Joomla-Break

A simple brute-force for Joomla! CMS. Tested in version 3.9.24
Python 2.7.18

Instalation:

git clone https://github.com/diego-tella/Brute-Basic-Auth.git
cd Brute-Basic-Auth

Use:

python script.py -u http://127.0.0.1/joomla/administrator -w best1050.txt -l admin -t a623d221325ed6f9bd0aea00d521a7d7

What is the token?

The token is a string that joomla uses to authenticate itself. It is necessary for our brute-force, so you have to catch it with Burp. It is marked in the image.