Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/the404hacking/cmsmap
CMSmap tool v0.6 - Simple CMS Scanner
https://github.com/the404hacking/cmsmap
cms cmsmap py python scan scanner the404hacking
Last synced: about 1 month ago
JSON representation
CMSmap tool v0.6 - Simple CMS Scanner
- Host: GitHub
- URL: https://github.com/the404hacking/cmsmap
- Owner: The404Hacking
- License: other
- Created: 2017-11-15T15:52:15.000Z (about 7 years ago)
- Default Branch: master
- Last Pushed: 2017-11-15T17:23:19.000Z (about 7 years ago)
- Last Synced: 2024-10-07T22:53:23.890Z (about 1 month ago)
- Topics: cms, cmsmap, py, python, scan, scanner, the404hacking
- Language: Python
- Homepage: https://T.me/The404Hacking
- Size: 2.21 MB
- Stars: 15
- Watchers: 1
- Forks: 5
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE.txt
Awesome Lists containing this project
README
[CMSmap](https://github.com/The404Hacking/CMSmap) v0.6 - Simple CMS Scanner
================================
CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs. The main purpose of CMSmap is to integrate common vulnerabilities
for different types of CMSs in a single tool.
At the moment, CMSs supported by CMSmap are WordPress, Joomla and Drupal.
Please note that this project is an early state. As such, you might find bugs, flaws or mulfunctions.
Use it at your own risk!
Installation
=====
You can download the latest version of CMSmap by cloning the GitHub repository:
git clone https://github.com/The404Hacking/CMSmap.git
Usage
=====
CMSmap tool v0.6 - Simple CMS Scanner
Author: Mike Manzotti [email protected]
Usage: cmsmap.py -t
Targets:
-t, --target target URL (e.g. 'https://example.com:8080/')
-f, --force force scan (W)ordpress, (J)oomla or (D)rupal
-F, --fullscan full scan using large plugin lists. False positives and slow!
-a, --agent set custom user-agent
-T, --threads number of threads (Default: 5)
-i, --input scan multiple targets listed in a given text file
-o, --output save output in a file
--noedb enumerate plugins without searching exploits
Brute-Force:
-u, --usr username or file
-p, --psw password or file
--noxmlrpc brute forcing WordPress without XML-RPC
Post Exploitation:
-k, --crack password hashes file (Require hashcat installed. For WordPress and Joomla only)
-w, --wordlist wordlist file
Others:
-v, --verbose verbose mode (Default: false)
-U, --update (C)MSmap, (W)ordpress plugins and themes, (J)oomla components, (D)rupal modules, (A)ll
-h, --help show this help
Examples:
cmsmap.py -t https://example.com
cmsmap.py -t https://example.com -f W -F --noedb
cmsmap.py -t https://example.com -i targets.txt -o output.txt
cmsmap.py -t https://example.com -u admin -p passwords.txt
cmsmap.py -k hashes.txt -w passwords.txt
Notes
=====
30/03/2015: Created a new repo to remove big wordlist. Users who have originally cloned the previous repo are invited to clone the new one.
Disclaimer
=====
Usage of CMSmap for attacking targets without prior mutual consent is illegal.
It is the end user's responsibility to obey all applicable local, state and federal laws.
Developers assume NO liability and are NOT responsible for any misuse or damage caused by this program.
## Download and Clone
> Download: [https://github.com/The404Hacking/CMSmap/archive/master.zip](https://github.com/The404Hacking/CMSmap/archive/master.zip)
> Clone: git clone [https://github.com/The404Hacking/CMSmap](https://github.com/The404Hacking/CMSmap.git)
## The404Hacking | Digital UnderGround Team
[The404Hacking](https://T.me/The404Hacking)
## Follow us !
[The404Hacking](https://T.me/The404Hacking) - [The404Cracking](https://T.me/The404Cracking)
[Instagram](https://instagram.com/The404Hacking) - [GitHub](https://github.com/The404Hacking)
[YouTube](http://yon.ir/youtube404) - [Aparat](http://www.aparat.com/The404Hacking)
[Weblog](http://the404hacking.blogsky.com) - [Email](mailto:[email protected])