新闻链接：4bfK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3k6J5k6h3g2T1N6h3k6Q4x3X3g2U0L8$3#2Q4x3V1k6@1L8$3!0D9M7#2)9J5c8U0t1$3x3U0V1J5i4K6u0W2K9s2c8E0L8l9`.`.
   新闻时间：2014-02-17
   新闻正文：

SPIP漏洞扫描工具 – SPIPScan

H3lvin @ 工具 2014-02-17 共 787 人围观，发现 0 个不明物体 Favorite收藏该文

SPIP是一基于Web的内容发布系统，SPIPScan是一款基于python编写的SPIP漏洞扫描程序，该版本支持探测服务器所安装的SPIP插件版本、暴力破解、检测主题版本、敏感文件夹识别等。

使用方法如下：

python spipscan.py Usage: spipscan.py [options]Options:
  -h, --help            show this help message and exit
  --website=WEBSITE     Website to pentest
  --path=PATH           Path for webapp (default : "/")
  --plugins             Detect plugins installed
  --themes              Detect themes installed
  --users               Bruteforce user logins
  --sensitive_folders   Detect sensitive folders
  --version             Detect version
  --vulns               Detect possible vulns
  --bruteforce_plugins_file=BRUTEFORCE_PLUGINS_FILE
                        Bruteforce plugin file (eg. plugins_name.db)
  --bruteforce_themes_file=BRUTEFORCE_THEMES_FILE
                        Bruteforce theme file (eg. themes_name.db)
  --bruteforce_logins_file=BRUTEFORCE_LOGINS_FILE
                        Bruteforce login file (eg. user_logins.db)
  --verbose             Verbose mode

版本检测：

$ python spipscan.py --website=24cK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8U0p5J5y4#2)9J5k6e0m8Q4x3X3f1H3i4K6u0W2x3b7`.`. --version

返回结果：

Application is located here : a68K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8U0p5J5y4#2)9J5k6e0m8Q4x3X3f1H3i4K6u0W2x3g2)9J5c8R3`.`.
[!] Version is : 3.0.13
[!] Plugin folder is : plugins-dist/

插件检测：

python spipscan.py --website=926K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8U0p5J5y4#2)9J5k6e0m8Q4x3X3f1H3i4K6u0W2x3b7`.`. --plugins

返回结果：

[!] Plugin folder is : plugins-dist/
[!] folder plugins-dist/ is accessible
[!] Plugin breves detected. Version : 1.3.5
[!] Plugin compagnon detected. Version : 1.4.1
[!] Plugin compresseur detected. Version : 1.8.6
[!] Plugin dump detected. Version : 1.6.7
[!] Plugin filtres_images detected. Version : 1.1.7
[!] Plugin forum detected. Version : 1.8.29
[!] Plugin jquery_ui detected. Version : 1.8.21
[!] Plugin mediabox detected. Version : 0.8.4
[!] Plugin medias detected. Version : 2.7.51
[!] Plugin mots detected. Version : 2.4.10
[!] Plugin msie_compat detected. Versoin : 1.2.0
[!] Plugin organiseur detected. Version : 0.8.10
[!] Plugin petitions detected. Version : 1.4.4
[!] Plugin porte_plume detected. Version : 1.12.4
[!] Plugin revisions detected. Version : 1.7.6
[!] Plugin safehtml detected. Version : 1.4.0
[!] Plugin sites detected. Version : 1.7.10
[!] Plugin squelettes_par_rubrique detected. Version : 1.1.1
[!] Plugin statistiques detected. Version : 0.4.19
[!] Plugin svp detected. Version : 0.80.18
[!] Plugin textwheel detected. Version : 0.8.17
[!] Plugin urls_etendues detected. Version : 1.4.15
[!] Plugin vertebres detected. Version : 1.2.2

[培训]科锐逆向工程师培训第53期2025年7月8日开班！