+- Sinisterly (https://sinister.ly)
+-- Forum: Coding (https://sinister.ly/Forum-Coding)
+--- Forum: Coding (https://sinister.ly/Forum-Coding--71)
+--- Thread: Fingerprintig CMS System's (/Thread-Fingerprintig-CMS-System-s)
Fingerprintig CMS System's - B!t - 12-03-2015
Hey,
i have some question about the fingerprintig of 2 cms systems (wordpress and joomla).
do anyone have some ideas ?
my current solution is slow and dont work if the site holder delete the license.txt files
i was thinking of some type search for meta tags but i think i cant match all thing.
so i simply wrote this little thread to get new ideas about that
-B!t
RE: Fingerprintig CMS System's - Imp3ll3d - 12-03-2015
Have you tried wpscan or joomscan?
RE: Fingerprintig CMS System's - B!t - 12-03-2015
i want to create a fingerprint function in javascript to get the cms-directory
i need that for my current project
RE: Fingerprintig CMS System's - Imp3ll3d - 12-03-2015
(12-03-2015, 09:30 PM)B!t Wrote: i want to create a fingerprint function in javascript to get the cms-directory
i need that for my current project
Oh, sorry. Didn't even realize this was the coding section.
What have you tried so far? You can try brute forcing common files & directories with XMLHttpRequest().
RE: Fingerprintig CMS System's - meow - 12-04-2015
(12-03-2015, 10:11 PM)Imp3ll3d Wrote: You can try brute forcing common files & directories with XMLHttpRequest().
This^, looking for comments in pages unique to that CMS, looking at the robots.txt file, and finding images and checking the md5 sums of the images unique to that CMS are all common ways of fingerprinting.
RE: Fingerprintig CMS System's - B!t - 12-04-2015
Imp3ll3d yeah i did allready this bruteforcing but i was hoping for a faster way
another idea i had was that i check the robot.txt file.
But i was not sure if there is any information about the cms system when the setup is not in the root directory.
Regards B!t
RE: Fingerprintig CMS System's - Num5kull - 05-26-2016
about page is good for wordpress usually has powered by wordpress XXXX on the text
RE: Fingerprintig CMS System's - Securex - 05-27-2016
this article can be useful:
anantshri.info/articles/web_app_finger_printing.html