Sha256: 18de69d12298e74350bb104c09bd730194fbc1880cf375915c4679a421764248

Contents?: true

Size: 1.71 KB

Versions: 10

Compression:

Stored size: 1.71 KB

Contents

module CMSScanner
  module Finders
    module InterestingFindings
      # XML RPC finder
      class XMLRPC < Finder
        # @return [ Array<String> ] The potential urls to the XMl RPC file
        def potential_urls
          @potential_urls ||= []
        end

        # @return [ Array<XMLRPC> ]
        def passive(opts = {})
          [passive_headers(opts), passive_body(opts)].compact
        end

        # @return [ XMLRPC ]
        def passive_headers(_opts = {})
          url = target.homepage_res.headers['X-Pingback']

          return unless target.in_scope?(url)
          potential_urls << url

          NS::XMLRPC.new(url, confidence: 30, found_by: 'Headers (Passive Detection)')
        end

        # @return [ XMLRPC ]
        def passive_body(_opts = {})
          target.homepage_res.html.css('link[rel="pingback"]').each do |tag|
            url = tag.attribute('href').to_s

            next unless target.in_scope?(url)
            potential_urls << url

            return NS::XMLRPC.new(url, confidence: 30,
                                       found_by: 'Link Tag (Passive Detection)')
          end
          nil
        end

        # @return [ XMLRPC ]
        def aggressive(_opts = {})
          potential_urls << target.url('xmlrpc.php')

          potential_urls.uniq.each do |potential_url|
            next unless target.in_scope?(potential_url)

            res = NS::Browser.get(potential_url)

            next unless res && res.body =~ /XML-RPC server accepts POST requests only/i

            return NS::XMLRPC.new(potential_url,
                                  confidence: 100,
                                  found_by: DIRECT_ACCESS)
          end
          nil
        end
      end
    end
  end
end

Version data entries

10 entries across 10 versions & 1 rubygems

Version Path
cms_scanner-0.0.37.12 app/finders/interesting_findings/xml_rpc.rb
cms_scanner-0.0.37.11 app/finders/interesting_findings/xml_rpc.rb
cms_scanner-0.0.37.10 app/finders/interesting_findings/xml_rpc.rb
cms_scanner-0.0.37.9 app/finders/interesting_findings/xml_rpc.rb
cms_scanner-0.0.37.8 app/finders/interesting_findings/xml_rpc.rb
cms_scanner-0.0.37.7 app/finders/interesting_findings/xml_rpc.rb
cms_scanner-0.0.37.6 app/finders/interesting_findings/xml_rpc.rb
cms_scanner-0.0.37.5 app/finders/interesting_findings/xml_rpc.rb
cms_scanner-0.0.37.4 app/finders/interesting_findings/xml_rpc.rb
cms_scanner-0.0.37.3 app/finders/interesting_findings/xml_rpc.rb