ajnik/joomla-bruteforcePython script that brute-forces Joomla administrator login credentials using wordlists, with proxy and verbose options for penetration testing.
Joomla login bruteforce
Tested on Joomla! 3.8.8
Usage:
python3 joomla-brute.py -u http://10.10.10.150 -w /usr/share/wordlist/rockyou.txt -usr admin
chmod +x joomla-brute.py
./joomla-brute.py -u http://10.10.10.150 -w /usr/share/wordlist/rockyou.txt -usr admin
Optional parameters:
-p or --proxy http://127.0.0.1:8080
-v or --verbose
-U or --userlist /usr/share/wordlists/SecLists/Usernames/Names/names.txt