Exploit Notes

Joomla CMS Pentesting

Last modified: 2023-02-20

Web

Joomla is a content managemen system (CMS).

Default Credentials

The default username is "admin" and no password.


Interesting Files

/administrator/manifests/files/joomla.xml
/language/en-GB/en-GB.xml

Tools by HDKS

Fuzzagotchi

Automatic web fuzzer.

aut0rec0n

Auto reconnaissance CLI.

Hash Cracker

Hash identifier.