The Art of Joomla

Tutorials by Andrew Eddie for Joomla!® developers, site implementers and artisans.
twitter • joomla people • facebook

  1. Access Control
  2. Banners
  3. Caching
  4. Controllers
  5. Conversion
  6. Database
  7. Dates and times
  8. Diagrams
  9. Extensions
  10. Files and Folders
  11. Graphs
  12. Hardware
  13. History
  14. Joomla 1.6
  15. JRequest
  16. Layout overrides
  17. Legacy mode
  18. Logging
  19. Mambo
  20. Menus
  21. Models
  22. Modules
  23. Parameters
  24. Paths
  25. Plugins
  26. Project Management
  27. Sanitising input
  28. Search
  29. Security
  30. Software Updates
  31. Special Effects
  32. SVN
  33. Templates
  34. Tokens
  35. Toolbars
  36. Training
  37. Translation
  38. Upgrading
  39. Users
  40. Videos
  41. Views

Popular

Extensions jhttp_scan Version 1.0.1 released

jhttp_scan Version 1.0.1 released

Labels: Security, Extensions, Software Updates

Version 1.0.1 of jhttp_scan, a command-line security tool for scanning Joomla sites, has now been released.  Thanks go to Brian Teeman and Alex Kempkens for their fixes and contributions to this version.

For more information and download details see the information page for jhttp_scan.

Please note this is not an installable extension. It is a PHP file that should be run from the command line or terminal.

New features/fixes in this version of the extension include the following:

  • Fixed issue [#21903] jscan: Shorttag is missing : for h attribute (Alex Kempkens). 
  • Added new variants for acceptable output (Brian Teeman) to reduce the number of false negative results showing.
  • Reassigned -h option for host to -u
  • Reassigned -q option for help to -h
  • Changed the default root and stub to the current working directory, not the location of the script.  You should now only have to specify the -u option if the tool is installed in the local Joomla directory.
  • Added notes in the output to show what directory and what URL are being scanned.
Banner
Banner
Banner
Banner
Banner
Banner