LiferayScan is a simple remote scanner for Liferay Portal.
bundle install
gem build LiferayScan.gemspec
gem install --local LiferayScan-0.0.1.gem
% LiferayScan -h
Usage: LiferayScan <url> [options]
-u, --url URL Liferay URL to scan
-s, --skip Skip check for Liferay
-v, --verbose Enable verbose output
-h, --help Show this help
require 'LiferayScan'
is_liferay = LiferayScan::isLiferay(url) # Check if a URL is Liferay
version = LiferayScan::getVersion(url) # Get Liferay version
language = LiferayScan::getLanguage(url) # Get default language (ie, en_US)
domain = LiferayScan::getOrganisationEmail(url) # Get organisation email address domain (ie, @liferay.com)
register = LiferayScan::userRegistration(url) # Check if user registration if enabled
soap_api = LiferayScan::remoteSoapApi(url) # Check if SOAP API is accessible
json_api = LiferayScan::remoteJsonApi(url) # Check if JSON API is accessible
captcha = LiferayScan::usesCaptcha(url) # Check if Forgot Password uses CAPTCHA
users = LiferayScan::enumerateUsers(url) # Enumerate some user names from open search and blog rss
portlets = LiferayScan::enumeratePortlets(url) # Enumerate installed portlets