Chapter 9

1. Joomla is a CMS written in PHP and will run on those operating systems that have PHP installed.

2. If you already using a detection technique unknown to the community, you can add the technique to the Metasploit code. At the same time, you can send a push request to the Metasploit GitHub repository, which should help the community as well.

3. There are multiple ways to find the version installed. You can even read the source code to find the headers or parameters that will disclose the Joomla version.

4. The goal of a pentester is to find the vulnerability and exploit it to the extent that it would convince the organization's management to not overlook the security aspect of the web application. Backdooring the application would defy this logic and it is unethical to do so.