This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
OWASP Joomla Vulnerability Scanner Usage
From OWASP
Usage: joomscan.pl [options] --url | -u <URL> | The Joomla URL/domain to scan. --enumerate-components | -ec | Try to enumerate components. --cookie <String> | Set cookie. --user-agent | -a <user-agent> | Use the specified User-Agent. --random-agent | -r | Use a random User-Agent. --timeout <time-out> | set timeout. --about | About Author --update | Update to the latest version. --help | -h | This help screen. --version | Output the current version and exit.
Do default checks: perl joomscan.pl -u www.example.com or perl joomscan.pl --url www.example.com
Check: joomscan.pl check This option will check if the scanner update is available or not.
Update: joomscan.pl update This option will check and update the local database if newer version is available.
Download: joomscan.pl download - Download the scanner latest version as a single zip file - joomscan-latest.zip.
Defense: joomscan.pl defense This option will give you a defensive note.
About: joomscan.pl story This option will give you a short story about joomscan.
Read: joomscan.pl read DOCFILE DOCFILE - changelog,release_note,readme,credits,faq,owasp_project