Login Register


Fingerprintig CMS System's filter_list
Author
Message
Fingerprintig CMS System's #1
Hey,
i have some question about the fingerprintig of 2 cms systems (wordpress and joomla).
do anyone have some ideas ?
my current solution is slow and dont work if the site holder delete the license.txt files Sad
i was thinking of some type search for meta tags but i think i cant match all thing.
so i simply wrote this little thread to get new ideas about that Smile

-B!t

Reply

RE: Fingerprintig CMS System's #2
Have you tried wpscan or joomscan?

Reply

RE: Fingerprintig CMS System's #3
i want to create a fingerprint function in javascript to get the cms-directory Wink
i need that for my current project Wink

Reply

RE: Fingerprintig CMS System's #4
(12-03-2015, 09:30 PM)B!t Wrote: i want to create a fingerprint function in javascript to get the cms-directory Wink
i need that for my current project Wink

Oh, sorry. Didn't even realize this was the coding section. Angry

What have you tried so far? You can try brute forcing common files & directories with XMLHttpRequest().

Reply

RE: Fingerprintig CMS System's #5
(12-03-2015, 10:11 PM)Imp3ll3d Wrote: You can try brute forcing common files & directories with XMLHttpRequest().

This^, looking for comments in pages unique to that CMS, looking at the robots.txt file, and finding images and checking the md5 sums of the images unique to that CMS are all common ways of fingerprinting.

Reply

RE: Fingerprintig CMS System's #6
Imp3ll3d yeah i did allready this bruteforcing but i was hoping for a faster way Smile

another idea i had was that i check the robot.txt file.
But i was not sure if there is any information about the cms system when the setup is not in the root directory.

Regards B!t

Reply

RE: Fingerprintig CMS System's #7
about page is good for wordpress usually has powered by wordpress XXXX on the text
[Video: https://www.youtube-nocookie.com/embed/bOkD-HSOmyI]
[bt][1B1sXX2sHhvUrf9Ga9MKcH5e9T4xgN13tB]

Reply

RE: Fingerprintig CMS System's #8
this article can be useful:
anantshri.info/articles/web_app_finger_printing.html

[+] 1 user Likes Securex's post
Reply







Users browsing this thread: 1 Guest(s)