Method: WPScan::Finders::Users::RSSGenerator#process_urls

Defined in:
app/finders/users/rss_generator.rb

#process_urls(urls, _opts = {}) ⇒ Object 



10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
 
# File 'app/finders/users/rss_generator.rb', line 10

def process_urls(urls, _opts = {})
  found = []

  urls.each do |url|
    res = Browser.get_and_follow_location(url)

    next unless res.code == 200 && res.body =~ /<dc\:creator>/i

    potential_usernames = []

    begin
      res.xml.xpath('//item/dc:creator').each do |node|
        username = node.text.to_s

        # Ignoring potential username longer than 60 characters and containing accents
        # as they are considered invalid. See https://github.com/wpscanteam/wpscan/issues/1215
        next if username.strip.empty? || username.length > 60 || username =~ /[^\x00-\x7F]/

        potential_usernames << username
      end
    rescue Nokogiri::XML::XPath::SyntaxError
      next
    end

    potential_usernames.uniq.each do |username|
      found << Model::User.new(username, found_by: found_by, confidence: 50)
    end

    break
  end

  found
end