Path: blob/master/app/finders/interesting_findings/registration.rb
485 views
# frozen_string_literal: true12module WPScan3module Finders4module InterestingFindings5# Registration Enabled checker6class Registration < CMSScanner::Finders::Finder7# @return [ InterestingFinding ]8def passive(_opts = {})9# Maybe check in the homepage if there is the registration url ?10end1112# @return [ InterestingFinding ]13def aggressive(_opts = {})14res = Browser.get_and_follow_location(target.registration_url)1516return unless res.code == 20017return if res.html.css('form#setupform').empty? &&18res.html.css('form#registerform').empty?1920target.registration_enabled = true2122Model::Registration.new(res.effective_url, confidence: 100, found_by: DIRECT_ACCESS)23end24end25end26end27end282930