Difference between revisions of "OWASP Joomla Vulnerability Scanner Usage"

From OWASP
Jump to: navigation, search
Line 1: Line 1:
Usage: joomscan.pl -u <string> -x proxy:port
+
    Usage: joomscan.pl [options]
         -u <string>      = joomla Url
+
    --url | -u <URL>                        |  The Joomla URL/domain to scan.
 +
    --enumerate-components          | -ec    |  Try to enumerate components.
 +
    --cookie <String>                      |  Set cookie.
 +
    --user-agent | -a <user-agent>   |  Use the specified User-Agent.
 +
    --random-agent | -r                  |  Use a random User-Agent.
 +
    --timeout <time-out>                  |  set timeout.
 +
    --about                                      |  About Author
 +
    --update                                    |  Update to the latest version.
 +
    --help | -h                                |  This help screen.
 +
    --version                                  |  Output the current version and exit.
 +
 
 +
 
 +
Do default checks:
 +
         perl joomscan.pl -u www.example.com 
 +
        or
 +
        perl joomscan.pl --url www.example.com
 
          
 
          
        ==Optional==
 
        -x <string:int>  = proXy to tunnel
 
        -c <string>      = cookie (name=value;)
 
        -g "<string>"  = desired useraGent string within "
 
        -nv              = No Version fingerprinting check
 
        -nf              = No Firewall detection check
 
        -nvf/-nfv        = No version+firewall check
 
        -pe              = Poking version only
 
                            (and Exit the scanner)
 
        -ot              = Output to Text file (target-joexploit.txt)
 
        -oh              = Output to Html file (target-joexploit.htm)
 
        -vu              = Verbose (output every Url scan)
 
        -sp              = Show completed Percentage
 
 
Example:
 
          joomscan.pl -pv -u victim.com -x localhost:8080         
 
  
 
  Check:  joomscan.pl check
 
  Check:  joomscan.pl check

Revision as of 17:40, 8 March 2018

    Usage:	joomscan.pl [options]
   --url | -u <URL>                         |   The Joomla URL/domain to scan.
   --enumerate-components          | -ec    |   Try to enumerate components.
   --cookie <String>                       |   Set cookie.
   --user-agent | -a <user-agent>   |   Use the specified User-Agent.
   --random-agent | -r                   |   Use a random User-Agent.
   --timeout <time-out>                  |   set timeout.
   --about                                      |   About Author
   --update                                    |   Update to the latest version.
   --help | -h                                 |   This help screen.
   --version                                   |   Output the current version and exit.


Do default checks:
        perl joomscan.pl -u www.example.com  
        or
        perl joomscan.pl --url www.example.com
        
Check:   joomscan.pl check
         This option will check if the scanner update is available or not.
Update:  joomscan.pl update
         This option will check and update the local database if newer
         version is available.
Download: joomscan.pl download
          - Download the scanner latest version as a single zip file - joomscan-latest.zip.
Defense: joomscan.pl defense
         This option will give you a defensive note.
About:   joomscan.pl story
         This option will give you a short story about joomscan.
Read:   joomscan.pl read DOCFILE
          DOCFILE - changelog,release_note,readme,credits,faq,owasp_project