LP-MSH-Scanner

LP MSH Scanner

Made by Malin Cenusa

May 2017 - v4.0.4

TODO:

• beautify the code
• move fingerprints to database
• ditch as much bash code as possible
• add more CMS fingerprints
• clear error logs & garbage files
• add chown
• add suspicious plugins - done for WP
• add resource hogs - done for WP
• code cleanup
• remove unused stuff

Version exceptions:

PmWiki doesn't output the version properly for some reason and it will be checked later phpNuke support removed as newer phpNuke installs store the version in the database newest ELGG, CMS Made Simple, Sitecake, Pimcore, Microweber, ZenPhoto, WikkaWiki, JCow, Open Source Social Network, Lime Survey, Feng Office require PHP 5.4 to work phpLD is not compatible with PHP version 5.3+ so support for it has been removed from the scanner Pixie does not have proper version handling so it will not be supported eggBlog stores it's version in a file called VERSION which will generate too many false positives so it will not be supported PHP-Fusion normally pulls the version from the database, but we can try and grab it from it's upgrade script function ModX nowadays pulls the version info from the database so we'll no longer support it ocPortal seems to be pulling info from the database and we will not support it Typo3 requires fileinfo() which isn't supported on LP shared ProcessWire doesn't store any version related info so it will not be supported Fork, Prosper202 don't work from subdirectories Sitemagic fails to report the version properly so I've removed it from the script Tiki Wiki stores the version details in the database so we'll not support it razorCMS requires suPHP when installing with Softaculous and fails although suPHP exists SeoToasterCMS stores version information under a version.txt file which is bound to produce a lot of false positives so we'll not support it Bigace doesn't seem to store any version related info under it's files so it won't be supported Fiyo stores only the major core version in it's files and this could cause too many false positives so it will not be supported HotaruCMS couldn't be installed so I could not fingerprint it FUDforum doesn't appear to store any version info in it's files Beehive requires PHP 5.4, fileinfo () and intl () my little forum uses an improper version handling which will generate many false positives so we'll not support it Pixelpost stores version related data in an Readme.txt file which would generate too many false positives if used Plogger does not seem to store any version related info into it's files DokuWiki uses a file called VERSION to store version related info and this generates too many false positives pH7CMS requires PHP 5.2 & bz() Open Classifieds needs PHP 5.5 to work Noah's Classifieds seems to pull the version from an array and it cannot be supported GPixPixel doesn't store version related info in the files ExtCalendar is not compatible with PHP version 5.3+ poMMo is not compatible with PHP version 5.3+ Webinsta Maillist is not compatible with PHP version 5.3+ Open Newsletter does not store version info into it's files ccMail is not compatible with PHP version 5.3+ phpESP is not compatible with PHP version 5.3+ Advanced Poll does not store version info into it's files Easy Poll does not store version info into it's files Simple PHP Poll does not store version info into it's files The Bug Genie does not store version info into it's files SiteDove can not be installed in subdirectories.