<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# CMS Detection Templates — API Reference

## Nuclei CMS Scanning Options

```bash
# Fingerprint CMS
nuclei -u https://target.com -t cms-detection.yaml -json

# Filter by CMS type
nuclei -u https://target.com -tags wordpress -json

# WordPress plugin enumeration
nuclei -u https://target.com -t wp-plugins/ -json -o results.json
```

## CMS Fingerprint Indicators

| CMS | Detection Paths |
|-----|----------------|
| WordPress | `/wp-content/`, `/wp-login.php`, `/feed/` |
| Joomla | `/administrator/`, `/language/en-GB/en-GB.xml` |
| Drupal | `/CHANGELOG.txt`, `/core/CHANGELOG.txt`, `/user/login` |
| Magento | `/magento_version`, `/admin/`, `/skin/frontend/` |
| Ghost | `/ghost/`, `/content/themes/` |

## Version Extraction Sources

| CMS | Source | Pattern |
|-----|--------|---------|
| WordPress | Meta generator | `WordPress X.Y.Z` |
| WordPress | RSS feed | `?v=X.Y.Z` in generator |
| Joomla | joomla.xml | `<version>X.Y.Z</version>` |
| Drupal | CHANGELOG.txt | `Drupal X.Y.Z` |

## WordPress Plugin Paths

| Pattern | Purpose |
|---------|---------|
| `/wp-content/plugins/{name}/readme.txt` | Plugin version |
| `/wp-content/themes/{name}/style.css` | Theme version |
| `/wp-json/wp/v2/` | REST API endpoints |
| `/xmlrpc.php` | XML-RPC interface |

## CMS Admin Panel Paths

| CMS | Admin URL |
|-----|-----------|
| WordPress | `/wp-admin/`, `/wp-login.php` |
| Joomla | `/administrator/` |
| Drupal | `/user/login`, `/admin/` |
| Magento | `/admin/`, `/index.php/admin/` |
