Skip to content

Jeff Balicki / FP_Canada

Go to a project
Toggle navigation
Toggle navigation pinning
a7e349dd by Jeff Balicki
Options

pen test 

Signed-off-by: Jeff <jeff@gotenzing.com>
1 parent e4e4091c
Expand all
Inline Side-by-side
Showing 19 changed files with 1036 additions and 0 deletions
<?php
//GPL license
include sanitize_file_name('gplLicense.php');
/*Updating database after verifying signature failed*/
function Beagle_WP_auto_Verify(){
global $wpdb;
$Beagle_WP_scan_table = $wpdb->prefix."beagleScanData";
$getTokenFromTbl = $wpdb->get_results( $wpdb->prepare ("SELECT * FROM $Beagle_WP_scan_table"));
$Beagle_WP_application_token = $getTokenFromTbl[0]->application_token;
$updateData = $wpdb->query( $wpdb->prepare("UPDATE $Beagle_WP_scan_table SET autoVerify = %d WHERE application_token = %s",1, $Beagle_WP_application_token));
try{
if($updateData) {
echo json_encode("succeess");
exit;
} else {
echo json_encode("failed");
exit;
}
} catch (Exception $e) {
console.log('Message: ' .$e->getMessage());
}
}
\ No newline at end of file
<?php
//GPL license
include sanitize_file_name('gplLicense.php');
/*delete the application only after the verification*/
function Beagle_WP_delete_Test() {
global $wpdb;
global $deleteID;
$Beagle_WP_scan_table = $wpdb->prefix."beagleScanData";
$result =$wpdb->get_results($wpdb->prepare("SELECT * FROM $Beagle_WP_scan_table "));
foreach ( $result as $print ){
$deleteID = $print->id;
}
try {
$updateData = $wpdb->query($wpdb->prepare("DELETE FROM $Beagle_WP_scan_table WHERE id=%d", $deleteID));
echo json_encode($updateData);
exit;
}
catch(Exception $e) {
}
}
<?php
//GPL license
include sanitize_file_name('gplLicense.php');
/*to get status of currently running test*/
function Beagle_WP_getResultOf_CurrentTestData() {
global $wpdb;
global $apiServerBaseUrl;
$Beagle_WP_scan_table = $wpdb->prefix."beagleScanData";
$getTableData = $wpdb->get_results($wpdb->prepare("SELECT * FROM $Beagle_WP_scan_table"));
foreach ( $getTableData as $entryOne ){
$Beagle_WP_access_token = $entryOne->access_token;
$Beagle_WP_application_token = $entryOne->application_token;
$BWP_result_token = $entryOne->result_token;
}
try {
if($Beagle_WP_access_token != null || $Beagle_WP_application_token != null) {
$beaglrURL = $apiServerBaseUrl.'test/result';
$getStatusDataTest = array("access_token" => $Beagle_WP_access_token, "application_token" => $Beagle_WP_application_token, "result_token" => $BWP_result_token);
$request = wp_remote_post($beaglrURL, array(
'headers' => array('Content-Type' => 'application/json; charset=utf-8'),
'body' => json_encode($getStatusDataTest),
'method' => 'POST',
'data_format' => 'body',
));
$statusResponse = json_decode(wp_remote_retrieve_body( $request ));
try {
if($statusResponse){
$updateData = $wpdb->query( $wpdb->prepare("UPDATE $Beagle_WP_scan_table SET runningStatus = %s WHERE application_token = %s","notRunning", $Beagle_WP_application_token));
}
}
catch(Exception $e) {
}
echo json_encode($statusResponse);
exit;
}
}
catch(Exception $e) {
}
}
\ No newline at end of file
<?php
//GPL license
include sanitize_file_name('gplLicense.php');
/*to get status of an ongoing test*/
function Beagle_WP_getStatusOf_CurrentTestData()
{
global $wpdb;
global $apiServerBaseUrl;
$Beagle_WP_scan_table = $wpdb->prefix . "beagleScanData";
$getTableData = $wpdb->get_results($wpdb->prepare("SELECT * FROM $Beagle_WP_scan_table"));
foreach ($getTableData as $entryOne) {
$Beagle_WP_access_token = $entryOne->access_token;
$Beagle_WP_application_token = $entryOne->application_token;
$BWP_result_token = $entryOne->result_token;
}
try {
if ($Beagle_WP_access_token != null && $Beagle_WP_application_token != null && $BWP_result_token != null) {
$beaglrURL = $apiServerBaseUrl . 'test/status';
$getStatusDataTest = array("access_token" => $Beagle_WP_access_token, "application_token" => $Beagle_WP_application_token, "result_token" => $BWP_result_token);
$request = wp_remote_post($beaglrURL, array(
'headers' => array('Content-Type' => 'application/json; charset=utf-8'),
'body' => json_encode($getStatusDataTest),
'method' => 'POST',
'data_format' => 'body',
));
$statusResponse = json_decode(wp_remote_retrieve_body($request));
try {
if ($statusResponse) {
$updateData = $wpdb->query($wpdb->prepare("UPDATE $Beagle_WP_scan_table SET status = %s WHERE application_token = %s", $statusResponse->status, $Beagle_WP_application_token));
}
echo json_encode($statusResponse);
exit;
} catch (Exception $e) {
}
}
} catch (Exception $e) {
}
}
<?php
/*
Beagle Security - WP Security, Advanced Penetration Testing, 2021 Beagle Security
This plugin is distributed under the terms of the GNU GPL
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 2 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program; If not, see {License URI}.
