• Stars
    star
    122
  • Rank 290,150 (Top 6 %)
  • Language
    Python
  • Created over 3 years ago
  • Updated over 3 years ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Find the remote website version based on a git repository

versionshaker

Versionshaker is a tool to find a remote website version based on a git repository This tool will help you to find the website version of the github project in use based on static files like js,css,xml...

To use this tool you will need :

  • Identify the git repository to use based on usual fingerprint (wordpress/joomla/magento/prestashop/drupal/...)
  • Identify the interesting statics files (js, css, xml, ...)
  • run with : python3 versionshaker.py -c <git_repo_url> -u <website_to_test> -f <files_to_check>

asciicast

Install

python3 -m pip install -r requirements.txt

Run

You can run the project with the following options :

  • -u : the remote website url
  • -c or -l : use a remote git project to clone locally (inside the .tmp/ folder) or use an existing folder (be careful, this options will force checkout the different tags and so this can break unsaved work)
  • -f : the list of files to check (comma separated)
  • -v : add verbosity (optional)
  • -p : path corresponding to the web folder inside the git repository (useful in case of public/ folder by example)
  • -P : add proxy options (optional)
  • -t : the list of tags to check coma separated instead of the (optional)

Example :

python3 versionshaker.py -c https://github.com/WordPress/WordPress -u https://wordpress.website.example/ -f wp-includes/css/dist/block-library/style.min.css,wp-includes/js/jquery/jquery.min.js

More Repositories

1

GOAD

game of active directory
PowerShell
4,933
star
2

arsenal

Arsenal is just a quick inventory and launcher for hacking programs
Python
3,144
star
3

ocd-mindmaps

Orange Cyberdefense mindmaps
1,001
star
4

awesome-industrial-protocols

Security-oriented list of resources about industrial network protocols.
Python
448
star
5

KeePwn

A python tool to automate KeePass discovery and secret extraction.
Python
444
star
6

fenrir-ocd

Python
226
star
7

grepmarx

A source code static analysis platform for AppSec enthusiasts.
Python
194
star
8

russia-ukraine_IOCs

Russia / Ukraine 2022 conflict related IOCs from CERT Orange Cyberdefense Threat Intelligence Datalake
173
star
9

graphcat

Generate graphs and charts based on password cracking result
Python
152
star
10

haiti

🔑 A CLI tool to identify the hash type of a given hash.
Ruby
107
star
11

CVE-repository

🪲 Repository of CVE found by OCD people
Python
67
star
12

disposable-mailbox-docker

A self hosted yopmail like server running in a docker
PHP
55
star
13

cme-wmi

A standalone WMI protocol for CrackMapExec
Python
48
star
14

wmi-shell

WMI Shell project : proof-of-concept of remote access to a Windows machine using only the WMI service.
C
43
star
15

bof

BOF (Boiboite Opener Framework) is a testing framework for industrial protocols implementations and devices.
Python
42
star
16

ctf-party

🎏 A library to enhance and speed up script/exploit writing for CTF players
Ruby
39
star
17

rabid

🍪 A CLI tool and library allowing to simply decode all kind of BigIP cookies.
Ruby
37
star
18

ctf-write-ups

📝 Collection of our CTF write-ups
Python
27
star
19

sikara

Ease and assist the compromise of an Active Directory environment.
Python
25
star
20

reverse-proxy-auth

A Nginx reverse proxy that authenticates users using their personal certificates. Includes everything to create and revoke those certificates, create the CA and even TLS certificates for websites.
Shell
23
star
21

mass-nessus-docker

Deploy multiple instances of Nessus in docker containers easily
Shell
19
star
22

log4shell_iocs

Log4Shell IOCs from CERT Orange Cyberdefense Threat Intelligence Datalake
17
star
23

leHACK-2022

C
16
star
24

sqltrees

Developper-proof prevention of SQL injection (java library)
Java
10
star
25

sweetlemonade

SWEETLEMONADE is a bootkit for UEFI firmware
C
5
star
26

CyberSOC-detect-Nanocore-RAT

Détection de malwares par Artefacts : le cas du RAT Nanocore
Python
3
star