +38 -0
  121. data/app/views/json/wp_version/version.erb +8 -0
  122. data/bin/wpscan +15 -0
  123. data/coverage/assets/0.10.0/application.css +799 -0
  124. data/coverage/assets/0.10.0/application.js +1707 -0
  125. data/coverage/assets/0.10.0/colorbox/border.png +0 -0
  126. data/coverage/assets/0.10.0/colorbox/controls.png +0 -0
  127. data/coverage/assets/0.10.0/colorbox/loading.gif +0 -0
  128. data/coverage/assets/0.10.0/colorbox/loading_background.png +0 -0
  129. data/coverage/assets/0.10.0/favicon_green.png +0 -0
  130. data/coverage/assets/0.10.0/favicon_red.png +0 -0
  131. data/coverage/assets/0.10.0/favicon_yellow.png +0 -0
  132. data/coverage/assets/0.10.0/loading.gif +0 -0
  133. data/coverage/assets/0.10.0/magnify.png +0 -0
  134. data/coverage/assets/0.10.0/smoothness/images/ui-bg_flat_0_aaaaaa_40x100.png +0 -0
  135. data/coverage/assets/0.10.0/smoothness/images/ui-bg_flat_75_ffffff_40x100.png +0 -0
  136. data/coverage/assets/0.10.0/smoothness/images/ui-bg_glass_55_fbf9ee_1x400.png +0 -0
  137. data/coverage/assets/0.10.0/smoothness/images/ui-bg_glass_65_ffffff_1x400.png +0 -0
  138. data/coverage/assets/0.10.0/smoothness/images/ui-bg_glass_75_dadada_1x400.png +0 -0
  139. data/coverage/assets/0.10.0/smoothness/images/ui-bg_glass_75_e6e6e6_1x400.png +0 -0
  140. data/coverage/assets/0.10.0/smoothness/images/ui-bg_glass_95_fef1ec_1x400.png +0 -0
  141. data/coverage/assets/0.10.0/smoothness/images/ui-bg_highlight-soft_75_cccccc_1x100.png +0 -0
  142. data/coverage/assets/0.10.0/smoothness/images/ui-icons_222222_256x240.png +0 -0
  143. data/coverage/assets/0.10.0/smoothness/images/ui-icons_2e83ff_256x240.png +0 -0
  144. data/coverage/assets/0.10.0/smoothness/images/ui-icons_454545_256x240.png +0 -0
  145. data/coverage/assets/0.10.0/smoothness/images/ui-icons_888888_256x240.png +0 -0
  146. data/coverage/assets/0.10.0/smoothness/images/ui-icons_cd0a0a_256x240.png +0 -0
  147. data/coverage/index.html +27510 -0
  148. data/lib/wpscan.rb +44 -0
  149. data/lib/wpscan/browser.rb +16 -0
  150. data/lib/wpscan/controller.rb +8 -0
  151. data/lib/wpscan/controllers.rb +8 -0
  152. data/lib/wpscan/db.rb +28 -0
  153. data/lib/wpscan/db/dynamic_finders.rb +63 -0
  154. data/lib/wpscan/db/plugin.rb +11 -0
  155. data/lib/wpscan/db/plugins.rb +11 -0
  156. data/lib/wpscan/db/schema.rb +39 -0
  157. data/lib/wpscan/db/theme.rb +11 -0
  158. data/lib/wpscan/db/themes.rb +11 -0
  159. data/lib/wpscan/db/updater.rb +148 -0
  160. data/lib/wpscan/db/wp_item.rb +18 -0
  161. data/lib/wpscan/db/wp_items.rb +21 -0
  162. data/lib/wpscan/db/wp_version.rb +11 -0
  163. data/lib/wpscan/errors/http.rb +34 -0
  164. data/lib/wpscan/errors/update.rb +8 -0
  165. data/lib/wpscan/errors/wordpress.rb +22 -0
  166. data/lib/wpscan/finders.rb +14 -0
  167. data/lib/wpscan/finders/finder/plugin_version/comments.rb +25 -0
  168. data/lib/wpscan/finders/finder/wp_version/smart_url_checker.rb +23 -0
  169. data/lib/wpscan/helper.rb +6 -0
  170. data/lib/wpscan/references.rb +31 -0
  171. data/lib/wpscan/target.rb +81 -0
  172. data/lib/wpscan/target/platform/wordpress.rb +74 -0
  173. data/lib/wpscan/target/platform/wordpress/custom_directories.rb +93 -0
  174. data/lib/wpscan/version.rb +4 -0
  175. data/lib/wpscan/vulnerability.rb +25 -0
  176. data/lib/wpscan/vulnerable.rb +10 -0
  177. data/wpscan-v3.sublime-project +8 -0
  178. data/wpscan-v3.sublime-workspace +895 -0
  179. data/wpscan.gemspec +55 -0
  180. metadata +419 -0
data/lib/wpscan/vulnerable.rb ADDED
@@ -0,0 +1,10 @@
1
+ module WPScan
2
+ # Module to include in vulnerable WP item such as WpVersion.
