wpxf 2.0.0a

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (455) hide show
  1. checksums.yaml +7 -0
  2. data/bin/wpxf +52 -0
  3. data/data/banners/default.txt +16 -0
  4. data/data/js/ajax_download.js +33 -0
  5. data/data/js/ajax_post.js +18 -0
  6. data/data/js/create_wp_user.js +24 -0
  7. data/data/js/post.js +20 -0
  8. data/data/json/browser_usage_by_frequency.json +64 -0
  9. data/data/json/commands.json +116 -0
  10. data/data/php/bind_php.php +43 -0
  11. data/data/php/download_exec.php +36 -0
  12. data/data/php/exec.php +3 -0
  13. data/data/php/exec_methods.php +47 -0
  14. data/data/php/meterpreter_bind_tcp.php +1 -0
  15. data/data/php/meterpreter_bind_tcp_ipv6.php +1 -0
  16. data/data/php/meterpreter_reverse_tcp.php +1 -0
  17. data/data/php/preamble.php +17 -0
  18. data/data/php/reverse_tcp.php +76 -0
  19. data/db/config.yml +17 -0
  20. data/db/env.rb +19 -0
  21. data/db/migrations/001_create_workspaces.rb +15 -0
  22. data/db/migrations/002_create_credentials.rb +20 -0
  23. data/db/migrations/003_add_credential_type.rb +13 -0
  24. data/db/migrations/004_add_unique_workspace_name_index.rb +19 -0
  25. data/db/migrations/005_add_logs.rb +16 -0
  26. data/db/migrations/006_create_modules.rb +18 -0
  27. data/db/migrations/007_create_loot_items.rb +21 -0
  28. data/lib/wpxf.rb +54 -0
  29. data/lib/wpxf/cli/auto_complete.rb +121 -0
  30. data/lib/wpxf/cli/banner.rb +47 -0
  31. data/lib/wpxf/cli/console.rb +146 -0
  32. data/lib/wpxf/cli/context.rb +35 -0
  33. data/lib/wpxf/cli/creds.rb +56 -0
  34. data/lib/wpxf/cli/help.rb +125 -0
  35. data/lib/wpxf/cli/loaded_module.rb +67 -0
  36. data/lib/wpxf/cli/loot.rb +81 -0
  37. data/lib/wpxf/cli/module_cache.rb +59 -0
  38. data/lib/wpxf/cli/module_info.rb +62 -0
  39. data/lib/wpxf/cli/modules.rb +94 -0
  40. data/lib/wpxf/cli/options.rb +105 -0
  41. data/lib/wpxf/cli/output.rb +110 -0
  42. data/lib/wpxf/cli/workspace.rb +80 -0
  43. data/lib/wpxf/core.rb +18 -0
  44. data/lib/wpxf/core/data_file.rb +27 -0
  45. data/lib/wpxf/core/event_emitter.rb +30 -0
  46. data/lib/wpxf/core/module.rb +140 -0
  47. data/lib/wpxf/core/module_authentication.rb +48 -0
  48. data/lib/wpxf/core/module_info.rb +74 -0
  49. data/lib/wpxf/core/options.rb +175 -0
  50. data/lib/wpxf/core/opts/boolean_option.rb +37 -0
  51. data/lib/wpxf/core/opts/enum_option.rb +15 -0
  52. data/lib/wpxf/core/opts/integer_option.rb +74 -0
  53. data/lib/wpxf/core/opts/option.rb +121 -0
  54. data/lib/wpxf/core/opts/path_option.rb +15 -0
  55. data/lib/wpxf/core/opts/port_option.rb +25 -0
  56. data/lib/wpxf/core/opts/string_option.rb +33 -0
  57. data/lib/wpxf/core/output_emitters.rb +67 -0
  58. data/lib/wpxf/core/payload.rb +135 -0
  59. data/lib/wpxf/db.rb +17 -0
  60. data/lib/wpxf/db/credentials.rb +37 -0
  61. data/lib/wpxf/db/loot.rb +19 -0
  62. data/lib/wpxf/helpers/export.rb +48 -0
  63. data/lib/wpxf/models/credential.rb +29 -0
  64. data/lib/wpxf/models/log.rb +22 -0
  65. data/lib/wpxf/models/loot_item.rb +37 -0
  66. data/lib/wpxf/models/module.rb +32 -0
  67. data/lib/wpxf/models/workspace.rb +28 -0
  68. data/lib/wpxf/modules.rb +62 -0
  69. data/lib/wpxf/modules/auxiliary/dos/load_scripts_dos.rb +129 -0
  70. data/lib/wpxf/modules/auxiliary/dos/long_password_dos.rb +141 -0
  71. data/lib/wpxf/modules/auxiliary/dos/post_grid_file_deletion.rb +67 -0
  72. data/lib/wpxf/modules/auxiliary/dos/wp_v4.7.2_csrf_dos.rb +83 -0
  73. data/lib/wpxf/modules/auxiliary/file_download/ad_widget_php_file_download.rb +54 -0
  74. data/lib/wpxf/modules/auxiliary/file_download/all_in_one_migration_export.rb +68 -0
  75. data/lib/wpxf/modules/auxiliary/file_download/antioch_arbitrary_file_download.rb +41 -0
  76. data/lib/wpxf/modules/auxiliary/file_download/candidate_application_form_arbitrary_file_download.rb +41 -0
  77. data/lib/wpxf/modules/auxiliary/file_download/cp_image_store_arbitrary_file_download.rb +82 -0
  78. data/lib/wpxf/modules/auxiliary/file_download/direct_download_for_woocommerce_file_download.rb +60 -0
  79. data/lib/wpxf/modules/auxiliary/file_download/duplicator_csrf_db_export.rb +169 -0
  80. data/lib/wpxf/modules/auxiliary/file_download/ghost_unrestricted_export_download.rb +85 -0
  81. data/lib/wpxf/modules/auxiliary/file_download/history_collection_arbitrary_file_download.rb +50 -0
  82. data/lib/wpxf/modules/auxiliary/file_download/imdb_profile_widget_arbitrary_file_download.rb +42 -0
  83. data/lib/wpxf/modules/auxiliary/file_download/mail_masta_unauthenticated_local_file_inclusion.rb +48 -0
  84. data/lib/wpxf/modules/auxiliary/file_download/membership_simplified_arbitrary_file_download.rb +50 -0
  85. data/lib/wpxf/modules/auxiliary/file_download/memphis_documents_library_arbitrary_file_download.rb +41 -0
  86. data/lib/wpxf/modules/auxiliary/file_download/recent_backups_arbitrary_file_download.rb +42 -0
  87. data/lib/wpxf/modules/auxiliary/file_download/simple_download_monitor_file_disclosure.rb +79 -0
  88. data/lib/wpxf/modules/auxiliary/file_download/simple_download_monitor_file_download.rb +69 -0
  89. data/lib/wpxf/modules/auxiliary/file_download/simple_image_manipulator_arbitrary_file_download.rb +43 -0
  90. data/lib/wpxf/modules/auxiliary/file_download/site_editor_file_download.rb +53 -0
  91. data/lib/wpxf/modules/auxiliary/file_download/wp_background_takeover_file_download.rb +42 -0
  92. data/lib/wpxf/modules/auxiliary/file_download/wp_hide_security_enhancer_file_download.rb +51 -0
  93. data/lib/wpxf/modules/auxiliary/file_download/wp_marketplace_v2.4_file_download.rb +141 -0
  94. data/lib/wpxf/modules/auxiliary/file_download/wp_vault_file_download.rb +46 -0
  95. data/lib/wpxf/modules/auxiliary/file_download/wptf_image_gallery_arbitrary_file_download.rb +43 -0
  96. data/lib/wpxf/modules/auxiliary/hash_dump/events_hash_dump.rb +59 -0
  97. data/lib/wpxf/modules/auxiliary/hash_dump/gallery_album_hash_dump.rb +61 -0
  98. data/lib/wpxf/modules/auxiliary/hash_dump/jtrt_responsive_tables_hash_dump.rb +69 -0
  99. data/lib/wpxf/modules/auxiliary/hash_dump/registrationmagic_hash_dump.rb +62 -0
  100. data/lib/wpxf/modules/auxiliary/hash_dump/simple_ads_manager_hash_dump.rb +67 -0
  101. data/lib/wpxf/modules/auxiliary/hash_dump/simple_events_calendar_hash_dump.rb +69 -0
  102. data/lib/wpxf/modules/auxiliary/hash_dump/sql_shortcode_hash_dump.rb +59 -0
  103. data/lib/wpxf/modules/auxiliary/hash_dump/ultimate_csv_importer_user_extract.rb +133 -0
  104. data/lib/wpxf/modules/auxiliary/hash_dump/ultimate_product_catalogue_hash_dump.rb +60 -0
