wpscan 3.4.5 → 3.5.0

data/app/views/json/wp_item.erb

@@ -4,6 +4,5 @@
 "last_updated": <%= @wp_item.last_updated.to_json %>,
 "outdated": <%= @wp_item.outdated?.to_json %>,
 "readme_url": <%= @wp_item.readme_url.to_json %>,
-"changelog_url": <%= @wp_item.changelog_url.to_json %>,
 "directory_listing": <%= @wp_item.directory_listing?.to_json %>,
 "error_log_url": <% if @wp_item.error_log? %><%= @wp_item.url('error_log').to_json %><% else %>null<% end %>

data/bin/wpscan

@@ -1,4 +1,5 @@
 #!/usr/bin/env ruby
+# frozen_string_literal: true
 
 require 'wpscan'
 

data/lib/wpscan.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # Gems
 # Believe it or not, active_support MUST be the first one,
 # otherwise encoding issues can happen when using JSON format.

data/lib/wpscan/browser.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module WPScan
   # Custom Browser
   class Browser < CMSScanner::Browser

data/lib/wpscan/controller.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module WPScan
   # Needed to load at least the Core controller
   # Otherwise, the following error will be raised:

data/lib/wpscan/controllers.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module WPScan
   # Override to set the OptParser's summary width to 45 (instead of 40 from the CMSScanner)
   class Controllers < CMSScanner::Controllers

data/lib/wpscan/db.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 require_relative 'db/wp_item'
 require_relative 'db/updater'
 require_relative 'db/wp_items'

data/lib/wpscan/db/dynamic_finders/base.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module WPScan
   module DB
     module DynamicFinders

data/lib/wpscan/db/dynamic_finders/plugin.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module WPScan
   module DB
     module DynamicFinders
@@ -60,7 +62,7 @@ module WPScan
 
         # @param [ String ] slug
         # @return [ Constant ]
-        def self.maybe_create_modudle(slug)
+        def self.maybe_create_module(slug)
           # What about slugs such as js_composer which will be done as JsComposer, just like js-composer
           constant_name = classify_slug(slug)
 
@@ -73,10 +75,7 @@ module WPScan
 
         def self.create_versions_finders
           versions_finders_configs.each do |slug, finders|
-            # Kind of an issue here, module is created even if there is no valid classes
-            # Could put the #maybe_ directly in the #send() BUT it would be checked everytime,
-            # which is kind of a waste
-            mod = maybe_create_modudle(slug)
+            mod = maybe_create_module(slug)
 
             finders.each do |finder_class, config|
               klass = config['class'] || finder_class

data/lib/wpscan/db/dynamic_finders/theme.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module WPScan
   module DB
     module DynamicFinders

data/lib/wpscan/db/dynamic_finders/wordpress.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module WPScan
   module DB
     module DynamicFinders

data/lib/wpscan/db/fingerprints.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module WPScan
   module DB
     # Fingerprints class

data/lib/wpscan/db/plugin.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module WPScan
   module DB
     # Plugin DB

data/lib/wpscan/db/plugins.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module WPScan
   module DB
     # WP Plugins

data/lib/wpscan/db/theme.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module WPScan
   module DB
     # Theme DB

data/lib/wpscan/db/themes.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module WPScan
   module DB
     # WP Themes

data/lib/wpscan/db/updater.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module WPScan
   module DB
     # Class used to perform DB updates
@@ -80,7 +82,7 @@ module WPScan
         url = "#{remote_file_url(filename)}.sha512"
 
         res = Browser.get(url, request_params)
-        raise DownloadError, res if res.timed_out? || res.code != 200
+        raise Error::Download, res if res.timed_out? || res.code != 200
 
         res.body.chomp
       end
@@ -121,7 +123,7 @@ module WPScan
         file_url  = remote_file_url(filename)
 
         res = Browser.get(file_url, request_params)
-        raise DownloadError, res if res.timed_out? || res.code != 200
+        raise Error::Download, res if res.timed_out? || res.code != 200
 
         File.open(file_path, 'wb') { |f| f.write(res.body) }
 

data/lib/wpscan/db/wp_item.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module WPScan
   module DB
     # WpItem - super DB class for Plugin, Theme and Version

data/lib/wpscan/db/wp_items.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module WPScan
   module DB
     # WP Items

data/lib/wpscan/db/wp_version.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module WPScan
   module DB
     # WP Version

data/lib/wpscan/errors.rb

@@ -1,5 +1,11 @@
+# frozen_string_literal: true
+
 module WPScan
-  class Error < StandardError
+  module Error
+    include CMSScanner::Error
+
+    class Standard < StandardError
+    end
   end
 end
 

data/lib/wpscan/errors/http.rb

@@ -1,34 +1,38 @@
+# frozen_string_literal: true
+
 module WPScan
-  # HTTP Error
-  class HTTPError < Error
-    attr_reader :response
+  module Error
+    # HTTP Error
+    class HTTP < Standard
+      attr_reader :response
 
-    # @param [ Typhoeus::Response ] res
-    def initialize(response)
-      @response = response
-    end
+      # @param [ Typhoeus::Response ] res
+      def initialize(response)
+        @response = response
+      end
 
-    def failure_details
-      msg = response.effective_url
+      def failure_details
+        msg = response.effective_url
 
-      msg += if response.code.zero? || response.timed_out?
-               " (#{response.return_message})"
-             else
-               " (status: #{response.code})"
-             end
+        msg += if response.code.zero? || response.timed_out?
+                 " (#{response.return_message})"
+               else
+                 " (status: #{response.code})"
+               end
 
