rival420/cve-2023-23752Joomla! < 4.2.8 - Unauthenticated information disclosure exploit
This Python script is an exploitation tool for an unauthenticated information disclosure vulnerability in Joomla! versions 4.0.0 up to 4.2.7. It allows for the disclosure of sensitive information from vulnerable Joomla! sites.
The exploit targets a vulnerability identified as CVE-2023-23752, where unauthorized access to user and configuration data is possible due to improper access control in Joomla! web service endpoints. This script is designed to extract user information and configuration details from the target Joomla! site, providing insights into its setup and potentially sensitive data.
To install the required Python libraries, run:
pip install requests colorama
The script can be executed from the command line, with the target URL as a mandatory argument. There are also options for debugging and disabling colored output.
python CVE-2023-23752.py <url> [options]
url: Root URL (base path) of the target Joomla! site, including the HTTP scheme, port, and root folder if necessary.--debug: Optional. If set, the script will print debug information, including the fetched data.--no-color: Optional. If set, disables colored output for better compatibility with different terminal emulators.python CVE-2023-23752.py https://example.com
This tool is intended for educational and ethical hacking purposes only. Usage of this software for attacking targets without prior mutual consent is illegal. The developer assumes no liability and is not responsible for any misuse or damage caused by this program.