3
+ # the vulnerabilities method should be implemented
4
+ module Vulnerable
5
+ # @return [ Boolean ]
6
+ def vulnerable?
7
+ !vulnerabilities.empty?
8
+ end
9
+ end
10
+ end
data/wpscan-v3.sublime-project ADDED
@@ -0,0 +1,8 @@
1
+ {
2
+ "folders":
3
+ [
4
+ {
5
+ "path": "."
6
+ }
7
+ ]
8
+ }
data/wpscan-v3.sublime-workspace ADDED
@@ -0,0 +1,895 @@
1
+ {
2
+ "auto_complete":
3
+ {
4
+ "selected_items":
5
+ [
6
+ [
7
+ "user",
8
+ "user_name"
9
+ ],
10
+ [
11
+ "search",
12
+ "search_url"
13
+ ],
14
+ [
15
+ "all",
16
+ "all_users〔function〕"
17
+ ],
18
+ [
19
+ "coo",
20
+ "cookie_string"
21
+ ],
22
+ [
23
+ "sear",
24
+ "search_url"
25
+ ],
26
+ [
27
+ "redi",
28
+ "redirection"
29
+ ],
30
+ [
31
+ "sub",
32
+ "sub_dir"
33
+ ],
34
+ [
35
+ "con",
36
+ "content_dir"
37
+ ],
38
+ [
39
+ "hom",
40
+ "homepage_res"
41
+ ],
42
+ [
43
+ "uni",
44
+ "unique_expected"
45
+ ],
46
+ [
47
+ "ex",
48
+ "expected"
49
+ ],
50
+ [
51
+ "pro",
52
+ "progress_bar〔variable〕"
53
+ ],
54
+ [
55
+ "wo",
56
+ "wordlist"
57
+ ],
58
+ [
59
+ "pas",
60
+ "passwords"
61
+ ],
62
+ [
63
+ "xml",
64
+ "xmlrpc_payload〔function〕"
65
+ ],
66
+ [
67
+ "pass",
68
+ "password_step〔variable〕"
69
+ ],
70
+ [
71
+ "PAY",
72
+ "PAYLOAD_TAIL〔variable〕"
73
+ ],
74
+ [
75
+ "fin",
76
+ "finder_configs"
77
+ ],
78
+ [
79
+ "com",
80
+ "comment_configs〔variable〕"
81
+ ],
82
+ [
83
+ "co",
84
+ "comment_configs"
85
+ ],
86
+ [
87
+ "plu",
88
+ "plugin_slug"
89
+ ],
90
+ [
91
+ "Dyn",
92
+ "DynamicFinders"
93
+ ],
94
+ [
95
+ "nam",
96
+ "name"
97
+ ],
98
+ [
99
+ "up",
100
+ "update_db_required"
101
+ ],
102
+ [
103
+ "missing",
104
+ "missing_files"
105
+ ],
106
+ [
107
+ "ou",
108
+ "outdated"
109
+ ],
110
+ [
111
+ "out",
112
+ "output"
113
+ ],
114
+ [
115
+ "form",
116
+ "formatter"
117
+ ],
118
+ [
119
+ "mi",
120
+ "missing_files"
121
+ ],
122
+ [
123
+ "last",
124
+ "last_update_file〔function〕"
125
+ ],
126
+ [
127
+ "lo",
128
+ "local_db"
129
+ ],
130
+ [
131
+ "miss",
132
+ "missing_files?〔function〕"
133
+ ],
134
+ [
135
+ "last_up",
136
+ "last_update_file〔function〕"
137
+ ],
138
+ [
139
+ "update",
140
+ "update_db_required"
141
+ ],
142
+ [
143
+ "de",
144
+ "described_class"
145
+ ],
146
+ [
147
+ "check",
148
+ "check_wordpress_state"
149
+ ],
150
+ [
151
+ "foun",
152
+ "found_by"
153
+ ],
154
+ [
155
+ "file",
156
+ "file_path〔variable〕"
157
+ ],
158
+ [
159
+ "start",
160
+ "start_time〔variable〕"
161
+ ],
162
+ [
163
+ "star",
164
+ "start_time〔variable〕"
165
+ ],
166
+ [
167
+ "mem",
168
+ "memory_usage〔function〕"
169
+ ],
170
+ [
171
+ "la",
172
+ "latest_version"
173
+ ],
174
+ [
175
+ "stable",
176
+ "stable_tag"
177
+ ],
178
+ [
179
+ "vulne",
180
+ "vulnerable_slugs"
181
+ ],
182
+ [
183
+ "The",
184
+ "Themes"
185
+ ],
186
+ [
187
+ "po",
188
+ "popular_slugs"
189
+ ],
190
+ [
191
+ "latest",
192
+ "latest_updated"
193
+ ],
194
+ [
195
+ "exp",
196
+ "expected"
197
+ ],
198
+ [
199
+ "vul",
200
+ "vulnerabilities"
201
+ ],
202
+ [
203
+ "refe",
204
+ "references_keys"
205
+ ],
206
+ [
207
+ "dump",
208
+ "dump_url"
209
+ ],
210
+ [
211
+ "fi",
212
+ "fixture"
213
+ ],
214
+ [
215
+ "shoul",
216
+ "should_not"
217
+ ],
218
+ [
219
+ "the",
