JoomScan
Joomla vulnerability/enumeration scanner.
KaliParrothigh
pkg: joomscan
JoomScan detects Joomla version, components and known vulnerabilities and misconfigurations.
Syntax
joomscan --url {url}
Example
joomscan --url https://example.com
Fingerprints the Joomla install and reports vulnerable components.
Options & flags
What each switch does. Toggle them in the builder below to assemble a command.
Command builder
Tick options (and fill any values) to build a ready-to-copy command.
joomscan
Usage examples
joomscan --url https://target.tld
Fingerprint Joomla and find issues.
joomscan --url https://target.tld --enumerate-components
Enumerate components.
Advantages
- Joomla-specific coverage
- Component enumeration
- Simple to run
Disadvantages
- Joomla-only
- Signature DB can lag
- Noisy
Tags
#joomla#cms#web
Official docs: JoomScan ↗
Related commands
Frequently asked questions
What is JoomScan used for?
JoomScan detects Joomla version, components and known vulnerabilities and misconfigurations.
What is an example JoomScan command?
A common example is: joomscan --url https://example.com — Fingerprints the Joomla install and reports vulnerable components.
Is JoomScan part of Kali Linux?
Yes. JoomScan ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install joomscan.
What category of security tool is JoomScan?
JoomScan is a Web Application tool with a high-risk profile when run against a live target.
Try recon tools live
Run real scans against a domain you control, stage by stage.