Posts

Showing posts with the label gem

Cannot push code to gitlab after upgraded to v7.8 from v6.9 and how to fix

After we upgraded our gitlab server to v7.8 from v6.9 , we could not push code to it and always got this error: ... remote: /usr/local/lib/ruby/gems/2.1.0/gems/bundler-1.8.3/lib/bundler/shared_helpers.rb:2:in `require': no such file to load -- rubygems (LoadError) remote:         from /usr/local/lib/ruby/gems/2.1.0/gems/bundler-1.8.3/lib/bundler/shared_helpers.rb:2 remote:         from /usr/local/lib/ruby/gems/2.1.0/gems/bundler-1.8.3/lib/bundler/setup.rb:1:in `require' remote:         from /usr/local/lib/ruby/gems/2.1.0/gems/bundler-1.8.3/lib/bundler/setup.rb:1 To http://our.repo.url/myusername/my-project.git  ! [remote rejected] my_branch -> my_branch (pre-receive hook declined) ... I was trying to re-compile ruby 2.1 so many times but had no luck. After messing around, I finally fixed this issue by: 1. Remove and Purge all ruby binaries except for ruby 2.1 from my server: sudo apt-get remove rub...

Trying WPScan, a black box WordPress vulnerability scanner

Image
I just found a great tool to scan my wordpress sites for vulnerability, WPScan . WPScan is a blackbox scanner which means that you can install it on your computer and scan remote wordpress servers. To install WPScan on my Ubuntu 14.04 server, I ran these command lines: $ sudo apt-get install libcurl4-gnutls-dev libxml2 libxml2-dev libxslt1-dev ruby-dev build-essential $ git clone https://github.com/wpscanteam/wpscan.git $ cd wpscan $ sudo gem install bundler && bundle install --without test Then, tried some of these features: 1. Simple check: $ ruby wpscan.rb --url www.mywordpress.com 2.  Do a wordlist password brute force on all the users: $ ruby wpscan.rb --url www.mywordpress.com --wordlist darkc0de.txt Notes: you can download the sample wordlist file here . for more scanning methods, please read the WPScan's official website .