steverobbins / magescan
Scan a Magento application for information
Installs: 1 022
Dependents: 0
Suggesters: 0
Security: 0
Stars: 438
Watchers: 30
Forks: 110
Open Issues: 8
Requires
Requires (Dev)
- phpunit/phpunit: ~4.0
- satooshi/php-coveralls: 1.1.*
- squizlabs/php_codesniffer: 2.*
Replaces
- dev-master
- v1.12.9
- v1.12.8
- v1.12.7
- v1.12.6
- v1.12.5
- v1.12.4
- v1.12.3
- v1.12.2
- v1.12.1
- v1.12.0
- v1.11.5
- v1.11.4
- v1.11.3
- v1.11.2
- v1.11.1
- v1.11.0
- v1.10.0
- v1.9.2
- v1.9.1
- v1.9.0
- v1.8.3
- v1.8.2
- v1.8.1
- v1.8.0
- v1.7
- v1.6.6
- v1.6.5
- v1.6.4
- v1.6.3
- v1.6.2
- v1.6.1
- v1.6
- v1.5.3
- v1.5.2
- v1.5.1
- v1.5
- v1.4
- v1.3.2
- v1.3.1
- v1.3
- v1.2
- v1.1.2
- v1.1.1
- v1.1
- v1.0
- v0.7.7
- v0.7.6
- v0.7.5
- v0.7.4
- v0.7.3
- v0.7.2
- v0.7.1
- v0.7
- v0.6
- v0.5
- v0.4
- v0.3
- v0.2
- v0.1
- dev-dev
- dev-issue/149
- dev-feature/pr-136
This package is auto-updated.
Last update: 2024-10-29 04:36:27 UTC
README
The idea behind this is to evaluate the quality and security of a Magento site you don't have access to. The scenario when you're interviewing a potential developer or vetting a new client and want to have an idea of what you're getting into.
Installation
.phar
- Download the
magescan.phar
file from the releases page - Run in command line with the
php
command
php magescan.phar scan:all www.example.com
Source
- Clone this repository
- Install with composer
git clone https://github.com/steverobbins/magescan magescan
cd magescan
curl -sS https://getcomposer.org/installer | php
php composer.phar install
bin/magescan scan:all www.example.com
n98-magerun
Clone into your ~/.n98-magerun/modules
directory
mkdir -p ~/.n98-magerun/modules
git clone https://github.com/steverobbins/magescan ~/.n98-magerun/modules/magescan
magerun magescan:scan store.example.com
Composer
composer require steverobbins/magescan --dev
Include in your project
Add the following to your composer.json
"require": {
"steverobbins/magescan": "dev-master"
}
Usage
$ magescan.phar scan:all store.example.com
Commands
scan:all
$ magescan.phar scan:all [--insecure|-k] [--show-modules] <url>
Run all scans on the given <url>
.
Options
--format=FORMAT
Specify a different output format. Possible values:
default
json
--insecure
, -k
If set, SSL certificates won't be validated
--show-modules
Lists all modules searched for, not just those found
scan:catalog
$ magescan.phar scan:catalog [--insecure|-k] <url>
Get catalog information
scan:modules
$ magescan.phar scan:modules [--insecure|-k] [--show-modules] <url>
Get installed modules
scan:patch
$ magescan.phar scan:patch [--insecure|-k] <url>
Get patch information
scan:server
$ magescan.phar scan:server [--insecure|-k] <url>
Check server technology
scan:sitemap
$ magescan.phar scan:sitemap [--insecure|-k] <url>
Check sitemap
scan:unreachable
$ magescan.phar scan:unreachable [--insecure|-k] <url>
Check unreachable paths
scan:version
$ magescan.phar scan:version [--insecure|-k] <url>
Get the version of a Magento installation
Show all modules that we tried to detect, not just those that were found
Disclaimer
Since we can't see the code base, this tool makes assumptions and takes guesses. Information reported isn't guaranteed to be correct.
For in depth analyses, consider:
- mageaudit
- Magento Project Mess Detector (for n98-magerun)
- magniffer
- Magento Coding Standard
- magecheck
- magento-check
Support
Please create an issue for all bugs and feature requests
Contributing
Fork this repository and send a pull request to the dev
branch