search

wpscanteam / wpscan

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com
https://wpscan.com/wordpress-cli-scanner
Other
8.54k stars 1.26k forks source link

LayerSlider plugin version detection #765

Closed leechristensen closed 8 years ago

leechristensen commented 9 years ago

The LayerSlider plugin's version can be detected via the file "LayerSlider/languages/LayerSlider-en_US.po". Seems to be fairly reliable as well based on this Google dork:

https://www.google.com/webhp?sourceid=chrome-instant&ion=1&espv=2&ie=UTF-8#q=%22Project-Id-Version:+LayerSlider+%22

erwanlr commented 9 years ago

Hey there,

Currently it's not possible to implement this kind of check in a clean way. However it will be in the v3 :)

erwanlr commented 9 years ago

The languages directory seems to be used in version < 5.x, recent versions use the locales directory.

I've included both directory check in the v3, preview:

[+] LayerSlider
 | Location: http://wp.lab/wordpress-4.1.1/wp-content/plugins/LayerSlider/
 | Detected By: Known Locations (Aggressive Detection)
 |
 | Version: 5.2.0
 | Detected By: Translation File (Aggressive Detection)
 |  - http://wp.lab/wordpress-4.1.1/wp-content/plugins/LayerSlider/locales/LayerSlider-en_US.po, Project-Id-Version: LayerSlider WP 5.2.0

If you know any other locations of plugin/theme versions disclosed, please comment on this thread :)

leechristensen commented 9 years ago

Awesome! I haven't been keeping a list, but I'll be sure to do so going forward. Thanks!