220
+ "themes"
221
+ ],
222
+ [
223
+ "sty",
224
+ "style_url"
225
+ ],
226
+ [
227
+ "versio",
228
+ "version_number"
229
+ ],
230
+ [
231
+ "chan",
232
+ "changelog_section"
233
+ ],
234
+ [
235
+ "wind",
236
+ "windows_line_ending"
237
+ ],
238
+ [
239
+ "style",
240
+ "style_body"
241
+ ],
242
+ [
243
+ "releas",
244
+ "release_log_url"
245
+ ],
246
+ [
247
+ "raise",
248
+ "raise_error"
249
+ ],
250
+ [
251
+ "bre",
252
+ "before_scan"
253
+ ],
254
+ [
255
+ "styl",
256
+ "style_body"
257
+ ],
258
+ [
259
+ "db",
260
+ "db_name"
261
+ ],
262
+ [
263
+ "w",
264
+ "wordpress"
265
+ ],
266
+ [
267
+ "tim",
268
+ "timthumb"
269
+ ],
270
+ [
271
+ "web",
272
+ "webshot_enabled"
273
+ ],
274
+ [
275
+ "wp",
276
+ "wp-content"
277
+ ],
278
+ [
279
+ "enum",
280
+ "enum_users"
281
+ ],
282
+ [
283
+ "logi",
284
+ "login_request"
285
+ ],
286
+ [
287
+ "bru",
288
+ "brute_force"
289
+ ],
290
+ [
291
+ "Comments",
292
+ "CommentsRspec"
293
+ ],
294
+ [
295
+ "use",
296
+ "users"
297
+ ],
298
+ [
299
+ "view",
300
+ "views_directories"
301
+ ],
302
+ [
303
+ "before",
304
+ "before_scan"
305
+ ],
306
+ [
307
+ "pat",
308
+ "patterns"
309
+ ],
310
+ [
311
+ "const",
312
+ "constant_name"
313
+ ],
314
+ [
315
+ "cons",
316
+ "constants"
317
+ ],
318
+ [
319
+ "bac",
320
+ "backups"
321
+ ],
322
+ [
323
+ "backup",
324
+ "config_backups"
325
+ ],
326
+ [
327
+ "confi",
328
+ "config_backups"
329
+ ],
330
+ [
331
+ "poten",
332
+ "potential_urls"
333
+ ],
334
+ [
335
+ "Config",
336
+ "ConfigBackups"
337
+ ],
338
+ [
339
+ "en",
340
+ "enum_themes"
341
+ ],
342
+ [
343
+ "enu",
344
+ "enum_timthumbs"
345
+ ],
346
+ [
347
+ "Opt",
348
+ "OptBoolean"
349
+ ],
350
+ [
351
+ "man",
352
+ "main_theme"
353
+ ],
354
+ [
355
+ "En",
356
+ "Enumeration"
357
+ ],
358
+ [
359
+ "targ",
360
+ "target_url"
361
+ ],
362
+ [
363
+ "theme",
364
+ "theme_name"
365
+ ],
366
+ [
367
+ "timth",
368
+ "timthumbs_list"
369
+ ],
370
+ [
371
+ "ot",
372
+ "option"
373
+ ],
374
+ [
375
+ "par",
376
+ "parsed_options"
377
+ ],
378
+ [
379
+ "desc",
380
+ "describe"
381
+ ],
382
+ [
383
+ "pasi",
384
+ "passive_from_style_code"
385
+ ],
386
+ [
387
+ "st",
388
+ "style"
389
+ ],
390
+ [
391
+ "them",
392
+ "theme_version"
393
+ ],
394
+ [
395
+ "Main",
396
+ "MainTheme"
397
+ ],
398
+ [
399
+ "Plu",
400
+ "PluginVersion"
401
+ ],
402
+ [
403
+ "mu",
404
+ "mu-plugins"
405
+ ],
406
+ [
407
+ "des",
408
+ "describe"
409
+ ],
410
+ [
411
+ "In",
412
+ "InterestingFindings"
413
+ ],
414
+ [
415
+ "in",
416
+ "interesting_findings"
417
+ ],
418
+ [
419
+ "version",
420
+ "version_opts"
421
+ ],
422
+ [
423
+ "cach",
424
+ "cached_style"
425
+ ],
426
+ [
427
+ "cac",
428
+ "cached_style"
429
+ ],
430
+ [
431
+ "parent",
432
+ "parent_url"
433
+ ],
434
+ [
435
+ "temp",
436
+ "template_style"
437
+ ],
438
+ [
439
+ "si",
440
+ "sitepress_multilingual_cms"
441
+ ],
442
+ [
443
+ "plugi",
444
+ "plugin_version"
445
+ ],
446
+ [
447
+ "Co",
448
+ "Controller"
449
+ ]
450
+ ]
451
+ },
452
+ "buffers":
453
+ [
454
+ ],
455
+ "build_system": "",
456
+ "build_system_choices":
457
+ [
458
+ ],
459
+ "build_varint": "",
460
+ "command_palette":
461
+ {
462
+ "height": 392.0,
