Re: [W3af-develop] Wordpress version discovery plugin

2009-06-08 Thread Ryan Dewhurst
Sorry, I left some debug code in the last one and forgot to change some variables. 2009/6/8 Ryan Dewhurst ryandewhu...@gmail.com: 2009/6/7 Andres Riancho andres.rian...@gmail.com: Ryan, On Sun, Jun 7, 2009 at 12:31 PM, Ryan Dewhurstryandewhu...@gmail.com wrote: Here is the final version. (I

Re: [W3af-develop] Wordpress version discovery plugin

2009-06-08 Thread Ryan Dewhurst
2009/6/8 Andres Riancho andres.rian...@gmail.com: Ryan, On Mon, Jun 8, 2009 at 10:18 AM, Ryan Dewhurstryandewhu...@gmail.com wrote: 2009/6/7 Andres Riancho andres.rian...@gmail.com: Ryan, On Sun, Jun 7, 2009 at 12:31 PM, Ryan Dewhurstryandewhu...@gmail.com wrote: Here is the final

Re: [W3af-develop] Wordpress version discovery plugin

2009-06-07 Thread Ryan Dewhurst
Managed to work it out and now making good progress. :) 2009/6/7 Ryan Dewhurst ryandewhu...@gmail.com: I decided to move over to my Linux box for the development of the plugin. One of the reasons I could not get the plugin to run through w3af was that the plugin file name was not the same as

Re: [W3af-develop] Wordpress version discovery plugin

2009-06-07 Thread Andres Riancho
Ryan, On Sat, Jun 6, 2009 at 10:20 PM, Ryan Dewhurstryandewhu...@gmail.com wrote: I decided to move over to my Linux box for the development of the plugin. One of the reasons I could not get the plugin to run through w3af was that the plugin file name was not the same as the class name. Ok,

Re: [W3af-develop] Wordpress version discovery plugin

2009-06-07 Thread Ryan Dewhurst
w00t w00t! All tested and working! Thanks to everyone for their help especially Andres for putting up with my noobness. I will look into implementing the vulns for each version and then eventually a wp plugin version finder. Feedback and suggestions welcome! :-) 2009/6/7 Andres Riancho

Re: [W3af-develop] Wordpress version discovery plugin

2009-06-07 Thread Ryan Dewhurst
Found a bug that I am working on now. 2009/6/7 Ryan Dewhurst ryandewhu...@gmail.com: w00t w00t! All tested and working! Thanks to everyone for their help especially Andres for putting up with my noobness. I will look into implementing the vulns for each version and then eventually a wp

Re: [W3af-develop] Wordpress version discovery plugin

2009-05-29 Thread Andres Riancho
Ryan, On Thu, May 28, 2009 at 10:11 PM, Ryan Dewhurst ryandewhu...@gmail.com wrote: Im loooking into searching the response html of the index page for the following string: meta name=generator content=WordPress $version / Ive tried with regular expressions and am unable to get it to work,

Re: [W3af-develop] Wordpress version discovery plugin

2009-05-28 Thread Ryan Dewhurst
Yes, I dont see why not. Should be easy enough tro implement. You mentioned during our email conversation that wordpress echos its version number in the page head. I managed to find an example of it. Your right I do have a security plugin installed which must have removed it from my blog. Here

Re: [W3af-develop] Wordpress version discovery plugin

2009-05-28 Thread Ryan Dewhurst
Im loooking into searching the response html of the index page for the following string: meta name=generator content=WordPress $version / Ive tried with regular expressions and am unable to get it to work, Ive read that re is bad for parsing HTML and that BeautifulSoup should be used. Does w3af

Re: [W3af-develop] Wordpress version discovery plugin

2009-05-28 Thread backbone46
this would be my quick shot at using a regex to catch the meta generator tag:meta\s+name=['"]?generator['"]?\s+content=['"]?wordpress ([0-9]+\.?){2,3}['"]?\s+/?off course case insensitive, maybe some have written wp themes in uppercase/mixed case format.---http://insanesecurity.info On Fri, May

Re: [W3af-develop] Wordpress version discovery plugin

2009-05-27 Thread Andres Riancho
Ryan, On Wed, May 27, 2009 at 5:07 PM, Ryan Dewhurst ryandewhu...@gmail.com wrote: Hello, I have developed a python script that can detect the version of a wordpress installation. I think it would fit well within w3af, Yes, it seems that it's something good to have in the framework. I have

Re: [W3af-develop] Wordpress version discovery plugin

2009-05-27 Thread Ryan Dewhurst
Hello, Im new to mailing lists so im not sure if this will be sent there. I'll have a look into intergrating the script into w3af over the next couple of days and hopefully have a working version by the weekend. The script is quite simple once you have the gathered the nesesary data. I went

Re: [W3af-develop] Wordpress version discovery plugin

2009-05-27 Thread Andres Riancho
Ryan, On Wed, May 27, 2009 at 9:58 PM, Ryan Dewhurst ryandewhu...@gmail.com wrote: Hello, Im new to mailing lists so im not sure if this will be sent there. It depends on the mailing list. This one is configured to accept attachments, I'll have a look into intergrating the script into w3af