wpscan 3.8.28 → 4.0.0

metadata

@@ -1,29 +1,252 @@
 --- !ruby/object:Gem::Specification
 name: wpscan
 version: !ruby/object:Gem::Version
-  version: 3.8.28
+  version: 4.0.0
 platform: ruby
 authors:
 - WPScanTeam
-autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-02-24 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
-  name: cms_scanner
+  name: activesupport
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '7.1'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '8.2'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '7.1'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '8.2'
+- !ruby/object:Gem::Dependency
+  name: addressable
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.9'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.9'
+- !ruby/object:Gem::Dependency
+  name: ethon
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0.14'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '0.19'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0.14'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '0.19'
+- !ruby/object:Gem::Dependency
+  name: get_process_mem
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.2.5
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: 1.1.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.2.5
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: 1.1.0
+- !ruby/object:Gem::Dependency
+  name: nokogiri
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.16'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.16'
+- !ruby/object:Gem::Dependency
+  name: public_suffix
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 4.0.3
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '7.1'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 4.0.3
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '7.1'
+- !ruby/object:Gem::Dependency
+  name: ruby-progressbar
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.10'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '1.14'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.10'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '1.14'
+- !ruby/object:Gem::Dependency
+  name: sys-proctable
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.2.2
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: 1.4.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.2.2
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: 1.4.0
+- !ruby/object:Gem::Dependency
+  name: typhoeus
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.3'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '1.7'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.3'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '1.7'
+- !ruby/object:Gem::Dependency
+  name: xmlrpc
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.3'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.3'
+- !ruby/object:Gem::Dependency
+  name: yajl-ruby
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.4.1
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.4.1
+- !ruby/object:Gem::Dependency
+  name: ostruct
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.6'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.6'
+- !ruby/object:Gem::Dependency
+  name: fiddle
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.1'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.1'
+- !ruby/object:Gem::Dependency
+  name: ferrum
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.15.0
+        version: '0.8'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.15.0
+        version: '0.8'
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
@@ -44,14 +267,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.0.0
+        version: 1.1.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.0.0
+        version: 1.1.0
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
@@ -100,28 +323,28 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.26.0
+        version: '1.82'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.26.0
+        version: '1.82'
 - !ruby/object:Gem::Dependency
   name: rubocop-performance
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.13.0
+        version: '1.26'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.13.0
+        version: '1.26'
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
@@ -142,14 +365,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.8.0
+        version: 0.9.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.8.0
+        version: 0.9.0
 - !ruby/object:Gem::Dependency
   name: stackprof
   requirement: !ruby/object:Gem::Requirement
@@ -170,14 +393,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.23.1
+        version: 3.26.2
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.23.1
+        version: 3.26.2
 description: WPScan is a black box WordPress vulnerability scanner.
 email:
 - contact@wpscan.com
@@ -191,16 +414,21 @@ files:
 - app/app.rb
 - app/controllers.rb
 - app/controllers/aliases.rb
+- app/controllers/authenticated_inventory.rb
 - app/controllers/core.rb
+- app/controllers/core/cli_options.rb
 - app/controllers/custom_directories.rb
 - app/controllers/enumeration.rb
 - app/controllers/enumeration/cli_options.rb
 - app/controllers/enumeration/enum_methods.rb
+- app/controllers/interesting_findings.rb
 - app/controllers/main_theme.rb
 - app/controllers/password_attack.rb
 - app/controllers/vuln_api.rb
 - app/controllers/wp_version.rb
 - app/finders.rb
+- app/finders/backup_folders.rb
+- app/finders/backup_folders/known_locations.rb
 - app/finders/config_backups.rb
 - app/finders/config_backups/known_filenames.rb
 - app/finders/db_exports.rb
@@ -210,16 +438,21 @@ files:
 - app/finders/interesting_findings/debug_log.rb
 - app/finders/interesting_findings/duplicator_installer_log.rb
 - app/finders/interesting_findings/emergency_pwd_reset_script.rb
+- app/finders/interesting_findings/fantastico_fileslist.rb
 - app/finders/interesting_findings/full_path_disclosure.rb
+- app/finders/interesting_findings/headers.rb
 - app/finders/interesting_findings/mu_plugins.rb
 - app/finders/interesting_findings/multisite.rb
 - app/finders/interesting_findings/php_disabled.rb
 - app/finders/interesting_findings/readme.rb
 - app/finders/interesting_findings/registration.rb
+- app/finders/interesting_findings/robots_txt.rb
+- app/finders/interesting_findings/search_replace_db_2.rb
 - app/finders/interesting_findings/tmm_db_migrate.rb
 - app/finders/interesting_findings/upload_directory_listing.rb
 - app/finders/interesting_findings/upload_sql_dump.rb
 - app/finders/interesting_findings/wp_cron.rb
+- app/finders/interesting_findings/xml_rpc.rb
 - app/finders/main_theme.rb
 - app/finders/main_theme/css_style_in_404_page.rb
 - app/finders/main_theme/css_style_in_homepage.rb
@@ -244,6 +477,7 @@ files:
 - app/finders/plugins/query_parameter.rb
 - app/finders/plugins/urls_in_404_page.rb
 - app/finders/plugins/urls_in_homepage.rb
+- app/finders/plugins/wp_json_api.rb
 - app/finders/plugins/xpath.rb
 - app/finders/theme_version.rb
 - app/finders/theme_version/style.rb
@@ -252,6 +486,7 @@ files:
 - app/finders/themes/known_locations.rb
 - app/finders/themes/urls_in_404_page.rb
 - app/finders/themes/urls_in_homepage.rb
+- app/finders/themes/wp_json_api.rb
 - app/finders/timthumb_version.rb
 - app/finders/timthumb_version/bad_request.rb
 - app/finders/timthumbs.rb
@@ -273,35 +508,61 @@ files:
 - app/finders/wp_version/readme.rb
 - app/finders/wp_version/rss_generator.rb
 - app/finders/wp_version/unique_fingerprinting.rb
+- app/formatters/cli.rb
+- app/formatters/cli_no_color.rb
