vBulletin is one of the popular community, forum software powering more than 100,000 sites on the Internet. Like every software, vBulletin may be vulnerable if not hardened and secured correctly. As a best practice, you should frequently scan your Internet-facing community to find weaknesses so you can mitigate before hacker’s eyes on it. There are two ways:

Manual – run security scan periodically.Automatic – leverage cloud-based scanner to scan regularly and you get notified whenever a vulnerability is found.

As you can guess, the automatic way sounds better. Why securing a forum? One may argue, my business is not the forum. It’s just for people to talk to each other, raise issues, etc. But think about this – your online business has a forum, and there are more than 1 million users. You don’t care about security, and one day someone has hacked the forum and leaked all the user details. How embarrassing, reputational loss, consumer trust loss, etc. Let’s explore the tools.

VBScan

A project by OWASP. VBScan is based on Perl and capable of analyzing vBulletin for vulnerabilities. It includes more than 70 modules to detect the flaws. Installation is straightforward, and you can use it on any OS.

Download the latest version from GitHubUnzip (if you downloaded source as a zip file)Go to the newly created folder during zip extractChange the permission of vbscan.pl to be executable

And you are good to go! Updating vbscan is easy.

CMSScan

Above mentioned VBScan powers CMSScan. One advantage it offers is the scheduler. This is great if you are looking for an open-source solution to run periodically and send the reports through email. Not just VBulletin but CMSScan also let you test WordPress, Joomla, Drupal. By default, the web interface listening on port 7070 and when you access that in the browser, you will see the beautiful page where you enter the URL to be scanned.

TLS Scanner

Geekflare TLS Scanner is not specific to vBulletin, but it is essential to ensure TLS certificate implementation is correct. You can run the test against your vBulletin to find out the supported TLS protocol, ciphers, common web vulnerabilities, and certificate details. There is more SSL/TLS scanner listed here.

Invincti

An enterprise-ready scanner is available as self-hosted or cloud-based. Invicti can be integrated with development to provide continuous security to small or large websites. With their proprietary proof-based scanning technology, you can scan vBulletin or entire web applications quickly to get actionable results. It covers a large number of web vulnerabilities, including OWASP top 10. Conclusion Keeping online assets secure is challenging, and periodic scan against vBulletin or any web applications is MUST so you can mitigate as soon as vulnerabilities are found. The above tools help you to find the security flaws, and if you are looking for continuous security protection, then you may choose SUCURI Cloud WAF.

4 Tools to Scan vBulletin for Security Vulnerabilities - 604 Tools to Scan vBulletin for Security Vulnerabilities - 44 Tools to Scan vBulletin for Security Vulnerabilities - 764 Tools to Scan vBulletin for Security Vulnerabilities - 564 Tools to Scan vBulletin for Security Vulnerabilities - 14 Tools to Scan vBulletin for Security Vulnerabilities - 444 Tools to Scan vBulletin for Security Vulnerabilities - 944 Tools to Scan vBulletin for Security Vulnerabilities - 844 Tools to Scan vBulletin for Security Vulnerabilities - 844 Tools to Scan vBulletin for Security Vulnerabilities - 184 Tools to Scan vBulletin for Security Vulnerabilities - 154 Tools to Scan vBulletin for Security Vulnerabilities - 284 Tools to Scan vBulletin for Security Vulnerabilities - 14 Tools to Scan vBulletin for Security Vulnerabilities - 624 Tools to Scan vBulletin for Security Vulnerabilities - 74 Tools to Scan vBulletin for Security Vulnerabilities - 464 Tools to Scan vBulletin for Security Vulnerabilities - 64 Tools to Scan vBulletin for Security Vulnerabilities - 914 Tools to Scan vBulletin for Security Vulnerabilities - 414 Tools to Scan vBulletin for Security Vulnerabilities - 164 Tools to Scan vBulletin for Security Vulnerabilities - 14 Tools to Scan vBulletin for Security Vulnerabilities - 314 Tools to Scan vBulletin for Security Vulnerabilities - 594 Tools to Scan vBulletin for Security Vulnerabilities - 834 Tools to Scan vBulletin for Security Vulnerabilities - 554 Tools to Scan vBulletin for Security Vulnerabilities - 92