*/
?>
\ No newline at end of file
<?php
//GPL license
include sanitize_file_name('gplLicense.php');
/*To post the signature in the wordpress root directory*/
function Beagle_WP_addDataTo_DB()
{
global $wpdb;
global $apiServerBaseUrl;
$Beagle_WP_scan_table = $wpdb->prefix . "beagleScanData";
$Beagle_WP_access_token = sanitize_text_field($_POST['access_token']);
$Beagle_WP_application_token = sanitize_text_field($_POST['application_token']);
try {
if (isset($_POST['startVerify'])) {
$Beagle_WP_dataInDB = $wpdb->get_results("SELECT * FROM $Beagle_WP_scan_table WHERE `application_token`='$Beagle_WP_application_token'");
try {
if (!$Beagle_WP_dataInDB) {
$beaglrURL = $apiServerBaseUrl . 'test/signature';
$getverifiedToken = array("access_token" => $Beagle_WP_access_token, "application_token" => $Beagle_WP_application_token);
$request = wp_remote_post($beaglrURL, array(
'headers' => array('Content-Type' => 'application/json; charset=utf-8'),
'body' => json_encode($getverifiedToken),
'method' => 'POST',
'data_format' => 'body',
));
$statusResponse = json_decode(wp_remote_retrieve_body($request));
try {
$dateLog = date("Y-m-d");
if ($statusResponse->status == "Failed") {
try {
$Beagle_WP_log_save_path = plugin_dir_path(__FILE__) . '../log.txt';
if (is_writable($Beagle_WP_log_save_path)) {
$Beagle_WP_log_open = fopen($Beagle_WP_log_save_path, "a");
$Beagle_WP_log_write = fputs($Beagle_WP_log_open, "\n" .$dateLog. " -> " .$statusResponse->message. + "\n");
fclose($Beagle_WP_log_open);
}
} catch (Exception $e) {
}
?>
<script>
function appExist() {
var errorMsg = setTimeout("document.getElementById('errMsg').style.display='none';", 4000);
}
appExist()
</script>
<div class="errormsg">
<p id="errMsg">Invalid credentials. Please try again!</p>
</div>
<?php
} else if($statusResponse == null) {
try {
$Beagle_WP_log_save_path = plugin_dir_path(__FILE__) . '../log.txt';
if (is_writable($Beagle_WP_log_save_path)) {
$Beagle_WP_log_open = fopen($Beagle_WP_log_save_path, "a");
$Beagle_WP_log_write = fputs($Beagle_WP_log_open, "\n" .$dateLog. "-> User not authorized. \n");
fclose($Beagle_WP_log_open);
}
} catch (Exception $e) {
}
?>
<script>
function appExist() {
var errorMsg = setTimeout("document.getElementById('errMsg').style.display='none';", 4000);
}
appExist()
</script>
<div class="errormsg">
<p id="errMsg">User not authorized!</p>
</div>
<?php
}
else if ($statusResponse->status == "NotVerified") {
$verifyText = $statusResponse->signature;
try {
$Beagle_WP_file_save_path = plugin_dir_path(__FILE__) . '../' . $verifyText . '.txt';
$Beagle_WP_file_save_path_test = plugin_dir_path(__FILE__) . '../fileWrightTest.txt';
if (is_writable($Beagle_WP_file_save_path_test)) {
$Beagle_WP_file_open = fopen($Beagle_WP_file_save_path, "a");
$Beagle_WP_file_write = fputs($Beagle_WP_file_open, $verifyText);
fclose($Beagle_WP_file_open);
if ($Beagle_WP_file_write) {
$wpdb->insert($Beagle_WP_scan_table, array("access_token" => $Beagle_WP_access_token, "application_token" => $Beagle_WP_application_token, "verified" => 0, "title" => $statusResponse->title, "url" => $statusResponse->url, "runningStatus" => "notRunning", "autoVerify" => "0"), array("%s", "%s", "%d", "%s", "%s", "%s", "%d"));
} else {
?>
<script>
function appExist() {
var errorMsg = setTimeout("document.getElementById('errMsg').style.display='none';", 4000);
}
appExist()
</script>
<div class="errormsg">
<p id="errMsg">An unexpected error occurred. Please try again!</p>
</div>
<?php
}
}else {
$wpdb->insert($Beagle_WP_scan_table, array("access_token" => $Beagle_WP_access_token, "application_token" => $Beagle_WP_application_token, "verified" => 0, "title" => $statusResponse->title, "url" => $statusResponse->url, "runningStatus" => "notRunning", "autoVerify" => "1"), array("%s", "%s", "%d", "%s", "%s", "%s", "%d"));
}
} catch (Exception $e) {
}
} else {
$wpdb->insert($Beagle_WP_scan_table, array("access_token" => $Beagle_WP_access_token, "application_token" => $Beagle_WP_application_token, "verified" => 1, "title" => $statusResponse->title, "url" => $statusResponse->url, "runningStatus" => "notRunning", "autoVerify" => "0"), array("%s", "%s", "%d", "%s", "%s", "%s", "%d"));
}
} catch (Exception $e) {
}
}
} catch (Exception $e) {
}
}
} catch (Exception $e) {
}
}
<script>
// for first loader button
function BeagleWP_Token_Input() {
var access_token = document.getElementById("access_token").value;
var application_token = document.getElementById("application_token").value;
if (access_token.length == 32 && application_token.length == 32) {
document.getElementById("continueSave").style.display = "none";
document.getElementById("spinnerSave").style.display = "block";
}
}
// for delete application
function BeagleWP_delete_Confirm() {
Swal.fire({
text: 'Are you sure you want to delete this application?',
icon: 'warning',
icon: 'warning',
showCancelButton: true,
confirmButtonColor: '#d33',
confirmButtonText: 'Delete'
}).then((result) => {
if (result.isConfirmed) {
// ajax call
var data = {
'action': 't4a_ajax_call_delete'
};
jQuery.post(ajaxurl, data, function(response) {
// analyse response
try {
var deleteDataResponse = JSON.parse(response);
if (deleteDataResponse == true || deleteDataResponse == 1 || deleteDataResponse != null) {
Swal.fire(
'Application deleted!',
'',
'success'
);
location.reload();
} else {
Swal.fire({
icon: 'error',
title: 'Delete failed!',
text: 'Something went wrong!',
});
}
} catch (err) {
console.log(err);
}
})
}
});
}
// for verify domain
function BeagleWP_verifyDomain_ByUser() {
document.getElementById("verifyDomain").style.display = "none";
document.getElementById("verifyDomainHide").style.display = "block";
var data = {
'action': 't4a_ajax_call_verify'
};
jQuery.post(ajaxurl, data, function(response) {
try {
var verifyResponse = JSON.parse(response);
if (verifyResponse.status != "Failed") {
var data = {
'action': 't4a_ajax_call_verify_update'
};
jQuery.post(ajaxurl, data, function(response) {
location.reload();
});
} else {
var data = {
'action': 't4a_ajax_call_verify_update_failed'
};
jQuery.post(ajaxurl, data, function(response) {});
document.getElementById("verifyDomainHide").style.display = "none";
document.getElementById("verifyError").style.display = "block";
}
} catch (err) {
}
});
}
// for automatic domain verify fail info
function BeagleWP_show_Msg() {
Swal.fire({
title: '',
text: "Domain verification failed. Try the other verification methods available by logging in to your Beagle Security account.",
icon: 'info',
showCancelButton: true,
confirmButtonColor: '#3085d6',
confirmButtonText: 'LOG IN'
}).then((result) => {
if (result.isConfirmed) {
window.open("https://beaglesecurity.com/login", '_blank');
}
})
}
// for status
function BeagleWP_get_Data() {
try {
document.getElementById("statusGet").style.display = "none";
document.getElementById("spinner").style.display = "block";
// ajax call
var data = {
'action': 't4a_ajax_call'
};
jQuery.post(ajaxurl, data, function(response) {
// analyse response
try {
var dataresponse = JSON.parse(response);
if (dataresponse.status != null || dataresponse.status != 'undefined') {
var width = dataresponse.progress;
var status = dataresponse.status;
document.getElementById("progress").style.width = width + "%";
document.getElementById("progress").innerText = width + "%";
document.getElementById("status").innerText = dataresponse.status + " : ";
document.getElementById("message").innerText = dataresponse.message;
document.getElementById("statusGet").style.display = "block";
document.getElementById("spinner").style.display = "none";
if (status == 'completed') {
document.getElementById("statusbar").style.display = "none";
location.reload();
BeagleWP_get_Result();
} else {
document.getElementById("resultData").style.display = "none";
}
} else {
console.log("Error occures!.");
}
} catch (err) {
}
});
} catch (err) {
}
}
// for get result
function BeagleWP_get_Result() {
try {
document.getElementById("statusbar").style.display = "none";
} catch (err) {
}
document.getElementById("resultData").style.display = "flex";
var data = {
'action': 't4a_ajax_call_result'
};
jQuery.post(ajaxurl, data, function(response) {
try {
var data = {
'action': 't4a_ajax_call_result'
};
jQuery.post(ajaxurl, data, function(response) {
var dataresponse = JSON.parse(response);
var dataResult = JSON.parse(dataresponse.result);
if(dataResult!=null) {
var totalBug = dataResult.vulnerability_summary.critical + dataResult.vulnerability_summary.high + dataResult.vulnerability_summary.medium + dataResult.vulnerability_summary.low + dataResult.vulnerability_summary.very_low;
var score = dataResult.score;
if(score <= 2){
document.getElementById("progressClass").classList.add('p' + dataResult.score + '0');
document.getElementById("progressClass").classList.add('criticalBug');
} else if(score <= 4){
document.getElementById("progressClass").classList.add('p' + dataResult.score + '0');
document.getElementById("progressClass").classList.add('highBug');
} else if(score <= 6){
document.getElementById("progressClass").classList.add('p' + dataResult.score + '0');
document.getElementById("progressClass").classList.add('mediumBug');
} else if(score <= 8){
document.getElementById("progressClass").classList.add('p' + dataResult.score + '0');
document.getElementById("progressClass").classList.add('lowBug');
} else if(score <= 10){
document.getElementById("progressClass").classList.add('p' + dataResult.score + '0');
document.getElementById("progressClass").classList.add('verylowBug');
}
document.getElementById("progressCount").innerText = dataResult.score;
document.getElementById("criticalBug").innerText = dataResult.vulnerability_summary.critical;
document.getElementById("highBug").innerText = dataResult.vulnerability_summary.high;
document.getElementById("mediumBug").innerText = dataResult.vulnerability_summary.medium;
document.getElementById("lowBug").innerText = dataResult.vulnerability_summary.low;
document.getElementById("verylowBug").innerText = dataResult.vulnerability_summary.very_low;
document.getElementById("totalBug").innerText = totalBug;
document.getElementById("genDate").innerText = " " + dataResult.generated_date;
}
});
} catch (err) {
}
});
}
</script>
\ No newline at end of file
<?php
//GPL license
include sanitize_file_name('gplLicense.php');
/*To start the test after verifying the application*/
function Beagle_WP_start_Test() {
global $wpdb;
global $apiServerBaseUrl;
$Beagle_WP_scan_table = $wpdb->prefix."beagleScanData";
$getTokenFromTbl = $wpdb->get_results($wpdb->prepare("SELECT * FROM $Beagle_WP_scan_table"));
foreach ( $getTokenFromTbl as $print ){
$Beagle_WP_access_token = $print->access_token;
$Beagle_WP_application_token = $print->application_token;
}
$beaglrURL = $apiServerBaseUrl.'test/start';
$scanStartData = array("access_token" => $Beagle_WP_access_token, "application_token" => $Beagle_WP_application_token);
$startRequest = wp_remote_post($beaglrURL, array(
'headers' => array('Content-Type' => 'application/json; charset=utf-8'),
'body' => json_encode($scanStartData),
'method' => 'POST',
'data_format' => 'body',
));
$startMsgResponse = json_decode(wp_remote_retrieve_body( $startRequest ));
try {
if( $startMsgResponse ) {
try {
if ($startMsgResponse->status == 'Failed') {
$updateData = $wpdb->query($wpdb->prepare("UPDATE $Beagle_WP_scan_table SET status = %s WHERE application_token = %s",$startMsgResponse->status, $Beagle_WP_application_token));
?>
<script>
function app_Exist(){
var errorMsg=setTimeout("document.getElementById('errMsg').style.display='none';",4000);
}
app_Exist()
</script>
<div class="errormsg">
<p id="errMsg"><?php echo $startMsgResponse->message;?></p>
</div>
<?php
}else {
$resultToken = $startMsgResponse->result_token;
$updateData = $wpdb->query( $wpdb->prepare("UPDATE $Beagle_WP_scan_table SET status = %s , result_token = %s, runningStatus = %s WHERE application_token = %s",$startMsgResponse->status, $startMsgResponse->result_token, "Running", $Beagle_WP_application_token));
?>
<script>
function app_Exist(){
var errorMsg=setTimeout("document.getElementById('errMsg').style.display='none';",4000);
}
app_Exist()
</script>
<div class="message">
<p id="errMsg">Test started successfully.</p>
</div>
<?php
}
}
catch(Exception $e) {
}
}
else {
?>
<script>
function app_Exist(){
var errorMsg=setTimeout("document.getElementById('errMsg').style.display='none';",4000);
}
app_Exist()
</script>
<div class="errormsg">
<p id="errMsg">Test start failed!</p>
</div>
