CVE-2023-23752/README.md

# CVE-2023-23752 - Joomla Information Disclosure

Yo, I needed to use this exploit in a HTB machine and the only other PoC I could find was written in ruby...

I didn't wanna mess with the ruby dependancies so I just re-wrote it in python "real quick".

---
This is basically just a parser for the JSON returned by the open API endpoints, this can be replicated easily with CURL or a web browser by hitting the following endpoints:

#### User Info

`/api/index.php/v1/config/applicaton?public=true`

#### Config Info

`/api/index.php/v1/config/application?public=true"`

## Usage
`python3 CVE-2023-23752.py -t <target_url>`

---


# License
GPL v3.0 - as all good software should be

Only with explicit permission from the target system owner.

Remember - don't be a skid :)
Reformat the repo to store all my PoCs and add CVE-2025-24893 2025-08-18 13:56:34 -06:00			`# CVE-2023-23752 - Joomla Information Disclosure`

			`Yo, I needed to use this exploit in a HTB machine and the only other PoC I could find was written in ruby...`

			`I didn't wanna mess with the ruby dependancies so I just re-wrote it in python "real quick".`

			`---`
			`This is basically just a parser for the JSON returned by the open API endpoints, this can be replicated easily with CURL or a web browser by hitting the following endpoints:`

			`#### User Info`

			`/api/index.php/v1/config/applicaton?public=true`

			`#### Config Info`

			`/api/index.php/v1/config/application?public=true"`

			`## Usage`
			`python3 CVE-2023-23752.py -t <target_url>`

			`---`


			`# License`
			`GPL v3.0 - as all good software should be`

Adding CVE-2025-24071 and tweaking READMEs 2025-08-19 12:38:44 -06:00			`Only with explicit permission from the target system owner.`

Reformat the repo to store all my PoCs and add CVE-2025-24893 2025-08-18 13:56:34 -06:00			`Remember - don't be a skid :)`