Pentesting/ security audit

Question

Hello,

I need to do a pentest in a deployed Odoo system. Any resources for doing pestesting/ auditing in any version of Odoo?

Thanks in advance.

Mary Bilsin · Answer

Hello Julian,

You can use odoomap: https://github.com/MohamedKarrab/odoomap [1] , it's a reconnaissance, enumeration, and pentesting tool for Odoo applications.

Features
- Detect Odoo version and metadata
- Enumerate databases and accessible models
- Authenticate and check CRUD permissions
- Extract data from specific models
- Brute-force login credentials & Master password
- Brute-force internal model names

And I can see that more features are getting added actively.

[1] https://github.co

Jérôme Dewandre · Answer

Hello,
You should have a look at this https://github.com/cyberwave-odoo/odooscan/ [1] , feel free to contact us for support.
Kind regards

Jérôme Dewandre

[1] https://github.com/cyberwave-odoo/odooscan/

This question has been flagged

Enjoying the discussion? Don't just read, join in!