<?php
}
}catch(Exception $e) {
}
}
\ No newline at end of file
<?php
//GPL license
include sanitize_file_name('gplLicense.php');
/*to stop the ongoing test*/
function Beagle_WP_stop_Test() {
global $wpdb;
global $apiServerBaseUrl;
$Beagle_WP_scan_table = $wpdb->prefix."beagleScanData";
$getTokenFromTbl = $wpdb->get_results($wpdb->prepare("SELECT * FROM $Beagle_WP_scan_table"));
foreach ( $getTokenFromTbl as $print ){
$Beagle_WP_access_token = $print->access_token;
$Beagle_WP_application_token = $print->application_token;
}
try {
if($Beagle_WP_access_token != null || $Beagle_WP_application_token != null) {
try {
if(isset($_POST['stopBeagleTest']) || isset($_POST['restartBeagleTest'])){
$_POST = array();
$beaglrURL = $apiServerBaseUrl.'test/stop';
$scanStopData = array("access_token" => $Beagle_WP_access_token, "application_token" => $Beagle_WP_application_token);
$request = wp_remote_post($beaglrURL, array(
'headers' => array('Content-Type' => 'application/json; charset=utf-8'),
'body' => json_encode($scanStopData),
'method' => 'POST',
'data_format' => 'body',
));
$stopResponse = json_decode(wp_remote_retrieve_body( $request ));
try {
if( $stopResponse->status == "Failed" ) {
$updateData = $wpdb->query($wpdb->prepare("UPDATE $Beagle_WP_scan_table SET status = %s WHERE application_token = %s",$stopResponse->status, $Beagle_WP_application_token));
?>
<script>
function app_Exist(){
var errorMsg=setTimeout("document.getElementById('errMsg').style.display='none';",4000);
}
app_Exist()
</script>
<div class="errormsg">
<p id="errMsg">Test stop failed!</p>
</div>
<?php
} else {
$updateData = $wpdb->query( $wpdb->prepare("UPDATE $Beagle_WP_scan_table SET status = %s, runningStatus = %s WHERE application_token = %s",$stopResponse->status, "notRunning" , $Beagle_WP_application_token));
?>
<script>
function app_Exist(){
var errorMsg=setTimeout("document.getElementById('errMsg').style.display='none';",4000);
}
app_Exist()
</script>
<div class="message">
<p id="errMsg">Test stopped successfully</p>
</div>
<?php
}
}catch (Exception $e) {
}
}
}catch (Exception $e) {
}
}else {
?>
<script>
function app_Exist(){
var errorMsg=setTimeout("document.getElementById('errMsg').style.display='none';",4000);
}
app_Exist()
</script>
<div class="errormsg">
<p id="errMsg">Error!</p>
</div>
<?php
}
}
catch (Exception $e) {
}
}
\ No newline at end of file
<?php
//GPL license
include sanitize_file_name('gplLicense.php');
/*Updating database after verifying signature*/
function Beagle_WP_verify_Token_Update(){
global $wpdb;
$Beagle_WP_scan_table = $wpdb->prefix."beagleScanData";
$getTokenFromTbl = $wpdb->get_results($wpdb->prepare("SELECT * FROM $Beagle_WP_scan_table"));
$Beagle_WP_application_token = $getTokenFromTbl[0]->application_token;
$updateData = $wpdb->query( $wpdb->prepare("UPDATE $Beagle_WP_scan_table SET verified = %d WHERE application_token = %s",1, $Beagle_WP_application_token));
try{
if($updateData) {
echo json_encode("succeess");
exit;
} else {
echo json_encode("failed");
exit;
}
} catch (Exception $e) {
}
}
\ No newline at end of file
<?php
//GPL license
include sanitize_file_name('gplLicense.php');
/*to verify the signature token*/
function Beagle_WP_verify_Token()
{
global $wpdb;
global $apiServerBaseUrl;
$Beagle_WP_scan_table = $wpdb->prefix . "beagleScanData";
$getTokenFromTbl = $wpdb->get_results($wpdb->prepare("SELECT * FROM $Beagle_WP_scan_table"));
foreach ($getTokenFromTbl as $print) {
$Beagle_WP_access_token = $print->access_token;
$Beagle_WP_application_token = $print->application_token;
}
$beagleVerifyURL = $apiServerBaseUrl . 'test/signature/verify';
$verifySignature = array("access_token" => $Beagle_WP_access_token, "application_token" => $Beagle_WP_application_token, "type" => "WORDPRESS");
$verifyResponse = wp_remote_post($beagleVerifyURL, array(
'headers' => array('Content-Type' => 'application/json; charset=utf-8'),
'body' => json_encode($verifySignature),
'method' => 'POST',
'data_format' => 'body',
));
$statusResponse = json_decode(wp_remote_retrieve_body($verifyResponse));
try {
echo json_encode($statusResponse);
exit;
} catch (Exception $e) {
}
}
This is a status check file.
