How to find vunlnerability in joomla Websites | Via BackTrack 5

Download the Joomscan from here:
http://web-center.si/joomscan/joomscan.tar.gz

Step 1: Move to PenTest folder

Copy/Move the downloaded files in directory

 /pentest/web/scanners/joomscan/

Step2: Set Permission

Set permission for the Joomscan file. In order to this,
Type the following command in Terminal.

CHMOD 0777 joomscan.pl 

Step 3: Update

Update the scanner to latest version.

To do this, enter the following command in Terminal:

./joomscan.pl update

 

 

Step 4: Scanning for Vulnerability

Now , we have to scan our joomla site for vulnerability.
To do this, enter the following command in Terminal: 

./joomscan.pl -u www.YourJoomlasite.com

 

Wait for a while, and it will list of the vulnerability found.