wordpress-version-check.nse

local nmap = require "nmap"
local shortport = require "shortport"
local http = require "http"
local stdnse = require "stdnse"
local string = require "string"
local table = require "table"

description = [[
Uses provide credentials and logs into a Wordpress site.
Future: Check Wordpress version and check if out of date
]]

---
-- @usage
-- nmap <target> --script=wordpress-version-check
--
-- @output
-- 80/tcp open   http
-- | wordpress-version-check:
-- |  Current Version: <Version Number>
-- |_ Installed Version:  <Installed Version Number>
--
---

author = "Jason Wood"
license = "Same as Nmap--See https://nmap.org/book/man-legal.html"
categories = { "safe" }

portrule = shortport.http

action = function(host,port)

  local path = nmap.registry.args.path

  if(path == nil) then
    path = '/'
  end

  -- Get the latest version number of wordpress from wordpress.org
  local wpresponse = http.get('wordpress.org', 443, '/download')
  local wpversion = string.match(wpresponse.body,"Download&nbsp;WordPress&nbsp;(%d+.%d+.?%d*)")

  -- Get our installed version of Wordpress
  local response = http.get(host, port, path)
  local installedversion = string.match(response.body,"WordPress (%d+.%d+.?%d*)")

  -- If installedversion is empty, then set it to 'Unknown'
  if(installedversion == nil) then
    installedversion = 'Unknown'
  end

  return stdnse.format_output(true, "CurrentVersion: " .. wpversion .. "\nInstalled version: " .. installedversion)

end