  105. data/lib/wpxf/modules/auxiliary/info/download_manager_directory_listing_disclosure.rb +106 -0
  106. data/lib/wpxf/modules/auxiliary/info/download_monitor_log_export.rb +111 -0
  107. data/lib/wpxf/modules/auxiliary/info/email_subscribers_user_list_disclosure.rb +103 -0
  108. data/lib/wpxf/modules/auxiliary/info/file_manager_database_credentials.rb +86 -0
  109. data/lib/wpxf/modules/auxiliary/info/user_meta_manager_information_disclosure.rb +96 -0
  110. data/lib/wpxf/modules/auxiliary/info/woocommerce_email_test_order_disclosure.rb +53 -0
  111. data/lib/wpxf/modules/auxiliary/info/woocommerce_order_import_export_order_disclosure.rb +60 -0
  112. data/lib/wpxf/modules/auxiliary/info/wp_v4.7_user_info_disclosure.rb +86 -0
  113. data/lib/wpxf/modules/auxiliary/misc/email_users_csrf_bulk_mail.rb +89 -0
  114. data/lib/wpxf/modules/auxiliary/misc/qards_local_port_scan.rb +66 -0
  115. data/lib/wpxf/modules/auxiliary/misc/simple_ads_manager_sql_injection.rb +124 -0
  116. data/lib/wpxf/modules/auxiliary/misc/wp_v4.7.1_content_injection.rb +107 -0
  117. data/lib/wpxf/modules/auxiliary/priv_esc/custom_contact_forms_privilege_escalation.rb +125 -0
  118. data/lib/wpxf/modules/auxiliary/priv_esc/download_manager_authenticated_privilege_escalation.rb +71 -0
  119. data/lib/wpxf/modules/auxiliary/priv_esc/download_manager_privilege_escalation.rb +92 -0
  120. data/lib/wpxf/modules/auxiliary/priv_esc/easy_cart_privilege_escalation.rb +92 -0
  121. data/lib/wpxf/modules/auxiliary/priv_esc/platform_privilege_escalation.rb +93 -0
  122. data/lib/wpxf/modules/auxiliary/priv_esc/super_socializer_auth_bypass.rb +154 -0
  123. data/lib/wpxf/modules/auxiliary/priv_esc/user_meta_manager_privilege_escalation.rb +76 -0
  124. data/lib/wpxf/modules/auxiliary/priv_esc/user_role_editor_privilege_escalation.rb +57 -0
  125. data/lib/wpxf/modules/auxiliary/priv_esc/wp_front_end_profile_privilege_escalation.rb +92 -0
  126. data/lib/wpxf/modules/auxiliary/priv_esc/wplms_privilege_escalation.rb +117 -0
  127. data/lib/wpxf/modules/exploit/rfi/advanced_custom_fields_remote_file_inclusion.rb +98 -0
  128. data/lib/wpxf/modules/exploit/rfi/fast_image_adder_v1.1_rfi_shell_upload.rb +91 -0
  129. data/lib/wpxf/modules/exploit/rfi/flickr_picture_backup_rfi_shell_upload.rb +94 -0
  130. data/lib/wpxf/modules/exploit/rfi/gwolle_guestbook_remote_file_inclusion.rb +96 -0
  131. data/lib/wpxf/modules/exploit/rfi/wp_mobile_detector_rfi_shell_upload.rb +90 -0
  132. data/lib/wpxf/modules/exploit/shell/accesspress_anonymous_post_pro_shell_upload.rb +71 -0
  133. data/lib/wpxf/modules/exploit/shell/acf_frontend_display_shell_upload.rb +41 -0
  134. data/lib/wpxf/modules/exploit/shell/adblock_blocker_shell_upload.rb +41 -0
  135. data/lib/wpxf/modules/exploit/shell/admin_shell_upload.rb +47 -0
  136. data/lib/wpxf/modules/exploit/shell/aries_revslider_shell_upload.rb +17 -0
  137. data/lib/wpxf/modules/exploit/shell/avada_revslider_shell_upload.rb +15 -0
  138. data/lib/wpxf/modules/exploit/shell/awake_revslider_shell_upload.rb +15 -0
  139. data/lib/wpxf/modules/exploit/shell/beach_apollo_revslider_shell_upload.rb +15 -0
  140. data/lib/wpxf/modules/exploit/shell/bretheon_revslider_shell_upload.rb +15 -0
  141. data/lib/wpxf/modules/exploit/shell/centum_revslider_shell_upload.rb +15 -0
  142. data/lib/wpxf/modules/exploit/shell/charity_theme_shell_upload.rb +38 -0
  143. data/lib/wpxf/modules/exploit/shell/construct_revslider_shell_upload.rb +15 -0
  144. data/lib/wpxf/modules/exploit/shell/creative_contact_form_shell_upload.rb +82 -0
  145. data/lib/wpxf/modules/exploit/shell/delete_all_comments_shell_upload.rb +65 -0
  146. data/lib/wpxf/modules/exploit/shell/designfolio_plus_shell_upload.rb +50 -0
  147. data/lib/wpxf/modules/exploit/shell/divi_revslider_shell_upload.rb +15 -0
  148. data/lib/wpxf/modules/exploit/shell/easy_cart_shell_upload.rb +174 -0
  149. data/lib/wpxf/modules/exploit/shell/echelon_revslider_shell_upload.rb +15 -0
  150. data/lib/wpxf/modules/exploit/shell/elegance_revslider_shell_upload.rb +15 -0
  151. data/lib/wpxf/modules/exploit/shell/estatik_v2.2.5_shell_upload.rb +53 -0
  152. data/lib/wpxf/modules/exploit/shell/evo_theme_shell_upload.rb +37 -0
  153. data/lib/wpxf/modules/exploit/shell/front_end_file_upload_and_manager_shell_upload.rb +42 -0
  154. data/lib/wpxf/modules/exploit/shell/fusion_revslider_shell_upload.rb +15 -0
  155. data/lib/wpxf/modules/exploit/shell/gallery_pro_theme_shell_upload.rb +37 -0
  156. data/lib/wpxf/modules/exploit/shell/gravity_forms_v1.8.19_shell_upload.rb +92 -0
  157. data/lib/wpxf/modules/exploit/shell/holding_pattern_shell_upload.rb +56 -0
  158. data/lib/wpxf/modules/exploit/shell/inboundio_marketing_shell_upload.rb +82 -0
  159. data/lib/wpxf/modules/exploit/shell/incredible_wp_revslider_shell_upload.rb +15 -0
  160. data/lib/wpxf/modules/exploit/shell/infusionsoft_shell_upload.rb +76 -0
  161. data/lib/wpxf/modules/exploit/shell/mailcwp_authenticated_shell_upload.rb +35 -0
  162. data/lib/wpxf/modules/exploit/shell/mailcwp_unauthenticated_shell_upload.rb +51 -0
  163. data/lib/wpxf/modules/exploit/shell/mailpoet_newsletters_shell_upload.rb +90 -0
  164. data/lib/wpxf/modules/exploit/shell/manbiz2_revslider_shell_upload.rb +15 -0
  165. data/lib/wpxf/modules/exploit/shell/medicate_revslider_shell_upload.rb +15 -0
  166. data/lib/wpxf/modules/exploit/shell/method_revslider_shell_upload.rb +15 -0
  167. data/lib/wpxf/modules/exploit/shell/micro_theme_shell_upload.rb +37 -0
  168. data/lib/wpxf/modules/exploit/shell/mobile_app_builder_shell_upload.rb +31 -0
  169. data/lib/wpxf/modules/exploit/shell/mobile_app_native_v3_shell_upload.rb +46 -0
  170. data/lib/wpxf/modules/exploit/shell/mobile_friendly_app_builder_shell_upload.rb +29 -0
  171. data/lib/wpxf/modules/exploit/shell/modular_revslider_shell_upload.rb +15 -0
  172. data/lib/wpxf/modules/exploit/shell/myriad_revslider_shell_upload.rb +15 -0
  173. data/lib/wpxf/modules/exploit/shell/n_media_website_contact_form_shell_upload.rb +82 -0
  174. data/lib/wpxf/modules/exploit/shell/n_media_website_contact_form_v1.9_shell_upload.rb +45 -0
  175. data/lib/wpxf/modules/exploit/shell/neosense_shell_upload.rb +41 -0
  176. data/lib/wpxf/modules/exploit/shell/ninja_forms_unauthenticated_shell_upload.rb +83 -0
  177. data/lib/wpxf/modules/exploit/shell/participants_database_v1.5.4.8_shell_upload.rb +153 -0
  178. data/lib/wpxf/modules/exploit/shell/persuasion_revslider_shell_upload.rb +15 -0
