Ethical Hacking Chandigarh | Cyberguard Security solutions

Joomla Hacking – Mostly people have heard about Joomla. Joomla is a free and open source CMS (content management system) for publishing content on the World Wide Web, It is the only CMS with the most commonly exploits and vulnerable addons ever made but i often wonder who creates all these.

• The important thing is that once an addon is installed , there is a high chance. It contains unsanitized code a security hole to target and exploit.

How to detect website is working on joomla or not – It is usually easy to find whether a site is running on Joomla or not. If think you are unsure, browse to the “administrator” directory like this: http://www.domain.tld/administrator (if Joomla is installed in root folder). Administrator directory is in almost every if not all versions of Joomla, making it easy to fingerprint max times. If some how unable to browse to directory but the target is in fact running this content management system , look for URL’s on the site which looks like this: /index.php?option=com_content or similar. The keyword to look for is: option=com_xxxxxxxx in the URL’s because almost no other CMS (content management system) uses this way of loading modules.

After testing vulnerability we confirm that it works and is it possible to perform SQL Injections on our current (site) target .

Joomla Attacking Tool

The tool was actually a simple SQLi Assistant tool , in to a joomla add-on vulnerability scanner. It is currently in beta versions, but it works wonderfully shown here. The first option is to use the vulnerability scanner & supply a vulnerable URL. At the point tool try to load “/etc/passwd” to find that we have the necessary “FILE” privileges or not & after that  the common word list is used for the webroot to try & place file on servers.

Now we are going to use the “shell” option which uses modified version of the Reverse PHP Shell made by pentestmonkey.net

Now when we supplied all. It is time to set up netcat listener on ports we defined & then browse to the file on the server.

finally we got the access to the shell .

for more details on the tools visit.- http://pentestmonkey.net/tools/

To learn more about ethical hacking visit www.Cyberguard.in and to learn Ethical Hacking Training in chandigarh contact -

CyberGuard Security Solutions,
SCO 118-120, 3rd Floor,
Sector 34-A,
Chandigarh.

Phone: 0172-4644644,  4346047