Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Categories

View all categories

Loading categories

drupal-exploit — Python exploit script for CVE-2018-7600 (Drupalgeddon2) targeting Drupal 7 <= 7.57 via password reset form poisoning and file upload trigger. | Kitploit

Tools/

GitHub/drugeddon/drupal-exploit

Vulnerability Analysis Exploitation Web Application Exploitation Web Security Penetration Testing

drugeddon/drupal-exploit

drupal-exploit

Python exploit script for CVE-2018-7600 (Drupalgeddon2) targeting Drupal 7 <= 7.57 via password reset form poisoning and file upload trigger.

View Repository

127 years ago

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →

drupal-exploit

CVE-2018-7600

This script will exploit the (CVE-2018-7600) vulnerability in Drupal 7 <= 7.57 by poisoning the recover password form (user/password) and triggering it with the upload file via ajax (/file/ajax).

: drupal.py http(s)://drupaldomain/drupal/ uid=33(www-data) gid=33(www-data) groups=33(www-data)

https://nvd.nist.gov/vuln/detail/CVE-2018-7600

https://www.drupal.org/sa-core-2018-002

Download Tool