  179. data/lib/wpxf/modules/exploit/shell/photo_album_plus_xss_shell_upload.rb +89 -0
  180. data/lib/wpxf/modules/exploit/shell/photo_gallery_shell_upload.rb +128 -0
  181. data/lib/wpxf/modules/exploit/shell/premium_seo_pack_shell_upload.rb +35 -0
  182. data/lib/wpxf/modules/exploit/shell/reflex_gallery_shell_upload.rb +91 -0
  183. data/lib/wpxf/modules/exploit/shell/revslider_shell_upload.rb +93 -0
  184. data/lib/wpxf/modules/exploit/shell/seabird_revslider_shell_upload.rb +15 -0
  185. data/lib/wpxf/modules/exploit/shell/showbiz_revslider_shell_upload.rb +15 -0
  186. data/lib/wpxf/modules/exploit/shell/simplecart_shell_upload.rb +91 -0
  187. data/lib/wpxf/modules/exploit/shell/soulmedic_revslider_shell_upload.rb +15 -0
  188. data/lib/wpxf/modules/exploit/shell/striking_r_revslider_shell_upload.rb +15 -0
  189. data/lib/wpxf/modules/exploit/shell/super_socializer_shell_upload.rb +110 -0
  190. data/lib/wpxf/modules/exploit/shell/symposium_shell_upload.rb +85 -0
  191. data/lib/wpxf/modules/exploit/shell/tevolution_shell_upload.rb +50 -0
  192. data/lib/wpxf/modules/exploit/shell/ultimate_member_shell_upload.rb +132 -0
  193. data/lib/wpxf/modules/exploit/shell/ultimate_product_catalogue_shell_upload.rb +47 -0
  194. data/lib/wpxf/modules/exploit/shell/ultimatum_revslider_shell_upload.rb +15 -0
  195. data/lib/wpxf/modules/exploit/shell/userpro_shell_upload.rb +70 -0
  196. data/lib/wpxf/modules/exploit/shell/webapp_builder_shell_upload.rb +29 -0
  197. data/lib/wpxf/modules/exploit/shell/windows_desktop_and_iphone_photo_uploader_shell_upload.rb +45 -0
  198. data/lib/wpxf/modules/exploit/shell/woocommerce_amazon_affiliates_v8_shell_upload.rb +81 -0
  199. data/lib/wpxf/modules/exploit/shell/woocommerce_product_addons_shell_upload.rb +42 -0
  200. data/lib/wpxf/modules/exploit/shell/work_the_flow_shell_upload.rb +57 -0
  201. data/lib/wpxf/modules/exploit/shell/wp2android_shell_upload.rb +29 -0
  202. data/lib/wpxf/modules/exploit/shell/wp_front_end_repository_manager_shell_upload.rb +42 -0
  203. data/lib/wpxf/modules/exploit/shell/wp_marketplace_shell_upload.rb +40 -0
  204. data/lib/wpxf/modules/exploit/shell/wp_support_plus_responsive_ticket_system_shell_upload.rb +46 -0
  205. data/lib/wpxf/modules/exploit/shell/wpshop_shell_upload.rb +45 -0
  206. data/lib/wpxf/modules/exploit/shell/wptouch_authenticated_shell_upload.rb +66 -0
  207. data/lib/wpxf/modules/exploit/shell/wsecure_lite_shell_upload.rb +57 -0
  208. data/lib/wpxf/modules/exploit/xss/reflected/2kb_amazon_affiliates_store_reflected_xss_shell_upload.rb +34 -0
  209. data/lib/wpxf/modules/exploit/xss/reflected/admin_custom_login_reflected_xss_shell_upload.rb +42 -0
  210. data/lib/wpxf/modules/exploit/xss/reflected/adsense_plugin_reflected_xss_shell_upload.rb +21 -0
  211. data/lib/wpxf/modules/exploit/xss/reflected/affiliate_ads_builder_xss_shell_upload.rb +53 -0
  212. data/lib/wpxf/modules/exploit/xss/reflected/affiliatewp_reflected_xss_shell_upload.rb +39 -0
  213. data/lib/wpxf/modules/exploit/xss/reflected/ajax_random_post_reflected_xss_shell_upload.rb +34 -0
  214. data/lib/wpxf/modules/exploit/xss/reflected/all_in_one_migration_reflected_xss_shell_upload.rb +33 -0
  215. data/lib/wpxf/modules/exploit/xss/reflected/all_in_one_schema_rich_snippets_reflected_xss_shell_upload.rb +39 -0
  216. data/lib/wpxf/modules/exploit/xss/reflected/all_in_one_wp_security_reflected_xss_shell_upload.rb +37 -0
  217. data/lib/wpxf/modules/exploit/xss/reflected/alpine_photo_tile_for_instagram_reflected_xss_shell_upload.rb +40 -0
  218. data/lib/wpxf/modules/exploit/xss/reflected/answer_my_question_reflected_xss_shell_upload.rb +41 -0
  219. data/lib/wpxf/modules/exploit/xss/reflected/anti_plagiarism_reflected_xss_shell_upload.rb +34 -0
  220. data/lib/wpxf/modules/exploit/xss/reflected/anyvar_reflected_xss_shell_upload.rb +40 -0
  221. data/lib/wpxf/modules/exploit/xss/reflected/atahualpa_reflected_xss_shell_upload.rb +66 -0
  222. data/lib/wpxf/modules/exploit/xss/reflected/backup_guard_reflected_xss_shell_upload.rb +34 -0
  223. data/lib/wpxf/modules/exploit/xss/reflected/brafton_content_importer_reflected_xss_shell_upload.rb +35 -0
  224. data/lib/wpxf/modules/exploit/xss/reflected/bws_featured_posts_reflected_xss_shell_upload.rb +20 -0
  225. data/lib/wpxf/modules/exploit/xss/reflected/bws_google_analytics_reflected_xss_shell_upload.rb +20 -0
  226. data/lib/wpxf/modules/exploit/xss/reflected/bws_google_maps_reflected_xss_shell_upload.rb +20 -0
  227. data/lib/wpxf/modules/exploit/xss/reflected/bws_latest_posts_reflected_xss_shell_upload.rb +20 -0
  228. data/lib/wpxf/modules/exploit/xss/reflected/bws_linkedin_reflected_xss_shell_upload.rb +20 -0
  229. data/lib/wpxf/modules/exploit/xss/reflected/bws_panel_reflected_xss_shell_upload.rb +45 -0
  230. data/lib/wpxf/modules/exploit/xss/reflected/bws_pinterest_reflected_xss_shell_upload.rb +20 -0
  231. data/lib/wpxf/modules/exploit/xss/reflected/bws_popular_posts_reflected_xss_shell_upload.rb +20 -0
  232. data/lib/wpxf/modules/exploit/xss/reflected/bws_portfolio_reflected_xss_shell_upload.rb +20 -0
  233. data/lib/wpxf/modules/exploit/xss/reflected/bws_smtp_reflected_xss_shell_upload.rb +20 -0
  234. data/lib/wpxf/modules/exploit/xss/reflected/bws_testimonials_reflected_xss_shell_upload.rb +20 -0
  235. data/lib/wpxf/modules/exploit/xss/reflected/caldera_forms_v1.5.4_xss_shell_upload.rb +33 -0
  236. data/lib/wpxf/modules/exploit/xss/reflected/captcha_reflected_xss_shell_upload.rb +20 -0
  237. data/lib/wpxf/modules/exploit/xss/reflected/car_rental_reflected_xss_shell_upload.rb +20 -0
  238. data/lib/wpxf/modules/exploit/xss/reflected/check_email_reflected_xss_shell_upload.rb +44 -0
  239. data/lib/wpxf/modules/exploit/xss/reflected/claptastic_clap_button_reflected_xss_shell_upload.rb +46 -0
  240. data/lib/wpxf/modules/exploit/xss/reflected/code_snippets_reflected_xss_shell_upload.rb +34 -0
  241. data/lib/wpxf/modules/exploit/xss/reflected/colorway_reflected_xss_shell_upload.rb +47 -0
  242. data/lib/wpxf/modules/exploit/xss/reflected/concours_xss_shell_upload.rb +34 -0
  243. data/lib/wpxf/modules/exploit/xss/reflected/connections_reflected_xss_shell_upload.rb +35 -0
  244. data/lib/wpxf/modules/exploit/xss/reflected/contact_form_multi_reflected_xss_shell_upload.rb +20 -0
  245. data/lib/wpxf/modules/exploit/xss/reflected/contact_form_plugin_reflected_xss_shell_upload.rb +20 -0
