<commit_before># droopescan.

A plugin-based scanner that aids security researchers in identifying issues with
several CMSs, mainly Drupal & Silverstripe.

Stable versions can be [downloaded from here](https://github.com/droope/droopescan/releases).

[![Build Status](https://travis-ci.org/droope/droopescan.svg?branch=master)](https://travis-ci.org/droope/droopescan)

<pre>
computer:~/droopescan# ./droopescan scan drupal -u http://drupal.org/ -t 8
[+] No themes found.

[+] Possible interesting urls found:
    Default changelog file. - https://www.drupal.org/CHANGELOG.txt
    Default admin. - https://www.drupal.org/user/login

[+] Possible version(s):
    7.34

[+] Plugins found:
    views https://www.drupal.org/sites/all/modules/views/
    token https://www.drupal.org/sites/all/modules/token/
    pathauto https://www.drupal.org/sites/all/modules/pathauto/
    libraries https://www.drupal.org/sites/all/modules/libraries/
    entity https://www.drupal.org/sites/all/modules/entity/
    google_analytics https://www.drupal.org/sites/all/modules/google_analytics/
    ctools https://www.drupal.org/sites/all/modules/ctools/
    features https://www.drupal.org/sites/all/modules/features/
    views_bulk_operations https://www.drupal.org/sites/all/modules/views_bulk_operations/
    link https://www.drupal.org/sites/all/modules/link/
    metatag https://www.drupal.org/sites/all/modules/metatag/
    field_group https://www.drupal.org/sites/all/modules/field_group/
    entityreference https://www.drupal.org/sites/all/modules/entityreference/
    references https://www.drupal.org/sites/all/modules/references/
    redirect https://www.drupal.org/sites/all/modules/redirect/
    field_collection https://www.drupal.org/sites/all/modules/field_collection/
    diff https://www.drupal.org/sites/all/modules/diff/
    flag https://www.drupal.org/sites/all/modules/flag/
    search_api https://www.drupal.org/sites/all/modules/search_api/
    migrate https://www.drupal.org/sites/all/modules/migrate/
    honeypot https://www.drupal.org/sites/all/modules/honeypot/
    facetapi https://www.drupal.org/sites/all/modules/facetapi/
    jcarousel https://www.drupal.org/sites/all/modules/jcarousel/
    search_api_db https://www.drupal.org/sites/all/modules/search_api_db/
    security_review https://www.drupal.org/sites/all/modules/security_review/
    memcache https://www.drupal.org/sites/all/modules/memcache/
    views_field_view https://www.drupal.org/sites/all/modules/views_field_view/
    field_formatter_settings https://www.drupal.org/sites/all/modules/field_formatter_settings/
    r4032login https://www.drupal.org/sites/all/modules/r4032login/
    varnish https://www.drupal.org/sites/all/modules/varnish/
    bueditor https://www.drupal.org/sites/all/modules/bueditor/
    apachesolr https://www.drupal.org/sites/all/modules/apachesolr/
    codefilter https://www.drupal.org/sites/all/modules/codefilter/
    geolocation https://www.drupal.org/sites/all/modules/geolocation/
    url https://www.drupal.org/sites/all/modules/url/
    views_content_cache https://www.drupal.org/sites/all/modules/views_content_cache/
    homebox https://www.drupal.org/sites/all/modules/homebox/
    fasttoggle https://www.drupal.org/sites/all/modules/fasttoggle/
    views_litepager https://www.drupal.org/sites/all/modules/views_litepager/

[+] Scan finished (0:08:11.388810 elapsed)
</pre>

You can get a full list of options by running:

<pre>
python droopescan.py --help
python droopescan.py scan --help
</pre>

# Why droopescan?

* Fast, multi-threaded scanning. Mass scanning supported out of the box.
* Scans for outdated installations, and also themes and plugins.
* Plugin system which handles not only scanning but also the
[updating](https://github.com/droope/droopescan/blob/3f7c786b99eef40b53dc3ef541772d66684a20da/plugins/drupal.py#L36-L55)
of plugins.
* Support for basic authentication and intercepting proxies.
* 100% python.

# Installation

Installation is easy using pip:

<pre>
pip install droopescan
</pre>

Manual installation is as follows:

<pre>
git clone https://github.com/droope/droopescan.git
cd droopescan
pip install -r requirements.txt
./droopescan scan --help
</pre>

The master branch corresponds to the latest release (what is in pypi).
Development branch is unstable and all pull requests must be made against it.

# Features
## Scan types.

Droopescan aims to be the most accurate by default, while not overloading the
target server due to excessive concurrent requests. Due to this, by default, a
large number of requests will be made with four threads; change these settings
by using the `--number` and `--threads` arguments respectively.

This tool is able to perform four kinds of tests:
<commit_msg>Improve documentation.<commit_after># droopescan.

A plugin-based scanner that aids security researchers in identifying issues with
several CMSs, mainly Drupal & Silverstripe.

Stable versions can be [downloaded from here](https://github.com/droope/droopescan/releases).

