Sha256: 93175116bbba08b16af3be4f9d6f974b78c8df0c9d37940ef7de075c4d9247b9

Contents?: true

Size: 1.21 KB

Versions: 10

Compression:

Stored size: 1.21 KB

Contents

module WPScan
  module Finders
    module ConfigBackups
      # Config Backup finder
      class KnownFilenames < CMSScanner::Finders::Finder
        include CMSScanner::Finders::Finder::Enumerator

        # @param [ Hash ] opts
        # @option opts [ String ] :list
        # @option opts [ Boolean ] :show_progression
        #
        # @return [ Array<ConfigBackup> ]
        def aggressive(opts = {})
          found = []

          enumerate(potential_urls(opts), opts) do |res|
            # Might need to improve that
            next unless res.body =~ /define/i && res.body !~ /<\s?html/i

            found << WPScan::ConfigBackup.new(res.request.url, found_by: DIRECT_ACCESS, confidence: 100)
          end

          found
        end

        # @param [ Hash ] opts
        # @option opts [ String ] :list Mandatory
        #
        # @return [ Hash ]
        def potential_urls(opts = {})
          urls = {}

          File.open(opts[:list]).each_with_index do |file, index|
            urls[target.url(file.chomp)] = index
          end

          urls
        end

        def create_progress_bar(opts = {})
          super(opts.merge(title: ' Checking Config Backups -'))
        end
      end
    end
  end
end

Version data entries

10 entries across 10 versions & 1 rubygems

Version Path
wpscan-3.4.5 app/finders/config_backups/known_filenames.rb
wpscan-3.4.4 app/finders/config_backups/known_filenames.rb
wpscan-3.4.3 app/finders/config_backups/known_filenames.rb
wpscan-3.4.2 app/finders/config_backups/known_filenames.rb
wpscan-3.4.1 app/finders/config_backups/known_filenames.rb
wpscan-3.4.0 app/finders/config_backups/known_filenames.rb
wpscan-3.3.3 app/finders/config_backups/known_filenames.rb
wpscan-3.3.2 app/finders/config_backups/known_filenames.rb
wpscan-3.3.1 app/finders/config_backups/known_filenames.rb
wpscan-3.3.0 app/finders/config_backups/known_filenames.rb