  246. data/lib/wpxf/modules/exploit/xss/reflected/contact_form_to_db_reflected_xss_shell_upload.rb +20 -0
  247. data/lib/wpxf/modules/exploit/xss/reflected/content_grabber_reflected_xss_shell_upload.rb +43 -0
  248. data/lib/wpxf/modules/exploit/xss/reflected/content_slide_reflected_xss_shell_upload.rb +38 -0
  249. data/lib/wpxf/modules/exploit/xss/reflected/count_per_day_reflected_xss_shell_upload.rb +40 -0
  250. data/lib/wpxf/modules/exploit/xss/reflected/csv_import_export_xss_shell_upload.rb +35 -0
  251. data/lib/wpxf/modules/exploit/xss/reflected/csv_import_reflected_xss_shell_upload.rb +37 -0
  252. data/lib/wpxf/modules/exploit/xss/reflected/custom_admin_page_reflected_xss_shell_upload.rb +20 -0
  253. data/lib/wpxf/modules/exploit/xss/reflected/custom_fields_search_reflected_xss_shell_upload.rb +20 -0
  254. data/lib/wpxf/modules/exploit/xss/reflected/custom_map_xss_shell_upload.rb +35 -0
  255. data/lib/wpxf/modules/exploit/xss/reflected/custom_metas_reflected_xss_shell_upload.rb +35 -0
  256. data/lib/wpxf/modules/exploit/xss/reflected/custom_permalinks_xss_shell_upload.rb +33 -0
  257. data/lib/wpxf/modules/exploit/xss/reflected/custom_search_plugin_reflected_xss_shell_upload.rb +20 -0
  258. data/lib/wpxf/modules/exploit/xss/reflected/defa_online_image_protector_reflected_xss_shell_upload.rb +34 -0
  259. data/lib/wpxf/modules/exploit/xss/reflected/donate_button_reflected_xss_shell_upload.rb +20 -0
  260. data/lib/wpxf/modules/exploit/xss/reflected/download_manager_reflected_xss_shell_upload.rb +39 -0
  261. data/lib/wpxf/modules/exploit/xss/reflected/duplicator_csrf_xss_shell_upload.rb +37 -0
  262. data/lib/wpxf/modules/exploit/xss/reflected/easy_contact_form_builder_reflected_xss_shell_upload.rb +34 -0
  263. data/lib/wpxf/modules/exploit/xss/reflected/emag_marketplace_connector_xss_shell_upload.rb +38 -0
  264. data/lib/wpxf/modules/exploit/xss/reflected/email_queue_reflected_xss_shell_upload.rb +20 -0
  265. data/lib/wpxf/modules/exploit/xss/reflected/email_users_reflected_xss_shell_upload.rb +40 -0
  266. data/lib/wpxf/modules/exploit/xss/reflected/enhanced_tooltip_glossary_reflected_xss_shell_upload.rb +34 -0
  267. data/lib/wpxf/modules/exploit/xss/reflected/error_log_viewer_reflected_xss_shell_upload.rb +20 -0
  268. data/lib/wpxf/modules/exploit/xss/reflected/events_made_easy_reflected_xss_shell_upload.rb +111 -0
  269. data/lib/wpxf/modules/exploit/xss/reflected/facebook_button_plugin_reflected_xss_shell_upload.rb +20 -0
  270. data/lib/wpxf/modules/exploit/xss/reflected/faq_wd_reflected_xss_shell_upload.rb +41 -0
  271. data/lib/wpxf/modules/exploit/xss/reflected/formbuilder_reflected_xss_shell_upload.rb +34 -0
  272. data/lib/wpxf/modules/exploit/xss/reflected/gallery_categories_reflected_xss_shell_upload.rb +20 -0
  273. data/lib/wpxf/modules/exploit/xss/reflected/gallery_plugin_reflected_xss_shell_upload.rb +20 -0
  274. data/lib/wpxf/modules/exploit/xss/reflected/gd_rating_system_xss_shell_upload.rb +34 -0
  275. data/lib/wpxf/modules/exploit/xss/reflected/google_analytics_dashboard_reflected_xss_shell_upload.rb +41 -0
  276. data/lib/wpxf/modules/exploit/xss/reflected/google_captcha_reflected_xss_shell_upload.rb +20 -0
  277. data/lib/wpxf/modules/exploit/xss/reflected/google_maps_reflected_xss_shell_upload.rb +34 -0
  278. data/lib/wpxf/modules/exploit/xss/reflected/google_one_reflected_xss_shell_upload.rb +20 -0
  279. data/lib/wpxf/modules/exploit/xss/reflected/google_shortlink_reflected_xss_shell_upload.rb +20 -0
  280. data/lib/wpxf/modules/exploit/xss/reflected/google_sitemap_plugin_reflected_xss_shell_upload.rb +20 -0
  281. data/lib/wpxf/modules/exploit/xss/reflected/gravity_forms_v1.9.15.11_reflected_xss_shell_upload.rb +35 -0
  282. data/lib/wpxf/modules/exploit/xss/reflected/hdw_tube_reflected_xss_shell_upload.rb +34 -0
  283. data/lib/wpxf/modules/exploit/xss/reflected/hero_maps_pro_reflected_xss_shell_upload.rb +34 -0
  284. data/lib/wpxf/modules/exploit/xss/reflected/htaccess_reflected_xss_shell_upload.rb +20 -0
  285. data/lib/wpxf/modules/exploit/xss/reflected/huge_it_image_gallery_reflected_xss_shell_upload.rb +41 -0
  286. data/lib/wpxf/modules/exploit/xss/reflected/import_woocommerce_reflected_xss_shell_upload.rb +37 -0
  287. data/lib/wpxf/modules/exploit/xss/reflected/impress_listings_reflected_xss_shell_upload.rb +87 -0
  288. data/lib/wpxf/modules/exploit/xss/reflected/indexisto_reflected_xss_shell_upload.rb +34 -0
  289. data/lib/wpxf/modules/exploit/xss/reflected/infusionsoft_reflected_xss_shell_upload.rb +34 -0
  290. data/lib/wpxf/modules/exploit/xss/reflected/instagram_feed_csrf_xss_shell_upload.rb +34 -0
  291. data/lib/wpxf/modules/exploit/xss/reflected/instalinker_reflected_xss_shell_upload.rb +40 -0
  292. data/lib/wpxf/modules/exploit/xss/reflected/job_board_reflected_xss_shell_upload.rb +20 -0
  293. data/lib/wpxf/modules/exploit/xss/reflected/job_manager_reflected_xss_shell_upload.rb +55 -0
  294. data/lib/wpxf/modules/exploit/xss/reflected/leenkme_reflected_xss_shell_upload.rb +41 -0
  295. data/lib/wpxf/modules/exploit/xss/reflected/lightbox_reflected_xss_shell_upload.rb +64 -0
  296. data/lib/wpxf/modules/exploit/xss/reflected/limit_attempts_reflected_xss_shell_upload.rb +20 -0
  297. data/lib/wpxf/modules/exploit/xss/reflected/link_library_reflected_xss_shell_upload.rb +33 -0
  298. data/lib/wpxf/modules/exploit/xss/reflected/magic_fields_reflected_xss_shell_upload.rb +36 -0
  299. data/lib/wpxf/modules/exploit/xss/reflected/mailchimp_for_wp_reflected_xss_shell_upload.rb +33 -0
  300. data/lib/wpxf/modules/exploit/xss/reflected/mailpoet_newsletters_reflected_xss_shell_upload.rb +49 -0
  301. data/lib/wpxf/modules/exploit/xss/reflected/mailpoet_newsletters_v272_reflected_xss_shell_upload.rb +36 -0
  302. data/lib/wpxf/modules/exploit/xss/reflected/master_slider_reflected_xss_shell_upload.rb +41 -0
  303. data/lib/wpxf/modules/exploit/xss/reflected/maxbuttons_reflected_xss_shell_upload.rb +38 -0
  304. data/lib/wpxf/modules/exploit/xss/reflected/minimax_page_layout_builder_reflected_xss_shell_upload.rb +34 -0
  305. data/lib/wpxf/modules/exploit/xss/reflected/msmc_redirect_after_comment_reflected_xss_shell_upload.rb +38 -0
  306. data/lib/wpxf/modules/exploit/xss/reflected/multilanguage_reflected_xss_shell_upload.rb +20 -0
  307. data/lib/wpxf/modules/exploit/xss/reflected/new_year_firework_reflected_xss_shell_upload.rb +34 -0
  308. data/lib/wpxf/modules/exploit/xss/reflected/ninja_forms_reflected_xss_shell_upload.rb +37 -0
  309. data/lib/wpxf/modules/exploit/xss/reflected/no_external_links_reflected_xss_shell_upload.rb +39 -0
  310. data/lib/wpxf/modules/exploit/xss/reflected/ocim_mp3_reflected_xss_shell_upload.rb +38 -0
  311. data/lib/wpxf/modules/exploit/xss/reflected/pagination_reflected_xss_shell_upload.rb +20 -0
  312. data/lib/wpxf/modules/exploit/xss/reflected/pdf_print_reflected_xss_shell_upload.rb +20 -0
  313. data/lib/wpxf/modules/exploit/xss/reflected/peters_login_redirect_reflected_xss_shell_upload.rb +53 -0
  314. data/lib/wpxf/modules/exploit/xss/reflected/photo_gallery_xss_shell_upload.rb +46 -0
  315. data/lib/wpxf/modules/exploit/xss/reflected/pinterest_feed_xss_shell_upload.rb +37 -0
  316. data/lib/wpxf/modules/exploit/xss/reflected/podlove_podcast_publisher_reflected_xss_shell_upload.rb +36 -0
  317. data/lib/wpxf/modules/exploit/xss/reflected/pondol_form_to_mail_reflected_xss_shell_upload.rb +34 -0
  318. data/lib/wpxf/modules/exploit/xss/reflected/pootle_button_reflected_xss_shell_upload.rb +32 -0
  319. data/lib/wpxf/modules/exploit/xss/reflected/popcash_integration_xss_shell_upload.rb +34 -0
  320. data/lib/wpxf/modules/exploit/xss/reflected/popup_maker_reflected_xss_shell_upload.rb +39 -0
  321. data/lib/wpxf/modules/exploit/xss/reflected/portfolio_reflected_xss_shell_upload.rb +36 -0
  322. data/lib/wpxf/modules/exploit/xss/reflected/post_to_csv_reflected_xss_shell_upload.rb +20 -0
  323. data/lib/wpxf/modules/exploit/xss/reflected/profile_builder_reflected_xss_shell_upload.rb +40 -0
  324. data/lib/wpxf/modules/exploit/xss/reflected/profile_extra_fields_reflected_xss_shell_upload.rb +20 -0
  325. data/lib/wpxf/modules/exploit/xss/reflected/promobar_reflected_xss_shell_upload.rb +20 -0
  326. data/lib/wpxf/modules/exploit/xss/reflected/propertyhive_csrf_xss_shell_upload.rb +37 -0
  327. data/lib/wpxf/modules/exploit/xss/reflected/quiz_and_survey_master_reflected_xss_shell_upload.rb +44 -0
  328. data/lib/wpxf/modules/exploit/xss/reflected/quotes_and_tips_reflected_xss_shell_upload.rb +20 -0
  329. data/lib/wpxf/modules/exploit/xss/reflected/quotes_collection_reflected_xss_shell_upload.rb +38 -0
  330. data/lib/wpxf/modules/exploit/xss/reflected/rating_bws_reflected_xss_shell_upload.rb +20 -0
  331. data/lib/wpxf/modules/exploit/xss/reflected/re_attacher_reflected_xss_shell_upload.rb +20 -0
  332. data/lib/wpxf/modules/exploit/xss/reflected/realty_reflected_xss_shell_upload.rb +20 -0
  333. data/lib/wpxf/modules/exploit/xss/reflected/registrationmagic_reflected_xss_shell_upload.rb +38 -0
  334. data/lib/wpxf/modules/exploit/xss/reflected/relevant_reflected_xss_shell_upload.rb +20 -0
  335. data/lib/wpxf/modules/exploit/xss/reflected/responsive_lightbox_reflected_xss_shell_upload.rb +39 -0
  336. data/lib/wpxf/modules/exploit/xss/reflected/rockhoist_badges_reflected_xss_shell_upload.rb +41 -0
  337. data/lib/wpxf/modules/exploit/xss/reflected/sender_reflected_xss_shell_upload.rb +20 -0
  338. data/lib/wpxf/modules/exploit/xss/reflected/simpel_reserveren_reflected_xss_shell_upload.rb +34 -0
  339. data/lib/wpxf/modules/exploit/xss/reflected/simple_slideshow_manager_reflected_xss_shell_upload.rb +39 -0
  340. data/lib/wpxf/modules/exploit/xss/reflected/slideshow_gallery_reflected_xss_shell_upload.rb +35 -0
  341. data/lib/wpxf/modules/exploit/xss/reflected/smart_marketing_xss_shell_upload.rb +37 -0
  342. data/lib/wpxf/modules/exploit/xss/reflected/social_buttons_pack_reflected_xss_shell_upload.rb +20 -0
  343. data/lib/wpxf/modules/exploit/xss/reflected/social_login_bws_reflected_xss_shell_upload.rb +20 -0
  344. data/lib/wpxf/modules/exploit/xss/reflected/social_pug_reflected_xss_shell_upload.rb +34 -0
  345. data/lib/wpxf/modules/exploit/xss/reflected/sp_project_document_manager_reflected_xss_shell_upload.rb +41 -0
  346. data/lib/wpxf/modules/exploit/xss/reflected/spamfree_reflected_xss_shell_upload.rb +44 -0
  347. data/lib/wpxf/modules/exploit/xss/reflected/spiffy_calendar_reflected_xss_shell_upload.rb +49 -0
  348. data/lib/wpxf/modules/exploit/xss/reflected/splashing_images_reflected_xss_shell_upload.rb +39 -0
  349. data/lib/wpxf/modules/exploit/xss/reflected/subscriber_reflected_xss_shell_upload.rb +20 -0
  350. data/lib/wpxf/modules/exploit/xss/reflected/tidio_gallery_reflected_xss_shell_upload.rb +34 -0
  351. data/lib/wpxf/modules/exploit/xss/reflected/timesheet_reflected_xss_shell_upload.rb +20 -0
  352. data/lib/wpxf/modules/exploit/xss/reflected/tracking_code_manager_reflected_xss_shell_upload.rb +34 -0
  353. data/lib/wpxf/modules/exploit/xss/reflected/tribulant_newsletter_reflected_xss_shell_upload.rb +39 -0
  354. data/lib/wpxf/modules/exploit/xss/reflected/tribulant_slideshow_gallery_reflected_xss_shell_upload.rb +34 -0
  355. data/lib/wpxf/modules/exploit/xss/reflected/trust_form_reflected_xss_shell_upload.rb +37 -0
  356. data/lib/wpxf/modules/exploit/xss/reflected/twitter_plugin_reflected_xss_shell_upload.rb +20 -0
  357. data/lib/wpxf/modules/exploit/xss/reflected/ultimate_csv_importer_reflected_xss_shell_upload.rb +83 -0
  358. data/lib/wpxf/modules/exploit/xss/reflected/ultimate_form_builder_lite_reflected_xss_shell_upload.rb +30 -0
  359. data/lib/wpxf/modules/exploit/xss/reflected/updater_reflected_xss_shell_upload.rb +20 -0
  360. data/lib/wpxf/modules/exploit/xss/reflected/user_access_manager_reflected_xss_shell_upload.rb +35 -0
  361. data/lib/wpxf/modules/exploit/xss/reflected/user_login_history_xss_shell_upload.rb +35 -0
  362. data/lib/wpxf/modules/exploit/xss/reflected/user_role_reflected_xss_shell_upload.rb +20 -0
  363. data/lib/wpxf/modules/exploit/xss/reflected/visitors_online_reflected_xss_shell_upload.rb +20 -0
  364. data/lib/wpxf/modules/exploit/xss/reflected/w3_total_cache_reflected_xss_shell_upload.rb +38 -0
  365. data/lib/wpxf/modules/exploit/xss/reflected/wang_guard_reflected_xss_shell_upload.rb +33 -0
  366. data/lib/wpxf/modules/exploit/xss/reflected/whizz_reflected_xss_shell_upload.rb +34 -0
  367. data/lib/wpxf/modules/exploit/xss/reflected/woo_email_control_reflected_xss_shell_upload.rb +41 -0
  368. data/lib/wpxf/modules/exploit/xss/reflected/wordpress_firewall_reflected_xss_shell_upload.rb +38 -0
  369. data/lib/wpxf/modules/exploit/xss/reflected/wp_advanced_importer_reflected_xss_shell_upload.rb +37 -0
  370. data/lib/wpxf/modules/exploit/xss/reflected/wp_filebase_download_manager_reflected_xss_shell_upload.rb +37 -0
  371. data/lib/wpxf/modules/exploit/xss/reflected/wp_live_chat_support_reflected_xss_shell_upload.rb +40 -0
