magescan
Magento scanner: version, modules and exposed configuration.
A scanner for Magento shops. It detects the version, exposed configuration files, sensitive endpoints and known platform vulnerabilities.
Family Web discovery & fuzzing
Flags scan:all http://<host>
Concepts Magento Shoplift (CVE-2015-1397)
Cheatsheet CMS (WordPress, Drupal, Joomla)
Installation
# PHP PHAR: download magescan.phar from the repo's latest release
php magescan.phar scan:all <url> # Magento version, exposed files and configUseful commands
Appears in
Some machines where its use is documented; not an exhaustive list.
- SwagShopHackTheBox