Deface Joomla

.find vuln target in google using dork
intext:Joomla! is a flexible and powerful platform site:com
2.check admin login page
http://site.co.uk/path/administrator/
3.open bypass Joomla exploit.html
4.input exploit in url
http://site.co.uk/path/index.php?option=com_users&view=registration
5.CTRL+U > CTRL+F = hidden
6.replace the information with your data email,name,etc
7.go back bypass Joomla exploit.html
8.click register
7.input the password once again with the same password
8.open email and click activation url
9.login your target
http://site.co.uk/path/administrator/
upload shell and deface like this

Joomla exploit com_users to deface
This totorial just to lamer like me
for tools
http://pastebin.com/eg83sGXG
copy and save .html (extension)
shell