From 06ba994e20716311c5a5a7ba18fa61b819c5bdf4 Mon Sep 17 00:00:00 2001 From: Anton Bolshakov Date: Tue, 7 Oct 2014 11:11:52 +0000 Subject: [PATCH] wpscan: patch to run it as a regular user --- net-analyzer/wpscan/Manifest | 8 +-- .../files/wpscan-2.5.1_regular_user.patch | 38 ++++++++++++++ net-analyzer/wpscan/wpscan-2.3.ebuild | 49 ------------------- net-analyzer/wpscan/wpscan-2.4.ebuild | 49 ------------------- ...an-2.4.1.ebuild => wpscan-2.5.1-r1.ebuild} | 7 ++- 5 files changed, 45 insertions(+), 106 deletions(-) create mode 100644 net-analyzer/wpscan/files/wpscan-2.5.1_regular_user.patch delete mode 100644 net-analyzer/wpscan/wpscan-2.3.ebuild delete mode 100644 net-analyzer/wpscan/wpscan-2.4.ebuild rename net-analyzer/wpscan/{wpscan-2.4.1.ebuild => wpscan-2.5.1-r1.ebuild} (87%) diff --git a/net-analyzer/wpscan/Manifest b/net-analyzer/wpscan/Manifest index 873239414..8714e0cd3 100644 --- a/net-analyzer/wpscan/Manifest +++ b/net-analyzer/wpscan/Manifest @@ -1,11 +1,7 @@ AUX wpscan 47 SHA256 f9c467158ea7ade44abf628b571ace82ea07c73c72f6b04e0506a51c06f30246 SHA512 bbcd7f1f8fd1ff99678b0fa33529530a327a22125573ea2c4036a918679244f8153f3b3951546e48df307d2345bae62af59e1a60bf28ccef214e4a9efa6d1848 WHIRLPOOL 6fbb55f94be40dcd6a9dbc1f006c4c744a0cf4b5468cb8b670d70859771a977a158a0a8f221e1d20b21c34c2755d6299d9b02c77f6a23c826f6f43c543a01fb4 +AUX wpscan-2.5.1_regular_user.patch 1634 SHA256 236220b5c66011422d505a56e69d1824f8dde81eab1785f9df41272673640edc SHA512 bde764050728f38bc253b596750093b667aa7f74cea85981c5a515484f09cf8481b3e858641ee862a40d1a674142d5f91be1b01dcd44d46215d0921bf9e22664 WHIRLPOOL 27beb039577f3c41ef02339409dd6d3fd240a484791b912016ff2f63de4e6c538f9ef33018ca58d326bcc5a9d7cf7910d192515a6e50a5d9f7b31fe99eebecfb AUX wpstools 49 SHA256 d6c0a8e151c64f686064adca9bef09f2bce505f0753b374c75147c9d3a2de852 SHA512 0a9cfad0ac94d2181639022305f237eaca766f13db07c530417d90da72d718d4969e438d4e3ab0fb07e80da564382aa42d26b6f6211f9d20e6d8096ed87cf53f WHIRLPOOL cfda9da79489d91439c9d72773ae24ffd9129980bcae186a2d352d029e6c207978a7a583f8908378ac57d7497df9daca45ac0d7fec90be916c42b6830687103d -DIST wpscan-2.3.tar.gz 1605838 SHA256 ebed5cbb39b925a533d160ce6e08e00ff9f066d5cc9e9580b5ecc483c375426d SHA512 a9098f0ef0b082b67973837e580a134dce9c73c0b23a6d8e42b076f4be731a8b537266b04c35acf2e63d7845a92fb85a2f2bb3e9582fe540b17beafe611e2ca2 WHIRLPOOL b90edb0d06b92fe7432066df2e3b879e6b916bc836d4cfbae6cb795b872f1ec449fe49364e5d54c21e06e78679161e73e0cd451e95bc5b6e0ef0472e91fa72b8 -DIST wpscan-2.4.1.tar.gz 538885 SHA256 9847389d7452969ca489e3875119478ec3e95187755cde485b7153214b82380a SHA512 7ed54bd9bf1ee4d58ac7009fbc349f6b910488696c6a2d06dbaf9c53be17793d2e68d9cd3ab1a7a210aaaae6f26527d7de973200e403e7e55b18f1b062e8d736 WHIRLPOOL 8a5a634b4bb48b338e12825ae978ad2cbde6a55b6d07d7d0546b496378f1e6dfdc971749d11487fea804679e0495c4979d253a68ac99d92709ced1087d367f7a -DIST