Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Consider using urllib.parse.urljoin in wp/init.py #103

Open
ByteDestroyer opened this issue May 26, 2020 · 0 comments
Open

Consider using urllib.parse.urljoin in wp/init.py #103

ByteDestroyer opened this issue May 26, 2020 · 0 comments
Assignees

Comments

@ByteDestroyer
Copy link

ByteDestroyer commented May 26, 2020

The plugin section in file deepscans/wp/init.py is appending the text /wp-content/plugins/ to the current URL to list the plugins. The problem is that the URL is not always the root domain and it could be changed to a folder it redirects. Ex: https://mydomain.com redirects to https://mydoamin.com/new-site/ and theme URLs are printed as https://mydoamin.com/new-site//wp-content/plugins/[plugin]. This can be easily fix with the use of urllib.parse.urljoin. Ex: sresult.end_subsub('URL: ' + cmseek.fgreen + urllib.parse.urljoin(url, f'/wp-content/plugins/{plug[0]}') + cmseek.cln). Could you also save the plugin URL in the output file? I noticed the results are printed but not saved into the output file.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants