bin/RHPG in wmap-2.4.6 vs bin/RHPG in wmap-2.4.8

- old
+ new

@@ -8,12 +8,14 @@ def print_usage puts "Program to lookup then merge the site details into RHPG asset spreadsheet. \nUsage: RHPG [RHPG.csv]" end +# Lookup the site store for a domain; then return the fingger print info of the site def site_lookup(domain) - tracker=Wmap::SiteTracker.new(:verbose=>false) + tracker=Wmap::SiteTracker.instance + tracker.verbose=false #first order search tracker.known_sites.each do |key,val| if key.include?(domain.strip.downcase) && key.include?("https") tracker=nil return [key] + val.values @@ -28,10 +30,11 @@ end tracker=nil return [nil]*9 end +# look up the wp site data store for a domain; then return the wp finger print info: [is_wp?,wp_ver] def wp_site_lookup(domain) tracker=Wmap::WpTracker.new(:verbose=>false) # first order tracker.known_wp_sites.each do |key,val| if key.include?(domain.strip.downcase) && val @@ -40,11 +43,11 @@ return [val,ver] end end # second order tracker.known_wp_sites.each do |key,val| - if key.include?(domain.strip.downcase) && key.include?("https") + if key.include?(domain.strip.downcase) && key.include?("https") && val tracker=nil return [val,nil] end end # third order @@ -56,10 +59,22 @@ end tracker=nil return [nil,nil] end +# perform the wpscan on a site +def wpscan(domain) + url=site_lookup(domain)[0] + return nil if url.nil? + if url.include?("https") + command="wpscan --disable-tls-checks --ignore-main-redirect --url=" + url + " -o " + domain + ".wpscan" + else + command="wpscan --ignore-main-redirect --url=" + url + " -o " + domain + ".wpscan" + end + system(command) +end + puts Wmap.banner print_usage # open output file to write CSV.open("output.csv", "wb") do |csv| @@ -69,9 +84,16 @@ puts "Processing row #{cnt}" #puts row.inspect my_row=Array.new if cnt > 1 if is_domain?(row[0]) +=begin + if row[3] =~ /Keep/i && row[3] != /Redirect/i + unless File.exist?(row[0]+".wpscan") + wpscan(row[0]) + end + end +=end my_row = row + site_lookup(row[0]) + wp_site_lookup(row[0]) else my_row = row + [nil]*10 end else