octopuce/offwave-scan

Offwave scanner basic script

This is a very basic tool for using the Offwave scanner

Install

Clone project in your directory of choice

git clone https://github.com/octopuce/offwave-scan ~/tmp/offwave-scan

Install the offwave library dependancy with git

cd ~/tmp/offwave-scan
git submodule init
git submodule update

Add the path to check in config.php, one array line per path to check

cp config.php.sample config.php
find /var/www -maxdepth 3 -mindepth 1 -type d -exec echo "\"{}\"," >> config.php \;

OR

run the generator.sh script and answer the questions:

• What PATH do you want to scan ? (ex: /var/www/):
• minimum depth for the scan? (ex: 0)
• maximum depth for the scan? (ex: 3)

Launch scan.php :

php scan.php

OR something like that:

php scan.php > offwave-log.txt

And

cat offwave-log.txt |grep -iE "wordpress|joomla|drupal|spip|phpmyadmin|phpbb"

or

cat offwave-log.txt |grep -v ";;;"