Pyfiscan - Web-Application Vulnerability And Version Scanner


Pyfiscan is free web-application vulnerability and version scanner and can be used to locate out-dated versions of common web-applications in Linux-servers. Example use case is hosting-providers keeping eye on their users installations to keep up with security-updates. Fingerprints are easy to create and modify as user can write those in YAML-syntax. Pyfiscan also contains tool to create email alerts using templates.

Requirements
  • Python 2.7
  • Python modules PyYAML docopt
  • GNU/Linux web server
Testing is done mainly with GNU/Linux Debian stable. Windows is not currently supported.

Detects following software
  • ATutor
  • b2evolution
  • BigTree CMS
  • Bugzilla
  • Centreon
  • Claroline
  • ClipperCMS
  • CMSimple
  • CMSMS
  • Collabtive
  • Concrete5
  • Coppermine
  • Cotonti
  • Croogo
  • CubeCart
  • Dolibarr
  • Dotclear
  • Drupal
  • e107
  • EspoCRM
  • Etherpad
  • FluxBB
  • Foswiki
  • Gallery
  • Gollum
  • HelpDEZk
  • HumHub
  • ImpressCMS
  • ImpressPages
  • Jamroom
  • Joomla
  • Kanboard
  • KCFinder
  • LiteCart
  • Magnolia
  • Mahara
  • MantisBT
  • MediaWiki
  • Microweber
  • MiniBB
  • MODX Revolution
  • MoinMoin
  • MyBB
  • Nibbleblog
  • Open Source Social Network
  • OpenCart
  • osDate
  • ownCloud
  • Oxwall
  • PBBoard
  • phpBB3
  • PhpGedView
  • phpMyAdmin
  • Piwigo
  • Piwik
  • PmWiki
  • Postfix Admin
  • Redaxo
  • Roundcube
  • SaurusCMS
  • Serendipity
  • Shaarli
  • SMF
  • Spina CMS
  • SPIP
  • SquirrelMail
  • TestLink
  • TikiWiki
  • Trac
  • WikkaWiki
  • WordPress
  • X-Cart
  • Zenphoto
  • Zikula

Detects following end-of-life software:
  • Bugzilla 4.2 is end-of-life since 2015-11-30
  • Drupal 6 is end-of-life since 2016-02-24
  • Gallery 1
  • Joomla 1.5 is end-of-life since 2012-04-30
  • Joomla 1.6 is end-of-life since 2011-08-19. 1.6.x should be upgraded to 1.6.6 before moving to 1.7.x
  • Joomla 1.7 is end-of-life since 2012-02-24
  • Joomla 2.5
  • MediaWiki 1.18
  • MediaWiki 1.19 is end-of-life since 2015-04-25
  • MediaWiki 1.20
  • MediaWiki 1.21 is end-of-life since 2014-06-25
  • MediaWiki 1.22
  • MediaWiki 1.23 is end-of-life since 2017-05-31
  • MediaWiki 1.24
  • MediaWiki 1.25
  • MediaWiki 1.26 is end-of-life since 2016-11-20
  • MediaWiki 1.28 is end-of-life since 2017-11-01
  • ownCloud 4
  • ownCloud 5
  • ownCloud 6
  • ownCloud 7
  • ownCloud 8.0
  • ownCloud 8.1
  • ownCloud 8.2
  • SaurusCMS

Installation
apt-get install python python-pip libpython2.7-dev libyaml-dev git libyaml-dev
git clone https://github.com/fgeek/pyfiscan.git && cd pyfiscan
pip2 install -r requirements.lst
or you can use BlackArch Linux.

Notes


Pyfiscan - Web-Application Vulnerability And Version Scanner Pyfiscan - Web-Application Vulnerability And Version Scanner Reviewed by Zion3R on 9:35 AM Rating: 5