Reconnaissance and enumeration

Before using Joomla, the first step to carry out is to confirm whether the web application is powered by it. There are various ways of detecting the installation of the CMS, some of which are listed here:

  • By searching for <meta name="generator" content="Joomla! - Open Source Content Management" />
  • By exploring the X-Meta-Generator HTTP header
  • By checking RSS/atom feeds: index.php?format=feed&type=rss/atom
  • By using Google Dorks: inurl:"index.php?option=com_users
  • By looking for the X-Content-Encoded-By: Joomla header
  • By looking for joomla.svg/k2.png/SOBI 2.png/SobiPro.png/VirtueMart.png

Next, let's find out which version of Joomla is installed.

..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset
3.14.253.221