  372. data/lib/wpxf/modules/exploit/xss/reflected/wp_mailster_reflected_xss_shell_upload.rb +38 -0
  373. data/lib/wpxf/modules/exploit/xss/reflected/wp_members_reflected_xss_shell_upload.rb +39 -0
  374. data/lib/wpxf/modules/exploit/xss/reflected/wp_retina_2x_xss_shell_upload.rb +39 -0
  375. data/lib/wpxf/modules/exploit/xss/reflected/wp_statistics_12.0.9_reflected_xss_shell_upload.rb +39 -0
  376. data/lib/wpxf/modules/exploit/xss/reflected/wp_statistics_reflected_xss_shell_upload.rb +38 -0
  377. data/lib/wpxf/modules/exploit/xss/reflected/wp_v4.4_xss_shell_upload.rb +54 -0
  378. data/lib/wpxf/modules/exploit/xss/reflected/wp_whois_domain_reflected_xss_shell_upload.rb +41 -0
  379. data/lib/wpxf/modules/exploit/xss/reflected/wpsolr_reflected_xss_shell_upload.rb +34 -0
  380. data/lib/wpxf/modules/exploit/xss/reflected/yoast_seo_xss_shell_upload.rb +34 -0
  381. data/lib/wpxf/modules/exploit/xss/reflected/zurl_preview_xss_shell_upload.rb +38 -0
  382. data/lib/wpxf/modules/exploit/xss/stored/admin_management_xtended_xss_shell_upload.rb +172 -0
  383. data/lib/wpxf/modules/exploit/xss/stored/all_in_one_seo_pack_xss_shell_upload.rb +208 -0
  384. data/lib/wpxf/modules/exploit/xss/stored/alo_easymail_csrf_xss_shell_upload.rb +48 -0
  385. data/lib/wpxf/modules/exploit/xss/stored/appointment_schedule_booking_system_stored_xss_shell_upload.rb +41 -0
  386. data/lib/wpxf/modules/exploit/xss/stored/arabic_font_csrf_stored_xss_shell_upload.rb +39 -0
  387. data/lib/wpxf/modules/exploit/xss/stored/caldera_forms_stored_xss_shell_upload.rb +38 -0
  388. data/lib/wpxf/modules/exploit/xss/stored/content_audit_csrf_stored_xss_shell_upload.rb +83 -0
  389. data/lib/wpxf/modules/exploit/xss/stored/dw_question_answer_stored_xss_shell_upload.rb +91 -0
  390. data/lib/wpxf/modules/exploit/xss/stored/dwnldr_xss_shell_upload.rb +58 -0
  391. data/lib/wpxf/modules/exploit/xss/stored/embed_comment_images_stored_xss_shell_upload.rb +57 -0
  392. data/lib/wpxf/modules/exploit/xss/stored/flickr_rss_csrf_xss_shell_upload.rb +38 -0
  393. data/lib/wpxf/modules/exploit/xss/stored/four04_to_three01_stored_xss_shell_upload.rb +50 -0
  394. data/lib/wpxf/modules/exploit/xss/stored/gwolle_guestbook_stored_xss_shell_upload.rb +47 -0
  395. data/lib/wpxf/modules/exploit/xss/stored/imageinject_csrf_xss_shell_upload.rb +53 -0
  396. data/lib/wpxf/modules/exploit/xss/stored/instagram_feed_csrf_stored_xss_shell_upload.rb +51 -0
  397. data/lib/wpxf/modules/exploit/xss/stored/ithemes_security_stored_xss_shell_upload.rb +40 -0
  398. data/lib/wpxf/modules/exploit/xss/stored/ithemes_security_v6.9.0_stored_xss_shell_upload.rb +40 -0
  399. data/lib/wpxf/modules/exploit/xss/stored/mdc_private_message_xss_shell_upload.rb +118 -0
  400. data/lib/wpxf/modules/exploit/xss/stored/newsletter_by_supsystic_csrf_stored_xss_shell_upload.rb +43 -0
  401. data/lib/wpxf/modules/exploit/xss/stored/participants_database_v1.7.5.9_stored_xss_shell_upload.rb +80 -0
  402. data/lib/wpxf/modules/exploit/xss/stored/safe_editor_xss_shell_upload.rb +60 -0
  403. data/lib/wpxf/modules/exploit/xss/stored/smart_google_code_inserter_xss_shell_upload.rb +39 -0
  404. data/lib/wpxf/modules/exploit/xss/stored/social_media_widget_csrf_xss_shell_upload.rb +39 -0
  405. data/lib/wpxf/modules/exploit/xss/stored/srbtranslatin_csrf_xss_shell_upload.rb +42 -0
  406. data/lib/wpxf/modules/exploit/xss/stored/ultimate_addons_for_vc_authenticated_stored_xss_shell_upload.rb +48 -0
  407. data/lib/wpxf/modules/exploit/xss/stored/ultimate_addons_for_vc_reflected_stored_xss_shell_upload.rb +37 -0
  408. data/lib/wpxf/modules/exploit/xss/stored/universal_analytics_authenticated_xss_shell_upload.rb +90 -0
  409. data/lib/wpxf/modules/exploit/xss/stored/user_login_log_authenticated_stored_xss_shell_upload.rb +45 -0
  410. data/lib/wpxf/modules/exploit/xss/stored/woo_custom_checkout_field_xss_shell_upload.rb +44 -0
  411. data/lib/wpxf/modules/exploit/xss/stored/wp_google_maps_stored_xss_shell_upload.rb +55 -0
  412. data/lib/wpxf/modules/exploit/xss/stored/wp_live_chat_support_stored_xss_shell_upload.rb +99 -0
  413. data/lib/wpxf/modules/exploit/xss/stored/wp_piwik_stored_xss_shell_upload.rb +36 -0
  414. data/lib/wpxf/modules/exploit/xss/stored/wp_v4.3_shortcode_xss_shell_upload.rb +55 -0
  415. data/lib/wpxf/net.rb +16 -0
  416. data/lib/wpxf/net/cookie_jar.rb +37 -0
  417. data/lib/wpxf/net/http_client.rb +206 -0
  418. data/lib/wpxf/net/http_options.rb +98 -0
  419. data/lib/wpxf/net/http_response.rb +44 -0
  420. data/lib/wpxf/net/http_server.rb +186 -0
  421. data/lib/wpxf/net/typhoeus_helper.rb +46 -0
  422. data/lib/wpxf/net/user_agent.rb +193 -0
  423. data/lib/wpxf/payloads/bind_php.rb +95 -0
  424. data/lib/wpxf/payloads/custom.rb +42 -0
  425. data/lib/wpxf/payloads/download_exec.rb +43 -0
  426. data/lib/wpxf/payloads/exec.rb +43 -0
  427. data/lib/wpxf/payloads/meterpreter_bind_tcp.rb +64 -0
  428. data/lib/wpxf/payloads/meterpreter_reverse_tcp.rb +50 -0
  429. data/lib/wpxf/payloads/reverse_tcp.rb +152 -0
  430. data/lib/wpxf/payloads/socket_helper.rb +50 -0
  431. data/lib/wpxf/utility.rb +12 -0
  432. data/lib/wpxf/utility/body_builder.rb +151 -0
  433. data/lib/wpxf/utility/reference_inflater.rb +34 -0
  434. data/lib/wpxf/utility/text.rb +81 -0
  435. data/lib/wpxf/versioning.rb +11 -0
  436. data/lib/wpxf/versioning/browser_versions.rb +56 -0
  437. data/lib/wpxf/versioning/os_versions.rb +18 -0
  438. data/lib/wpxf/wordpress.rb +24 -0
  439. data/lib/wpxf/wordpress/comments.rb +89 -0
  440. data/lib/wpxf/wordpress/file_download.rb +168 -0
  441. data/lib/wpxf/wordpress/fingerprint.rb +238 -0
  442. data/lib/wpxf/wordpress/hash_dump.rb +264 -0
  443. data/lib/wpxf/wordpress/login.rb +60 -0
  444. data/lib/wpxf/wordpress/options.rb +27 -0
  445. data/lib/wpxf/wordpress/plugin.rb +102 -0
  446. data/lib/wpxf/wordpress/posts.rb +26 -0
  447. data/lib/wpxf/wordpress/reflected_xss.rb +40 -0
  448. data/lib/wpxf/wordpress/shell_upload.rb +172 -0
  449. data/lib/wpxf/wordpress/staged_reflected_xss.rb +82 -0
  450. data/lib/wpxf/wordpress/stored_xss.rb +73 -0
  451. data/lib/wpxf/wordpress/urls.rb +131 -0
  452. data/lib/wpxf/wordpress/user.rb +35 -0
  453. data/lib/wpxf/wordpress/xss.rb +143 -0
  454. data/wpxf.gemspec +33 -0
  455. metadata +708 -0
@@ -0,0 +1,44 @@
1
+ # frozen_string_literal: true
2
+
3
+ module Wpxf
4
+ module Net
5
+ # A response from a request made by a HttpClient.
6
+ class HttpResponse
7
+ # @param res [Object] a response to parse.