463
+ "last_filter": "ip",
464
+ "selected_items":
465
+ [
466
+ [
467
+ "ip",
468
+ "Package Control: Install Package"
469
+ ],
470
+ [
471
+ "lp",
472
+ "Package Control: List Packages"
473
+ ],
474
+ [
475
+ "up",
476
+ "Package Control: Upgrade Package"
477
+ ],
478
+ [
479
+ "Package Control: i",
480
+ "Package Control: Install Package"
481
+ ],
482
+ [
483
+ "pic",
484
+ "Package Control: Install Package"
485
+ ],
486
+ [
487
+ "pci",
488
+ "Package Control: Install Package"
489
+ ],
490
+ [
491
+ "in",
492
+ "Package Control: Install Package"
493
+ ]
494
+ ],
495
+ "width": 593.0
496
+ },
497
+ "console":
498
+ {
499
+ "height": 135.0,
500
+ "history":
501
+ [
502
+ "import urllib.request,os,hashlib; h = 'eb2297e1a458f27d836c04bb0cbaf282' + 'd0e7a3098092775ccb37ca9d6b2e4b7d'; pf = 'Package Control.sublime-package'; ipp = sublime.installed_packages_path(); urllib.request.install_opener( urllib.request.build_opener( urllib.request.ProxyHandler()) ); by = urllib.request.urlopen( 'http://packagecontrol.io/' + pf.replace(' ', '%20')).read(); dh = hashlib.sha256(by).hexdigest(); print('Error validating download (got %s instead of %s), please try manual install' % (dh, h)) if dh != h else open(os.path.join( ipp, pf), 'wb' ).write(by)"
503
+ ]
504
+ },
505
+ "distraction_free":
506
+ {
507
+ "menu_visible": true,
508
+ "show_minimap": false,
509
+ "show_open_files": false,
510
+ "show_tabs": false,
511
+ "side_bar_visible": false,
512
+ "status_bar_visible": false
513
+ },
514
+ "file_history":
515
+ [
516
+ "/home/dev/Dev/wpscan-v3/wpscan-v3.sublime-workspace",
517
+ "/home/dev/Dev/wpscan-v3/wpscan-v3.sublime-project",
518
+ "/home/dev/Dev/wpscan-v3/wpscan.gemspec",
519
+ "/home/dev/Dev/wpscan-v3-github/app/finders/wp_version/rdf_generator.rb",
520
+ "/home/dev/Dev/wpscan-v3-github/app/finders/wp_version/rss_generator.rb",
521
+ "/home/dev/Dev/wpscan-v3-github/spec/app/finders/wp_version/rdf_generator_spec.rb",
522
+ "/home/dev/Dev/wpscan-v3-github/lib/wpscan/target/platform/wordpress.rb",
523
+ "/home/dev/Dev/wpscan-v3-github/app/controllers/core.rb",
524
+ "/home/dev/Dev/wpscan-v3-github/spec/app/controllers/core_spec.rb",
525
+ "/home/dev/Dev/wpscan-v3-github/spec/spec_helper.rb",
526
+ "/home/dev/Dev/wpscan-v3-github/app/controllers/custom_directories.rb",
527
+ "/home/dev/Dev/wpscan-v3-github/lib/wpscan/references.rb",
528
+ "/home/dev/Dev/wpscan-v3-github/lib/wpscan/errors/http.rb",
529
+ "/home/dev/Dev/wpscan-v3-github/app/controllers/brute_force.rb",
530
+ "/home/dev/Dev/wpscan-v3-github/wpscan.gemspec",
531
+ "/home/dev/Dev/wpscan-v3-github/spec/shared_examples/target/platform/wordpress/custom_directories.rb",
532
+ "/home/dev/Dev/wpscan-v3-github/.rubocop.yml",
533
+ "/home/dev/Dev/wpscan-v3-github/app/models/timthumb.rb",
534
+ "/home/dev/Dev/wpscan-v3-github/spec/app/models/timthumb_spec.rb",
535
+ "/home/dev/Dev/Tests/vegoa_basecamp_idle_users.rb",
536
+ "/home/dev/Dev/wpscan-v3-github/app/finders/plugins/known_locations.rb",
537
+ "/home/dev/Dev/wpscan-v3-github/app/finders/themes/known_locations.rb",
538
+ "/home/dev/Dev/wpscan-v3-github/lib/wpscan/db/updater.rb",
539
+ "/home/dev/Dev/wpscan-v3-github/app/views/json/core/banner.erb",
