POC-CVE-2018-7600

Drupal vulnerable to CVE-2018-7600

Drupalgeddon2 Scanner (CVE-2018-7600)

Simple Python scanner to detect Drupal servers potentially vulnerable to CVE-2018-7600 (Drupalgeddon2).

The script does not exploit or open a shell, it only:

1. Sends a request to the user/password flow.
2. Checks if the response appears to be from a Drupal site.
3. Sends a second test request and analyzes the output.
4. Shows whether the target appears patched or vulnerable.

⚠️ Ethical use
This script is for educational purposes and testing in environments where you have explicit authorization (labs, CTFs, authorized audits, etc.).
Unauthorized use against third-party systems may be illegal.

---

Requirements

• Python 3.x
• requests module

Install requests (if necessary):

pip install requests
# or
pip3 install requests