Browse code
format properly
Hanno Böck authored on 30/01/2022 12:14:30
Showing 1 changed files
| ... | ... |
@@ -10,25 +10,33 @@ Install |
| 10 | 10 |
|
| 11 | 11 |
You can install [freewvs via pip](https://pypi.org/project/freewvs/): |
| 12 | 12 |
|
| 13 |
- pip install freewvs |
|
| 13 |
+``` |
|
| 14 |
+pip install freewvs |
|
| 15 |
+``` |
|
| 14 | 16 |
|
| 15 | 17 |
Alternatively you can run freewvs directly from the git source. |
| 16 | 18 |
|
| 17 | 19 |
If you install via pip you need to update the freewvs database first: |
| 18 | 20 |
|
| 19 |
- update-freewvsdb |
|
| 21 |
+``` |
|
| 22 |
+update-freewvsdb |
|
| 23 |
+``` |
|
| 20 | 24 |
|
| 21 | 25 |
## usage |
| 22 | 26 |
|
| 23 | 27 |
Just run freewvs with a path, e.g.: |
| 24 | 28 |
|
| 29 |
+``` |
|
| 25 | 30 |
freewvs /var/www |
| 31 |
+``` |
|
| 26 | 32 |
|
| 27 | 33 |
The output will be something like this: |
| 28 | 34 |
|
| 29 |
- Joomla 3.9.11 (3.9.14) CVE-2019-19846 /var/www/example.org |
|
| 30 |
- nextcloud 14.0.1 (14.0.5) CVE-2019-5449 /var/www/cloud.example.org |
|
| 31 |
- MediaWiki 1.31.1 (1.31.6) CVE-2019-19709 /var/www/wiki.example.org |
|
| 35 |
+``` |
|
| 36 |
+Joomla 3.9.11 (3.9.14) CVE-2019-19846 /var/www/example.org |
|
| 37 |
+nextcloud 14.0.1 (14.0.5) CVE-2019-5449 /var/www/cloud.example.org |
|
| 38 |
+MediaWiki 1.31.1 (1.31.6) CVE-2019-19709 /var/www/wiki.example.org |
|
| 39 |
+``` |
|
| 32 | 40 |
|
| 33 | 41 |
## faq |
| 34 | 42 |
|
Browse code
add some info from webpage to readme
Hanno Böck authored on 30/01/2022 12:12:57
Showing 1 changed files
| ... | ... |
@@ -4,6 +4,32 @@ A local web vulnerability scanner. |
| 4 | 4 |
|
| 5 | 5 |
freewvs is a tool to search webroots for know vulnerable versions of web applications. |
| 6 | 6 |
|
| 7 |
+## install |
|
| 8 |
+ |
|
| 9 |
+Install |
|
| 10 |
+ |
|
| 11 |
+You can install [freewvs via pip](https://pypi.org/project/freewvs/): |
|
| 12 |
+ |
|
| 13 |
+ pip install freewvs |
|
| 14 |
+ |
|
| 15 |
+Alternatively you can run freewvs directly from the git source. |
|
| 16 |
+ |
|
| 17 |
+If you install via pip you need to update the freewvs database first: |
|
| 18 |
+ |
|
| 19 |
+ update-freewvsdb |
|
| 20 |
+ |
|
| 21 |
+## usage |
|
| 22 |
+ |
|
| 23 |
+Just run freewvs with a path, e.g.: |
|
| 24 |
+ |
|
| 25 |
+freewvs /var/www |
|
| 26 |
+ |
|
| 27 |
+The output will be something like this: |
|
| 28 |
+ |
|
| 29 |
+ Joomla 3.9.11 (3.9.14) CVE-2019-19846 /var/www/example.org |
|
| 30 |
+ nextcloud 14.0.1 (14.0.5) CVE-2019-5449 /var/www/cloud.example.org |
|
| 31 |
+ MediaWiki 1.31.1 (1.31.6) CVE-2019-19709 /var/www/wiki.example.org |
|
| 32 |
+ |
|
| 7 | 33 |
## faq |
| 8 | 34 |
|
| 9 | 35 |
#### What does freewvs do? |
Browse code
fix markdown linK
Hanno Böck authored on 11/09/2020 20:15:24
Showing 1 changed files
Browse code
contributions file
Hanno Böck authored on 23/05/2020 09:38:39
Showing 1 changed files
| ... | ... |
@@ -29,6 +29,10 @@ No, as freewvs only checks for the latest vulnerabilities. There may be other vu |
| 29 | 29 |
|
| 30 | 30 |
It means your web application has not released a security update. Often this means the software is no longer developed. |
| 31 | 31 |
|
| 32 |
+## contributions |
|
| 33 |
+ |
|
| 34 |
+See (CONTRIBUTIONS.md)[CONTRIBUTIONS.md]. |
|
| 35 |
+ |
|
| 32 | 36 |
## misc |
| 33 | 37 |
|
| 34 | 38 |
freewvs was developed by [schokokeks.org hosting](https://schokokeks.org/). |
Browse code
avoid old URL and remove useless markdown link
Hanno Böck authored on 22/12/2019 12:36:47
Showing 1 changed files
Browse code
add cleaned up version of FAQ from wiki
Hanno Böck authored on 07/12/2019 13:30:52
Showing 1 changed files
| 1 | 1 |
new file mode 100644 |
| ... | ... |
@@ -0,0 +1,38 @@ |
| 1 |
+# freewvs |
|
| 2 |
+ |
|
| 3 |
+A local web vulnerability scanner. |
|
| 4 |
+ |
|
| 5 |
+freewvs is a tool to search webroots for know vulnerable versions of web applications. |
|
| 6 |
+ |
|
| 7 |
+## faq |
|
| 8 |
+ |
|
| 9 |
+#### What does freewvs do? |
|
| 10 |
+ |
|
| 11 |
+It scans your webroot for known vulnerable versions of popular web applications. |
|
| 12 |
+ |
|
| 13 |
+#### What does the output tell me? |
|
| 14 |
+ |
|
| 15 |
+Output looks like this: |
|
| 16 |
+ |
|
| 17 |
+``` |
|
| 18 |
+Joomla-3 3.9.11 (3.9.13) CVE-2019-18674 /home/joe/websites/joessite/ |
|
| 19 |
+``` |
|
| 20 |
+ |
|
| 21 |
+This says that in /home/joe/websites/joessite/, there's a Joomla installation of version 3.9.11. This version is |
|
| 22 |
+vulnerable to CVE-2019-18674 and you should update to version 3.9.13. |
|
| 23 |
+ |
|
| 24 |
+#### CVE-2019-XXXX seems to be very minor, at least it doesn't affect me. Am I safe? |
|
| 25 |
+ |
|
| 26 |
+No, as freewvs only checks for the latest vulnerabilities. There may be other vulnerabilities in your version not listed by freewvs. The only way to be sure is to check the upstream changelog. |
|
| 27 |
+ |
|
| 28 |
+#### There is no version inside the brackets, what does that mean? |
|
| 29 |
+ |
|
| 30 |
+It means your web application has not released a security update. Often this means the software is no longer developed. |
|
| 31 |
+ |
|
| 32 |
+## misc |
|
| 33 |
+ |
|
| 34 |
+freewvs was developed by [schokokeks.org hosting](https://schokokeks.org/). |
|
| 35 |
+ |
|
| 36 |
+It's licensed as CC0. |
|
| 37 |
+ |
|
| 38 |
+[https://source.schokokeks.org/freewvs/](https://source.schokokeks.org/freewvs/) |