Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CMS map doesn't find drupal by default but does when we force it #12

Open
noraj opened this issue Jun 14, 2019 · 1 comment
Open

CMS map doesn't find drupal by default but does when we force it #12

noraj opened this issue Jun 14, 2019 · 1 comment

Comments

@noraj
Copy link

noraj commented Jun 14, 2019

Issue Details

CMSmap Version: v1.0
CMS Type: Drupal
CMS Version: 7.28
Plugin Name: drupal
OS Information: archlinux

CMS map doesn't find drupal by default but does when we force it.

$ python3 ~/CTF/tools/cmsmap/cmsmap.py http://10.x.x.x[I] Threads: 5
...
[-] Target: http://10.x.x.x (10.x.x.x)
[M] Website Not in HTTPS: http://10.x.x.x
[I] Server: Microsoft-IIS/8.5
[L] X-Frame-Options: Not Enforced
[I] Strict-Transport-Security: Not Enforced
[I] X-Content-Security-Policy: Not Enforced
[I] X-Content-Type-Options: Not Enforced
[L] Robots.txt Found: http://10.11.1.49/robots.txt
[ERROR] CMS detection failed :(
[ERROR] Use -f to force CMSmap to scan (W)ordpress, (J)oomla or (D)rupal

$ python3 ~/CTF/tools/cmsmap/cmsmap.py http://10.x.x.x -f D
[-] Date & Time: 15/06/2019 00:17:47
[I] Threads: 5
[-] Target: http://10.x.x.x (10.x.x.x)
[M] Website Not in HTTPS: http://10.x.x.x
[I] Server: Microsoft-IIS/8.5
[L] X-Frame-Options: Not Enforced
[I] Strict-Transport-Security: Not Enforced
[I] X-Content-Security-Policy: Not Enforced
[I] X-Content-Type-Options: Not Enforced
[L] Robots.txt Found: http://10.x.x.x/robots.txt
[I] CMS Detection: Drupal
[I] Drupal Version: 7.28
...

Steps to reproduce the issue

  • clone cmsmap
  • clone exploitdb
  • modify cmsmap config
  • launch cmsmap

Expected behaviour

Detect CMS type and version by default

@noraj
Copy link
Author

noraj commented Jan 26, 2020

is the project unmaintained ?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant