nuclei-templates/http/technologies/wordpress/plugins/google-analytics-for-wordpr...

50 lines
1.5 KiB
YAML
Raw Blame History

This file contains ambiguous Unicode characters!

This file contains ambiguous Unicode characters that may be confused with others in your current locale. If your use case is intentional and legitimate, you can safely ignore this warning. Use the Escape button to highlight these characters.

id: wordpress-google-analytics-for-wordpress
info:
name: MonsterInsights Google Analytics Dashboard for WordPress (Website Stats Made Easy) Detection
author: ricardomaia
severity: info
reference:
- https://wordpress.org/plugins/google-analytics-for-wordpress/
metadata:
max-request: 1
plugin_namespace: google-analytics-for-wordpress
wpscan: https://wpscan.com/plugin/google-analytics-for-wordpress
tags: tech,wordpress,wp-plugin,top-100,top-200
http:
- method: GET
path:
- "{{BaseURL}}/wp-content/plugins/google-analytics-for-wordpress/readme.txt"
payloads:
last_version: helpers/wordpress/plugins/google-analytics-for-wordpress.txt
extractors:
- type: regex
part: body
internal: true
name: internal_detected_version
group: 1
regex:
- '(?i)Stable.tag:\s?([\w.]+)'
- type: regex
part: body
name: detected_version
group: 1
regex:
- '(?i)Stable.tag:\s?([\w.]+)'
matchers-condition: or
matchers:
- type: dsl
name: "outdated_version"
dsl:
- compare_versions(internal_detected_version, concat("< ", last_version))
- type: regex
part: body
regex:
- '(?i)Stable.tag:\s?([\w.]+)'
# digest: 4b0a0048304602210085a0a5ea95b1a466e9f64be224713286daa98836bfd70508428a689a68932327022100f476befea18ffc61e29dcd41ca4ff57bf856b9318fc0c5673c094ed5741c1fb8:922c64590222798bb761d5b6d8e72950