ludy-dev/drupal8-rest-rcePython exploit script for Drupal 8 REST RCE vulnerabilities (CVE-2019-6340, CVE-2018-7600) enabling remote code execution on target systems via /node/1 and /user/register endpoints.
CVE-2019-6340 drupal8-REST-RCE (/node/1) , CVE-2018-7600 drupal8 RCE (/user/register)
Unix/Linux command - remote code Execution (command "id")
Usage>
python drupal8-REST-RCE.py <dst_ip> <dst_port> (user defined port)
python drupal8-REST-RCE.py <dst_ip> (default : 80/tcp)
[updated!]
Script editted for supporting python3 (2020.11.07)
Just using Vuln Test for your System