Class: WPScan::Finders::DynamicFinder::Version::QueryParameter

Inherits:
Finder show all
Defined in:
lib/wpscan/finders/dynamic_finder/version/query_parameter.rb

Overview

Version finder using QueryParameter method

Constant Summary

Constants inherited from Finder

Finder::DIRECT_ACCESS

Instance Attribute Summary

Attributes inherited from Finder

#progress_bar, #target

Class Method Summary collapse

Instance Method Summary collapse

Methods inherited from Finder

#aggressive, child_class_constant, create_child_class, #passive

Methods inherited from Finder

#aggressive, #browser, #create_progress_bar, #found_by, #hydra, #initialize, #passive, #titleize

Constructor Details

This class inherits a constructor from WPScan::Finders::Finder

Class Method Details

.child_class_constants ⇒ Hash

Returns:

  • (Hash) 


10
11
12
13
14
 
# File 'lib/wpscan/finders/dynamic_finder/version/query_parameter.rb', line 10

def self.child_class_constants
  @child_class_constants ||= super.merge(
    XPATH: nil, FILES: nil, PATTERN: /(?:v|ver|version)=(?<v>\d+\.[.\d]+)/i, CONFIDENCE_PER_OCCURENCE: 10
  )
end

Instance Method Details

#find(response, _opts = {}) ⇒ Array<Version>?

Parameters:

Returns:



19
20
21
22
23
24
25
26
27
28
29
 
# File 'lib/wpscan/finders/dynamic_finder/version/query_parameter.rb', line 19

def find(response, _opts = {})
  found = scan_response(response).map do |version_number, occurences|
    create_version(
      version_number,
      confidence: self.class::CONFIDENCE_PER_OCCURENCE * occurences.size,
      interesting_entries: occurences
    )
  end

  found.compact
end

#path_pattern ⇒ Regexp

Returns:

  • (Regexp) 


54
55
56
 
# File 'lib/wpscan/finders/dynamic_finder/version/query_parameter.rb', line 54

def path_pattern
  @path_pattern ||= %r{/(?:#{self.class::FILES.join('|')})\z}i
end

#scan_response(response) ⇒ Hash

Parameters:

Returns:

  • (Hash) 


33
34
35
36
37
38
39
40
41
42
43
44
45
46
 
# File 'lib/wpscan/finders/dynamic_finder/version/query_parameter.rb', line 33

def scan_response(response)
  found = {}

  target.in_scope_uris(response, xpath) do |uri|
    next unless uri.path =~ path_pattern && uri.query&.match(self.class::PATTERN)

    version = Regexp.last_match[:v].to_s

    found[version] ||= []
    found[version] << uri.to_s
  end

  found
end

#xpath ⇒ String

Returns:

  • (String) 


49
50
51
 
# File 'lib/wpscan/finders/dynamic_finder/version/query_parameter.rb', line 49

def xpath
  @xpath ||= self.class::XPATH || '//link[@href]/@href|//script[@src]/@src'
end