LP-MSH-Scanner

LP MSH Scanner

Made by Malin Cenusa

May 2018 - v5.0.1

TODO:

• beautify the code
• move fingerprints to database
• ditch as much bash code as possible
• add more CMS fingerprints
• clear error logs & garbage files
• add chown
• add suspicious plugins - done for WP
• add resource hogs - done for WP
• code cleanup
• remove unused stuff

Version exceptions to be looked into and fixed if possible:

• PmWiki doesn't output the version properly for some reason and it will be checked later
• phpNuke support removed as newer phpNuke installs store the version in the database
• newest ELGG, CMS Made Simple, Sitecake, Pimcore, Microweber, ZenPhoto, WikkaWiki, JCow, Open Source Social Network, Lime Survey, Feng Office require PHP 5.4 to work
• phpLD is not compatible with PHP version 5.3+ so support for it has been removed from the scanner
• Pixie does not have proper version handling so it will not be supported
• eggBlog stores it's version in a file called VERSION which will generate too many false positives so it will not be supported
• PHP-Fusion normally pulls the version from the database, but we can try and grab it from it's upgrade script function
• ModX nowadays pulls the version info from the database so we'll no longer support it
• ocPortal seems to be pulling info from the database and we will not support it
• Typo3 requires fileinfo() which isn't supported on LP shared
• ProcessWire doesn't store any version related info so it will not be supported
• Fork, Prosper202 don't work from subdirectories
• Sitemagic fails to report the version properly so I've removed it from the script
• Tiki Wiki stores the version details in the database so we'll not support it
• razorCMS requires suPHP when installing with Softaculous and fails although suPHP exists
• SeoToasterCMS stores version information under a version.txt file which is bound to produce a lot of false positives so we'll not support it
• Bigace doesn't seem to store any version related info under it's files so it won't be supported
• Fiyo stores only the major core version in it's files and this could cause too many false positives so it will not be supported
• HotaruCMS couldn't be installed so I could not fingerprint it
• FUDforum doesn't appear to store any version info in it's files
• Beehive requires PHP 5.4, fileinfo () and intl ()
• my little forum uses an improper version handling which will generate many false positives so we'll not support it
• Pixelpost stores version related data in an Readme.txt file which would generate too many false positives if used
• Plogger does not seem to store any version related info into it's files
• DokuWiki uses a file called VERSION to store version related info and this generates too many false positives
• pH7CMS requires PHP 5.2 & bz()
• Open Classifieds needs PHP 5.5 to work
• Noah's Classifieds seems to pull the version from an array and it cannot be supported
• GPixPixel doesn't store version related info in the files
• ExtCalendar is not compatible with PHP version 5.3+
• poMMo is not compatible with PHP version 5.3+
• Webinsta Maillist is not compatible with PHP version 5.3+
• Open Newsletter does not store version info into it's files
• ccMail is not compatible with PHP version 5.3+
• phpESP is not compatible with PHP version 5.3+
• Advanced Poll does not store version info into it's files
• Easy Poll does not store version info into it's files
• Simple PHP Poll does not store version info into it's files
• The Bug Genie does not store version info into it's files
• SiteDove can not be installed in subdirectories.