0c20b05179619d3dce5f4efe342ee2a553b9c1e8,w3af/plugins/crawl/wordpress_fullpathdisclosure.py,wordpress_fullpathdisclosure,crawl,#wordpress_fullpathdisclosure#Any#,48

Before Change

        :param fuzzable_request: A fuzzable_request instance that contains
                                     (among other things) the URL to test.
        
        if not self._exec:
            raise RunOnce()
        else:
            // Check if there is a wordpress installation in this directory
            domain_path = fuzzable_request.get_url().get_domain_path()
            wp_unique_url = domain_path.url_join("wp-login.php")
            response = self._uri_opener.GET(wp_unique_url, cache=True)

            // If wp_unique_url is not 404, wordpress = true
            if not is_404(response):
                // Only run once
                self._exec = False

                extracted_paths = self._extract_paths(domain_path)
                self._force_disclosures(domain_path,
                                        self.CHECK_PATHS + extracted_paths)

    def _extract_paths(self, domain_path):
        
        :param domain_path: The URL object pointing to the current wordpress
                            installation

After Change

        response = self._uri_opener.GET(wp_unique_url, cache=True)

        // If wp_unique_url is not 404, wordpress = true
        if is_404(response):
            return

        // Only run once
        if wp_unique_url in self._already_tested:
            return

        self._already_tested.add(wp_unique_url)

        extracted_paths = self._extract_paths(domain_path)
        self._force_disclosures(domain_path,
                                self.CHECK_PATHS + extracted_paths)

Instances