21727 matches found
JCS
JCS Joomla Component Scanner made for penetration testing purpose on Joomla CMS JCS can help you with the latest component vulnerablities and exploits. Database can update from several resources and a Crawler has been implemented to find components and component's link. This version supports...
joomla.3.7.0exploit
CVE-2017-8917 Joomla SQLi PoC This repository contains a simple, CTF-friendly proof of concept PoC for the Joomla comfields SQL injection vulnerability CVE-2017-8917. The goal is to keep the workflow lightweight while still showing the full exploitation flow: detection, enumeration, and data...
Joomla_CVE_2026_48907
MASTA CVE-2026-48907 Scanner Single-file, self-contained scanner for Joomla! JCE Editor Author: Alma !CAUTION 🚨 DISCLAIMER — READ BEFORE USE THIS IS AN INTRUSIVE SECURITY TESTING TOOL. THIS TOOL IS FOR AUTHORIZED SECURITY ASSESSMENTS ONLY. Scanning systems you do NOT own or have WRITTEN PERMISSIO...
Config-Exploiter
Config-Exploiter Config-Exploiter : dump config.php File From Joomla And Wordpress Websites Programmed By Belahsan Ouerghi . Installation sudo apt-get install git git clone https://github.com/TunisianEagles/Config-Exploiter.git cd Config-Exploiter chmod +x install.sh sudo ./install.sh chmod +x...
CMSsc4n
CMSsc4n Tool to identify if a domain has got a CMS and determine his version. At the moment, CMS's supported by CMSsc4n are WordPress,Moodle,Joomla,Drupal and Prestashop. Instalation You can download the latest version of CMSsc4n by cloning the GitHub repository: git clone...
joomla_CVE-2017-8917
joomlaCVE-2017-8917 The "exploitation" was done only for an educational purpose in the context of the project for the Cyberspace Security class. All of the steps are described in the Romanian language...
cve-2016-8869
CVE-2016-8869 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2016-8869 Image author: https://github.com/Medicean/VulApps/tree/master/j/joomla/1...
exploit-joomla
exploit-joomla A simple exploit that exploits CVE-2015-7297, CVE-2015-7857 and CVE-2015-7858 to list users with DB password. Exploit Title : Joomla 3.2 to 3.4.4 Remote SQL Injection Mass Exploit Date : 12-09-2020 Requirements : Python 3.4.x , Requests module python -m pip install requests Code...
CVE-2017-8917
CVE-2017-8917 CVE-2017-8917 - Joomla 3.7.0 'comfields' SQL Injection. Dependencies : pip install art pip install beautifulsoup4 Exploit : python cve20178917.py...
google_explorer
Welcome to Google Explorer Special thanks to ArchStrike and BlackArch for supporting ; + Google Mass Explorer PYTHON 3.6 This is a automated robot for google search engine and a massive exploitation tool. Make a google search and run a specific --plugin on the results. The dork you use is the key...
CVE-2026-48909
CVE-2026-48909 — SP LMS PHP Object Injection → RCE Unauthenticated Remote Code Execution via PHP Object Injection in JoomShaper SP LMS comsplms ≤ 4.1.3 for Joomla CMS. Author: Amin İsayev / Proxima Cyber Security Overview SP LMS is a popular Joomla Learning Management System extension by JoomShap...
CVE-2018-6376
CVE-2018-6376 Joomla!, Second Order SQL Injection Start Joomla! $ docker-compose up -d Access localhost via browser http://localhost:10080...
joombrute
JoomBrute Modern Joomla auth-attack toolkit J3 / J4 / J5 - CVE-2023-23752 · CVE-2023-23755 · CVE-2025-25227 Description Joomla credential-attack toolkit covering CMS versions 3, 4, and 5. Six subcommands handle the full attack chain end-to-end: detect - version fingerprint manifest XML → generato...
masta-cve-2026-48907
MASTA CVE-2026-48907 Scanner Single-file, self-contained scanner for Joomla! JCE Editor Author: Hussein Mohamed masta ghimau !CAUTION 🚨 DISCLAIMER — READ BEFORE USE THIS IS AN INTRUSIVE SECURITY TESTING TOOL. THIS TOOL IS FOR AUTHORIZED SECURITY ASSESSMENTS ONLY. Scanning systems you do NOT own o...
CVE-2023-23752
CVE-2023-23752 Exploit for CVE-2023-23752 4.0.0 GET /api/index.php/v1/config/application?public=true HTTP/1.1 Host: 10.9.49.205 User-Agent: curl/7.68.0 Accept: / Mark bundle as not supporting multiuse HTTP/1.1 200 OK Date: Mon, 20 Mar 2023 15:14:05 GMT Server: Apache/2.4.41 Ubuntu x-frame-options...
CVE-2023-23752
CVE-2023-23752 Joomla! v4.2.8 - Unauthenticated information disclosure To execute this script, we need to install few missing gems: sudo gem install httpx sudo gem install docopt sudo gem install paint ruby exploit.rb http://dev.devvortex.htb...
CVE-2015-8562
CVE-2015-8562 - Reverse shell python Exploit: Joomla 1.5 - 3.4.5 Object Injection RCE X-Forwarded-For header: Vuln Date: 12/17/2015 Exploit Author: anarc0der Version: Joomla 1.5 to 3.4.5 CVE : CVE-2015-8562 How to: Open one terminal and listen with nc: $ nc -lnvp 4444 Open another terminal and...
CVE-2023-23752
This is a POC for CVE-2023-23752 written in Python that displays username and password information. CVE-2023-23752 Joomla! 4.0.0 4.2.8 Usage = python3 exploit.py The execution of the script is demonstrated in the GIF below:...
juumla
🦁 Juumla 🦁 Juumla Juumla is a python tool created to identify Joomla version, scan for vulnerabilities and sensitive files. ⚡ Installing / Getting started A quick guide on how to install and use Juumla. 1. Clone the repository - git clone https://github.com/oppsec/juumla.git 2. Install the...