🚓 New Scanner implementation request
Is your feature request related to a problem
As a secureCodeBox user I would like to use the secureCodeBox to check my external attack surface. Especially CMS systems, like Joomla, are common systems that may introduce new vulnerabilities on a regular basis.
Describe the solution you'd like
Since the secureCodeBox already supports the WordPress scanner WPScan and Typo3 scanner Typo3Scan, it would be great to also add at least one Joomla scanner.
The following are good candidates:
https://github.com/OWASP/joomscan : OWASP JoomScan Project: Advanced Joomla Scans
https://github.com/Tuhinshubhra/CMSeeK : Similar detection level. Results are more easily parsable (json format)
Describe alternatives you've considered
Additional context
https://www.infosecmatter.com/cms-vulnerability-scanners-for-wordpress-joomla-drupal-moodle-typo3/
Steps to implement a new scanner
Hint: A general guide how to implement a new SCB scanner is documented here
🚓 New Scanner implementation request
Is your feature request related to a problem
As a secureCodeBox user I would like to use the secureCodeBox to check my external attack surface. Especially CMS systems, like Joomla, are common systems that may introduce new vulnerabilities on a regular basis.
Describe the solution you'd like
Since the secureCodeBox already supports the WordPress scanner WPScan and Typo3 scanner Typo3Scan, it would be great to also add at least one Joomla scanner.
The following are good candidates:
https://github.com/OWASP/joomscan : OWASP JoomScan Project: Advanced Joomla Scans
https://github.com/Tuhinshubhra/CMSeeK : Similar detection level. Results are more easily parsable (json format)
Describe alternatives you've considered
Additional context
https://www.infosecmatter.com/cms-vulnerability-scanners-for-wordpress-joomla-drupal-moodle-typo3/
Steps to implement a new scanner
Hint: A general guide how to implement a new SCB scanner is documented here
README.gotmpland give a brief overview of the scanner and its configuration options.scan-type.yamlparse-definition.yamlcascading-rules.yamllike documented hereDockerfilefor the scanner if there is no existing one publicly available on dockerHubscan.yamlandfinding.yamlfiles in the example folder