Subscribe For Free Updates!

We'll not spam mate! We promise.

Joomscan On Backtrack 5R1

JoomScan 

..:: Is a Vulnerability Scanning Tool ::..








Introduction 

  • Joomscan is the CMS Vulnerability Identification Tool .
  • This tool is created by YGN Ethical Hacker Group from Myanmar(Burma).
  • Joomscan is used to find the vulnerability in the websites . 
  • Joomscan helps the developer to find the weaknesses in the websites .
  • Joomscan is a signature based scanner which can detect the XSS/CSRF, sql injection etc on the target website .

How to open Joomscan on Backtrack 5 


  • Follow : Backtrack > Vulnerability Assessment > Web Assessment > CMS Vulnerability Identification Tool > joomscan 
  •  
     


How to Use joomscan 

  • When you open joomscan , it will look like this image (shown below)


 

  • The above image shows the syntax and the options  




  • Some more options like check ,update, about and read (shown above)


 


  • In the above image ,we are giving the command : ./joomscan -u < target url >

  • Example : ./joomscan.pl -u  www.plusline.org     as shown in the image above .
  • Here ./joomscan.pl : used to start the joomscan -u : used for url




  • Here it shows the Server name , checking for Anti-Scanner measure 





  • In this image ,it shows fingerprinting and the XSS/CSRF Vulnerability 

 




  • At last ,it shows the report how many vulnerable points in the website . 
  •  This is how we  can use this tool . 


                This tool is best for the Web Developer to test the Security of their website .




NOTE: THIS ARTICLE IS JUST FOR EDUCATIONAL PURPOSE ONLY . 
YOU YOURSELF RESPONSIBLE FOR ANY ACTIVITY .

Socializer Widget By Blogger Yard
SOCIALIZE IT →
FOLLOW US →
SHARE IT →

2 comments:

  1. Amazing issues here. I am very happy to look your article.
    Thank you a lot and I'm having a look forward to contact you.
    Will you kindly drop me a mail?

    Also visit my website - your body is a wonderland

    ReplyDelete
    Replies
    1. first of all ThankQ for visiting my site .. stay in touch ..!!

      Delete