> For the complete documentation index, see [llms.txt](https://wiki.pentestlist.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://wiki.pentestlist.com/offensive-security/web-application/discovery/cms-scanners.md).

# CMS Scanners

A Content Management System (CMS) is used to provide easy website creation and management to end users. A CMS typically helps users setup blogs, online stores and brochureware websites. 70% or more of the internet is made up of common CMS systems, such as WordPress, Joomla and Shopify. 

## Automated Scanners

As a CMS is easy to identify and they are widely used in the same way, various scanners exist to look for known vulnerabilities and outdated technologies. The following list presents these scanners:

**WordPress**

* <https://github.com/wpscanteam/wpscan>

**WordPress, Joomla, Drupal and Moodle**

* <https://github.com/dionach/CMSmap>

**Generic Web Technology**

* [Wappalyzer](https://www.wappalyzer.com/)&#x20;