wpscan-2.4.tar.gz 533537 SHA256 efeaa804081f1dc26e38e7ba7b0a6b5698e9e4fcd20fc838dbd0b1daa5995f57 SHA512 5e35ed2aca8e0a3cf08ce5c310da9f244532cb16728fc7163efbe1010628184095ff179b8fc8a821475dfe838d32e28b41a923c08307a081852a1f0e74f151de WHIRLPOOL 449db51f75e8bc4b802e19fdda813a0335e53669adc2965607c22cd41b405f1883b6e4cd37f61663d806aaea5a99fa5c59adc8cb1240c44887b63b98e139d7ef DIST wpscan-2.5.1.tar.gz 571177 SHA256 a9858bdba6f459fa336256dc6764a1f510ad197f8b6197b0eb1e3a772395f79c SHA512 d56a8567649d18cd6c1d334e74d01a41f79feebb8301964baada90d643f70f003996082d12ad7709bc928de718cdc3eecce8de2744b2a7f8f321029388aafee0 WHIRLPOOL 7f23955c599a8ee123beb76f4e658538d496343f66a4e733aba66b791f196050aa60765156ce31cbae7d89fddf41072d73b49d36aec64802f472ec55c5b1e622 EBUILD wpscan-2.2_p20140130.ebuild 1268 SHA256 8b9b31289bd39496c76838dad566e1ea4861f8b0d47e53b90d5151817ea4a3cb SHA512 e110071f7ae18abc46a29fc37079096cd8e2402504df5f519f7272d15ff5e90517876fdf4f62e005a44719a720ac8785808ff5ebfaf156a9d144be130d8c35be WHIRLPOOL 2f685f5cb9c8af73dcad61bbb0a135dc8d95a36b7c8c455788c0bd5b764aaccb6282dfc33d3d2c40ec0bdf5f32bcbf678df01354359961d996742cb251949947 -EBUILD wpscan-2.3.ebuild 1214 SHA256 bddaca3ec2d07dbc87ad4d97937507a1212336cac33826feb6cae40d2be2cfcf SHA512 ba7099c338173d8391e6d88893495ea8bc476b2707a558f8cc01db7bdc660c378e283e8b393f6279f6356e603875e6bf140e634003e27a5da7cd1d5d9fbae2a1 WHIRLPOOL ca4f44b147099fccb15bd03534227b6b1b51e3b6c1ecc11aa2009959b9f028f67967cfb7812faa3cc47f474f1278c3cc50c72ab0f2b3b2f7587594e193190dee -EBUILD wpscan-2.4.1.ebuild 1214 SHA256 40cf2b1bc2c2c061fb19845082d195c9b155c7d6045cbc6fe309d0fd56ebbdd6 SHA512 abddda866a8a6da5e92a35a5f005cd0448cf40584d7a64e18cb2c430588172c4d54ee05e9332afa1dafd85f008dde456dc302044e80a84c1f14f4ae0ab31da99 WHIRLPOOL 4b08594a396a7aa320554cbba85528d3e821b7cf5138424e66220fdc76a59909217fa9ff4c015e457f12140c04ba1276d94133a1edbbe5c01eae74878a7d6d05 -EBUILD wpscan-2.4.ebuild 1214 SHA256 40cf2b1bc2c2c061fb19845082d195c9b155c7d6045cbc6fe309d0fd56ebbdd6 SHA512 abddda866a8a6da5e92a35a5f005cd0448cf40584d7a64e18cb2c430588172c4d54ee05e9332afa1dafd85f008dde456dc302044e80a84c1f14f4ae0ab31da99 WHIRLPOOL 4b08594a396a7aa320554cbba85528d3e821b7cf5138424e66220fdc76a59909217fa9ff4c015e457f12140c04ba1276d94133a1edbbe5c01eae74878a7d6d05 +EBUILD wpscan-2.5.1-r1.ebuild 1316 SHA256 b8e0763cb4091c3e89fc9068c419c3f9b6f8542fa44c690c8c81be3a61181927 SHA512 cfcb778c70d9636aad7205f621cfc9abdfe7dd7485bfbb9b67ce2eb14871e5af455075276e8d0af2c096ab0035d56296a9468e8852ae0c839c24bd864fe9b693 WHIRLPOOL bc545f4e9071e0fe8371a375e9b900759a0a388cb57c2d9e0e6bc0090e3376917f6d908604f08046290dcfbc688776ef48c12fb6b947df91ac2e5c2285ded19e EBUILD wpscan-2.5.1.ebuild 1214 SHA256 40cf2b1bc2c2c061fb19845082d195c9b155c7d6045cbc6fe309d0fd56ebbdd6 SHA512 abddda866a8a6da5e92a35a5f005cd0448cf40584d7a64e18cb2c430588172c4d54ee05e9332afa1dafd85f008dde456dc302044e80a84c1f14f4ae0ab31da99 WHIRLPOOL 4b08594a396a7aa320554cbba85528d3e821b7cf5138424e66220fdc76a59909217fa9ff4c015e457f12140c04ba1276d94133a1edbbe5c01eae74878a7d6d05 diff --git a/net-analyzer/wpscan/files/wpscan-2.5.1_regular_user.patch b/net-analyzer/wpscan/files/wpscan-2.5.1_regular_user.patch new file mode 100644 index 000000000..72bc88d49 --- /dev/null +++ b/net-analyzer/wpscan/files/wpscan-2.5.1_regular_user.patch @@ -0,0 +1,38 @@ +--- lib/common/common_helper.rb.orig 2014-10-07 14:58:38.187837867 +0800 ++++ lib/common/common_helper.rb 2014-10-07 15:04:20.817834016 +0800 +@@ -2,9 +2,9 @@ + + LIB_DIR = File.expand_path(File.join(File.dirname(__FILE__), '..')) + ROOT_DIR = File.expand_path(File.join(LIB_DIR, '..')) # expand_path is used to get "wpscan/" instead of "wpscan/lib/../" +-DATA_DIR = File.join(ROOT_DIR, 'data') +-CONF_DIR = File.join(ROOT_DIR, 'conf') +-CACHE_DIR = File.join(ROOT_DIR, 'cache') ++DATA_DIR = File.expand_path('~/.wpscan/data') ++CONF_DIR = File.expand_path('~/.wpscan/conf') ++CACHE_DIR = File.expand_path('~/.wpscan/cache') + WPSCAN_LIB_DIR = File.join(LIB_DIR, 'wpscan') + WPSTOOLS_LIB_DIR = File.join(LIB_DIR, 'wpstools') + UPDATER_LIB_DIR = File.join(LIB_DIR, 'updater') +@@ -12,7 +12,7 @@ + MODELS_LIB_DIR = File.join(COMMON_LIB_DIR, 'models') + COLLECTIONS_LIB_DIR = File.join(COMMON_LIB_DIR, 'collections') + +-LOG_FILE = File.join(ROOT_DIR, 'log.txt') ++LOG_FILE = File.expand_path('~/.wpscan/log.txt') + + # Plugins directories + COMMON_PLUGINS_DIR = File.join(COMMON_LIB_DIR, 'plugins') +--- wpscan.rb.orig 2014-10-07 14:58:02.000000000 +0800 ++++ wpscan.rb 2014-10-07 15:31:58.977815380 +0800 +@@ -5,6 +5,11 @@ + require File.dirname(__FILE__) + '/lib/wpscan/wpscan_helper' + + def main ++ ++ unless File.directory?(DATA_DIR) ++ FileUtils.mkdir_p(DATA_DIR) ++ end ++ + # delete old logfile, check if it is a symlink first. + File.delete(LOG_FILE) if File.exist?(LOG_FILE) and !File.symlink?(LOG_FILE) + diff --git a/net-analyzer/wpscan/wpscan-2.3.ebuild b/net-analyzer/wpscan/wpscan-2.3.ebuild deleted file mode 100644 index 1e9ef8051..000000000 --- a/net-analyzer/wpscan/wpscan-2.3.ebuild +++ /dev/null @@ -1,49 +0,0 @@ -# Copyright 1999-2013 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 -# $Header: $ - -EAPI="5" - -inherit eutils - -DESCRIPTION="Wordpress security scanner" -HOMEPAGE="http://wpscan.org/" -SRC_URI="https://github.com/wpscanteam/wpscan/archive/${PV}.tar.gz -> ${P}.tar.gz" - -LICENSE="GPL-2" -SLOT="0" -KEYWORDS="amd64 arm x86" -IUSE="hardened test" - -DEPEND="" -RDEPEND="dev-lang/ruby - dev-ruby/rubygems - >=dev-ruby/typhoeus-0.6.3 - dev-ruby/nokogiri - dev-ruby/json - dev-ruby/terminal-table - >=dev-ruby/ruby-progressbar-1.1.0 - - test? ( - >=dev-ruby/webmock-1.9.3 - dev-ruby/simplecov - dev-ruby/rspec - )" - -src_prepare() { - rm -r README.md - sed -i "/require 'bundler\/setup'/d" lib/environment.rb - #dev-lang/ruby might need the "hardened" flag to enforce the following: - if use hardened; then - paxctl -v /usr/bin/ruby19 2>/dev/null | grep MPROTECT | grep disabled || ewarn '!!! Some dependencies such as typhoeus may only work if ruby19 has MPROTECT flag disabled\n You can disable it running paxctl -m /usr/bin/ruby19' - fi -} - -src_install() { - dodoc README CREDITS - rm README CREDITS - insinto /usr/$(get_libdir)/${PN} - doins -r * - dosbin "${FILESDIR}"/wpscan - dosbin "${FILESDIR}"/wpstools -} diff --git a/net-analyzer/wpscan/wpscan-2.4.ebuild b/net-analyzer/wpscan/wpscan-2.4.ebuild deleted file mode 100644 index 3b6cc6f06..000000000 --- a/net-analyzer/wpscan/wpscan-2.4.ebuild +++ /dev/null @@ -1,49 +0,0 @@ -# Copyright 1999-2013 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 -# $Header: $ - -EAPI="5" - -inherit eutils - -DESCRIPTION="Wordpress security scanner" -HOMEPAGE="http://wpscan.org/" -SRC_URI="https://github.com/wpscanteam/wpscan/archive/${PV}.tar.gz -> ${P}.tar.gz" - -LICENSE="GPL-2" -SLOT="0" -KEYWORDS="amd64 arm x86" -IUSE="hardened test" - -DEPEND="" -RDEPEND="dev-lang/ruby - dev-ruby/rubygems - >=dev-ruby/typhoeus-0.6.8 - dev-ruby/nokogiri - dev-ruby/json - dev-ruby/terminal-table - >=dev-ruby/ruby-progressbar-1.1.0 - - test? ( - >=dev-ruby/webmock-1.9.3 - dev-ruby/simplecov - dev-ruby/rspec - )" - -src_prepare() { - rm -r README.md - sed -i "/require 'bundler\/setup'/d" lib/environment.rb - #dev-lang/ruby might need the "hardened" flag to enforce the following: - if use hardened; then - paxctl -v /usr/bin/ruby19 2>/dev/null | grep MPROTECT | grep disabled || ewarn '!!! Some dependencies such as typhoeus may only work if ruby19 has MPROTECT flag disabled\n You can disable it running paxctl -m /usr/bin/ruby19' - fi -} - -src_install() { - dodoc README CREDITS - rm README CREDITS - insinto /usr/$(get_libdir)/${PN} - doins -r * - dosbin "${FILESDIR}"/wpscan - dosbin "${FILESDIR}"/wpstools -} diff --git a/net-analyzer/wpscan/wpscan-2.4.1.ebuild b/net-analyzer/wpscan/wpscan-2.5.1-r1.ebuild similarity index 87% rename from net-analyzer/wpscan/wpscan-2.4.1.ebuild rename to net-analyzer/wpscan/wpscan-2.5.1-r1.ebuild index 3b6cc6f06..871b09d0a 100644 --- a/net-analyzer/wpscan/wpscan-2.4.1.ebuild +++ b/net-analyzer/wpscan/wpscan-2.5.1-r1.ebuild @@ -31,6 +31,9 @@ RDEPEND="dev-lang/ruby )" src_prepare() { + #https://github.com/wpscanteam/wpscan/issues/706 + epatch "${FILESDIR}/${PN}"-2.5.1_regular_user.patch + rm -r README.md sed -i "/require 'bundler\/setup'/d" lib/environment.rb #dev-lang/ruby might need the "hardened" flag to enforce the following: @@ -44,6 +47,6 @@ src_install() { rm README CREDITS insinto /usr/$(get_libdir)/${PN} doins -r * - dosbin "${FILESDIR}"/wpscan - dosbin "${FILESDIR}"/wpstools + dobin "${FILESDIR}"/wpscan + dobin "${FILESDIR}"/wpstools }