██████ ███████ █████ ██████ ██ ███████ ██ ██ ████████
██ ██ ██ ██ ██ ██ ██ ██ █ ██ ██ ██ ██
██████ █████ ███████ ██ ███ ██ █████ ██ ██ ██ ████████
██ ██ ██ ██ ██ ██ ██ ██ ██ █ ██ █ █ ██ ██
██████ ███████ ██ ██ ██████ ███████ ███████ ███ ███ ██
\ No newline at end of file
This is a log file.
=========================================================================
██████ ███████ █████ ██████ ██ ███████ ██ ██ ████████
██ ██ ██ ██ ██ ██ ██ ██ █ ██ ██ ██ ██
██████ █████ ███████ ██ ███ ██ █████ ██ ██ ██ ████████
██ ██ ██ ██ ██ ██ ██ ██ ██ █ ██ █ █ ██ ██
██████ ███████ ██ ██ ██████ ███████ ███████ ███ ███ ██
=========================================================================
=== Beagle Security - WP Security, Advanced Penetration Testing ===
Contributors: Jishu Vijayan C K, Dileep Achuthan, Nayana EN
Tags: security, security plugin, website security, wordpress security, security testing
Donate link: https://beaglesecurity.com/
Requires at least: 5.2
Tested up to: 6.0
Requires PHP: 7.2
Stable tag: 1.0.7
License: GPLv2
License URI: https://www.gnu.org/licenses/gpl-2.0.html
== Description ==
##### SECURE YOUR WEBSITE FROM THE LATEST VULNERABILITIES WITH THE EASY TO USE WEBSITE PENETRATION TESTING TOOL
**[Beagle Security](https://beaglesecurity.com/ "Beagle Security")** is a web application penetration testing tool that helps you to identify vulnerabilities on your WordPress website before hackers exploit them.
35% of the web is built on WordPress and it's a favorite target for hackers. Vulnerabilities in the WordPress core, plugins, and themes can all leave your website prone to a cyber attack leading to loss of critical data and financial losses.
That is why you need to proactively tackle WordPress website security and make sure you’re secure from common WordPress security vulnerabilities like cross-site scripting (XSS), SQL injection, file inclusion exploits, directory traversal, and many more.
With Beagle Security, you can find complex attack vectors WordPress vulnerability scanners fail to detect. Vulnerability scanners give you quick scan results, but they are not designed to identify modern security threats.
By leveraging an AI-powered core, Beagle Security does in-depth penetration tests on your website and discovers all the loopholes in it. With evidence-based vulnerability reporting, you get insights into the occurrence of each vulnerability on your website and actionable recommendations on how to fix the discovered security issues and secure your website.
### Beagle Security’s free plugin helps you to:
* Connect securely to your Beagle Security account
* Complete domain verification with just a button’s click
* Start/stop tests from your WP admin console
* See the progress of running tests
* View test results with total vulnerabilities in your website
* Understand the classification of vulnerabilities according to the severity
* Know the security score of your website
### WHY CHOOSE BEAGLE SECURITY
* Compliant with global security standards like OWASP and SANS
* Set up in less than 5 minutes- no coding required
* Constantly updated vulnerability database with latest threats and zero-day vulnerabilities
* AI-powered core for human-like decision making
* Lowest false positives
* Authenticated testing for complex websites with login module
* Ensure security compliance with continuous vulnerability assessments
### GETTING STARTED
You’ll need to have an account on Beagle Security to use this plugin. You can sign up [here](https://beaglesecurity.com/signup "Beagle Security Signup"). Installing the plugin is easy and all you need is to add the access token and application token from your Beagle Security account to finish the setup.
== Installation ==
* Step 1: Search Beagle Security - WP Security, Advanced Penetration Testing in the plugin search bar.
* Step 2: Click **Install** to add the plugin to your WordPress website.
* Step 3: Go to the Plugins page and activate Beagle Security - WP Security, Advanced Penetration Testing plugin.
* Step 4: Provide access token and application token to start the security test.
== Frequently Asked Questions ==
For support related articles, kindly visit the **[Help Center](https://help.beaglesecurity.com/category/1/general "Beagle Security Help Center")**.
== Screenshots ==
1. Connect easily by setting up an access token and application token
2. One-click domain verification
3. Start tests from your WP admin console
4. See the progress of running tests
5. Know the security score of your website, view test results and classification of vulnerabilities according to the severity
== Changelog ==
Version 1.0.3
*API update.
Version 1.0.4
*Bug Fixes
Version 1.0.5
*Bug Fixes
Version 1.0.6
*Bug Fixes
== Upgrade Notice ==
Version 1.0.7
<?php
/**
* @link https://beaglesecurity.com/
* @since 1.0.7
* @package Beagle Security
*
* @wordpress-plugin
* Plugin Name: Beagle Security - WP Security, Advanced Penetration Testing
* Plugin URI: https://beaglesecurity.com/wordpress-security-testing
* Description: Secure your WordPress website from the latest vulnerabilities with automated in-depth penetration testing.
