Shulou(Shulou.com)06/01 Report--

Magento (McJindou) is a professional open source e-commerce system. Magento is designed to be very flexible, with modular architecture and rich functions. It is easy to integrate seamlessly with third-party applications. It is oriented to enterprise applications and can deal with all kinds of needs, as well as the construction of an e-commerce website with multiple uses and applicability. Including shopping, shipping, product reviews, etc., make full use of open source features, provide code base development, very standardized standards, easy to seamlessly integrate with third-party applications

(just introduce what magento is, please search Baidu for more information)

Magescan is a tool to evaluate the security of magento.

Installation method

Git clone https://github.com/steverobbins/magescan magescan

Cd magescan

Curl-sS https://getcomposer.org/installer | php

Php composer.phar install

Bin/magescan scan:all www.xxx.com

Command syntax

Magescan.phar scan:all [--insecure |-k] [--show-modules]

Parameters.

-- format=FORMAT

Specify different output formats:

Default json-- insecure,-k if set The SSL certificate will not be verified-- show-modules lists all modules searched scan:catalog magescan.phar scan:catalog [--insecure |-k] to get directory information scan:modules magescan.phar scan:modules [--insecure |-- show-modules] to get installed modules Scan:patch magescan.phar scan:patch [--insecure |-k] get patch information scan:server magescan.phar scan:server [--insecure |-k] check server version scan : sitemap magescan.phar scan:sitemap [--insecure |-k] check site map scan:unreachable magescan.phar scan:unreachable [--insecure |-k] check the unreachable path scan: Version magescan.phar scan:version [--insecure |-k] get the version installed by Magento to show all the modules we detected self-update magescan.phar self-update to update the phar file to the latest version

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.