search

sullo / nikto

Nikto web server scanner
Other
8.6k stars 1.24k forks source link

Introduce db_variable for possible TYPO3 paths? #195

Closed ghost closed 9 years ago

ghost commented 9 years ago

Hi,

based on https://github.com/sullo/nikto/issues/193 i just had a short look at Nessus and OpenVAS what they're using in their plugins to detect a TYPO3 installation. It seems those are some common locations used in both scanners:

/ /cms /site /typo /typo3

Any opinions for/against adding those directories to the db_variable and use them in all TYPO3 tests?

At least the "/typo3" location could explain why one test in https://github.com/sullo/nikto/issues/193 is using:

/typo3/typo3/dev/translations.php

sullo commented 9 years ago

I don't have a problem with adding a @TYPO3 variable--makes sense.

It'd be smart to do discovery on all these dirs first but...that's another mess entirely!