Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Introduced Moodle Scanner #151

Merged
merged 22 commits into from
Feb 15, 2025
Merged

Conversation

kshitijk4poor
Copy link
Contributor

🔍 Add Moodle Scanner Module

Adds a new scanner module to detect and analyze Moodle installations.

Key features:

  • 🎯 Version detection & server fingerprinting
  • 🔒 Vulnerability scanning via moodlescan
  • 📊 Structured output parsing
  • ⚡ Error handling & logging

📋TODO

  • Add test cases

return list(messages.values())


@load_risk_class.load_risk_class(load_risk_class.LoadRiskClass.MEDIUM)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

how many requests does the scanner make? if e.g. a couple low-risk requests (homepage, readme etc.) we can treat it as low risk

@kazet
Copy link
Member

kazet commented Jan 31, 2025

The PR is heading in a quite good direction! What seems missing (or I just don't see that) is:

  • what is the meaning of moodle_version_found report? IMO we should report only if the version is obsolete. If that's the case, can we rename it to obsolete_moodle_version_found ?
  • the possibility to set user-agent to the one Artemis is using
  • does the scanner fail on websites with bad SSL? IMO it should not, the websites with bad SSL are often the ones with the most juicy findings :)

@kazet kazet merged commit 9c613ba into CERT-Polska:main Feb 15, 2025
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants