Pearson's OSCP Notebook

CMSeeK - cmseek

Properties1
tagscmseek, cms, wordpress, joomla, drupal, web-scanner, enumeration, recon, oscp

3 min read

CMSeeK — cmseek (CMS Detection & Exploitation)

Ctrl+F: cmseek · CMSeeK · python3 cmseek.py · CMS detection · WordPress · Joomla · Drupal

CMSeeK is a CMS detection and exploitation suite — scans WordPress, Joomla, Drupal, and 180+ other CMSs. Finds CMS type + version, then can run deeper checks.

Use when you have a web app but don’t know the stack yet — before or alongside WPScan (WordPress-only).

GitHub: Tuhinshubhra/CMSeeK

Install (Kali)

sudo apt update && sudo apt install -y cmseek
DetailValue
Packagecmseek
Installed size~400 KB
Runcmseek (guided) or python3 cmseek.py from install dir
# Typical paths after apt
which cmseek
ls /usr/share/cmseek/cmseek.py 2>/dev/null
 
# Or guided menu
cmseek

→ Installation - Kali Setup

Syntax

python3 cmseek.py [OPTIONS] <target>
cmseek                                          # interactive guided scan

📌 Flags (from cmseek -h)

Target

FlagDescription
-u URL, --url URLSingle target URL
-l LIST, --list LISTFile of URLs — comma-separated sites for multi-scan

Scan behavior

FlagDescription
-i cms, --ignore-cms cmsSkip CMS IDs (comma-separated) — reduce false positives
--strict-cms cmsOnly test listed CMS IDs (comma-separated)
--skip-scannedSkip if CMS already detected in prior results
--light-scanCMS + version only — no deep scan
-o, --only-cmsDetect CMS only — no version/deep scan

Redirects

FlagDescription
--follow-redirectFollow redirects
--no-redirectTest input URL only — skip redirects

User-Agent

FlagDescription
-r, --random-agentRandom User-Agent
--googlebotGooglebot User-Agent
--user-agent UACustom User-Agent string

Output / misc

FlagDescription
-v, --verboseVerbose output
--versionCMSeeK version
-h, --helpHelp
--clear-resultDelete all scan results
--batchNo pause between sites in a list scan

📌 Examples

# Single site
python3 cmseek.py -u http://TARGET/
python3 cmseek.py -u http://TARGET/ -v
 
# Multi-site (comma-separated in file)
python3 cmseek.py -l /path/to/targets.txt
 
# Fast — CMS + version only
python3 cmseek.py -u http://TARGET/ --light-scan
 
# CMS type only
python3 cmseek.py -u http://TARGET/ --only-cms
 
# Follow redirects + random UA
python3 cmseek.py -u http://TARGET/ --follow-redirect --random-agent
 
# Custom User-Agent
python3 cmseek.py -u http://TARGET/ --user-agent "Mozilla/5.0"
 
# WordPress-only strict mode (example CMS ID — verify in CMSeeK docs)
python3 cmseek.py -u http://TARGET/ --strict-cms wp

📌 OSCP workflow

HTTP/HTTPS on 80/443
    ↓
[[CMSeeK - cmseek]]  — what CMS?
    ↓
WordPress → [[WPScan]] · Joomla/Drupal → [[searchsploit]] + version
    ↓
Known CVE → [Trickest CVE PoCs](https://github.com/trickest/cve/tree/main) · **[[Version CVEs]]**
CMS foundNext step
WordPressWPScan — users, plugins, themes, vulns
Joomla / Drupalsearchsploit · Nikto · version → exploit
Unknown / customGobuster · ffuf · Nikto
# Port 80 enum stack
python3 cmseek.py -u http://TARGET/ -v --follow-redirect
whatweb http://TARGET/                    # quick second opinion
wpscan --url http://TARGET/ -e u,p,t      # if CMSeeK says WordPress

📌 vs other tools

ToolScope
CMSeeKWhich CMS? + version + deep scan (180+ CMSs)
WPScanWordPress-only — deeper plugin/theme vulns
whatwebFingerprint stack — lighter
NiktoGeneric web vuln scanner

📌 Quick cheat sheet

sudo apt install -y cmseek
python3 cmseek.py -u http://TARGET/
python3 cmseek.py -u http://TARGET/ --light-scan -v
python3 cmseek.py -l targets.txt --batch
cmseek    # guided mode

Graph View

Backlinks