# Joomla

<https://www.joomla.org/>

***

## Tools

* [droopescan](https://estebanzarate.gitbook.io/hackache/tools/droopescan)
* [joomla-bruteforce](https://estebanzarate.gitbook.io/hackache/tools/joomla-bruteforce)

***

## Enumeration

```bash
curl -s http://dev.inlanefreight.local/ | grep Joomla
curl -s http://dev.inlanefreight.local/README.txt | head -n 5
curl -s http://dev.inlanefreight.local/administrator/manifests/files/joomla.xml | xmllint --format -
```

## Archivos

```
robots.txt
plugins/system/cache/cache.xml
```

## Ataques

<https://github.com/dpgg101/CVE-2019-10945>

## Hardening

<https://docs.joomla.org/Security_Checklist/Joomla!_Setup>

<https://extensions.joomla.org/extension/adminexile/>
