expand WordPress CMS search strings

GSA / site-scanning

The central repository for the Site Scanning program

https://digital.gov/site-scanning

11 stars 2 forks source link

expand WordPress CMS search strings #1033

Closed gbinal closed 1 week ago

gbinal commented 2 weeks ago

Ideas:

look for /wp-content/ in the source code
look for /wp-json/ in the headers (do you need specific ones to look at?)
sitemap ends in /wp-sitemap.xml

akuny commented 1 week ago

I added the first two items in the list to the current scan, but the third one is a little tricky since the CMS scan currently just handles an HTTPResponse object that is passed to it by the main scan routine. It would require some rework to update that scan to also check for the existence of a /wp-sitemap.xml path.

gbinal commented 1 week ago

sure! thanks!

gbinal commented 1 week ago

Actually, going to keep this open for a moment while checking to see how many this has changed.

gbinal commented 1 week ago

Was 1,078/29,645. Now 1,298/28,883.