Class: CMSScanner::Model::XMLRPC

Inherits:
InterestingFinding show all
Defined in:
app/models/xml_rpc.rb

Overview

XML RPC

Constant Summary

Constants included from Finders::Finding

Finders::Finding::FINDING_OPTS

Instance Attribute Summary

Attributes inherited from InterestingFinding

#url

Instance Method Summary collapse

Methods inherited from InterestingFinding

#==, #entries, #initialize, #type

Methods included from Finders::Finding

#<=>, #confidence, #confidence=, #confirmed_by, #eql?, included, #interesting_entries, #parse_finding_options

Constructor Details

This class inherits a constructor from CMSScanner::Model::InterestingFinding

Instance Method Details

#available_methods ⇒ Array<String>

Returns:

  • (Array<String>) 


18
19
20
21
22
23
24
25
26
27
28
29
30
31
 
# File 'app/models/xml_rpc.rb', line 18

def available_methods
  return @available_methods if @available_methods

  @available_methods = []

  res = method_call('system.listMethods').run
  doc = Nokogiri::XML.parse(res.body)

  doc.search('methodResponse params param value array data value string').each do |s|
    @available_methods << s.text
  end

  @available_methods
end

#browser ⇒ Browser

Returns:



13
14
15
 
# File 'app/models/xml_rpc.rb', line 13

def browser
  @browser ||= NS::Browser.instance
end

#enabled? ⇒ Boolean

Returns Whether or not the XMLRPC is enabled.

Returns:

  • (Boolean) —

    Whether or not the XMLRPC is enabled



34
35
36
 
# File 'app/models/xml_rpc.rb', line 34

def enabled?
  !available_methods.empty?
end

#method_call(method_name, method_params = [], request_params = {}) ⇒ Typhoeus::Request

Parameters:

  • method_name (String)
  • method_params (Array) (defaults to: [])
  • request_params (Hash) (defaults to: {})

Returns:

  • (Typhoeus::Request) 


43
44
45
46
47
48
49
50
51
 
# File 'app/models/xml_rpc.rb', line 43

def method_call(method_name, method_params = [], request_params = {})
  browser.forge_request(
    url,
    request_params.merge(
      method: :post,
      body: ::XMLRPC::Create.new.methodCall(method_name, *method_params)
    )
  )
end

#multi_call(methods_and_params = [], request_params = {}) ⇒ Typhoeus::Request

Example of methods_and_params: [

[method1, param1, param2],
[method2, param1],
[method3]

]

Parameters:

  • methods_and_params (Array<Array>) (defaults to: [])
  • request_params (Hash) (defaults to: {})

Returns:

  • (Typhoeus::Request) 


64
65
66
67
68
69
70
71
72
73
74
75
 
# File 'app/models/xml_rpc.rb', line 64

def multi_call(methods_and_params = [], request_params = {})
  browser.forge_request(
    url,
    request_params.merge(
      method: :post,
      body: ::XMLRPC::Create.new.methodCall(
        'system.multicall',
        methods_and_params.collect { |m| { methodName: m[0], params: m[1..-1] } }
      )
    )
  )
end

#to_s ⇒ String

Returns:

  • (String) 


8
9
10
 
# File 'app/models/xml_rpc.rb', line 8

def to_s
  @to_s ||= "XML-RPC seems to be enabled: #{url}"
end