if you don' have joomla installed into your kali vmthen you should install it now my target vm is at and am using wordlist provided by cain and abel,[ popular bruteforcing and cracking toolset have already preset the username to admin and the password to justin in the joomla installation so that can make sure it works then added justin to the cain txt wordlist file about entries or so down the file when running the scripti get the following outputpython joomla_killer py finished setting up foradmin tryingadmin racl ( lefttryingadmin !@#$( lefttryingadmin !@#$%( left--snip-tryingadmin ( lefttryingadmin qw ( lefttryingadmin ( lefttryingadmin sanjose ( lefttryingadmin ( lefttryingadmin justin ( lefttryingadmin ( left[*bruteforce successful [*usernameadmin [*passwordjustin [*waiting for other threads to exit tryingadmin ( lefttryingadmin welcome ( leftyou can see that it successfully brute-forces and logs in to the joomla administrator console to verifyyou of course would manually log in and make sure after you test this locally and you're certain it worksyou can use this tool against target joomla installation of your choice [ dirbuster project[ svndigger project[ cain and abel