search

Tuhinshubhra / CMSeeK

CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs
GNU General Public License v3.0
2.31k stars 497 forks source link

[SUGGESTION] CMS DETECTION FAILED #35

Closed N1gh7m4r3-N1dh closed 6 years ago

N1gh7m4r3-N1dh commented 6 years ago

Content:

Tuhinshubhra commented 6 years ago

Detects just fine... check again.

ScriptTiger commented 6 years ago

The Indian government's UPSC (Union Public Service Commission) civil services website (http://www.upsc.gov.in/) was hacked and defaced and was temporarily taken offline, but has since been restored again. This was a website issue and not related to this repo.

N1gh7m4r3-N1dh commented 6 years ago

@ScriptTiger well while other scanners were detecting even when whole drupal configurations were compressed as an backup CMSeeK wasn't that's why i opened this up

ScriptTiger commented 6 years ago

Understood, @N1gh7m4r3-N1dh. That is much needed context for @Tuhinshubhra to work with. I think the actual issue here would be an enhancement request to add a new detection method for Drupal that can still detect the CMS even when it is in such a state.

The only way @Tuhinshubhra can proceed with this now is if you provide another Drupal website that is currently in the same state that has this issue, as nothing can be modeled or tested without it. It may also be helpful to provide another scanner tool you used that was successful that he can look at to extract how it signatures Drupal.

If someone else from the community has Drupal expertise and can create a PR for this, it may help avoid hunting for another Drupal site that is down.

Tuhinshubhra commented 6 years ago

Exactly... anyways no passive detection is possible while the site is in this state atleast not without any other information.

Tuhinshubhra commented 6 years ago

Anyways it works just fine

selection_079