google / tsunami-security-scanner-plugins

This project aims to provide a central repository for many useful Tsunami Security Scanner plugins.
Apache License 2.0
872 stars 176 forks source link

Joomla Improper AccessCheck in WebService Endpoint #369

Closed am0o0 closed 1 month ago

am0o0 commented 8 months ago

Hi, please use the following docker-compose configuration to set up a vulnerable application, you need to complete the Joomla DB setup before testing.

version: '2'

services:
  joomla:
    image: joomla:4.2.6-php8.0
    restart: always
    ports:
      - 8000:80
    environment:
      JOOMLA_DB_HOST: joomladb
      JOOMLA_DB_PASSWORD: example

  joomladb:
    image: mysql:5.6
    restart: always
    environment:
      MYSQL_ROOT_PASSWORD: example

reference: https://schoolitexpert.com/network-tools/docker/joomla-on-docker