8
+ def initialize(res)
9
+ parse_typhoeus_response(res) if res.is_a? Typhoeus::Response
10
+ end
11
+
12
+ # Parse a Typhoeus response into the object.
13
+ # @param res [Typhoeus::Response] the response object to parse.
14
+ # @return [nil]
15
+ def parse_typhoeus_response(res)
16
+ self.code = res.code
17
+ self.body = res.body.nil? ? '' : res.body
18
+ self.headers = res.headers
19
+ self.timed_out = res.timed_out? || res.return_code == :couldnt_connect
20
+ self.cookies = CookieJar.new.parse(res.headers['Set-Cookie']) if res.headers
21
+ end
22
+
23
+ # @return [Boolean] a boolean that indicates whether a request timed out.
24
+ def timed_out?
25
+ timed_out
26
+ end
27
+
28
+ # @return [Integer] the HTTP status code.
29
+ attr_accessor :code
30
+
31
+ # @return [String] the response body.
32
+ attr_accessor :body
33
+
34
+ # @return [Hash] a hash of all returned headers.
35
+ attr_accessor :headers
36
+
37
+ # @return [Boolean] a boolean that indicates whether a request timed out.
38
+ attr_accessor :timed_out
39
+
40
+ # @return [Hash] a {CookieJar} with all returned cookies.
41
+ attr_accessor :cookies
42
+ end
43
+ end
44
+ end
@@ -0,0 +1,186 @@
1
+ # frozen_string_literal: true
2
+
3
+ require 'cgi'
4
+ require 'socket'
5
+
6
+ # Provides basic, single threaded HTTP server functionality.
7
+ module Wpxf::Net::HttpServer
8
+ include Wpxf
9
+
10
+ # Initialize a new instance of {HttpServer}.
11
+ def initialize
12
+ super
13
+
14
+ register_options([
15
+ StringOption.new(
16
+ name: 'http_server_bind_address',
17
+ desc: 'Address to bind the HTTP server to',
18
+ default: '0.0.0.0',
19
+ required: true
20
+ ),
21
+ PortOption.new(
22
+ name: 'http_server_bind_port',
23
+ desc: 'Port for the HTTP server to listen on',
24
+ default: 80,
25
+ required: true
26
+ )
27
+ ])
28
+
29
+ @http_server_kill_switch = false
30
+ end
31
+
32
+ # @return [String] the address the HTTP server is bound to.
33
+ def http_server_bind_address
34
+ normalized_option_value('http_server_bind_address')
35
+ end
36
+
37
+ # @return [Integer] the port the HTTP server is listening on.
38
+ def http_server_bind_port
39
+ normalized_option_value('http_server_bind_port')
40
+ end
41
+
42
+ # Invoked when a HTTP request is made to the server.
43
+ # @param path [String] the path requested.
44
+ # @param params [Hash] the query string parameters.
45
+ # @param headers [Hash] the HTTP headers.
46
+ # @return [String, Hash] if a string is returned, it will be used as the response body
47
+ # to send to the client. If a hash is returned, it should contain the keys:
48
+ # * +:body+ - the body text of the response.
49
+ # * +:type+ - the MIME type of the response.
50
+ # * +:headers+ - an array of header strings.
51
+ def on_http_request(path, params, headers) end
52
+
53
+ # @return [String] the AJAX download helper script.
54
+ def js_ajax_download
55
+ File.read(File.join(Wpxf.data_directory, 'js', 'ajax_download.js'))
56
+ end
57
+
58
+ # @return [String] the AJAX post helper script.
59
+ def js_ajax_post
60
+ File.read(File.join(Wpxf.data_directory, 'js', 'ajax_post.js'))
61
+ end
62
+
63
+ # @return [String] the JS post helper script.
64
+ def js_post
65
+ File.read(File.join(Wpxf.data_directory, 'js', 'post.js'))
66
+ end
67
+
68
+ # Start the HTTP server.
69
+ # @param non_block [Boolean] run the server in non-blocking mode.
70
+ def start_http_server(non_block = false)
71
+ @tcp_server = TCPServer.new(http_server_bind_address, http_server_bind_port)
72
+ emit_info "Started HTTP server on #{http_server_bind_address}:"\
73
+ "#{http_server_bind_port}"
74
+
75
+ if non_block
76
+ @http_server_thread = Thread.new do
77
+ _http_server_loop
78
+ end
79
+ else
80
+ _http_server_loop
81
+ end
82
+ end
83
+
84
+ # Stop the HTTP server after it has finished processing the current request.
85
+ def stop_http_server
86
+ return false if @is_stopping
87
+ @is_stopping = true
88
+
89
+ emit_info 'Stopping HTTP server...', true
90
+ @http_server_kill_switch = true
91
+ @http_server_thread&.exit
92
+ @tcp_server.close if !@tcp_server.nil? && !@tcp_server.closed?
93
+ emit_info 'HTTP server stopped'
94
+ @is_stopping = false
95
+ end
96
+
97
+ # @return [Thread] thread that the server runs on when in non-blocking mode.
98
+ def http_server_thread
99
+ @http_server_thread
100
+ end
101
+
102
+ private
103
+
104
+ def _send_headers(socket, body, content_type, custom_headers)
105
+ headers = []
106
+ headers.push 'HTTP/1.1 200 OK'
107
+ headers.push "Content-Type: #{content_type}"
108
+ headers.push "Content-Length: #{body.bytesize}"
109
+ headers += custom_headers unless custom_headers.nil?
110
+ headers.push 'Connection: close'
111
+
112
+ headers.each do |header|
113
+ socket.print "#{header}\r\n"
114
+ end
115
+ end
116
+
117
+ def _send_response(response, socket)
118
+ content_type = 'text/plain'
119
+ body = ''
120
+ custom_headers = nil
121
+
122
+ if response.is_a? String
123
+ body = response
124
+ else
125
+ body = response[:body]
126
+ content_type = response[:type]
127
+ custom_headers = response[:headers]
128
+ end
129
+
130
+ _send_headers(socket, body, content_type, custom_headers)
131
+ socket.print "\r\n"
132
+ socket.print body
133
+ end
134
+
135
+ def _http_server_loop
136
+ begin
137
+ loop do
138
+ socket = @tcp_server.accept
139
+
140
+ begin
141
+ response = _handle_incoming_http_request(socket)
142
+ _send_response(response, socket) if response
143
+ socket.close
144
+ rescue Errno::EPIPE
145
+ emit_warning 'A socket was closed by the requester', true
146
+ end
147
+
148
+ break if @http_server_kill_switch
149
+ end
150
+ rescue SignalException
151
+ emit_warning 'Caught kill signal', true
152
+ rescue StandardError => e
153
+ emit_error "Socket error: #{e}"
154
+ end
155
+
156
+ stop_http_server
157
+ end
158
+
159
+ def _handle_incoming_http_request(socket)
160
+ request = socket.gets
161
+ return unless request
162
+
163
+ emit_info "Incoming HTTP request: #{request}", true
164
+
165
+ headers = ''
166
+ while (line = socket.gets) != "\r\n"
167
+ headers += line
168
+ emit_info line, true
169
+ end
170
+
171
+ headers = Hash[headers.each_line.map { |l| l.chomp.split(': ', 2) }]
172
+ path = request.gsub(/^[A-Za-z]+\s(.+?)\s.*$/, '\1').chomp
173
+ params = {}
174
+
175
+ if path.include?('?')
176
+ params = CGI.parse(path.split('?')[-1])
177
+ params.each do |k, v|
178
+ params[k] = v.join(' ')
179
+ end
180
+ path = path.split('?')[0]
181
+ end
182
+
183
+ # Dispatch parsed data to the callback in the module.
184
+ on_http_request(path, params, headers)
185
+ end
186
+ end
@@ -0,0 +1,46 @@
1
+ # frozen_string_literal: true
2
+
3
+ module Wpxf
4
+ module Net
5
+ # Provides helper functions for interfacing with Typhoeus in a module.
