Mage Scan

The idea behind this is to evaluate the quality and security of a Magento site you don't have access to. The scenario when you're interviewing a potential developer or vetting a new client and want to have an idea of what you're getting into.

Installation

.phar

Download the magescan.phar file
Run in command line with the php command

curl -o magescan.phar http://magescan.steverobbins.com/download/magescan.phar
php magescan.phar scan www.example.com

Source

Clone this repository
Install with composer

git clone https://github.com/steverobbins/magescan magescan
cd magescan
curl -sS https://getcomposer.org/installer | php
php composer.phar install
bin/magescan scan www.example.com

n98-magerun

Clone into your ~/.n98-magerun/modules directory

mkdir -p ~/.n98-magerun/modules
git clone https://github.com/steverobbins/magescan ~/.n98-magerun/modules/magescan
magerun magescan:scan store.example.com

Composer

composer require steverobbins/magescan --dev

Include in your project

Add the following to your composer.json

"require": {
    "steverobbins/magescan": "dev-master"
}

Usage

$ magescan.phar scan store.example.com

Commands

`scan`

$ magescan.phar scan [--insecure|-k] [--show-modules] <url>

Scans the given <url>.

Options

`--insecure`, `-k`

If set, SSL certificates won't be validated

`--show-modules`

Show all modules that we tried to detect, not just those that were found

`selfupdate`

$ magescan.phar selfupdate

Updates the phar file to the latest version.

Disclaimer

Since we can't see the code base, this tool makes assumptions and takes guesses. Information reported isn't guaranteed to be correct.

For in depth analyses, consider:

Support

Please create an issue for all bugs and feature requests

Contributing

Fork this repository and send a pull request to the dev branch

License

Creative Commons Attribution 4.0 International

Failed to load latest commit information.
bin	Added script to generate version hashes, updated hash.json	Aug 21, 2015
build	New domain name	Jun 12, 2015
public	Making HTTP requests insecure by default	Aug 4, 2015
src	Incrementing version number	Aug 21, 2015
test	Added script to generate version hashes, updated hash.json	Aug 21, 2015
.gitignore	Adding scan command test	May 19, 2015
.scrutinizer.yml	MGA is now Mage Scan	May 11, 2015
.travis.yml	Implements #77 , Finding Magento version via file hash	Jun 11, 2015
README.md	Issue #81 : Moving PHP arrays to config files	Jul 22, 2015
box.json	MGA is now Mage Scan	May 11, 2015
composer.json	New domain name	Jun 12, 2015
n98-magerun.yaml	[TASK] Added n98-magerun module init file.	May 15, 2015
phpcs.xml	Implements #77 , Finding Magento version via file hash	Jun 11, 2015
phpunit.xml	Code review fixes	May 26, 2015

gwillem/magescan forked from steverobbins/magescan

README.md