+- app/formatters/cli_no_colour.rb
+- app/formatters/json.rb
+- app/formatters/jsonl.rb
+- app/formatters/sarif.rb
 - app/models.rb
+- app/models/backup_folder.rb
 - app/models/config_backup.rb
 - app/models/db_export.rb
+- app/models/fantastico_fileslist.rb
+- app/models/headers.rb
 - app/models/interesting_finding.rb
 - app/models/media.rb
 - app/models/plugin.rb
+- app/models/robots_txt.rb
+- app/models/search_replace_db_2.rb
 - app/models/theme.rb
 - app/models/timthumb.rb
+- app/models/user.rb
+- app/models/version.rb
 - app/models/wp_item.rb
+- app/models/wp_item/wordpress_org_data.rb
 - app/models/wp_version.rb
 - app/models/xml_rpc.rb
+- app/user_agents.txt
 - app/views/cli/core/banner.erb
 - app/views/cli/core/db_update_finished.erb
 - app/views/cli/core/db_update_started.erb
+- app/views/cli/core/finished.erb
+- app/views/cli/core/help.erb
 - app/views/cli/core/not_fully_configured.erb
+- app/views/cli/core/started.erb
 - app/views/cli/core/version.erb
+- app/views/cli/enumeration/backup_folders.erb
 - app/views/cli/enumeration/config_backups.erb
 - app/views/cli/enumeration/db_exports.erb
 - app/views/cli/enumeration/medias.erb
+- app/views/cli/enumeration/plugin.erb
 - app/views/cli/enumeration/plugins.erb
+- app/views/cli/enumeration/theme.erb
 - app/views/cli/enumeration/themes.erb
 - app/views/cli/enumeration/timthumbs.erb
+- app/views/cli/enumeration/user.erb
 - app/views/cli/enumeration/users.erb
 - app/views/cli/finding.erb
 - app/views/cli/info.erb
+- app/views/cli/interesting_findings/_array.erb
+- app/views/cli/interesting_findings/findings.erb
 - app/views/cli/main_theme/theme.erb
 - app/views/cli/notice.erb
 - app/views/cli/password_attack/users.erb
+- app/views/cli/scan_aborted.erb
 - app/views/cli/theme.erb
+- app/views/cli/update_aborted.erb
 - app/views/cli/usage.erb
 - app/views/cli/vuln_api/status.erb
 - app/views/cli/vulnerability.erb
@@ -310,25 +571,70 @@ files:
 - app/views/json/core/banner.erb
 - app/views/json/core/db_update_finished.erb
 - app/views/json/core/db_update_started.erb
+- app/views/json/core/finished.erb
+- app/views/json/core/help.erb
 - app/views/json/core/not_fully_configured.erb
+- app/views/json/core/started.erb
 - app/views/json/core/version.erb
+- app/views/json/enumeration/backup_folders.erb
 - app/views/json/enumeration/config_backups.erb
 - app/views/json/enumeration/db_exports.erb
 - app/views/json/enumeration/medias.erb
+- app/views/json/enumeration/plugin.erb
 - app/views/json/enumeration/plugins.erb
+- app/views/json/enumeration/theme.erb
 - app/views/json/enumeration/themes.erb
 - app/views/json/enumeration/timthumbs.erb
+- app/views/json/enumeration/user.erb
 - app/views/json/enumeration/users.erb
 - app/views/json/finding.erb
+- app/views/json/interesting_findings/findings.erb
 - app/views/json/main_theme/theme.erb
+- app/views/json/notice.erb
 - app/views/json/password_attack/users.erb
+- app/views/json/scan_aborted.erb
 - app/views/json/theme.erb
+- app/views/json/update_aborted.erb
 - app/views/json/vuln_api/status.erb
 - app/views/json/wp_item.erb
 - app/views/json/wp_version/version.erb
 - bin/wpscan
+- lib/opt_parse_validator.rb
+- lib/opt_parse_validator/config_files_loader_merger.rb
+- lib/opt_parse_validator/config_files_loader_merger/base.rb
+- lib/opt_parse_validator/config_files_loader_merger/json.rb
+- lib/opt_parse_validator/config_files_loader_merger/yml.rb
+- lib/opt_parse_validator/errors.rb
+- lib/opt_parse_validator/hacks.rb
+- lib/opt_parse_validator/opts.rb
+- lib/opt_parse_validator/opts/alias.rb
+- lib/opt_parse_validator/opts/array.rb
+- lib/opt_parse_validator/opts/base.rb
+- lib/opt_parse_validator/opts/boolean.rb
+- lib/opt_parse_validator/opts/choice.rb
+- lib/opt_parse_validator/opts/credentials.rb
