<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Joomla :: X3ric Blog</title><link>https://x3ric.com/blog/tags/joomla/</link><description>CTF notes, systems work, and writeups.</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Sat, 06 Jun 2026 21:41:13 +0200</lastBuildDate><atom:link href="https://x3ric.com/blog/tags/joomla/index.xml" rel="self" type="application/rss+xml"/><item><title>HackTheBox Curling Writeup</title><link>https://x3ric.com/blog/posts/HackTheBox-Curling/</link><guid>https://x3ric.com/blog/posts/HackTheBox-Curling/</guid><pubDate>Fri, 13 Sep 2024 00:10:50 +0800</pubDate><category>machine</category><category>htb</category><category>linux</category><category>joomla</category><description>Curling: abuse the Joomla exposure for a shell, then use local enumeration to reach root.</description></item><item><title>HackTheBox DevVortex Writeup</title><link>https://x3ric.com/blog/posts/HackTheBox-DevVortex/</link><guid>https://x3ric.com/blog/posts/HackTheBox-DevVortex/</guid><pubDate>Tue, 16 Apr 2024 00:10:50 +0800</pubDate><category>machine</category><category>htb</category><category>linux</category><category>joomla</category><category>cve-2023-23752</category><description>DevVortex: use CVE-2023-23752 where it fits the service, gain a shell, and escalate to root.</description></item></channel></rss>