u/JackfruitFun6602

r/opensourcealternative r/cms r/redteamsec

CMScan - Open Source alternative to WPScan for multiple CMS / No API key, no limitaion

▲ 7 r/opensourcealternative+2 crossposts

CMScan - Open Source alternative to WPScan for multiple CMS / No API key, no limitaion

Hi everyone,

I've been developing CMScan, an open-source CMS security scanner.

Unlike WPScan, it supports multiple CMS including WordPress, Drupal, Joomla, Magento, Shopify, TYPO3 and OpenCart.

Features include:

CMS fingerprinting
User enumeration
Plugin/theme detection
Vulnerability lookup (OSV, NVD, FriendsOfPHP...)
Security headers audit
CSV export

I'm looking for feedback and feature suggestions.

GitHub: https://github.com/moloch54/CMScan

u/JackfruitFun6602 — 9 days ago