Kali installs the magescan assessment tool
Magento (McJindou) is a professional open source e-commerce system. Magento is designed to be very flexible, with modular architecture and rich functions. It is easy to integrate seamlessly with third-party applications. It is oriented to enterprise applications and can deal with all kinds of needs, as well as the construction of an e-commerce website with multiple uses and applicability. Including shopping, shipping, product reviews, etc., make full use of open source features, provide code base development, very standardized standards, easy to seamlessly integrate with third-party applications
(just introduce what magento is, please search Baidu for more information)
Magescan is a tool to evaluate the security of magento.
Installation method
Git clone https://github.com/steverobbins/magescan magescan
Cd magescan
Curl-sS https://getcomposer.org/installer | php
Php composer.phar install
Bin/magescan scan:all www.xxx.com
Command syntax
Magescan.phar scan:all [--insecure |-k] [--show-modules]
Parameters.
-- format=FORMAT
Specify different output formats:
Default json-- insecure,-k if set The SSL certificate will not be verified-- show-modules lists all modules searched scan:catalog magescan.phar scan:catalog [--insecure |-k] to get directory information scan:modules magescan.phar scan:modules [--insecure |-- show-modules] to get installed modules Scan:patch magescan.phar scan:patch [--insecure |-k] get patch information scan:server magescan.phar scan:server [--insecure |-k] check server version scan : sitemap magescan.phar scan:sitemap [--insecure |-k] check site map scan:unreachable magescan.phar scan:unreachable [--insecure |-k] check the unreachable path scan: Version magescan.phar scan:version [--insecure |-k] get the version installed by Magento to show all the modules we detected self-update magescan.phar self-update to update the phar file to the latest version
