Class: WPScan::Finders::Users::YoastSeoAuthorSitemap

Inherits:
CMSScanner::Finders::Finder
  • Object
show all
Defined in:
app/finders/users/yoast_seo_author_sitemap.rb

Overview

The YOAST SEO plugin has an author-sitemap.xml which can leak usernames See github.com/wpscanteam/wpscan/issues/1228

Instance Method Summary collapse

Instance Method Details

#aggressive(_opts = {}) ⇒ Array<User>

Parameters:

  • opts (Hash)

Returns:

  • (Array<User>) 


10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
 
# File 'app/finders/users/yoast_seo_author_sitemap.rb', line 10

def aggressive(_opts = {})
  found = []

  Browser.get(sitemap_url).html.xpath('//url/loc').each do |user_tag|
    username = user_tag.text.to_s[%r{/author/([^\/]+)/}, 1]

    next unless username && !username.strip.empty?

    found << CMSScanner::User.new(username,
                                  found_by: found_by,
                                  confidence: 100,
                                  interesting_entries: [sitemap_url])
  end

  found
end

#sitemap_url ⇒ String

Returns The URL of the author-sitemap.

Returns:

  • (String) —

    The URL of the author-sitemap



28
29
30
 
# File 'app/finders/users/yoast_seo_author_sitemap.rb', line 28

def sitemap_url
  @sitemap_url ||= target.url('author-sitemap.xml')
end