Skip to content

Commit e35afdc

Browse files
added wordpress-pingback scanner
1 parent 3936725 commit e35afdc

File tree

1 file changed

+5
-5
lines changed

1 file changed

+5
-5
lines changed

modules/auxiliary/scanner/http/wordpress_pingback_access.rb

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -50,7 +50,7 @@ def setup()
5050
end
5151

5252
def get_xml_rpc_url(ip)
53-
# code to find the xmlrpc url when passed in RHOST
53+
# code to find the xmlrpc url when passed in IP
5454
vprint_status("Enumerating XML-RPC URI for #{ip}...")
5555

5656
begin
@@ -90,7 +90,7 @@ def generate_pingback_xml (target, valid_blog_post)
9090
end
9191

9292
def get_blog_posts(xml_rpc, ip)
93-
# find all blog posts within RHOST and determine if pingback is enabled
93+
# find all blog posts within IP and determine if pingback is enabled
9494
vprint_status("Enumerating Blog posts...")
9595
blog_posts = {}
9696

@@ -110,14 +110,14 @@ def get_blog_posts(xml_rpc, ip)
110110
else
111111
vprint_status("Web server returned a #{res.code}...following to #{res.headers['location']}")
112112
end
113-
uri = res.headers['location'].sub(/.*?#{datastore['RHOST']}/, "")
113+
uri = res.headers['location'].sub(/.*?#{ip}/, "")
114114
res = send_request_cgi({
115115
'uri' => "#{uri}",
116116
'method' => 'GET',
117117
})
118118

119119
if res.code == 200
120-
print_status("Feed located at http://#{datastore['RHOST']}#{uri}")
120+
vprint_status("Feed located at http://#{ip}#{uri}")
121121
end
122122
count = count - 1
123123
end
@@ -152,7 +152,7 @@ def get_blog_posts(xml_rpc, ip)
152152

153153
# method to send xml-rpc requests
154154
def get_pingback_request(xml_rpc, target, blog_post)
155-
uri = xml_rpc.sub(/.*?#{datastore['RHOST']}/,"")
155+
uri = xml_rpc.sub(/.*?#{ip}/,"")
156156
# create xml pingback request
157157
pingback_xml = generate_pingback_xml(target, blog_post)
158158

0 commit comments

Comments
 (0)