Drupal 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations.
Drupal vulnerable a CVE-2018-7600
💀Proof-of-Concept for CVE-2018-7600 Drupal SA-CORE-2018-002
Python exploit for Drupal CVE-2018-7600 (Drupalgeddon2) remote code execution. Executes against a target IP to demonstrate the vulnerability.
Python exploit for CVE-2018-7600 (Drupalgeddon 2) enabling remote code execution on Drupal 7 with multiple injection methods and predefined commands for Linux and Windows.
Exploit for Drupal v7.x + v8.x (Drupalgeddon 2 / CVE-2018-7600 / SA-CORE-2018-002)
Perl-based remote code execution exploit targeting CVE-2018-7600 in Drupal CMS, enabling payload upload and server compromise.
Proof-of-concept exploit for CVE-2018-7600 (Drupalgeddon 2) remote code execution in Drupal core. For educational and authorized testing only.
Python proof-of-concept for CVE-2018-7600 (Drupalgeddon2), a critical remote code execution vulnerability in Drupal 7. Designed for authorized security testing and CTF use.
PoC exploit collection for CVE-2018-7600 Drupal RCE with multiple scripts targeting Drupal 7 and 8, including mass exploitation variants.
Exploit for CVE-2018-7600, a critical remote code execution vulnerability in Drupal core. Enables automated exploitation of unpatched Drupal sites for security testing.
MSF exploit module for Drupalgeddon 2 (CVE-2018-7600 / SA-CORE-2018-002)
Python exploit script for CVE-2018-7600 (Drupalgeddon2) targeting Drupal core remote code execution vulnerability. Configure target and execute to verify exploitation.
Remote code execution exploit for Drupal CVE-2018-7600 (Drupalgeddon2) with command injection via HTTP requests.
Educational lab demonstrating CVE-2018-7600 (Drupalgeddon2) Remote Code Execution using a Docker-based vulnerable Drupal 7.56 environment.
PoC of CVE-2018-7600
CLI rewrite of the Drupalgeddon2 (CVE-2018-7600) PoC — for authorised testing/education
A Rust implementation of the CVE-2018-7600 exploit targeting vulnerable Drupal 7 installations (<= 7.57)
Exploit for Drupal 7 <= 7.57 CVE-2018-7600
VulnHub DC-1 boot-to-root — exploiting CVE-2018-7600 (Drupalgeddon2) for RCE, extracting DB credentials from settings.php, forging admin password hash, and escalating to root via SUID find.
Drupal CVE-2018-7600 RCE Pseudo-Shell PoC
CVE-2018-7600 POC (Drupal RCE)
Step-by-step analysis and exploitation lab for Drupal CVE-2018-7600 remote code execution vulnerability, including debugging, exploit code, and mitigation patch review.
Python exploit for CVE-2018-7600 (Drupalgeddon2) enabling remote command execution on vulnerable Drupal sites via property injection in the Forms API, with built-in vulnerability testing and proxy support.
CVE-2018-7600 | Drupal < 7.58 / < 8.3.9 / < 8.4.6 / < 8.5.1 - 'Drupalgeddon2' RCE
Educational CVE-2018-7600 exploit project combining a Python RCE PoC, isolated Docker Drupal lab, payload research, and mitigation documentation for safe vulnerable-application testing.
CVE-2018-7600 and CVE-2018-7602 Mass Exploiter
Tool to check for CVE-2018-7600 vulnerability on several URLS
This repository showcases a fully self-developed Proof-of-Concept (PoC) for CVE-2018-7600, widely known as Drupalgeddon 2. This critical vulnerability in Drupal 7 and 8 core enables remote code execution (RCE), and the PoC demonstrates its exploitation in a clear and educational manner.
Demonstration on exploitation on Drupal 7.57 (CVE-2018-7600) with and without WAF(Web Application Firewall)
CVE-2018-7600 POC (Drupal RCE)
CVE-2018-7600.
CVE-2018-7600 Drupal Drupalgeddon 2 远程代码执行漏洞利用脚本
Python exploit script for Drupal 8 REST RCE vulnerabilities (CVE-2019-6340, CVE-2018-7600) enabling remote code execution on target systems via /node/1 and /user/register endpoints.
Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340
Docker container for CVE-2018-7600 (Drupalgeddon2) vulnerability exploitation, part of the Cved framework for managing vulnerable Docker environments for security training and testing.
Vuln checker for Drupal v7.x + v8.x (CVE-2018-7600 / SA-CORE-2018-002)
Proof-of-concept exploit for CVE-2018-7600 (Drupalgeddon 2) with a step-by-step lab environment setup and exploitation walkthrough using Docker and Burp Suite.
Python exploit script for CVE-2018-7600 (Drupalgeddon2) targeting Drupal 7 <= 7.57 via password reset form poisoning and file upload trigger.
Step-by-step lab walkthrough for exploiting CVE-2018-7600 (Drupalgeddon2) RCE in Drupal 8.5.0, covering attack surface analysis, version fingerprinting, and exploitation via Form API injection.
Penetration test of a Drupal web app — CVE-2018-7600 (Drupalgeddon 2) exploited using Nmap, Burp Suite & Metasploit | Internship @ BB CyberSec
For Home Lab and Educational Purpose only not intended for any Harmful intenstions purely for educational purpose
The exploit python script for CVE-2018-7600
CVE-2018-7600【Drupal7】批量扫描工具。
This repository contains a completely original and self-developed Proof-of-Concept (PoC) for CVE-2018-7600, also known as Drupalgeddon 2 — a critical remote code execution vulnerability affecting Drupal 7 and 8 core versions.
MASS Exploiter
Testing and exploitation tool for Drupalgeddon 2 (CVE-2018-7600)
Python exploit for CVE-2018-7600 (Drupalgeddon2) targeting remote code execution in Drupal CMS. Designed for penetration testing and vulnerability verification.
Detect with python and tracking IP
Program python untuk melakukan RCE pada drupal versi 7.56
CVE-2018-7600 0-Day Exploit (cyber-warrior.org)
Vitalii Rudnykh · php · Apr 13, 2018
Hans Topo & g0tmi1k · php · Apr 13, 2018
José Ignacio Rojo · php · Apr 17, 2018