6
+ module TyphoeusHelper
7
+ def advanced_typhoeus_options
8
+ {
9
+ userpwd: datastore['basic_auth_creds'],
10
+ proxy: datastore['proxy'],
11
+ proxyuserpwd: datastore['proxy_auth_creds'],
12
+ ssl_verifyhost: normalized_option_value('verify_host') ? 2 : 0,
13
+ ssl_verifypeer: normalized_option_value('verify_peer'),
14
+ timeout: normalized_option_value('http_client_timeout')
15
+ }
16
+ end
17
+
18
+ def standard_typhoeus_options(method, params, body, headers)
19
+ {
20
+ method: method,
21
+ body: body,
22
+ params: params,
23
+ headers: base_http_headers.merge(headers),
24
+ followlocation: normalized_option_value('follow_http_redirection')
25
+ }
26
+ end
27
+
28
+ def create_typhoeus_request_options(method, params, body, headers)
29
+ standard_typhoeus_options(method, params, body, headers)
30
+ .merge(advanced_typhoeus_options)
31
+ end
32
+
33
+ def create_typhoeus_request(opts)
34
+ headers = opts[:headers] || {}
35
+ headers['Cookie'] = opts[:cookie] if opts[:cookie]
36
+ options = create_typhoeus_request_options(
37
+ opts[:method],
38
+ opts[:params],
39
+ opts[:body],
40
+ headers
41
+ )
42
+ Typhoeus::Request.new(normalize_relative_uri(opts[:url]), options)
43
+ end
44
+ end
45
+ end
46
+ end
@@ -0,0 +1,193 @@
1
+ # frozen_string_literal: true
2
+
3
+ module Wpxf
4
+ module Net
5
+ # Provides functionality for generating user agent strings.
6
+ module UserAgent
7
+ include Wpxf::Versioning::BrowserVersions
8
+ include Wpxf::Versioning::OSVersions
9
+
10
+ # A random browser and OS combination.
11
+ # @return [Hash] a hash containing a :browser and :os
12
+ def random_browser_and_os
13
+ frequencies = clients_by_frequency
14
+ target_frequency = rand(1..100)
15
+ sum = 0
16
+
17
+ frequencies.each do |browser_frequency, combinations|
18
+ sum += browser_frequency.to_i
19
+ next if target_frequency > sum
20
+
21
+ # This browser encompasses our target frequency, so reset the
22
+ # frequency sum and generate a new target frequency for the
23
+ # operating system selection.
24
+ target_frequency = rand(1..100)
25
+ sum = 0
26
+
27
+ # Once we find an OS that covers the target frequency, return
28
+ # the browser/OS combination.
29
+ combinations.each do |os_frequency, combo|
30
+ sum += os_frequency.to_i
31
+ if target_frequency <= sum
32
+ return {
33
+ browser: combo['browser'].to_sym,
34
+ os: combo['os'].to_sym
35
+ }
36
+ end
37
+ end
38
+ end
39
+
40
+ # This point should never be reached, as the frequencies should
41
+ # always total 100 and thus we should always retrieve a combo.
42
+ raise 'Browser and OS frequencies exceeded 100'
43
+ end
44
+
45
+ # @return [Hash] a hash of browser and OS combinations grouped by
46
+ # frequencies drawn from real-world statistics.
47
+ def clients_by_frequency
48
+ json = Wpxf::DataFile.new('json', 'browser_usage_by_frequency.json').content
49
+ JSON.parse(json)
50
+ end
51
+
52
+ # A random date between two dates in a specific format.
53
+ # @param min the minimum date to return.
54
+ # @param max the maximum date to return.
55
+ # @param format the format string to use when formatting the date.
56
+ # @return [String] a formatted random date.
57
+ def random_time_string(min, max = Time.now.to_s, format = '%Y%m%d')
58
+ rand(Time.parse(min)..Time.parse(max)).strftime(format)
59
+ end
60
+
61
+ # A random CPU type.
62
+ # @param os the operating system that the CPU would be used with.
63
+ # @return [String] a random CPU type.
64
+ def random_processor_string(os)
65
+ return ['i686', 'x86_64'].sample if os == :linux
66
+ return ['Intel', 'PPC', 'U; Intel', 'U; PPC'].sample if os == :osx
67
+ end
68
+
69
+ # @return [String] a random Firefox version string.
70
+ def random_firefox_version_string
71
+ [
72
+ "Gecko/#{random_time_string('2011-01-01')} "\
73
+ "Firefox/#{rand(5..7)}.0",
74
+ "Gecko/#{random_time_string('2011-01-01')} "\
75
+ "Firefox/#{rand(5..7)}.0.1",
76
+ "Gecko/#{random_time_string('2010-01-01')} "\
77
+ "Firefox/3.6.#{rand(1..20)}",
78
+ "Gecko/#{random_time_string('2010-01-01')} "\
79
+ 'Firefox/3.8'
80
+ ].sample
81
+ end
82
+
83
+ # A random Firefox platform string.
84
+ # @param os the operating system that Firefox would be running on.
85
+ # @return [String] a random Firefox platform string.
86
+ def random_firefox_platform_string(os)
87
+ version = random_firefox_version_string
88
+ cpu = random_processor_string(os)
89
+
90
+ if os == :linux
91
+ return "(X11; Linux #{cpu}; rv:#{rand(5..7)}.0) #{version}"
92
+ end
93
+
94
+ if os == :osx
95
+ return "(Macintosh; #{cpu} Mac OS X #{random_osx_version} "\
96
+ "rv:#{rand(2..6)}.0) #{version}"
97
+ end
98
+
99
+ if os == :windows
100
+ return "(Windows NT #{random_nt_version}; en-US; rv:1.9."\
101
+ "#{rand(0..2)}.20) #{version}"
102
+ end
103
+ end
104
+
105
+ # A random Safari platform string.
106
+ # @param os the operating system that Safari would be running on.
107
+ # @return [String] a random Safari platform string.
108
+ def random_safari_platform_string(os)
109
+ build = random_safari_build_number
110
+ cpu = random_processor_string(os)
111
+ version = random_safari_version
112
+
113
+ if os == :osx
114
+ return "(Macintosh; U; #{cpu} Mac OS X #{random_osx_version} rv:"\
115
+ "#{rand(2..6)}.0; en-US) AppleWebKit/#{build} "\
116
+ "(KHTML, like Gecko) Version/#{version} Safari/#{build}"
117
+ else
118
+ return "(Windows; U; Windows NT #{random_nt_version}) AppleWebKit/"\
119
+ "#{build} (KHTML, like Gecko) Version/#{version} "\
120
+ "Safari/#{build}"
121
+ end
122
+ end
123
+
124
+ # A random Internet Explorer platform string.
125
+ # @return [String] a random Internet Explorer platform string.
126
+ def random_iexplorer_platform_string
127
+ "(compatible; MSIE #{random_ie_version}; Windows NT "\
128
+ "#{random_nt_version}; Trident/#{random_trident_version})"
129
+ end
130
+
131
+ # A random Opera platform string.
132
+ # @param os the operating system that Opera would be running on.
133
+ # @return [String] a random Opera platform string.
134
+ def random_opera_platform_string(os)
135
+ cpu = random_processor_string(os)
136
+ presto = random_presto_version
137
+ version = random_presto_version2
138
+
139
+ if os == :linux
140
+ return "(X11; Linux #{cpu}; U; en-US) Presto/#{presto} "\
141
+ "Version/#{version}"
142
+ else
143
+ return "(Windows NT #{random_nt_version}; U; en-US) "\
144
+ "Presto/#{presto} Version/#{version}"
145
+ end
146
+ end
147
+
148
+ # A random Chrome platform string.
149
+ # @param os the operating system that Chrome would be running on.
150
+ # @return [String] a random Chrome platform string.
151
+ def random_chrome_platform_string(os)
152
+ cpu = random_processor_string(os)
153
+ build = random_chrome_build_number
154
+ version = random_chrome_version
155
+
156
+ if os == :linux
157
+ return "(X11; Linux #{cpu}) AppleWebKit/#{build} (KHTML, like Gecko)"\
158
+ " Chrome/#{version} Safari/#{build}"
159
+ end
160
+
161
+ if os == :osx
162
+ return "(Macintosh; U; #{cpu} Mac OS X #{random_osx_version}) "\
163
+ "AppleWebKit/#{build} (KHTML, like Gecko) Chrome/"\
164
+ "#{version} Safari/#{build}"
165
+ end
166
+
167
+ if os == :windows
168
+ return "(Windows NT #{random_nt_version}) AppleWebKit/#{build} "\
169
+ "(KHTML, like Gecko) Chrome/#{version} Safari/#{build}"
170
+ end
171
+ end
172
+
173
+ # @return [String] a random browser user agent.
174
+ def random_user_agent
175
+ platform = random_browser_and_os
176
+ os = platform[:os]
177
+
178
+ if platform[:browser] == :firefox
179
+ return "Mozilla/5.0 #{random_firefox_platform_string(os)}"
180
+ elsif platform[:browser] == :safari
181
+ return "Mozilla/5.0 #{random_safari_platform_string(os)}"
182
+ elsif platform[:browser] == :iexplorer
183
+ return "Mozilla/5.0 #{random_iexplorer_platform_string}"
184
+ elsif platform[:browser] == :opera
185
+ return "Opera/#{random_opera_version} "\
186
+ "#{random_opera_platform_string(os)}"
187
+ else
188
+ return "Mozilla/5.0 #{random_chrome_platform_string(os)}"
189
+ end
190
+ end
191
+ end
192
+ end
193
+ end