-      msg
-    end
+        msg
+      end
 
-    def to_s
-      "HTTP Error: #{failure_details}"
+      def to_s
+        "HTTP Error: #{failure_details}"
+      end
     end
-  end
 
-  # Used in the Updater
-  class DownloadError < HTTPError
-    def to_s
-      "Unable to get #{failure_details}"
+    # Used in the Updater
+    class Download < HTTP
+      def to_s
+        "Unable to get #{failure_details}"
+      end
     end
   end
 end

data/lib/wpscan/errors/update.rb

@@ -1,8 +1,12 @@
+# frozen_string_literal: true
+
 module WPScan
-  # Error raised when there is a missing  DB file and --no-update supplied
-  class MissingDatabaseFile < Error
-    def to_s
-      'Update required, you can not run a scan if a database file is missing.'
+  module Error
+    # Error raised when there is a missing  DB file and --no-update supplied
+    class MissingDatabaseFile < Standard
+      def to_s
+        'Update required, you can not run a scan if a database file is missing.'
+      end
     end
   end
 end

data/lib/wpscan/errors/wordpress.rb

@@ -1,22 +1,32 @@
+# frozen_string_literal: true
+
 module WPScan
-  # WordPress hosted (*.wordpress.com)
-  class WordPressHostedError < Error
-    def to_s
-      'Scanning *.wordpress.com hosted blogs is not supported.'
+  module Error
+    # WordPress hosted (*.wordpress.com)
+    class WordPressHosted < Standard
+      def to_s
+        'Scanning *.wordpress.com hosted blogs is not supported.'
+      end
     end
-  end
 
-  # Not WordPress Error
-  class NotWordPressError < Error
-    def to_s
-      'The remote website is up, but does not seem to be running WordPress.'
+    # Not WordPress Error
+    class NotWordPress < Standard
+      def to_s
+        'The remote website is up, but does not seem to be running WordPress.'
+      end
+    end
+
+    # Invalid Wp Version (used in the WpVersion#new)
+    class InvalidWordPressVersion < Standard
+      def to_s
+        'The WordPress version is invalid'
+      end
     end
-  end
 
-  # Invalid Wp Version (used in the WpVersion#new)
-  class InvalidWordPressVersion < Error
-    def to_s
-      'The WordPress version is invalid'
+    class WpContentDirNotDetected < Standard
+      def to_s
+        'Unable to identify the wp-content dir, please supply it with --wp-content-dir'
+      end
     end
   end
 end

data/lib/wpscan/errors/xmlrpc.rb

@@ -1,8 +1,12 @@
+# frozen_string_literal: true
+
 module WPScan
-  # XML-RPC Not Detected
-  class XMLRPCNotDetected < Error
-    def to_s
-      'The XML-RPC Interface was not detected.'
+  module Error
+    # XML-RPC Not Detected
+    class XMLRPCNotDetected < Standard
+      def to_s
+        'The XML-RPC Interface was not detected.'
+      end
     end
   end
 end

data/lib/wpscan/finders.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 require 'wpscan/finders/finder/wp_version/smart_url_checker'
 
 require 'wpscan/finders/dynamic_finder/finder'

data/lib/wpscan/finders/dynamic_finder/finder.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module WPScan
   module Finders
     module DynamicFinder

data/lib/wpscan/finders/dynamic_finder/version/body_pattern.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module WPScan
   module Finders
     module DynamicFinder

data/lib/wpscan/finders/dynamic_finder/version/comment.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module WPScan
   module Finders
     module DynamicFinder

data/lib/wpscan/finders/dynamic_finder/version/config_parser.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module WPScan
   module Finders
     module DynamicFinder

data/lib/wpscan/finders/dynamic_finder/version/finder.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module WPScan
   module Finders
     module DynamicFinder
@@ -9,9 +11,9 @@ module WPScan
 
           # @param [ String ] number
           # @param [ Hash ] finding_opts
-          # @return [ WPScan::Version ]
+          # @return [ Model::Version ]
           def create_version(number, finding_opts)
-            WPScan::Version.new(number, version_finding_opts(finding_opts))
+            Model::Version.new(number, version_finding_opts(finding_opts))
           end
 
           # @param [ Hash ] opts

data/lib/wpscan/finders/dynamic_finder/version/header_pattern.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module WPScan
   module Finders
     module DynamicFinder

data/lib/wpscan/finders/dynamic_finder/version/javascript_var.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module WPScan
   module Finders
     module DynamicFinder

data/lib/wpscan/finders/dynamic_finder/version/query_parameter.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module WPScan
   module Finders
     module DynamicFinder

data/lib/wpscan/finders/dynamic_finder/version/xpath.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module WPScan
   module Finders
     module DynamicFinder

data/lib/wpscan/finders/dynamic_finder/wp_item_version.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module WPScan
   module Finders
     module DynamicFinder

data/lib/wpscan/finders/dynamic_finder/wp_items/finder.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module WPScan
   module Finders
     module DynamicFinder
@@ -31,7 +33,7 @@ module WPScan
               configs.each do |klass, config|
                 item = process_response(opts, target.homepage_res, slug, klass, config)
 
-                found << item if item.is_a?(WpItem)
+                found << item if item.is_a?(Model::WpItem)
               end
             end
 
@@ -70,7 +72,7 @@ module WPScan
 
                 item = process_response(opts, response, slug, klass, config)
 
-                found << item if item.is_a?(WpItem)
+                found << item if item.is_a?(Model::WpItem)
               end
             end