[![Build Status](https://travis-ci.org/droope/droopescan.svg?branch=master)](https://travis-ci.org/droope/droopescan)

<pre>
computer:~/droopescan# ./droopescan scan drupal -u http://drupal.org/ -t 8
[+] No themes found.

[+] Possible interesting urls found:
    Default changelog file. - https://www.drupal.org/CHANGELOG.txt
    Default admin. - https://www.drupal.org/user/login

[+] Possible version(s):
    7.34

[+] Plugins found:
    views https://www.drupal.org/sites/all/modules/views/
    token https://www.drupal.org/sites/all/modules/token/
    pathauto https://www.drupal.org/sites/all/modules/pathauto/
    libraries https://www.drupal.org/sites/all/modules/libraries/
    entity https://www.drupal.org/sites/all/modules/entity/
    google_analytics https://www.drupal.org/sites/all/modules/google_analytics/
    ctools https://www.drupal.org/sites/all/modules/ctools/
    features https://www.drupal.org/sites/all/modules/features/
    views_bulk_operations https://www.drupal.org/sites/all/modules/views_bulk_operations/
    link https://www.drupal.org/sites/all/modules/link/
    metatag https://www.drupal.org/sites/all/modules/metatag/
    field_group https://www.drupal.org/sites/all/modules/field_group/
    entityreference https://www.drupal.org/sites/all/modules/entityreference/
    references https://www.drupal.org/sites/all/modules/references/
    redirect https://www.drupal.org/sites/all/modules/redirect/
    field_collection https://www.drupal.org/sites/all/modules/field_collection/
    diff https://www.drupal.org/sites/all/modules/diff/
    flag https://www.drupal.org/sites/all/modules/flag/
    search_api https://www.drupal.org/sites/all/modules/search_api/
    migrate https://www.drupal.org/sites/all/modules/migrate/
    honeypot https://www.drupal.org/sites/all/modules/honeypot/
    facetapi https://www.drupal.org/sites/all/modules/facetapi/
    jcarousel https://www.drupal.org/sites/all/modules/jcarousel/
    search_api_db https://www.drupal.org/sites/all/modules/search_api_db/
    security_review https://www.drupal.org/sites/all/modules/security_review/
    memcache https://www.drupal.org/sites/all/modules/memcache/
    views_field_view https://www.drupal.org/sites/all/modules/views_field_view/
    field_formatter_settings https://www.drupal.org/sites/all/modules/field_formatter_settings/
    r4032login https://www.drupal.org/sites/all/modules/r4032login/
    varnish https://www.drupal.org/sites/all/modules/varnish/
    bueditor https://www.drupal.org/sites/all/modules/bueditor/
    apachesolr https://www.drupal.org/sites/all/modules/apachesolr/
    codefilter https://www.drupal.org/sites/all/modules/codefilter/
    geolocation https://www.drupal.org/sites/all/modules/geolocation/
    url https://www.drupal.org/sites/all/modules/url/
    views_content_cache https://www.drupal.org/sites/all/modules/views_content_cache/
    homebox https://www.drupal.org/sites/all/modules/homebox/
    fasttoggle https://www.drupal.org/sites/all/modules/fasttoggle/
    views_litepager https://www.drupal.org/sites/all/modules/views_litepager/

[+] Scan finished (0:08:11.388810 elapsed)
</pre>

You can get a full list of options by running:

<pre>
python droopescan.py --help
python droopescan.py scan --help
</pre>

# Why droopescan?

* Fast, multi-threaded scanning. Mass scanning supported out of the box.
* Scans for outdated installations, and also themes and plugins.
* Plugin system which handles not only scanning but also the
[updating](https://github.com/droope/droopescan/blob/3f7c786b99eef40b53dc3ef541772d66684a20da/plugins/drupal.py#L36-L55)
of plugins.
* Support for basic authentication and intercepting proxies.
* 100% python.

# Installation

Installation is easy using pip:

<pre>
apt-get install python-pip
pip install droopescan
</pre>

Manual installation is as follows:

<pre>
git clone https://github.com/droope/droopescan.git
cd droopescan
pip install -r requirements.txt
./droopescan scan --help
</pre>

The master branch corresponds to the latest release (what is in pypi).
Development branch is unstable and all pull requests must be made against it.

# Features
## Scan types.

Droopescan aims to be the most accurate by default, while not overloading the
target server due to excessive concurrent requests. Due to this, by default, a
large number of requests will be made with four threads; change these settings
by using the `--number` and `--threads` arguments respectively.

This tool is able to perform four kinds of tests:

{'fraction_non_alphanumeric': 0.12531512605042017, 'fraction_numerical': 0.011554621848739496, 'mean_word_length': 3.877561475409836, 'pattern_counts': {'":': 0, '<': 19, '<?xml version=': 0, '>': 19, 'https://': 92, 'lorem ipsum': 0, 'www.': 82, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 4, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '2663942', 'n_tokens_mistral': 3303, 'n_tokens_neox': 3120, 'n_words': 634}