Build software better, together

Tuhinshubhra / CMSeeK

CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs

wordpress cms drupal bruteforce joomla cms-framework wordpress-scanner exploitation-framework content-management-system web-scanner cms-detection cms-bruteforce drupal-bruteforce opencart-bruteforce joomla-bruteforce wordpress-bruteforce cms-detect

Updated Jul 17, 2026
Python

dsssssssm / juumla

Star

🦁 Python project to identify and scan for vulnerabilities related to the Joomla CMS project. It scans for common misconfigurations and public vulnerabilities.

python docker tool scanner joomla infosec pentest hacktoberfest red-team blue-team

Updated Apr 10, 2026
Python

p0dalirius / Joomla-webshell-plugin

Sponsor

Star

A webshell plugin and interactive shell for pentesting a Joomla website.

plugin extension joomla rce pentest webshell

Updated May 23, 2022
Python

Is4yev / CVE-2026-48909

Star

CVE-2026-48909 PoC

exploit joomla deserialization joomla-plugin poc rce cve php-object-injection

Updated Jul 7, 2026
Python

The Joomla MCP Server facilitates interaction between AI assistants (like Claude) and Joomla websites through the Joomla Web Services API. It provides tools to manage articles, including retrieving, creating, updating, and deleting content, as well as managing article states.

mcp joomla mcp-server joomla-mcp

Updated Nov 12, 2025
Python

p0dalirius / Joomla-1.6-1.7-2.5-Privilege-Escalation-Vulnerability

Sponsor

Star

A Python script to create an administrator account on Joomla! 1.6/1.7/2.5 using a privilege escalation vulnerability

admin joomla vulnerability account

Updated Feb 11, 2025
Python

FOGSEC / WAScan

Star

WAScan - Web Application Scanner

wordpress cms security osint vue js scanner web-application joomla recon reconnaissance

Updated Mar 22, 2018
Python

K3ysTr0K3R / CVE-2023-23752-EXPLOIT

Star

A PoC exploit for CVE-2023-23752 - Joomla Improper Access Check in Versions 4.0.0 through 4.2.7

exploit hacking joomla poc cve-2023-23752

Updated Feb 1, 2026
Python

tampe125 / jscanner

Star

Performs active information gathering about Joomla sites

joomla

Updated Jul 13, 2017
Python

papageo75 / CVE-2026-48908-PoC

Star

Unauthenticated RCE PoC for CVE-2026-48908 — SP Page Builder for Joomla (≤ 6.6.1): arbitrary file upload via asset.uploadCustomIcon. Self-cleaning, token-guarded. Authorized testing only.

proof-of-concept exploit joomla penetration-testing poc rce vulnerability web-security unauthenticated sp-page-builder remote-code-execution arbitrary-file-upload sppagebuilder cve-2026-48908

Updated Jun 23, 2026
Python

shinthink / CVE-2026-57827

Star

CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE. Split-controller upload bypass. CVSS 9.8 | CWE-434 | com_rsfiles < 1.17.12

security exploit file-upload joomla poc rce vulnerability infosec cve pentest pre-auth cve-2026-57827 rsfiles

Updated Jul 29, 2026
Python

InMyMine7 / Starscream

Star

starscream is a brute force tool used to try to log into various web services, such as cPanels, Webmail, SSH, Wordpress, WHM, SMTP, Plesk, FTP, Joomla, and Opencart by using a combination of email and password.

ssh wordpress checker ftp cpanel bruteforce joomla smtp brute-force checker-service smtplib checkers ftplib combolist checker-bot cpanel-checker combolistchecker wordpress-log-checker cpanel-login-checker

Updated Nov 1, 2024
Python

VoidSec / Joomla_CVE-2015-8562

Star

A proof of concept for Joomla's CVE-2015-8562 vulnerability (Object Injection RCE)

php exploit joomla rce vulnerability cve-2015-8562

Updated May 3, 2024
Python

gibran-abdillah / CVE-2023-23752

Star

Bulk scanner + get config from CVE-2023-23752

exploit joomla cve-2023-23752

Updated Mar 14, 2023
Python

Jenderal92 / CVE-2026-56290

Star

CVE-2026-56290 - Mass Exploit for Joomla Com_pagebuilderck component (Unrestricted File Upload → RCE). Multi-threaded, automatic CSRF bypass, PHP shell uploader.