Drupalgeddon-Mass-Exploiter

Drupalgeddon-Mass-Exploiter CVE-2018-7600 및 CVE-2018-7602 대량 익스플로잇 도구 사용법 : python3 mass.py list output workers proxydefault:none exploitnumber exploitnumber: 7=CVE-2018-7600 8=CVE-2018-7602...

Awesome-RCE-techniques

Awesome RCE techniques Awesome list of techniques to achieve Remote Code Execution RCE on various apps! Goal of this project The goal of this project is to provide an OpenSource knowledge database of all the techniques to achieve Remote Code Execution RCE on various applications. All of these...

CVE-2018-7600

Alright boss, I've also added the usage section starting from git clone, so the README is complete. This is the final version that you just need to copy-paste into README.md on your GitHub repo. CVE-2018-7600 - Drupalgeddon2 RCE Exploit This exploit exploits a vulnerability in Drupal 7.56 and som...

CVE-2018-7600-Remote-Code-Execution

Drupalgeddon2 Python Exploit CVE-2018-7600 This repository contains a Python-based proof-of-concept exploit for the critical remote code execution vulnerability in Drupal, known as Drupalgeddon2 CVE-2018-7600. This script is designed for educational purposes and for security professionals to use ...

Drupal-Exploit-Lab

Drupal-Exploit-Lab Demonstration on exploitation on Drupal 7.57 CVE-2018-7600 with and without WAFWeb Application Firewall Description The project shows how the exploitation of Drupal 7.57 looks like in two different scenarios: 1. Unprotected server → successful exploitation with Metasploit and...

CVE-2018-7600

POC of CVE-2018-7600 Drupal RCE CVE-2018-7600 Dont Forget to Put Your Adress into the Script ! Description: A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which...

CVE-2024-45440

DividesByZer0 & c0d3Ninja의 CVE-2024-45440 열거 도구 CVE-2024-45440 - Drupal 11.x-dev 전체 경로 공개 PoC 옵션: -h, --help 이 도움말 메시지를 표시하고 종료합니다. -u URL, --url URL 스캔할 단일 URL입니다. -f FILE, --file FILE 스캔할 URL이 포함된 파일입니다줄당 하나씩. -t THREADS, --threads THREADS 스레드 수기본값: 5. -v, --verbose 취약하지 않은 대상과 오류를 표시합니다...

drupal-cve-2018-7600-poc

README Drupal Drupalgeddon 2 Unauthenticated Remote Code Execution CVE-2018-7600 Drupal versions prior to 7.58, 8.x versions prior to 8.3.9, 8.4.x versions prior to 8.4.6, and 8.5.x versions prior to 8.5.1 allow remote attackers to execute arbitrary code due to an issue affecting multiple...

drupalgeddon-2

Drupalgeddon-2 Vuln checker for Drupal v7.x + v8.x Usage : root@kitploit: php drupalgeddon.php Target http://example.com :...

drupalgeddon2-cve-lab

Drupalgeddon2 CVE-2018-7600 실습 환경 이 저장소는 Drupalgeddon2 실행을 위한 재사용 가능한 대상 패키지입니다. Sentinel은 2026-08-27에 SQLite와 PHP 7.4를 사용하는 Drupal 코어 7.57에서 CVE-2018-7600을 재현했습니다. 익스플로잇은 Drupal 7의 두 번의 요청으로 이루어지는 AJAX 렌더 배열 경로입니다: 1. namepostrender=passthru, namemarkup=id, nametype=markup를 통해 사용자 비밀번호 양식 캐시를...

codeql-scanner

drupalgeddon2 The exploit python script for CVE-2018-7600...

drupalgeddon2

drupalgeddon2 Exploit for CVE-2018-7600. Usage: drupalgeddon2 options root@kitploit: -h: Url target -c: OS command Examples: drupalgeddon2.py -h http://www.victim.com -c 'ls -la' Based in https://github.com/FireFart/CVE-2018-7600...

Drupalgeddon-Python3

Drupalgeddon Python3 Edition An rewritten POC on the CVE-2014-3704, done as part of my CPTS training on HackTheBox. https://nvd.nist.gov/vuln/detail/CVE-2014-3704 CVE-2014-3704 known as Drupalgeddon, affects versions 7.0 up to 7.31 and was fixed in version 7.32. This was a pre-authenticated SQL...

POC-CVE-2018-7600

POC-CVE-2018-7600 Drupal vulnerable a CVE-2018-7600 Drupalgeddon2 Scanner CVE-2018-7600 Escáner sencillo en Python para detectar servidores Drupal potencialmente vulnerables a CVE-2018-7600 Drupalgeddon2. El script no explota ni abre shell , únicamente: 1. Envía una petición al flujo user/passwor...

Drupal - Remote Code Execution

Drupal 7.x and 8.x contain a remote code execution vulnerability that exists within multiple subsystems. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - Highly...

drupalhunter

drupalhunter CVE-2018-7600 Эксплойт нулевого дня cyber-warrior.org...

CVE-2018-7600

POC of CVE-2018-7600 Drupal RCE CVE-2018-7600 Dont Forget to Put Your Adress into the Script ! Description: A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which...

drupalgeddon2-CVE-2018-7600

Drupal - Drupalgeddon2 CVE 2018-7600 root@kitploit: $ python3 drupalgeddon.py -h + drupalgeddon2 CVE-2018-7600 exploit by Rafael Caria usage: drupalgeddon.py -h --url URL --command COMMAND --function FUNCTION --test --proxy PROXY ! This script exploits CVE-2018-7600 a Drupal property injection in...

VulnHub-DC1-Writeup

VulnHub-DC1-Writeup "Penetration testing lab writeups documenting full attack chains — from recon to root." 🔓 VulnHub — DC-1 Boot-to-Root Writeup Difficulty: Beginner–Intermediate Platform: VulnHub Goal: Capture all 4 flags and achieve full root-level compromise Attacker OS: Kali Linux VirtualBox...

Drupal - Remote Code Execution

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations. id: CVE-2018-7600 info: name: Drupal - Remote Code Execution author:...