wpscan 3.7.10 → 3.7.11

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e90db053602c7fcca669e5c0e31d93b6ee50ffd189ad6c60015461c63c0d5f9d
-  data.tar.gz: 556b07a69059567771ecf05f357396e11f8efa7538dfd1f638e9a2a420f5638e
+  metadata.gz: ac618e64d1e183b142cf2cbe0cea1a3f8835a51a32ff88af53b57dd0683df623
+  data.tar.gz: f6ae91504098cf000f875768c0dcb18989df9007a81cea9802ea44d2b5080675
 SHA512:
-  metadata.gz: c170ba773c4209f5f93551118cccf5f5be744f3a4d1e0746cec11ae959959f2e386b7f1848d96b72b86aece27abf3431760c131736ba1d55c535eeab563ef1ec
-  data.tar.gz: 1b0b3bebf70efa0ac6111b97032b464a8e3188799d016ac5ebbd9c9cdfcfc4d8803291052b3d883a985aa10a77282187f07957080c2b1121b2eb83d3f2031522
+  metadata.gz: 522daf1656b75c7771713fcdec05c3f412493307fe5f2870b419d5c177dcaebbbbf80abf2c3badd4398af69967bcec33f2ca42830eed0d9c1847b967a07421fb
+  data.tar.gz: 91f246f20360685c716cd406041d254976c95a1723a9f967a0b90fce6804450e1dcbca8b419d44fd612fa9f5128f391ffda5e2f19d4547d0bf6af5b7a2b17967

data/README.md

@@ -130,7 +130,7 @@ cli_options:
   api_token: YOUR_API_TOKEN
 ```
 
-## Load APi Token From ENV
+## Load API Token From ENV (since v3.7.10)
 
 The API Token will be automatically loaded from the ENV variable `WPSCAN_API_TOKEN` if present. If the `--api-token` CLI option is also provided, the value from the CLI will be used.
 

data/app/finders/passwords/xml_rpc.rb

@@ -16,7 +16,7 @@ module WPScan
         end
 
         def errored_response?(response)
-          response.code != 200 && response.body !~ /login_error/i
+          response.code != 200 && response.body !~ /Incorrect username or password/i
         end
       end
     end

data/app/finders/users/wp_json_api.rb

@@ -21,7 +21,7 @@ module WPScan
           loop do
             current_page += 1
 
-            res = Typhoeus.get(api_url, params: { per_page: MAX_PER_PAGE, page: current_page })
+            res = Browser.get(api_url, params: { per_page: MAX_PER_PAGE, page: current_page })
 
             total_pages ||= res.headers['X-WP-TotalPages'].to_i
 

data/app/models/interesting_finding.rb

@@ -20,7 +20,7 @@ module WPScan
     class DebugLog < InterestingFinding
       # @ return [ Hash ]
       def references
-        @references ||= { url: 'https://codex.wordpress.org/Debugging_in_WordPress' }
+        @references ||= { url: ['https://codex.wordpress.org/Debugging_in_WordPress'] }
       end
     end
 

data/lib/wpscan/version.rb

@@ -2,5 +2,5 @@
 
 # Version
 module WPScan
-  VERSION = '3.7.10'
+  VERSION = '3.7.11'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: wpscan
 version: !ruby/object:Gem::Version
-  version: 3.7.10
+  version: 3.7.11
 platform: ruby
 authors:
 - WPScanTeam
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-03-09 00:00:00.000000000 Z
+date: 2020-03-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: cms_scanner
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.8.5
+        version: 0.8.6
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.8.5
+        version: 0.8.6
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement