JoomScan
Joomla-specific scanner: version, components and exposed files.
The wpscan equivalent for Joomla. It works out the core version, enumerates the installed components (which is where the CVEs usually live, not in the core), and finds listable directories and forgotten config or backup files. Its value is the component list: with a name and version you can go straight to the public exploit.
Family Web discovery & fuzzing
Flags -u --enumerate-components -ec
Concepts Web Content Discovery (Directory Fuzzing), From version to exploit
Cheatsheet CMS (WordPress, Drupal, Joomla)
Installation
sudo apt install joomscanUseful commands
Reference tool: it does not yet appear in a published machine on the blog, but it is part of the arsenal for its everyday use.