Joomla

https://www.joomla.org/

---

Tools

• droopescan

• joomla-bruteforce

---

Enumeration

curl -s http://dev.inlanefreight.local/ | grep Joomla
curl -s http://dev.inlanefreight.local/README.txt | head -n 5
curl -s http://dev.inlanefreight.local/administrator/manifests/files/joomla.xml | xmllint --format -

Archivos

robots.txt
plugins/system/cache/cache.xml

Ataques

https://github.com/dpgg101/CVE-2019-10945

Hardening

https://docs.joomla.org/Security_Checklist/Joomla!_Setup

https://extensions.joomla.org/extension/adminexile/