elkhaoudari/cve-2018-7600-pocPython proof-of-concept for CVE-2018-7600 (Drupalgeddon2), a critical remote code execution vulnerability in Drupal 7. Designed for authorized security testing and CTF use.
A Python Proof of Concept for CVE-2018-7600, also known as Drupalgeddon2.
CVE-2018-7600 is a critical vulnerability affecting certain versions of Drupal 7. Under vulnerable configurations, an unauthenticated attacker may be able to inject malicious input and achieve remote code execution.
⚠️ Disclaimer: This project is intended for educational purposes, CTFs, security research, and authorized penetration testing only. Do not use it against systems without explicit permission.
coloramacoloramaClone the repository:
git clone https://github.com/elkhaoudari/sawpoc.git
cd sawpoc
Install the required dependency:
pip3 install colorama
Or, if your system uses the Python module form:
python3 -m pip install colorama
Make the script executable:
chmod +x sawpoc.py
Run it with Python:
python3 sawpoc.py <target>
Follow the arguments/options displayed by the PoC.
CVE: CVE-2018-7600 Name: Drupalgeddon2 Affected software: Drupal 7.x Severity: Critical Type: Remote Code Execution
The vulnerability is related to insufficient sanitization of user-supplied input in Drupal's Form API, allowing specially crafted requests to manipulate server-side processing.
For safe testing, use an intentionally vulnerable Drupal 7 instance in an isolated environment such as:
sawpoc/
├── sawpoc.py
├── README.md
└── LICENSE
The author is not responsible for misuse of this tool.
Use SAWPOC only against systems you own or have explicit authorization to test.
Abdelilah Elkhaoudari
GitHub: @elkhaoudari