Initial commit

Author: m3nu

Makefile

@@ -0,0 +1,4 @@
+all:
+	env GOOS=darwin GOARCH=amd64 go build -o build/wp-audit_macos
+	env GOOS=linux GOARCH=amd64 go build -o build/wp-audit_linux
+	env GOOS=windows GOARCH=amd64 go build -o build/wp-audit_windows

README.md

@@ -0,0 +1,22 @@
+# Wordpress Version Scanner
+
+If you host a lot of Wordpress sites, you probably want to make sure they have all required updates.
+
+This little Go tool will scan a list of Wordpress sites in parallel and print the corresponding version.
+
+## Installation
+Use the pre-built binaries from the *Release* page or with Go installed:
+
+`$ go get -uv github.com/m3nu/wp-audit`
+
+## Usage
+First add all your WordPress domains in a textfile, omitting the protocol. See `domains.txt` for an example. Lines starting with `#` are ignored.
+
+Then run `wp-audit` by passing the textfile. It will look for a file called `domains.txt` by default.
+
+`$ wp-audit --domain-list domains.txt`
+
+## License
+(C) Manuel Riel, 2019
+
+This project is licensed under the terms of the MIT license.

build/.gitkeep

@@ -0,0 +1,4 @@
+# this is a comment and will be ignored
+www.saiaja.com.br
+murviel-info-beziers.com
+www.thetruthseeker.co.uk

domains.txt

@@ -0,0 +1,67 @@
+package main
+
+import (
+	"flag"
+	"fmt"
+	"io/ioutil"
+	"net/http"
+	"regexp"
+)
+
+type wordpressSite struct {
+	hostname string
+	version string
+}
+
+var wpVersionRegexList = []string{
+	`content="WordPress ([\d\.]+)`,
+	`wp\-embed\.min\.js\?ver=([\d\.]+)`,
+	`comment\-reply\.min\.js\?ver=([\d\.]+)`,
+	`wp\-emoji\-release\.min\.js\?ver=([\d\.]+)`,
+}
+
+var domainListPath = flag.String("domain-list", "domains.txt", "Path to the list of domains to be surveyed.")
+
+var scanStream = make(chan *wordpressSite)
+
+func main() {
+	flag.Parse()
+	domainList, err := ioutil.ReadFile(*domainListPath)
+	if err != nil {
+		fmt.Println("error", err)
+	}
+	domains := regexp.MustCompile(`\n+`).Split(string(domainList), -1)
+	n := 0
+	for _, d := range domains {
+		if len(d) > 0 && d[0] != '#' {
+			w := &wordpressSite{string(d), ""}
+			go getWPVersion(w)
+			n++
+		}
+	}
+
+	for i := n; i != 0; i-- {
+		site := <-scanStream
+		fmt.Println("Site", site.hostname, "is on version", site.version)
+	}
+}
+
+
+func getWPVersion(s *wordpressSite) {
+	resp, err := http.Get(fmt.Sprintf("http://%s", s.hostname))
+	if err != nil {
+		fmt.Println("Error getting version for", s.hostname)
+		s.version = "unknown"
+		scanStream <- s
+		return
+	}
+	defer resp.Body.Close()
+	body, err := ioutil.ReadAll(resp.Body)
+	for _, r := range wpVersionRegexList {
+		match := regexp.MustCompile(r).FindStringSubmatch(string(body))
+		if len(match) > 1 {
+			s.version = match[1]
+		}
+	}
+	scanStream <- s
+}