+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Detect Website Hidden CMS Version For Exploitation (/showthread.php?tid=5204868)
Detect Website Hidden CMS Version For Exploitation - Redshadow - Mar 15, 2016
Hi everyone
I am new here, please dont be angry by my question. I used CMSmap, Wappalyzer Addon, Appspector Addon, CMSeye Addon, Chrome Sniffer Addon, W3techs Addon and Builtwith Addon to detect a targeted website plugin details, operating system details, webserver details but I could not detect the CMS version of that particular website I want to exploit.
I also checked the website robots.txt and it disallow administrator, disallow admin, disallow logs, disallow tmp, disallow cache, disallow installation, disallow cli
I think the website is running on joomla but I am not 100% sure
I need your advise on detecting website hidden CMS version?
Please leave a comment. Thanks for reading!
* - Raaz - Mar 15, 2016
No one will be angry, your question is not stupid and is presented in good quality, don't worry. PM me the url, I'll have a look.
* - Redshadow - Mar 16, 2016
Hello Raaz, thanks for willing to help me discover websites hidden CMS versions but do you mind showing me how to detect websites hidden CMS version?
* - Raaz - Mar 16, 2016
The first link you sent in PM (Nigerian) is a blogger cms (blogger.com)
The second link (PM) is not a CMS or could be a custom CMS.
* - Redshadow - Mar 16, 2016
Thanks Raaz, can you detect the custom CMS of the second link I PM you?
* - Raaz - Mar 16, 2016
(Mar 16, 2016 05:31 AM)Redshadow Wrote: Thanks Raaz, can you detect the custom CMS of the second link I PM you?
Nope, its fairly secured 😶
* - Redshadow - Mar 16, 2016
Thanks for your effort. So the second website is unexploitable?
* - hаckеr - Mar 16, 2016
No. Just because it's custom doesn't mean there isn't vulns.