Feb 232014
 

Purpose: This script scans the user directories and reports the installed CMS packages and what version it is running. It can be set to report just outdated packages and scan specific users. It has the ability to search for common versions of the following packages:

Signature NameCurrent VerMajor Ver
PHPMailer5.2.95.2
CRE Loaded6 6.9996
CRE Loaded7 7.2.4.2 7.2
Drupal 6.x6.346
Drupal 7.x7.347
e107 1.0.41
Joomla 1.5.x1.5.9991.5
Joomla 1.7.x1.7.9991.7
Joomla 2.5.x2.5.282.5
Joomla 3.4.x3.4.03.4
Mambo4.6.9994.6
MediaWiki1.24.11.24
OpenX / Revive3.0.63.0
osCommerce 2.x2.3.42.4
osCommerce 3.x (Devel)3.0.23.0
phpBB33.1.33.1
Piwigo2.7.42.7
Redmine2.6.32.6
vBulletin 4.x 4.2.24.2
WHMCS5.3.125.3
WordPress4.1.14.1
X-Cart 4.x 4.6.6 4.6
X-Cart 5.x 5.1.115.1
XOOPS2.5.7.12.5
ZenCart1.5.41.5

Additional packages can be added by adding a function with the signature to identify the package.

Installation:

Install via Github: Github

mkdir -p /root/bin/
wget --no-check-certificate https://raw.github.com/JamesDooley/VersionFinder/master/versionfinder.pl -O /root/bin/versionfinder
chmod 700 /root/bin/versionfinder

Usage:

/root/bin/versionfinder [OPTIONS] [--user usernames] [--directory directories]

Scans server for known CMS versions and reports what is found

    OPTIONS:

        --outdated
            Only prints outdated CMS installs.

        --signatures
            Prints the current signature versions and exits.

        --suspended
            Also scans cPanel's suspended accounts.

        --update
            Forces an update of the script and signatures file.

    Adding Directories Manually:

        --user <usernames>
            Given a space seperated list, will scan the homedir for each linux user.

        --directory <directories>
            Given a space seperated list, will scan each directory.

If --user or --directory options are not set, will attempt to find users for cPanel and Plesk.
On systems without cPanel or Plesk, will attempt to scan /home and /var/www/html</directories></usernames>

Automated Updates

The latest version of the script will now automatically check for updates to the script and signatures file every time the script is run. It does not require any special tags to do this update, it is built in before it does any scans. This is limited to doing a check every 24 hours, but can be overridden using –update.

On systems that do not have curl, the update check will not be done. If the system does not have curl or wget the signatures file will not be downloaded. In this case you will need to manually download the signatures file from the repo and keep that updated.

More information can be found on the github site…

Enjoy!

Share This!
 Posted by at 8:56 am

Sorry, the comment form is closed at this time.