From ab97e3e60eca6cc7d0826c072c68a20b315defd0 Mon Sep 17 00:00:00 2001 From: Mailler <49789421+mailler0xa@users.noreply.github.com> Date: Tue, 27 Aug 2024 12:17:49 +0300 Subject: [PATCH] Added InPost, InPost PL and GiveWP WordPress Plugins --- helpers/wordpress/plugins/give.txt | 1 + .../plugins/inpost-for-woocommerce.txt | 1 + helpers/wordpress/plugins/woo-inpost.txt | 1 + http/technologies/wordpress/plugins/give.yaml | 48 ++++++++++++++++++ .../plugins/inpost-for-woocommerce.yaml | 49 +++++++++++++++++++ .../wordpress/plugins/woo-inpost.yaml | 49 +++++++++++++++++++ 6 files changed, 149 insertions(+) create mode 100644 helpers/wordpress/plugins/give.txt create mode 100644 helpers/wordpress/plugins/inpost-for-woocommerce.txt create mode 100644 helpers/wordpress/plugins/woo-inpost.txt create mode 100644 http/technologies/wordpress/plugins/give.yaml create mode 100644 http/technologies/wordpress/plugins/inpost-for-woocommerce.yaml create mode 100644 http/technologies/wordpress/plugins/woo-inpost.yaml diff --git a/helpers/wordpress/plugins/give.txt b/helpers/wordpress/plugins/give.txt new file mode 100644 index 0000000000..c3df54c9b8 --- /dev/null +++ b/helpers/wordpress/plugins/give.txt @@ -0,0 +1 @@ +3.15.1 diff --git a/helpers/wordpress/plugins/inpost-for-woocommerce.txt b/helpers/wordpress/plugins/inpost-for-woocommerce.txt new file mode 100644 index 0000000000..bc80560fad --- /dev/null +++ b/helpers/wordpress/plugins/inpost-for-woocommerce.txt @@ -0,0 +1 @@ +1.5.0 diff --git a/helpers/wordpress/plugins/woo-inpost.txt b/helpers/wordpress/plugins/woo-inpost.txt new file mode 100644 index 0000000000..347f5833ee --- /dev/null +++ b/helpers/wordpress/plugins/woo-inpost.txt @@ -0,0 +1 @@ +1.4.1 diff --git a/http/technologies/wordpress/plugins/give.yaml b/http/technologies/wordpress/plugins/give.yaml new file mode 100644 index 0000000000..83e89f70e8 --- /dev/null +++ b/http/technologies/wordpress/plugins/give.yaml @@ -0,0 +1,48 @@ +id: wordpress-give + +info: + name: Wordpress GiveWP Detection + author: mailler + severity: info + reference: + - https://wordpress.org/plugins/give/ + metadata: + plugin_namespace: give + wpscan: https://wpscan.com/plugin/give + tags: tech,wordpress,wp-plugin,top-200 + +http: + - method: GET + path: + - "{{BaseURL}}/wp-content/plugins/give/readme.txt" + + payloads: + last_version: helpers/wordpress/plugins/give.txt + + extractors: + - type: regex + part: body + internal: true + name: internal_detected_version + group: 1 + regex: + - '(?i)Stable.tag:\s?([\w.]+)' + + - type: regex + part: body + name: detected_version + group: 1 + regex: + - '(?i)Stable.tag:\s?([\w.]+)' + + matchers-condition: or + matchers: + - type: dsl + name: "outdated_version" + dsl: + - compare_versions(internal_detected_version, concat("< ", last_version)) + + - type: regex + part: body + regex: + - '(?i)Stable.tag:\s?([\w.]+)' \ No newline at end of file diff --git a/http/technologies/wordpress/plugins/inpost-for-woocommerce.yaml b/http/technologies/wordpress/plugins/inpost-for-woocommerce.yaml new file mode 100644 index 0000000000..1ac7c89408 --- /dev/null +++ b/http/technologies/wordpress/plugins/inpost-for-woocommerce.yaml @@ -0,0 +1,49 @@ +id: wordpress-inpost-for-woocommerce + +info: + name: InPost PL for WooCommerce Detection + author: mailler + severity: info + reference: + - https://wordpress.org/plugins/inpost-for-woocommerce/ + metadata: + plugin_namespace: inpost-for-woocommerce + wpscan: https://wpscan.com/plugin/inpost-for-woocommerce/ + tags: tech,wordpress,wp-plugin,top-200 + +http: + - method: GET + path: + - "{{BaseURL}}/wp-content/plugins/inpost-for-woocommerce/readme.txt" + + payloads: + last_version: helpers/wordpress/plugins/inpost-for-woocommerce.txt + + extractors: + - type: regex + part: body + internal: true + name: internal_detected_version + group: 1 + regex: + - '(?i)Stable.tag:\s?([\w.]+)' + + - type: regex + part: body + name: detected_version + group: 1 + regex: + - '(?i)Stable.tag:\s?([\w.]+)' + + matchers-condition: or + matchers: + - type: dsl + name: "outdated_version" + dsl: + - compare_versions(internal_detected_version, concat("< ", last_version)) + + - type: regex + part: body + regex: + - '(?i)Stable.tag:\s?([\w.]+)' +# digest: 4a0a0047304502204ebea0120160502f3c9e6897e25834b0dd143fcac7486df3cdf6c46bc8bd0f54022100a5ce702cc3c9b64f3ed604760ddc7a207d18249689b8c5761682c0b9c0edbbdf:922c64590222798bb761d5b6d8e72950 diff --git a/http/technologies/wordpress/plugins/woo-inpost.yaml b/http/technologies/wordpress/plugins/woo-inpost.yaml new file mode 100644 index 0000000000..5f75f84ebf --- /dev/null +++ b/http/technologies/wordpress/plugins/woo-inpost.yaml @@ -0,0 +1,49 @@ +id: wordpress-woo-inpost + +info: + name: InPost for WooCommerce Detection + author: mailler + severity: info + reference: + - https://wordpress.org/plugins/woo-inpost/ + metadata: + plugin_namespace: woo-inpost + wpscan: https://wpscan.com/plugin/woo-inpost + tags: tech,wordpress,wp-plugin,top-200 + +http: + - method: GET + path: + - "{{BaseURL}}/wp-content/plugins/woo-inpost/readme.txt" + + payloads: + last_version: helpers/wordpress/plugins/woo-inpost.txt + + extractors: + - type: regex + part: body + internal: true + name: internal_detected_version + group: 1 + regex: + - '(?i)Stable.tag:\s?([\w.]+)' + + - type: regex + part: body + name: detected_version + group: 1 + regex: + - '(?i)Stable.tag:\s?([\w.]+)' + + matchers-condition: or + matchers: + - type: dsl + name: "outdated_version" + dsl: + - compare_versions(internal_detected_version, concat("< ", last_version)) + + - type: regex + part: body + regex: + - '(?i)Stable.tag:\s?([\w.]+)' +# digest: 4a0a0047304502204ebea0120160502f3c9e6897e25834b0dd143fcac7486df3cdf6c46bc8bd0f54022100a5ce702cc3c9b64f3ed604760ddc7a207d18249689b8c5761682c0b9c0edbbdf:922c64590222798bb761d5b6d8e72950