540
+ "/home/dev/Dev/wpscan-v3-github/app/finders/wp_version/unique_fingerprinting.rb",
541
+ "/home/dev/Dev/wpscan-v3-github/app/finders/users/author_id_brute_forcing.rb",
542
+ "/home/dev/Dev/wpscan-v3-github/app/finders/timthumbs/known_locations.rb",
543
+ "/home/dev/Dev/wpscan-v3-github/app/finders/medias/attachment_brute_forcing.rb",
544
+ "/home/dev/Dev/wpscan-v3-github/app/finders/config_backups/known_filenames.rb",
545
+ "/home/dev/Dev/wpscan-v3-github/lib/wpscan/target.rb",
546
+ "/home/dev/Dev/wpscan-v3-github/app/finders/wp_version/stylesheets.rb",
547
+ "/home/dev/Dev/wpscan-v3-github/app/finders/wp_version/meta_generator.rb",
548
+ "/home/dev/Dev/wpscan-v3-github/app/finders/users/author_posts.rb",
549
+ "/home/dev/Dev/wpscan-v3-github/app/finders/theme_version/woo_framework_meta_generator.rb",
550
+ "/home/dev/Dev/wpscan-v3-github/app/finders/plugins/urls_in_homepage.rb",
551
+ "/home/dev/Dev/wpscan-v3-github/app/finders/plugins/comments.rb",
552
+ "/home/dev/Dev/wpscan-v3-github/app/finders/plugins/headers.rb",
553
+ "/home/dev/Dev/wpscan-v3-github/app/finders/plugin_version/sitepress_multilingual_cms/version_parameter.rb",
554
+ "/home/dev/Dev/wpscan-v3-github/app/finders/plugin_version/sitepress_multilingual_cms/meta_generator.rb",
555
+ "/home/dev/Dev/wpscan-v3-github/app/finders/wp_items/urls_in_homepage.rb",
556
+ "/home/dev/Dev/wpscan-v3-github/app/finders/main_theme/urls_in_homepage.rb",
557
+ "/home/dev/Dev/wpscan-v3-github/app/finders/main_theme/css_style.rb",
558
+ "/home/dev/Dev/wpscan-v3-github/app/finders/main_theme/woo_framework_meta_generator.rb",
559
+ "/home/dev/Dev/wpscan-v3-github/app/finders/interesting_findings/mu_plugins.rb",
560
+ "/home/dev/Dev/wpscan-v3-github/lib/wpscan/target/platform/wordpress/custom_directories.rb",
561
+ "/home/dev/Dev/wpscan-v3-github/spec/app/finders/plugins/comments_spec.rb",
562
+ "/home/dev/Dev/wpscan-v3-github/lib/wpscan/finders/finder/plugin_version/comments.rb",
563
+ "/home/dev/Dev/wpscan-v3-github/spec/fixtures/db/dynamic_finders.yml",
564
+ "/home/dev/Dev/wpscan-v3-github/spec/fixtures/finders/plugins/comments/found.html",
565
+ "/home/dev/Dev/wpscan-v3-github/spec/app/finders/plugin_version_spec.rb",
566
+ "/home/dev/Dev/wpscan-v3-github/spec/fixtures/target/platform/wordpress/detection/mu_plugins.html",
567
+ "/home/dev/Dev/wpscan-v3-github/spec/shared_examples/target/platform/wordpress.rb",
568
+ "/home/dev/Dev/wpscan-v3-github/spec/lib/finders/finder/plugin_version/comments_spec.rb",
569
+ "/home/dev/Dev/Tests/wp_xmlrpc_multicall_brute_force.rb",
570
+ "/home/dev/Dev/Tests/wp_xmlrpc_brute_force.rb",
571
+ "/home/dev/Dev/wpscan-v3-github/README.md",
572
+ "/home/dev/Dev/Tests/constant_already_init.rb",
573
+ "/home/dev/Dev/wpscan-v3-github/lib/wpscan/version.rb",
574
+ "/home/dev/Dev/wpscan-v3-github/Gemfile",
575
+ "/home/dev/Dev/wpscan-v3-github/spec/app/controllers/enumeration_spec.rb",
576
+ "/home/dev/Dev/wpscan-v3-github/app/app.rb",
577
+ "/home/dev/Dev/wpscan-v3-github/app/controllers/enumeration.rb",
578
+ "/home/dev/Dev/wpscan-v3-github/lib/wpscan/db/dynamic_finders.rb",
579
+ "/home/dev/Dev/wpscan-v3-github/spec/app/finders/plugins/urls_in_homepage_spec.rb",
580
+ "/home/dev/Dev/wpscan-v3-github/spec/lib/db/dynamic_finders_spec.rb",
581
+ "/home/dev/Dev/wpscan-v3-github/app/helper.rb",
582
+ "/home/dev/Dev/wpscan-v3-github/lib/wpscan/db.rb",
583
+ "/home/dev/Dev/wpscan-v3-github/spec/fixtures/finders/plugins/urls_in_homepage/found.html",
584
+ "/home/dev/Dev/wpscan-v3-github/spec/shared_examples/finders/wp_items/urls_in_homepage.rb",
585
+ "/home/dev/Dev/wpscan-v3-github/app/views/json/finding.erb",
586
+ "/home/dev/Dev/wpscan-v3-github/spec/output/enumeration/medias/medias.json",
587
+ "/home/dev/Dev/wpscan-v3-github/spec/output/main_theme/verbose.json",
588
+ "/home/dev/Dev/wpscan-v3-github/spec/output/enumeration/timthumbs/with_vulns.json",
589
+ "/home/dev/Dev/wpscan-v3-github/spec/output/enumeration/timthumbs/no_vulns.json",
590
+ "/home/dev/Dev/wpscan-v3-github/spec/output/main_theme/vulnerable.json",
591
+ "/home/dev/Dev/wpscan-v3-github/spec/output/main_theme/no_verbose.json",
592
+ "/home/dev/Dev/wpscan-v3-github/spec/output/wp_version/with_vulns.json",
593
+ "/home/dev/Dev/wpscan-v3-github/spec/output/wp_version/not_confirmed_no_entries.json",
594
+ "/home/dev/Dev/wpscan-v3-github/spec/output/wp_version/not_confirmed_entries.json",
595
+ "/home/dev/Dev/wpscan-v3-github/spec/output/wp_version/confirmed_multiples.json",
596
+ "/home/dev/Dev/wpscan-v3-github/spec/output/wp_version/confirmed_one.json",
597
+ "/home/dev/Dev/wpscan-v3-github/.travis.yml",
598
+ "/home/dev/Dev/wpscan-v3-github/lib/wpscan.rb",
599
+ "/home/dev/Dev/wpscan-v3-github/lib/wpscan/errors/update.rb",
600
+ "/home/dev/Dev/wpscan-v3-github/app/views/json/enumeration/plugins.erb",
601
+ "/home/dev/Dev/wpscan-v3-github/app/views/json/enumeration/timthumbs.erb",
602
+ "/home/dev/Dev/wpscan-v3-github/app/views/json/theme.erb",
603
+ "/home/dev/Dev/wpscan-v3-github/app/views/json/wp_version/version.erb",
604
+ "/home/dev/Dev/wpscan-v3-github/lib/wpscan/hacks.rb",
605
+ "/home/dev/Dev/wpscan-v3-github/app/views/cli/notice.erb",
606
+ "/home/dev/Dev/wpscan-v3-github/lib/wpscan/finders/finder/wp_version/smart_url_checker.rb",
607
+ "/home/dev/Dev/wpscan-v3-github/lib/wpscan/helper.rb",
608
+ "/home/dev/Dev/wpscan-v3-github/lib/wpscan/db/wp_items.rb",
609
+ "/home/dev/Dev/wpscan-v3-github/lib/wpscan/db/wp_item.rb",
610
+ "/home/dev/Dev/wpscan-v3-github/spec/fixtures/db/wordpresses.json",
611
+ "/home/dev/Dev/wpscan-v3-github/spec/fixtures/db/plugins.json",
612
+ "/home/dev/Dev/wpscan-v3-github/spec/fixtures/db/themes.json",
613
+ "/home/dev/Dev/wpscan-v3-github/lib/wpscan/errors/wordpress.rb",
614
+ "/home/dev/.wpscan/db/themes.json",
615
+ "/home/dev/Dev/wpscan-v3-github/app/views/json/enumeration/users.erb",
616
+ "/home/dev/Dev/wpscan-v3-github/spec/output/enumeration/users/none_found.json",
617
+ "/home/dev/Dev/wpscan-v3-github/spec/output/enumeration/timthumbs/none_found.json",
618
+ "/home/dev/Dev/wpscan-v3-github/spec/output/enumeration/themes/none_found.json",
619
+ "/home/dev/Dev/wpscan-v3-github/app/views/json/enumeration/themes.erb",
620
+ "/home/dev/Dev/wpscan-v3-github/spec/output/enumeration/plugins/none_found.json",
621