* Version: 1.0.7
* Requires at least: 5.2
* Requires PHP: 7.2
* Author: Beagle Security
* Author URI: https://beaglesecurity.com/
* License: GPL v2
* License URI: https://www.gnu.org/licenses/gpl-2.0.html
* Text Domain: Beagle wordpress scan
* Domain Path: /languages
*/
/*
Beagle Security - WP Security, Advanced Penetration Testing, 2021 Beagle Security
This plugin is distributed under the terms of the GNU GPL
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 2 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program; If not, see {License URI}.
*/
/* Basic Securtiy*/
defined('ABSPATH') or die("No Access");
if (!defined('ABSPATH')) {
define('ABSPATH', dirname(__FILE__), '/');
}
class Beagle_WordPress_Scan
{
function __construct()
{
add_action('init', array($this, 'Beagle_WP_table_create'));
}
// for plugin activate
function activate_Beagle_plugin()
{
flush_rewrite_rules();
}
// for plugin deactivate
function deactivate_Beagle_plugin()
{
global $wpdb;
$Beagle_WP_scan_table = $wpdb->prefix . 'beagleScanData';
$sql = "DROP TABLE IF EXISTS $Beagle_WP_scan_table";
$wpdb->query($sql);
delete_option("my_plugin_db_version");
flush_rewrite_rules();
}
function Beagle_WP_table_create()
{
flush_rewrite_rules();
global $wpdb;
$Beagle_WP_scan_table = $wpdb->prefix . "beagleScanData";
$charset_collate = $wpdb->get_charset_collate();
$sql = "CREATE TABLE IF NOT EXISTS $Beagle_WP_scan_table( id INT NOT NULL AUTO_INCREMENT PRIMARY KEY, access_token VARCHAR(50) NOT NULL, application_token VARCHAR(50) NOT NULL, status VARCHAR(50) NOT NULL, result_token VARCHAR(50), verified BOOLEAN NOT NULL,title VARCHAR(20),url VARCHAR(50),runningStatus VARCHAR(10), autoVerify BOOLEAN)DEFAULT CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;";
require_once(ABSPATH . "wp-admin/includes/upgrade.php");
dbDelta($sql);
}
}
if (class_exists('Beagle_WordPress_Scan')) {
$beagleWPscanStart = new Beagle_WordPress_Scan();
// activation hook
register_deactivation_hook(__FILE__, array($beagleWPscanStart, 'activate_Beagle_plugin'));
// deactivation hook
register_deactivation_hook(__FILE__, array($beagleWPscanStart, 'deactivate_Beagle_plugin'));
}
add_action('admin_menu', 'Beagle_Menu_Page');
/*Adding submenu page of plugin to the main menu*/
function Beagle_Menu_Page()
{
add_menu_page('Beagle Plugin', 'Beagle Security', 'manage_options', 'Beagle_Plugin', 'Beagle_WP_Page_Content', 'data:image/svg+xml;base64,PHN2ZyB2ZXJzaW9uPSIxLjEiIGlkPSJMYXllcl8xIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hsaW5rIiB4PSIwcHgiIHk9IjBweCIgd2lkdGg9IjE2IiBoZWlnaHQ9IjE4IiB2aWV3Qm94PSIwIDAgMTYgMTgiIGVuYWJsZS1iYWNrZ3JvdW5kPSJuZXcgMCAwIDE2IDE4IiB4bWw6c3BhY2U9InByZXNlcnZlIj4gIDxpbWFnZSBpZD0iaW1hZ2UwIiB3aWR0aD0iMTYiIGhlaWdodD0iMTgiIHg9IjAiIHk9IjAiIHhsaW5rOmhyZWY9ImRhdGE6aW1hZ2UvcG5nO2Jhc2U2NCxpVkJPUncwS0dnb0FBQUFOU1VoRVVnQUFBQkFBQUFBU0NBUUFBQUQ0TXBiaEFBQUFCR2RCVFVFQUFMR1BDL3hoQlFBQUFDQmpTRkpOIEFBQjZKZ0FBZ0lRQUFQb0FBQUNBNkFBQWRUQUFBT3BnQUFBNm1BQUFGM0NjdWxFOEFBQUFBbUpMUjBRQS80ZVB6TDhBQUFBSmNFaFogY3dBQUxFb0FBQ3hLQVhkNmRFMEFBQUFIZEVsTlJRZmxBZ1lMTGhvdnhqT2FBQUFCWlVsRVFWUW96MlhRTVV2VkFSaEc4ZC8vZWlXaiBEREZNc1lLa1JOU2kybHFpV1FLaENPb2pKRG0xRkxRVlJOUVUxQllFUWREUUlFUXVJVVFOaWxRUWtxRmxpU0Jva2c2Smx4THYwMkoyIG83T2U4L0xDVXdSbzB1T1lSdXZLWnJ3elp3TUtSYmJwZEZpelJSL00rcWxGdDA2RkdST1dDa1VHclpqdzJacS9GTnIxNnZhaW1DeXIgOXhoMWVqUnQ2bFZmelpzMzc2akpzaldVRExxaWNUTlk5TWdUMHlwUUJxZGMwN0wxSUpyMStXNkRLS2xxYzZORy8zSlhwNm96dW15aiB5SUQ5cmlwcTdqOXBOK0syYmwwaXR6S1YvNm5rYktRakl5Vzc3VlRMRHd0b2NFNmRXY01scmI3OEU2d2J0b3J0NHBCcVNhOHBIMnVDIFpoMUdWVHkxVjUvbkplLzFHL05hZFNzNVljNjRIYTRiTjExeVI4VUZTNGEyeHE0MzVySmxiN3hGaXB6UHR5U3Y4akFMU1pKbjJaWGUgWE1xZW9BaUYwMjQ2WXRwTHJaYmQxMmFmSVl2Rm4yVWlCM012SzFuSXlSelBRUHJTRUZFelhxUSsvUm5OZzF6TWdWcjVHMzRucUZHTyBSOWpIQUFBQUpYUkZXSFJrWVhSbE9tTnlaV0YwWlFBeU1ESXhMVEF5TFRBMlZERXhPalEyT2pJMkt6QXlPakF3U2pPczNRQUFBQ1YwIFJWaDBaR0YwWlRwdGIyUnBabmtBTWpBeU1TMHdNaTB3TmxReE1UbzBOam95Tmlzd01qb3dNRHR1RkdFQUFBQUFTVVZPUks1Q1lJST0iLz4KPC9zdmc+');
}
/*to declare the apis globally*/
global $apiServerBaseUrl;
$apiServerBaseUrl = "https://api.beaglesecurity.com/v1/";
/*calling the option menu to enter access token and application token and to submit it*/
require plugin_dir_path(__FILE__) . 'Admin/optionPageContent.php';
/*hooks the post method to start the test when the user clicks 'start test' button*/
if (isset($_POST['startBeagleTest'])) {
$_POST = array();
add_action('admin_init', 'Beagle_WP_start_Test');
}
/*hooks the post method to stop the test when the user clicks 'stop test' button*/
if (isset($_POST['stopBeagleTest'])) {
add_action('admin_init', 'Beagle_WP_stop_Test');
}
/*hooks the post method to restart the test when the user clicks 'start test' button after pressing stop button*/
if (isset($_POST['restartBeagleTest'])) {
add_action('admin_init', 'Beagle_WP_stop_Test');
}
/*erases the data in database when the user wants to delete the test details*/
if (isset($_POST['delete'])) {
add_action('admin_init', 'Beagle_WP_delete_Test');
}
/*hooks the post method to verify the domain*/
if (isset($_POST['startVerify'])) {
add_action('admin_init', 'Beagle_WP_addDataTo_DB');
}
if (isset($_POST['verify'])) {
add_action('admin_init', 'Beagle_WP_verify_Token');
}
/*calling startTest.php file to begin test*/
require plugin_dir_path(__FILE__) . 'Admin/startTest.php';
/*calling stopTest.php file to stop test*/
require plugin_dir_path(__FILE__) . 'Admin/stopTest.php';
/*calling deleteTest.php file to delete the data of test*/
require plugin_dir_path(__FILE__) . 'Admin/deleteTest.php';
/*calling insertInToTable.php file to add data to db*/
require plugin_dir_path(__FILE__) . 'Admin/insertInToTable.php';
/*calling getStatus.php file to get status of test*/
require plugin_dir_path(__FILE__) . 'Admin/getStatus.php';
/*calling getResultData.php file to get result of test*/
require plugin_dir_path(__FILE__) . 'Admin/getResultData.php';
/*calling verify.php */
require plugin_dir_path(__FILE__) . 'Admin/verifyToken.php';
/*calling updateVerify.php */
require plugin_dir_path(__FILE__) . 'Admin/updateVerify.php';
/*calling updateVerifyFailed.php */
require plugin_dir_path(__FILE__) . 'Admin/autoVerifyFailed.php';
// for status data
add_action('wp_ajax_t4a_ajax_call', 'Beagle_WP_getStatusOf_CurrentTestData');
// for result data
add_action('wp_ajax_t4a_ajax_call_result', 'Beagle_WP_getResultOf_CurrentTestData');
// for delete application
add_action('wp_ajax_t4a_ajax_call_delete', 'Beagle_WP_delete_Test');
// for verify application
add_action('wp_ajax_t4a_ajax_call_verify', 'Beagle_WP_verify_Token');
// for update verify application
add_action('wp_ajax_t4a_ajax_call_verify_update', 'Beagle_WP_verify_Token_Update');
// for update verify failed condition
add_action('wp_ajax_t4a_ajax_call_verify_update_failed', 'Beagle_WP_auto_Verify');