Cms Scanner - Scan Wordpress, Drupal, Joomla, Vbulletin Websites For Safety Issues


Scan Wordpress, Drupal, Joomla, vBulletin websites for Security issues.

CMSScan provides a centralized Security Dashboard for CMS Security scans. It is powered past times wpscan, droopescan, vbscan as well as joomscan. It supports both on involve as well as scheduled scans as well as has the might to sent electronic mail reports.

Install
# Requires ruby, ruby-dev, gem, python3 as well as git git clone https://github.com/ajinabraham/CMSScan.git cd CMSScan ./setup.sh

Run
./run.sh

Periodic Scans
You tin perform periodic CMS scans alongside CMSScan. You must piece of work CMSScan server separately as well as configure the next earlier running the scheduler.py script.
# SMTP SETTINGS SMTP_SERVER = '' FROM_EMAIL = '' TO_EMAIL = ''  # SERVER SETTINGS SERVER = ''  # SCAN SITES WORDPRESS_SITES = [] DRUPAL_SITES = [] JOOMLA_SITES = [] VBULLETIN_SITES = []
Add a cronjob
crontab -e @weekly /usr/bin/python3 scheduler.py

Docker

Local
docker gear upwardly -t cmsscan . docker piece of work -it -p 7070:7070 cmsscan

Prebuilt Image
docker clit opensecurity/cmsscan docker piece of work -it -p 7070:7070 opensecurity/cmsscan

Screenshots



Popular posts from this blog

Mutiny Fuzzing Framework - Network Fuzzer That Operates Past Times Replaying Pcaps Through A Mutational Fuzzer

Image
The Mutiny Fuzzing Framework is a network fuzzer that operates yesteryear replaying PCAPs through a mutational fuzzer. The destination is to start network fuzzing every bit apace every bit possible, at the expense of existence thorough. The full general workflow for Mutiny is to accept a sample of legitimate traffic, such every bit a browser request, as well as feed it into a prep script to generate a .fuzzer file. Then, Mutiny tin survive run with this .fuzzer file to generate traffic against a target host, mutating whichever packets the user would like. There are extensions that let changing how Mutiny behaves, including changing messages based on input/output, changing how Mutiny responds to network errors, as well as monitoring the target inwards a split thread. Mutiny uses Radamsa to perform mutations. The Decept Proxy is a multi-purpose network proxy that tin forrad traffic from a plaintext or TLS TCP/UDP/domain socket connexion to a plaintext or TLS TCP/UDP/d...
Read more

How To Add Together A Comment Count Bubble To Blogger Postal Service Titles

Image
A comment bubble (or speech balloon ) amongst the electrical flow publish of comments displayed on each blogger post titles powerfulness hold upwardly an fantabulous improver if yous desire to brand your weblog to a greater extent than attractive in addition to engaging. Having a comment bubble icon could assistance yous non solely to get to a greater extent than comments on your blog but may, equally well, laissez passer your visitors a hint virtually which are the most pop posts on your blog. When a post has received many comments, it could reverberate the popularity of your posts in addition to thus, brand your readers in addition to visitors to hold upwardly to a greater extent than interested inwards reading them. If yous desire to add a comment or vox communication bubble to your Blogger blog , in addition to then follow the side yesteryear side steps below: Step 1. Log inwards to your Blogger Dashboard > larn to Template > click the Edit HTML button Step ...
Read more

Efiguard - Disable Patchguard Together With Dse At Kicking Time

Image
EfiGuard is a portable x64 UEFI bootkit that patches the Windows kicking manager, kicking loader too center at kicking fourth dimension inward club to disable PatchGuard too Driver Signature Enforcement (DSE). Features Currently supports all EFI-compatible versions of Windows x64 e'er released, from Vista SP1 to Server 2019. Easy to use: tin live on booted from a USB stick via a loader application that automatically finds too boots Windows. The driver tin also live on loaded too configured manually using either the UEFI rhythm out or the loader. Makes extensive utilization of the Zydis disassembler library for fast runtime pedagogy decoding to back upwardly to a greater extent than robust analysis than what is possible amongst signature matching, which oftentimes requires changes amongst novel OS updates. Works passively: the driver does non charge or start the Windows kicking manager. Instead it acts on a charge of bootmgfw.efi yesteryear the firmware kicking ...
Read more