search

whoot / Typo3Scan

Enumerate Typo3 version and extensions
GNU General Public License v2.0
170 stars 32 forks source link

example for User login #26

Closed Terminator81 closed 2 years ago

Terminator81 commented 2 years ago

can you give me a example for the backend user login?

my password has ":;,-" and so on....

whoot commented 2 years ago

I don't quite understand what you are trying to accomplish. You cant use Typo3Scan to login on the backend. If you have backend access you dont need Typo3Scan, because you can see all installed extensions and versions.

Terminator81 commented 2 years ago

I have scaned my site the mesage appears that the exact Version cant be detected

So i thought i have to login

The same for extensions

whoot commented 2 years ago

If you have a login, then you don't need Typo3Scan because you can read all information in the backend. Typo3Scan was developed for (blackbox) penetration tests. Version information is derived from specific files. In some cases it may not be possible to determine an exact version. A login at the backend is not supported.