From 6d4a3cdc0b3680502c01eb6b1d181011c954f19e Mon Sep 17 00:00:00 2001 From: root Date: Sun, 10 Aug 2014 16:59:26 +0200 Subject: [PATCH] corrections --- README.md | 8 ++++---- doc/CHANGELOG.md | 38 +++++++++++++++++++------------------- doc/TODO.md | 6 +++++- 3 files changed, 28 insertions(+), 24 deletions(-) diff --git a/README.md b/README.md index b4b6f19..2a0c5c5 100644 --- a/README.md +++ b/README.md @@ -1,10 +1,10 @@ -Typo-Enumerator +Typo3-Enumerator =============== -Typo-Enumerator is an open source penetration testing tool that automates the process of detecting the [Typo3](https://typo3.org) CMS and its installed [extensions](https://typo3.org/extensions/repository/?id=23&L=0&q=&tx_solr[filter][outdated]=outdated%3AshowOutdated) (also the outdated ones!). +Typo3-Enumerator is an open source penetration testing tool that automates the process of detecting the [Typo3](https://typo3.org) CMS and its installed [extensions](https://typo3.org/extensions/repository/?id=23&L=0&q=&tx_solr[filter][outdated]=outdated%3AshowOutdated) (also the outdated ones!). If the --top parameter is set to a value, only the specified most downloaded extensions are tested. -It is possible to use POST instead of GET Requests and do all requests through the [TOR Hidden Service](https://www.torproject.org/) network, with the help of [Privoxy](www.privoxy.org), in order to prevent DNS leakage. +It is possible to do all requests through the [TOR Hidden Service](https://www.torproject.org/) network, with the help of [Privoxy](www.privoxy.org), in order to prevent DNS leakage. Installation ---- @@ -29,7 +29,7 @@ To get a list of all options use: python typoenum.py -h -You can use Typo-Enumerator with domains: +You can use Typo3-Enumerator with domains: python typoenum.py -d DOMAIN [DOMAIN ...] [--user_agent USER-AGENT] [--top VALUE] [-v] [--tor] diff --git a/doc/CHANGELOG.md b/doc/CHANGELOG.md index 3bb62dd..8ffdcde 100644 --- a/doc/CHANGELOG.md +++ b/doc/CHANGELOG.md @@ -1,4 +1,4 @@ -# Version 0.3 +## Version 0.3 * Using modules instead of one class * Accepting now strg+c when in multithreaded mode @@ -10,50 +10,50 @@ * Typo3 version search is more accurate * If the backend login page could not be found, but Typo3 is used, the user is asked, if he want to proceed. This will mostly lead to "no extensions are installed". -# Version 0.2.1 +## Version 0.2.1 * Fixed some bugs -* It is now possible to specifiy threads - Default is 10. - I strongly recommend to use only 2 or even 1 thread when using TOR! +* It is now possible to specifiy threads.
+ Default is 10.
+ I strongly recommend to use only 2 or even 1 thread when using TOR!
This is because TOR is (extremely) slow and will produce connection errors if too many threads are used. -# Version 0.2 +## Version 0.2 * Added support for Privoxy and TOR -* It is now possible to use Typo-Enumerator with Privoxy and TOR (--tor) - Privoxy is used to prevent dns leakage ;) - Please make sure the Privoxy config (/etc/privoxy/config) is set to something like: - listen-address 127.0.0.1:8118 - forward-socks5 / 127.0.0.1:9050 . - These are the standart ports for Privoxy and TOR +* It is now possible to use Typo-Enumerator with Privoxy and TOR (--tor)
+ Privoxy is used to prevent dns leakage ;)
+ Please make sure the Privoxy config (/etc/privoxy/config) is set to something like:
+ listen-address 127.0.0.1:8118
+ forward-socks5 / 127.0.0.1:9050 .
+ These are the standart ports for Privoxy and TOR
If TOR is used, threads will be set to 2 in order to minimize errors * Version search for extensions is now more reliable -# Version 0.1.6 +## Version 0.1.6 * Added version search for extensions -# Version 0.1.5 +## Version 0.1.5 * Added extension search -# Version 0.1.4 +## Version 0.1.4 * Added support for Typo v6.X -# Version 0.1.3 +## Version 0.1.3 * Optimized requests -# Version 0.1.2 +## Version 0.1.2 * Added version guessing -# Version 0.1.1 +## Version 0.1.1 * Added version search for Typo3 -# Version 0.1 +## Version 0.1 * Prototype \ No newline at end of file diff --git a/doc/TODO.md b/doc/TODO.md index e34ec15..e1ae3d1 100644 --- a/doc/TODO.md +++ b/doc/TODO.md @@ -4,4 +4,8 @@ * Search for Typo3 version-specific extensions * Some extensions don't have any version information. These extensions must be listed in settings.NO_VERSIONINFO. * Use http:// or https:// plus the domain ? -* Maybe use one library for all requests \ No newline at end of file +* Maybe use one library for all requests +* Test on other platforms +* Update "usage" in readme.md +* Add screenshot +* Use POST instead of GET Requests \ No newline at end of file