corrections

This commit is contained in:
root
2014-08-10 16:59:26 +02:00
parent 2437faf917
commit 6d4a3cdc0b
3 changed files with 28 additions and 24 deletions

View File

@@ -1,10 +1,10 @@
Typo-Enumerator
Typo3-Enumerator
===============
Typo-Enumerator is an open source penetration testing tool that automates the process of detecting the [Typo3](https://typo3.org) CMS and its installed [extensions](https://typo3.org/extensions/repository/?id=23&L=0&q=&tx_solr[filter][outdated]=outdated%3AshowOutdated) (also the outdated ones!).
Typo3-Enumerator is an open source penetration testing tool that automates the process of detecting the [Typo3](https://typo3.org) CMS and its installed [extensions](https://typo3.org/extensions/repository/?id=23&L=0&q=&tx_solr[filter][outdated]=outdated%3AshowOutdated) (also the outdated ones!).
If the --top parameter is set to a value, only the specified most downloaded extensions are tested.
It is possible to use POST instead of GET Requests and do all requests through the [TOR Hidden Service](https://www.torproject.org/) network, with the help of [Privoxy](www.privoxy.org), in order to prevent DNS leakage.
It is possible to do all requests through the [TOR Hidden Service](https://www.torproject.org/) network, with the help of [Privoxy](www.privoxy.org), in order to prevent DNS leakage.
Installation
----
@@ -29,7 +29,7 @@ To get a list of all options use:
python typoenum.py -h
You can use Typo-Enumerator with domains:
You can use Typo3-Enumerator with domains:
python typoenum.py -d DOMAIN [DOMAIN ...] [--user_agent USER-AGENT] [--top VALUE] [-v] [--tor]

View File

@@ -1,4 +1,4 @@
# Version 0.3
## Version 0.3
* Using modules instead of one class
* Accepting now strg+c when in multithreaded mode
@@ -10,50 +10,50 @@
* Typo3 version search is more accurate
* If the backend login page could not be found, but Typo3 is used, the user is asked, if he want to proceed. This will mostly lead to "no extensions are installed".
# Version 0.2.1
## Version 0.2.1
* Fixed some bugs
* It is now possible to specifiy threads
Default is 10.
I strongly recommend to use only 2 or even 1 thread when using TOR!
* It is now possible to specifiy threads.<br>
Default is 10.<br>
I strongly recommend to use only 2 or even 1 thread when using TOR!<br>
This is because TOR is (extremely) slow and will produce connection errors if too many threads are used.
# Version 0.2
## Version 0.2
* Added support for Privoxy and TOR
* It is now possible to use Typo-Enumerator with Privoxy and TOR (--tor)
Privoxy is used to prevent dns leakage ;)
Please make sure the Privoxy config (/etc/privoxy/config) is set to something like:
listen-address 127.0.0.1:8118
forward-socks5 / 127.0.0.1:9050 .
These are the standart ports for Privoxy and TOR
* It is now possible to use Typo-Enumerator with Privoxy and TOR (--tor)<br>
Privoxy is used to prevent dns leakage ;)<br>
Please make sure the Privoxy config (/etc/privoxy/config) is set to something like:<br>
listen-address 127.0.0.1:8118<br>
forward-socks5 / 127.0.0.1:9050 .<br>
These are the standart ports for Privoxy and TOR<br>
If TOR is used, threads will be set to 2 in order to minimize errors
* Version search for extensions is now more reliable
# Version 0.1.6
## Version 0.1.6
* Added version search for extensions
# Version 0.1.5
## Version 0.1.5
* Added extension search
# Version 0.1.4
## Version 0.1.4
* Added support for Typo v6.X
# Version 0.1.3
## Version 0.1.3
* Optimized requests
# Version 0.1.2
## Version 0.1.2
* Added version guessing
# Version 0.1.1
## Version 0.1.1
* Added version search for Typo3
# Version 0.1
## Version 0.1
* Prototype

View File

@@ -4,4 +4,8 @@
* Search for Typo3 version-specific extensions
* Some extensions don't have any version information. These extensions must be listed in settings.NO_VERSIONINFO.
* Use http:// or https:// plus the domain ?
* Maybe use one library for all requests
* Maybe use one library for all requests
* Test on other platforms
* Update "usage" in readme.md
* Add screenshot
* Use POST instead of GET Requests