README

The Security Scanner module for Magento 2 helps you automatically detect potentially malicious code in your Magento CMS blocks. It can alert you via email and Telegram notifications when suspicious code patterns are detected, enhancing your store's security posture.

Features

Scheduled security scans to detect malicious code patterns in CMS blocks
Configurable scan frequency (hourly, daily, weekly, etc.)
Email notifications for security alerts
Telegram bot integration for instant notifications
Customizable malicious code detection patterns
Admin panel for easy configuration
Command line interface for manual scans

Installation

Via Composer (Recommended)

composer require c0defusi0n/security-scanner
bin/magento module:enable C0defusi0n_SecurityScanner
bin/magento setup:upgrade
bin/magento setup:di:compile
bin/magento setup:static-content:deploy
bin/magento cache:flush

Manual Installation

Download the ZIP file from the GitHub repository
Extract the contents into app/code/C0defusi0n/SecurityScanner/ directory
Run the following commands:

bin/magento module:enable C0defusi0n_SecurityScanner
bin/magento setup:upgrade
bin/magento setup:di:compile
bin/magento setup:static-content:deploy
bin/magento cache:flush

Configuration

Go to Stores > Configuration > Security Scanner
Configure the following options:

General Configuration

Enable Scanner: Enable or disable the security scanner
Scan Frequency: Set how often the scanner should run

Email Notifications

Enable Email Notifications: Turn on/off email alerts
Email Sender: Configure the sender of email notifications
Email Recipients: Set the email addresses to receive notifications (comma separated)
Send Clean Reports: Option to receive reports even when no issues are detected

Telegram Notifications

Enable Telegram Notifications: Turn on/off Telegram alerts
Telegram Bot Token: Set your Telegram bot API token
Telegram Chat ID: Set the chat ID where notifications should be sent
Test Telegram Connection: Test button to verify your Telegram configuration

Malicious Code Detection Patterns

Custom Patterns: Add your own regular expressions to extend detection capabilities

Usage

Automatic Scans

Once configured, the module will automatically scan your CMS blocks based on the frequency settings you've specified. If suspicious code is detected, you'll receive notifications via the channels you've enabled.

Manual Scan via CLI

You can also trigger a security scan manually using the command line:

bin/magento c0defusi0n:security:scan

Customization

Adding Custom Detection Patterns

You can add your own regular expressions to detect specific patterns of malicious code through the admin configuration or by extending the module.

Extending Email Templates

The module includes customizable email templates for security alerts and clean reports, which can be modified through the Magento admin panel under Marketing > Email Templates.

Internationalization

The module supports multiple languages through Magento's translation system. English translations are included by default, and French translations are available.

Requirements

PHP 8.1 or higher
Magento 2.4.x

Support

For bug reports and feature requests, please use the GitHub issue tracker.

License

This module is licensed under the MIT License - see the LICENSE file for details.

Contributors

c0defusi0n - Initial work

Changelog

1.0.0

Initial release
Added CMS block scanning
Added email and Telegram notifications
Added admin configuration
Added CLI command

c0defusi0n / security-scanner

Maintainers

Details