moodlescan

Moodle scanner: version and known vulnerabilities.

A scanner for the Moodle learning platform. It fingerprints the exact version and matches it against a known-vulnerability database to guide the exploit.

Family Web discovery & fuzzing

Flags -u http://<host>/moodle

Concepts Moodle calculated-question RCE (CVE-2018-1133)

Cheatsheet CMS (WordPress, Drupal, Joomla)

Installation

git clone https://github.com/inc0d3/moodlescan && cd moodlescan
pip3 install -r requirements.txt
python3 moodlescan.py -a          # download the signature database (first run)
python3 moodlescan.py -u <url>

Repositorygithub.com/inc0d3/moodlescan

Useful commands1 commands

Appears in

Some machines where its use is documented; not an exhaustive list.

TeacherHackTheBox