CMS vulnerability scanners
Tools
Popular CMS vulnerability scanners
CMSeeK (CMS detection and exploitation)
penetration testing, software exploitation, software identification, vulnerability scanning
CMSeeK is a security scanner for content management systems (CMS). It can perform a wide range of functions starting from the detection of the CMS, up to vulnerability scanning. The tool claims to support over 100 different CMS tools, with extensive support for the commonly used ones like Drupal, Joomla, and WordPress.
The scans performed by CMSeeK include version detection. It can also do enumeration of users, plugins, and themes. This might be useful to see what users or …
JoomScan (vulnerability scanner for Joomla CMS)
vulnerability scanning, vulnerability testing
JoomScan could be used to test your Joomla installation or during security assessments. As it has a primary focus on Joomla, it may provide better results than generic vulnerability scanners.
droopescan (CMS vulnerability scanner)
web application analysis
Droopescan can be used to test the security of several Content Management Systems (CMS). It mainly focuses on Drupal, SilverStripe, and Wordpress installations.
Missing a favorite tool in this list? Share a tool suggestion and we will review it.