sitecore_scan 0.0.3 → 0.0.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: bd30c3c23e866d2f966d0b69cf5ebc3d23a6008661ad2b127f186fa6944e3917
-  data.tar.gz: 4d4f9c8c9acf5be5ec3171e417a104a9a6c1408bf28962882f567f07218c99ce
+  metadata.gz: b678037d9c8815435b9e010914c27478105b0edb7b5d3c894cfb1fccb7cb3107
+  data.tar.gz: 7da2e224e3427c8e9f8f34b42acc1970e5ccfd3ccfccbd7e27b956e53a1efdf7
 SHA512:
-  metadata.gz: bd74227b8846e8168fad58a01f392fb36dc0b1fb0c482a3763518e8f9256e3beadca1634fbb3d1519c0f5d757a8f4689ce07b2029d1a9ce9e5f118f9947450cc
-  data.tar.gz: 30462814098889ac8b478435d469f86c34e4a05b4cb824d83ffb8b94331a22193edabce3bd6af5d5c793c07fb3e49a73e9301acec2de6f5e17baa9a498d5bd8a
+  metadata.gz: 487fb1c72d1adf02654b5b22d887bc0d1774f5521ff299c04dfbf8f57e2ecf819bcc2cc732bef59bad37cf1c026bbe701716432c0d67c793ec2717768aa3ac85
+  data.tar.gz: ae6bb06f1925ab086b744ea4cd46768028a95af647da39c240cc64a8d59b5bd569044fe338f2a9d2e6f7473622054cdec110d0004a23195dca7ed319a58a2582

data/bin/sitecore-scan

@@ -93,8 +93,7 @@ def scan(url, check: true, insecure: false, verbose: false)
 
   # Check if the URL is Sitecore
   if check
-    is_sitecore = SitecoreScan::detectSitecore(url)
-    unless is_sitecore
+    unless SitecoreScan::detectSitecore(url)
       puts '- Sitecore not found'
       exit(1)
     end
@@ -106,20 +105,19 @@ def scan(url, check: true, insecure: false, verbose: false)
   puts "+ Version: #{version}" if version
 
   # Check if Glimpse debugging is enabled
-  glimpse = SitecoreScan::glimpseDebugging(url)
-  puts "+ Glimpse debugging is enabled" if glimpse
+  puts "+ Glimpse debugging is enabled" if SitecoreScan::glimpseDebugging(url)
 
   # Check if SOAP API is accessible
-  soap_api = SitecoreScan::soapApi(url)
-  puts "+ SOAP API is available" if soap_api
+  puts "+ SOAP API is available" if SitecoreScan::soapApi(url)
+
+  # Check if MVC Device Simulator allows file disclosure
+  puts "+ MVC Device Simulator allows file disclosure" if SitecoreScan::mvcDeviceSimulatorFileDisclosure(url)
 
   # Check if Executive Insight Dashboard reporting is accessible
-  reporting = SitecoreScan::dashboardReporting(url)
-  puts "+ Executive Insight Dashboard reporting is available" if reporting
+  puts "+ Executive Insight Dashboard reporting is available" if SitecoreScan::dashboardReporting(url)
 
   # Check if Telerik Web UI is accessible
-  telerik = SitecoreScan::telerikWebUi(url)
-  puts "+ Telerik Web Ui is available" if telerik
+  puts "+ Telerik Web Ui is available" if SitecoreScan::telerikWebUi(url)
 
   puts "Scan finished at #{Time.now.getutc}"
   puts '-' * 60

data/lib/sitecore_scan.rb

@@ -11,7 +11,7 @@ require 'openssl'
 require 'stringio'
 
 class SitecoreScan
-  VERSION = '0.0.3'.freeze
+  VERSION = '0.0.4'.freeze
 
   def self.logger
     @logger
@@ -30,13 +30,27 @@ class SitecoreScan
   end
 
   #
-  # Check if URL is running Sitecore using edit mode
+  # Check if URL is running Sitecore
   #
   # @param [String] URL
   #
   # @return [Boolean]
   #
   def self.detectSitecore(url)
+    return true if detectSitecoreEditMode(url)
+    return true if detectSitecoreErrorRedirect(url)
+
+    false
+  end
+
+  #
+  # Check if URL is running Sitecore using edit mode
+  #
+  # @param [String] URL
+  #
+  # @return [Boolean]
+  #
+  def self.detectSitecoreEditMode(url)
     url += '/' unless url.to_s.end_with? '/'
     res = sendHttpRequest("#{url}?sc_mode=edit")
 
@@ -49,6 +63,25 @@ class SitecoreScan
     false
   end
 
+  #
+  # Check if URL is running Sitecore using error redirect
+  #
+  # @param [String] URL
+  #
+  # @return [Boolean]
+  #
+  def self.detectSitecoreErrorRedirect(url)
+    url += '/' unless url.to_s.end_with? '/'
+    res = sendHttpRequest("#{url}#{('a'..'z').to_a.shuffle[0,8].join}.aspx")
+
+    return false unless res
+
+    return true if res['sitecore-item']
+    return true if res.code.to_i == 302 && res['location'].to_s.downcase.include?('sitecore/service/notfound.aspx')
+
+    false
+  end
+
   #
   # Retrieve Sitecore version from Login page
   #
@@ -109,6 +142,28 @@ class SitecoreScan
     true
   end
 
+  #
+  # Check if MVC Device Simulator allows file disclosure (SC2023-001-568150)
+  # https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1002925
+  # https://blog.assetnote.io/2023/05/10/sitecore-round-two/
+  #
+  # @param [String] URL
+  #
+  # @return [Boolean]
+  #
+  def self.mvcDeviceSimulatorFileDisclosure(url)
+    url += '/' unless url.to_s.end_with? '/'
+    res = sendHttpRequest("#{url}api/sitecore/Sitecore.Mvc.DeviceSimulator.Controllers.SimulatorController,Sitecore.Mvc.DeviceSimulator.dll/Preview?previewPath=/App_Data/license.xml")
+
+    return false unless res
+    return false unless res.code.to_i == 200
+    return false unless res.body.to_s.include?('<?xml')
+    return false unless res.body.to_s.include?('sitecore')
+    return false unless res.body.to_s.include?('signedlicense')
+
+    true
+  end
+
   #
   # Check if Executive Insight Dashboard reporting is accessible (CVE-2021-42237)
   # https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1000776
@@ -123,7 +178,7 @@ class SitecoreScan
 
     return false unless res
     return false unless res.code.to_i == 200
-    return false unless res.body.to_s.include? 'Sitecore.Analytics.Reporting'
+    return false unless res.body.to_s.include?('Sitecore.Analytics.Reporting')
 
     true
   end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: sitecore_scan
 version: !ruby/object:Gem::Version
-  version: 0.0.3
+  version: 0.0.4
 platform: ruby
 authors:
 - Brendan Coles
-autorequire: 
+autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-02-09 00:00:00.000000000 Z
+date: 2024-05-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: logger
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.4'
+        version: '1.6'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.4'
+        version: '1.6'
 description: A simple remote scanner for Sitecore CMS
 email: bcoles@gmail.com
 executables:
@@ -37,7 +37,7 @@ homepage: https://github.com/bcoles/sitecore_scan
 licenses:
 - MIT
 metadata: {}
-post_install_message: 
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -45,15 +45,15 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 2.0.0
+      version: 2.5.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.7
-signing_key: 
+rubygems_version: 3.3.26
+signing_key:
 specification_version: 4
 summary: Sitecore scanner
 test_files: []