+ "/home/dev/Dev/wpscan-v3-github/app/views/json/enumeration/medias.erb",
622
+ "/home/dev/Dev/wpscan-v3-github/spec/output/enumeration/medias/none_found.json",
623
+ "/home/dev/Dev/wpscan-v3-github/app/views/json/enumeration/config_backups.erb",
624
+ "/home/dev/Dev/wpscan-v3-github/spec/output/enumeration/config_backups/none_found.json",
625
+ "/home/dev/Dev/wpscan-v3-github/app/views/json/brute_force/users.erb",
626
+ "/home/dev/Dev/wpscan-v3-github/app/models/wp_version.rb",
627
+ "/home/dev/Dev/wpscan-v3-github/spec/app/finders/wp_version/meta_generator_spec.rb",
628
+ "/home/dev/Dev/wpscan-v3-github/spec/fixtures/finders/wp_version/meta_generator/mobile_pack.html",
629
+ "/home/dev/Dev/Tests/json_memory/common.rb",
630
+ "/home/dev/Dev/Tests/json_memory/yml_load_memory.rb",
631
+ "/home/dev/Dev/Tests/json_memory/json_load_memory.rb",
632
+ "/home/dev/Dev/Tests/json_memory/convert_json_to_yaml.rb",
633
+ "/home/dev/Dev/wpscan-v3-github/lib/wpscan/db/themes.rb",
634
+ "/home/dev/Dev/wpscan-v3-github/lib/wpscan/db/plugins.rb",
635
+ "/home/dev/Dev/wpscan-v3-github/app/models/wp_item.rb",
636
+ "/home/dev/Dev/wpscan-v3-github/app/models/theme.rb",
637
+ "/home/dev/Dev/wpscan-v3-github/lib/wpscan/db/plugin.rb",
638
+ "/home/dev/Dev/wpscan-v3-github/lib/wpscan/db/theme.rb",
639
+ "/home/dev/Dev/wpscan-v3-github/app/models/plugin.rb",
640
+ "/home/dev/Dev/Tests/json_load_memory.rb",
641
+ "/home/dev/Dev/Tests/yajl_load_memory.rb",
642
+ "/home/dev/.wpscan/db/plugins.json",
643
+ "/home/dev/Dev/wpscan-v3-github/lib/wpscan/db/wp_version.rb"
644
+ ],
645
+ "find":
646
+ {
647
+ "height": 34.0
648
+ },
649
+ "find_in_files":
650
+ {
651
+ "height": 90.0,
652
+ "where_history":
653
+ [
654
+ "/home/dev/Dev/wpscan-v3-github",
655
+ "/home/dev/Dev/wpscan-v3-github/app/views/cli",
656
+ "/home/dev/Dev/wpscan-v3-github",
657
+ "/home/dev/Dev/wpscan-v3-github/app/views/json",
658
+ "/home/dev/Dev/wpscan-v3-github",
659
+ "/home/dev/Dev/wpscan-v3-github/spec",
660
+ "/home/dev/Dev/wpscan-v3-github",
661
+ "/home/dev/Dev/wpscan-v3-github/app/views/cli",
662
+ "/home/dev/Dev/wpscan-v3-github",
663
+ "/home/dev/Dev/wpscan-v3",
664
+ "/home/dev/Dev/wpscan-v3/spec",
665
+ "/home/dev/Dev/wpscan-v3"
666
+ ]
667
+ },
668
+ "find_state":
669
+ {
670
+ "case_sensitive": false,
671
+ "find_history":
672
+ [
673
+ "http://wordpress",
674
+ "https://wordpress",
675
+ "zero?",
676
+ "target",
677
+ "Browser.",
678
+ " +$",
679
+ "progress_bar",
680
+ "bar.",
681
+ "Unable to identify the wp-content dir",
682
+ "effective_url",
683
+ "Generated by",
684
+ "@option",
685
+ "VERSION",
686
+ "name, config|",
687
+ "xpath(",
688
+ "dynamic_finders_config",
689
+ "patterns",
690
+ "\": [",
691
+ "version.to_json",
692
+ "?\n",
693
+ "mu_plugins",
694
+ "rescue",
695
+ "'json'",
696
+ "fixed_in\":\"\"",
697
+ "dynamic",
698
+ "vulnerable_names",
699
+ "Version",
700
+ "views_directories",
701
+ "views",
702
+ "amber('[!]')",
703
+ "green('[+]')",
704
+ "blue('[i]')",
705
+ "red('[!]')",
706
+ "cache_ttl:",
707
+ "interesting_entries",
708
+ "web.nvd.nist.gov/view/vuln/detail?vulnId",
709
+ "next unless attr_value",
710
+ "HttpError",
711
+ "hash_",
712
+ "https://www.exploit",
713
+ "http://www.exploit",
714
+ "http://exploit",
715
+ "#{node}",
716
+ "themes",
717
+ "end",
718
+ "wordpress-4.1.1/",
719
+ "wordpress-4.1.1",
720
+ "themes",
721
+ "ClassLength",
722
+ "\\.]+)'",
723
+ "W3_",
724
+ "media",
725
+ "@media",
726
+ "DB_DIR",
727
+ "DIRECT_ACCESS",
728
+ "http.rb",
729
+ "$",
730
+ "media",
731
+ "medias",
732
+ "+",
733
+ "plugin",
734
+ "media",
735
+ "medias",
736
+ "plugins",
737
+ "@theme",
738
+ "medias",
739
+ "+",
740
+ "theme.erb",
741
+ "green-lemonade.com",
742
+ "wordpress-4.1.1/",
743
+ "comments_from_page",
744
+ ".css('",
745
+ "Addressable::URI.parse",
746
+ "InterestingFile",
747
+ "interesting_file",
748
+ "interesting_files",
749
+ "InterestingFiles",
750
+ "plugin",
751
+ "\n@",
752
+ "firefart.at",
753
+ "pages.rapha.cc",
754
+ "rapha.cc",
755
+ "css_style.rb"
756
+ ],
757
+ "highlight": true,
758
+ "in_selection": false,
759
+ "preserve_case": false,
760
+ "regex": false,
761
+ "replace_history":
762
+ [
763
+ "",
764
+ "xpaths",
765
+ "fixed_in\":null",
766
+ "warning_icon",
767
+ "info_icon",
768
+ "notice_icon",
769
+ "critical_icon",
770
+ "cve.mitre.org/cgi-bin/cvename.cgi?name",
771
+ "",
772
+ "config_backup",
773
+ "@config_backup",
774
+ "",
775
+ "user",
776
+ "users",
777
+ "",
778
+ "timthumb",
779
+ "timthumbs",
780
+ "themes",
781
+ "plugin",
782
+ "plugins",
783
+ "",
784
+ "wp.lab",
785
+ "",
786
+ "InterestingFinding",
787
+ "interesting_finding",
788
+ "interesting_findings",
789
+ "InterestingFindings",
790
+ "theme",
791
+ "@theme",
792
+ "child",
793
+ "wp.lab"
794
+ ],
795
+ "reverse": false,
796
+ "show_context": true,
797
+ "use_buffer2": true,
798
+ "whole_word": false,
799
+ "wrap": true
800
+ },
801
+ "groups":
802
+ [
803
+ {
804
+ "sheets":
805
+ [
806
+ ]
807
+ }
808
+ ],
809
+ "incremental_find":
810
+ {
811
+ "height": 23.0
812
+ },
813
+ "input":
814
+ {
815
+ "height": 31.0
816
+ },
817
+ "layout":
818
+ {
819
+ "cells":
820
+ [
821
+ [
822
+ 0,
823
+ 0,
824
+ 1,
825
+ 1
826
+ ]
827
+ ],
828
+ "cols":
829
+ [
830
+ 0.0,
831
+ 1.0
832
+ ],
833
+ "rows":
834
+ [
835
+ 0.0,
836
+ 1.0
837
+ ]
838
+ },
839
+ "menu_visible": true,
840
+ "output.exec":
841
+ {
842
+ "height": 100.0
843
+ },
844
+ "output.find_results":
845
+ {
846
+ "height": 0.0
847
+ },
848
+ "pinned_build_system": "",
849
+ "project": "wpscan-v3-github.sublime-project",
850
+ "replace":
851
+ {
852
+ "height": 62.0
853
+ },
854
+ "save_all_on_build": true,
855
+ "select_file":
856
+ {
857
+ "height": 0.0,
858
+ "last_filter": "",
859
+ "selected_items":
860
+ [
861
+ ],
862
+ "width": 0.0
863
+ },
864
+ "select_project":
865
+ {
866
+ "height": 0.0,
867
+ "last_filter": "",
868
+ "selected_items":
869
+ [
870
+ ],
871
+ "width": 0.0
872
+ },
873
+ "select_symbol":
874
+ {
875
+ "height": 0.0,
876
+ "last_filter": "",
877
+ "selected_items":
878
+ [
879
+ ],
880
+ "width": 0.0
881
+ },
882
+ "selected_group": 0,
883
+ "settings":
884
+ {
885
+ },
886
+ "show_minimap": true,
887
+ "show_open_files": true,
888
+ "show_tabs": true,
889
+ "side_bar_visible": true,
890
+ "side_bar_width": 286.0,
891
+ "status_bar_visible": true,
892
+ "template_settings":
893
+ {
894
+ }
895
+ }