cosmicsting-validator

Un Cosmicsting POC, con un script bash para verificar todos nuestros sitios alojados y confirmar el parche.

Este repositorio se proporciona para permitir que los propietarios de tiendas / anfitriones confirmen que el parche se ha aplicado en las tiendas. Dentro de check.bash, agregue dominios a la lista SITES.

https://www.sdj.pw/posts/magento2-cosmic-sting-check/

Validador en línea https://cosmicsting.samdjames.uk/

Configuración

# Create a python virtual environment for the project
python -m venv venv

# Activate virtual environment (pick appropriate below)
source venv/bin/activate # MacOS / Unix
venv\Scripts\activate    # Windows

# Install Requirements
pip install -r requirements.txt

Uso

# Run the POC against a single store
./poc.py -u https://samdjames.uk

# To run the POC against multiple stores, first create txt file containing the list of sites seperated by a new line
# for example `sites/example.txt`. And pass it as the first positional argument of the ./z_validate script.
./z_validate sites/example.txt

# A very basic check monitoring stores for compromise
# Dumps all script src's to a file, and compares against the previous run.
./z_compromise_check sites/example.txt