Ethical Hacking
  • Introduction to Information Security
    • What is Hacking?
    • Type of Hacking
    • Exercise
    • Uses of Proxy Servers
    • Summary Proxy & VPN
    • Summary
  • Gathering Information About Websites
    • Gathering Information
    • Gathering Targeted Information
  • Google Droks
  • Introduction to Web Architecture and Understanding Common Security Misconceptions
    • Web Servers
    • Web Server Architecture
    • Web Server Architecture Combinations
  • VA & PT
    • OWASP
    • SQL Injection
    • Advanced SQL Injections
    • Burp Suit
      • Client Side Validation Burp Suite Bypass
      • Client Side Validation Burp Suite Bypass
      • GET Based IDOR in URL
      • Post Based IDOR Variant
      • GET Based IDOR in URL
      • Post Based IDOR in URL
      • Download based
  • Arbitrary File Upload Vulnerabilities
    • Server Side Attack
    • Server Side Attack
    • Client Side Attack
  • Understanding Response Headers
    • Event Listeners
  • Fundamentals of Cross Site Scripting (XSS)
    • Temporary XSS
  • Understanding Forced Browsing and Session-Cookie Flaws
    • Forced Browsing
    • Cross Site Request Forgery
    • Open Redirection
  • Dictionary Based Brute Force Attacks
    • Dictionary Based Bruteforcing
    • Logical Bruteforcing
    • PII Leakage Variant
  • Identifying Security is configurations and Exploiting Outdated Web Applications
    • Information Disclosure via Descriptive Messages
    • Default Debug Pages
    • How to guess password for a standard login page
    • Default/Weak Password in Custom CMS
    • Fingerprinting Components with Known Vulnerabilities
    • Finding Exploits for Components with Known Vulnerabilities
    • Default/Weak Password in Public Software
    • Vulnerable Components Installed
    • Vulnerable Components Installed 2
    • Vulnerable Components Installed 3
  • Scanning for Bugs in WordPress and Drupal
    • What is CMS?
    • Variant 1
    • Vulnerable CMS
    • How to Scan Drupal CMS for Known Vulnerabilities?
    • Joomla CMS
  • Automating VAPT and Secure Code Development
    • information gathering
    • Nmap Scans
    • Automating VAPT:
  • POC
    • Recommendations for Documenting a Vulnerability
    • PoC
    • Types of Reports
    • Recommendations for OWASP Top 10 Vulnerabilities
    • Components of a VAPT Report
    • Vulnerability Information (for each vulnerability)
    • Bad Practices to Avoid While Writing a Report
Powered by GitBook
On this page
  1. Scanning for Bugs in WordPress and Drupal

What is CMS?

CMS stands for Content Management System. It is a software application or a set of related programs that are used to create and manage digital content. A CMS is designed to simplify the process of content creation, editing, and publication on the web.

Key features of a CMS include:

  1. Content Creation: Allows users to create and edit digital content, such as articles, images, videos, and other multimedia elements.

  2. Content Storage: Provides a centralized repository for storing and organizing content in a structured manner.

  3. Workflow Management: Supports collaborative content creation and editing workflows, often with user roles and permissions to control access.

  4. Version Control: Keeps track of changes made to content over time, allowing users to revert to previous versions if needed.

  5. Publishing: Facilitates the process of publishing content to a website or other digital platforms.

  6. Templates: Allows users to define the structure and layout of content through templates, ensuring consistency across the site.

  7. User Management: Provides tools for managing user accounts, roles, and permissions to control access to different parts of the system.

Popular CMS platforms include:

  • WordPress

  • Joomla

  • Drupal

  • Magento (for e-commerce)

  • Shopify (for e-commerce)

  • Contentful

  • Wix

  • Squarespace

Each CMS has its strengths and is often chosen based on specific project requirements, such as the type of website, scalability, customization options, and ease of use.

PreviousScanning for Bugs in WordPress and DrupalNextVariant 1

Last updated 1 year ago