213 matches found
web-penetration-drupal
Web Penetration Testing — Drupal CVE-2018-7600 Type: Internship Project | Company: BB CyberSec | Period: Nov 2024 – Jan 2025 📋 Project Overview This project documents a full penetration test conducted on a Drupal web application as part of my cybersecurity internship at BB CyberSec. The assessmen...
drupal8-REST-RCE
drupal8-REST-RCE CVE-2019-6340 drupal8-REST-RCE /node/1 , CVE-2018-7600 drupal8 RCE /user/register Unix/Linux command - remote code Execution command "id" Usage root@kitploit: python drupal8-REST-RCE.py user defined port python drupal8-REST-RCE.py default : 80/tcp updated! Script editted for...
drupalgeddon2
drupalgeddon2 Exploit for CVE-2018-7600. Usage: drupalgeddon2 options root@kitploit: -h: Url target -c: OS command Examples: drupalgeddon2.py -h http://www.victim.com -c 'ls -la' Based in https://github.com/FireFart/CVE-2018-7600...
CVE-2018-7600-Drupal-RCE
CVE-2018-7600-Drupal-RCE...
Drupalgeddon-Mass-Exploiter
Drupalgeddon-Mass-Exploiter CVE-2018-7600 和 CVE-2018-7602 批量利用工具 用法 : python3 mass.py list output workers proxydefault:none exploitnumber exploitnumber: 7=CVE-2018-7600 8=CVE-2018-7602...
Drupal-Exploit-Lab
Drupal-Exploit-Lab Demonstration on exploitation on Drupal 7.57 CVE-2018-7600 with and without WAFWeb Application Firewall Description The project shows how the exploitation of Drupal 7.57 looks like in two different scenarios: 1. Unprotected server → successful exploitation with Metasploit and...
drupalgeddon2-cve-lab
Drupalgeddon2 CVE-2018-7600 lab This repository is a reusable target package for the Drupalgeddon2 run. Sentinel reproduced CVE-2018-7600 on 2026-08-27 against Drupal core 7.57 with SQLite and PHP 7.4. The exploit is the Drupal 7 two-request AJAX render-array path: 1. poison the user password for...
codeql-scanner
drupalgeddon2 The exploit python script for CVE-2018-7600...
POC-CVE-2018-7600
POC-CVE-2018-7600 Drupal vulnerable a CVE-2018-7600 Drupalgeddon2 Scanner CVE-2018-7600 Escáner sencillo en Python para detectar servidores Drupal potencialmente vulnerables a CVE-2018-7600 Drupalgeddon2. El script no explota ni abre shell , únicamente: 1. Envía una petición al flujo user/passwor...
Exploit for Improper Input Validation in Drupal
SAWPOC — CVE-2018-7600 A Python Proof of Concept for CVE-20...
Exploit for Improper Input Validation in Drupal
CVE-2018-7600 Drupalgeddon2 — Red Team Project ITSOLERA...
Exploit for Improper Input Validation in Drupal
LAB 9-CVE-2018-7600 I. SYSTEM ANALYSIS Identify...
CVE-2026-7600 ArtMin96 yii2-mcp-server MCP index.ts yii_execute_command os command injection
A flaw has been found in ArtMin96 yii2-mcp-server 1.0.2. This impacts the function yiicommandhelp/yiiexecutecommand of the file src/index.ts of the component MCP Interface. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The exploit has been publish...
CVE-2020-7600
querymen prior to 2.1.4 allows modification of object properties. The parameters of exported function handlertype, name, fn can be controlled by users without any sanitization. This could be abused for Prototype Pollution attacks...
Exploit for Improper Input Validation in Drupal
POC-CVE-2018-7600 Drupal vulnerable a CVE-2018-7600 Drupalge...
EUVD-2007-1255
Malware in sbrugna...
EUVD-2010-2829
Malware in sbrugna...
EUVD-2009-0627
Malware in sbrugna...