8 | [](http://www.toolswatch.org/2018/05/black-hat-arsenal-usa-2018-the-w0w-lineup/) 9 | [](http://www.toolswatch.org/2018/01/black-hat-arsenal-asia-2018-great-lineup/) 10 | 11 | 12 |
13 |
14 | ======
15 |
16 | OWASP JoomScan Project
17 | ======
18 |
19 | OWASP Joomla! Vulnerability Scanner (JoomScan) is an open source project, developed with the aim of automating the task of vulnerability detection and reliability assurance in Joomla CMS deployments. Implemented in Perl, this tool enables seamless and effortless scanning of Joomla installations, while leaving a minimal footprint with its lightweight and modular architecture. It not only detects known offensive vulnerabilities, but also is able to detect many misconfigurations and admin-level shortcomings that can be exploited by adversaries to compromise the system. Furthermore, OWASP JoomScan provides a user-friendly interface and compiles the final reports in both text and HTML formats for ease of use and minimization of reporting overheads.
20 | 21 | OWASP JoomScan is included in Kali Linux distributions. 22 | 23 | * **Read More**: https://www.secologist.com/open-source-projects 24 | 25 | ### WHY OWASP JOOMSCAN ? 26 | Automated ...
27 | *Version enumerator
28 | *Vulnerability enumerator (based on version)
29 | *Components enumerator (1209 most popular by default)
30 | *Components vulnerability enumerator (based on version)(+1030 exploit)
31 | *Firewall detector
32 | *Reporting to Text & HTML output
33 | *Finding common log files
34 | *Finding common backup files
35 | 36 | 37 | # INSTALL 38 | 39 | git clone https://github.com/rezasp/joomscan.git 40 | cd joomscan 41 | perl joomscan.pl 42 | 43 | For Docker installation and usage 44 | 45 | # Build the docker image 46 | docker build -t rezasp/joomscan . 47 | 48 | # Run a new docker container with reports directory mounted at the host 49 | docker run -it -v /path/to/reports:/home/joomscan/reports --name joomscan_cli rezasp/joomscan 50 | 51 | # For accessing the docker container you can run the following command 52 | docker run -it -v /path/to/reports:/home/joomscan/reports --name joomscan_cli --entrypoint /bin/bash rezasp/joomscan 53 | 54 | # JOOMSCAN ARGUMENTS 55 | 56 | Usage: joomscan.pl [options] 57 | 58 | --url | -u
74 | ```perl joomscan.pl --url www.example.com```
75 | or
76 | ```perl joomscan.pl -u www.example.com``` 77 |
78 |
79 | Enumerate installed components...
80 | ```perl joomscan.pl --url www.example.com --enumerate-components```
81 | or
82 | ```perl joomscan.pl -u www.example.com --ec```
83 |
84 | 85 | Set cookie
86 | ```perl joomscan.pl --url www.example.com --cookie "test=demo;"``` 87 |
88 | 89 | Set user-agent
90 | ```perl joomscan.pl --url www.example.com --user-agent "Googlebot/2.1 (+http://www.googlebot.com/bot.html)"```
91 | or
92 | ```perl joomscan.pl -u www.example.com -a "Googlebot/2.1 (+http://www.googlebot.com/bot.html)"```
93 |
94 | 95 | Set random user-agent
96 | ```perl joomscan.pl -u www.example.com --random-agent```
97 | or
98 | ```perl joomscan.pl --url www.example.com -r```
99 |
100 | 101 | Set proxy
102 | ```perl joomscan.pl --url www.example.com --proxy http://127.0.0.1:8080```
103 | or
104 | ```perl joomscan.pl -u www.example.com --proxy https://127.0.0.1:443```
105 |
106 | 107 | Update Joomscan...
108 | ```perl joomscan.pl --update```
109 | 110 | 111 | # OWASP PAGE 112 | 113 | [https://www.owasp.org/index.php/Category:OWASP_Joomla_Vulnerability_Scanner_Project](https://www.owasp.org/index.php/Category:OWASP_Joomla_Vulnerability_Scanner_Project) 114 | 115 | # GIT REPOSITORY 116 | 117 | [https://github.com/rezasp/joomscan](https://github.com/rezasp/joomscan) 118 | 119 | # ISSUES 120 | 121 | [https://github.com/rezasp/joomscan/issues](https://github.com/rezasp/joomscan/issues) 122 | 123 | # PROJECT LEADERS 124 | 125 | * Mohammad Reza Espargham [ reza[dot]espargham[at]owasp[dot]org ] 126 | * Ali Razmjoo [ ali[dot]razmjoo[at]owasp[dot]org ] 127 | 128 | 129 |
130 | OWASP JoomScan introduction (Youtube) 131 | 132 | [](https://www.youtube.com/watch?v=Ik2CJ9LkuoI) 133 | -------------------------------------------------------------------------------- /core/compare.pl: -------------------------------------------------------------------------------- 1 | sub max { 2 | my $x = shift; 3 | my $y = shift; 4 | return ( $x > $y ? $x : $y ); 5 | } 6 | 7 | sub version_compare { 8 | my $ver1 = shift || 0; 9 | my $ver2 = shift || 0; 10 | my @v1 = split /[.+:~-]/, $ver1; 11 | my @v2 = split /[.+:~-]/, $ver2; 12 | 13 | for ( my $i = 0 ; $i < max( scalar(@v1), scalar(@v2) ) ; $i++ ) { 14 | 15 | # Add missing version parts if one string is shorter than the other 16 | # i.e. 0 should be lt 0.2.1 and not equal, so we append .0 17 | # -> 0.0.0 <=> 0.2.1 -> -1 18 | push( @v1, 0 ) unless defined( $v1[$i] ); 19 | push( @v2, 0 ) unless defined( $v2[$i] ); 20 | if ( int( $v1[$i] ) > int( $v2[$i] ) ) { 21 | return 1; 22 | } 23 | elsif ( int( $v1[$i] ) < int( $v2[$i] ) ) { 24 | return -1; 25 | } 26 | } 27 | return 0; 28 | } -------------------------------------------------------------------------------- /core/header.pl: -------------------------------------------------------------------------------- 1 | #!/usr/bin/perl 2 | 3 | use Term::ANSIColor; 4 | 5 | print color("YELLOW"); 6 | print q{ 7 | ____ _____ _____ __ __ ___ ___ __ _ _ 8 | (_ _)( _ )( _ )( \/ )/ __) / __) /__\ ( \( ) 9 | .-_)( )(_)( )(_)( ) ( \__ \( (__ /(__)\ ) ( 10 | \____) (_____)(_____)(_/\/\_)(___/ \___)(__)(__)(_)\_) 11 | }; 12 | print color("red") . "\t\t\t(1337.today)" . color("reset"); 13 | print " 14 | 15 | --=[". color("BLUE") . "OWASP JoomScan". color("reset") ." 16 | +---++---==[Version : " 17 | . color("red"). "$version\n". color("reset") . " +---++---==[Update Date : [". color("red") . "$update". color("reset") . "] 18 | +---++---==[Authors : ". color("red") . "$author". color("reset")." 19 | --=[Code name : ". color("red") . "$codename". color("reset")."\n \@OWASP_JoomScan , \@rezesp , \@Ali_Razmjo0 , \@OWASP\n\n"; 20 | 21 | if(!defined $ARGV[0]){ 22 | 23 | print color("cyan"); 24 | printf "\n Usage: 25 | joomscan.pl
[+] $title
29 | 30 |$datail
31 | 32 |