+- lib/opt_parse_validator/opts/directory_path.rb
+- lib/opt_parse_validator/opts/file_path.rb
+- lib/opt_parse_validator/opts/headers.rb
+- lib/opt_parse_validator/opts/integer.rb
+- lib/opt_parse_validator/opts/integer_range.rb
+- lib/opt_parse_validator/opts/multi_choices.rb
+- lib/opt_parse_validator/opts/path.rb
+- lib/opt_parse_validator/opts/positive_integer.rb
+- lib/opt_parse_validator/opts/proxy.rb
+- lib/opt_parse_validator/opts/regexp.rb
+- lib/opt_parse_validator/opts/smart_list.rb
+- lib/opt_parse_validator/opts/string.rb
+- lib/opt_parse_validator/opts/uri.rb
+- lib/opt_parse_validator/opts/url.rb
+- lib/opt_parse_validator/version.rb
 - lib/wpscan.rb
 - lib/wpscan/browser.rb
+- lib/wpscan/browser/actions.rb
+- lib/wpscan/browser/options.rb
+- lib/wpscan/browser_authenticator.rb
+- lib/wpscan/cache/file_store.rb
+- lib/wpscan/cache/typhoeus.rb
 - lib/wpscan/controller.rb
 - lib/wpscan/controllers.rb
 - lib/wpscan/db.rb
@@ -350,11 +656,16 @@ files:
 - lib/wpscan/errors.rb
 - lib/wpscan/errors/enumeration.rb
 - lib/wpscan/errors/http.rb
+- lib/wpscan/errors/saml.rb
+- lib/wpscan/errors/scan.rb
 - lib/wpscan/errors/update.rb
 - lib/wpscan/errors/vuln_api.rb
 - lib/wpscan/errors/wordpress.rb
+- lib/wpscan/errors/wp_auth.rb
 - lib/wpscan/errors/xmlrpc.rb
+- lib/wpscan/exit_code.rb
 - lib/wpscan/finders.rb
+- lib/wpscan/finders/base_finders.rb
 - lib/wpscan/finders/dynamic_finder/finder.rb
 - lib/wpscan/finders/dynamic_finder/version/body_pattern.rb
 - lib/wpscan/finders/dynamic_finder/version/comment.rb
@@ -367,22 +678,54 @@ files:
 - lib/wpscan/finders/dynamic_finder/wp_item_version.rb
 - lib/wpscan/finders/dynamic_finder/wp_items/finder.rb
 - lib/wpscan/finders/dynamic_finder/wp_version.rb
+- lib/wpscan/finders/finder.rb
+- lib/wpscan/finders/finder/breadth_first_dictionary_attack.rb
+- lib/wpscan/finders/finder/enumerator.rb
+- lib/wpscan/finders/finder/fingerprinter.rb
+- lib/wpscan/finders/finder/smart_url_checker.rb
+- lib/wpscan/finders/finder/smart_url_checker/findings.rb
 - lib/wpscan/finders/finder/wp_version/smart_url_checker.rb
+- lib/wpscan/finders/finding.rb
+- lib/wpscan/finders/findings.rb
+- lib/wpscan/finders/independent_finder.rb
+- lib/wpscan/finders/independent_finders.rb
+- lib/wpscan/finders/same_type_finder.rb
+- lib/wpscan/finders/same_type_finders.rb
+- lib/wpscan/finders/unique_finder.rb
+- lib/wpscan/finders/unique_finders.rb
+- lib/wpscan/formatter.rb
+- lib/wpscan/formatter/buffer.rb
 - lib/wpscan/helper.rb
+- lib/wpscan/http_status_tracking.rb
+- lib/wpscan/numeric.rb
 - lib/wpscan/parsed_cli.rb
+- lib/wpscan/progressbar_null_output.rb
+- lib/wpscan/public_suffix/domain.rb
 - lib/wpscan/references.rb
+- lib/wpscan/scan.rb
 - lib/wpscan/target.rb
+- lib/wpscan/target/hashes.rb
+- lib/wpscan/target/platform.rb
+- lib/wpscan/target/platform/php.rb
 - lib/wpscan/target/platform/wordpress.rb
 - lib/wpscan/target/platform/wordpress/custom_directories.rb
+- lib/wpscan/target/scope.rb
+- lib/wpscan/target/server.rb
+- lib/wpscan/target/server/apache.rb
+- lib/wpscan/target/server/generic.rb
+- lib/wpscan/target/server/iis.rb
+- lib/wpscan/target/server/nginx.rb
+- lib/wpscan/typhoeus/hydra.rb
 - lib/wpscan/typhoeus/response.rb
 - lib/wpscan/version.rb
 - lib/wpscan/vulnerability.rb
+- lib/wpscan/vulnerability_filter.rb
 - lib/wpscan/vulnerable.rb
+- lib/wpscan/web_site.rb
 homepage: https://wpscan.com/wordpress-security-scanner
 licenses:
 - Dual
 metadata: {}
-post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -390,15 +733,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '3.0'
+      version: '3.3'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.2.33
-signing_key:
+rubygems_version: 4.0.10
 specification_version: 4
 summary: WPScan - WordPress Vulnerability Scanner
 test_files: []