velcheck
velcheck is a command line utility that is capable of checking multiple sites on a shared hosting webserver against the Joomla! Vulnerable Extension List.
velcheck only scans the local machine where it is executed. Remote scanning is beyond the scope of this utility.
Installation
go get github.com/kpetku/velcheck
Usage
./velcheck --help
for options.
Information regarding the default feed
- At this time of writing, the remote GPL licensed JSON format feed containing the Joomla! Vulnerable Extension List comes courtesy of Phil Taylor.
- Unless otherwise specified with an alternative
--feed=
, this program will make an outbound https connection by default to vel.myjoomla.io. - Please respect the terms of docs.myjoomla.io specifically the section that states: "This JSON is provided for free, don’t abuse this by hammering it with massive of calls please. Be nice. Cache."
To download a local copy of the feed into your current working directory, type:
curl -o velcheck.json https://vel.myjoomla.io/
and then run the program with the options of: ./velcheck --feed=velcheck.json
Disclaimer
- velcheck and the author is not affiliated with or endorsed by The Joomla! Project™. Any products and services provided through this site are not supported or warrantied by The Joomla! Project or Open Source Matters, Inc. Use of the Joomla!® name, symbol, logo and related trademarks is permitted under a limited license granted by Open Source Matters, Inc.
- velcheck and the author of this utility is in no way affiliated with or endorsed by Phil Taylor, myJoomla.com, or WPScan.
Thanks
The author would like to thank the JVEL team for all of their hard work. If you happen to be a PHP developer, please consider volunteering over at the Vulnerable Extensions List team.