srl
Drupal
Introduction Drupal is Written in PHP, supports MySQL or PostgreSQL for the backend. SQLite can be used if there’s no DBMS installed. Drupal indexes its content using nodes. A node can hold anything such as a blog post, poll, article, etc. The page URIs are usually of the form /node/<nodeid> Drupal Discovery/Footprinting Command Description curl -s http://drupal.inlanefreight.local | grep Drupal Check webpage source for the Drupal generator droopescan scan drupal -u http://drupal.inlanefreight.local Automated Drupal enumeration curl -s http://drupal.inlanefreight.local/CHANGELOG.txt Version check; on Drupal 8/9 use /core/CHANGELOG.txt Browse to http://drupal.inlanefreight.local/README.txt Check for instances of Drupal Browse to http://drupal.inlanefreight.local/robots.txt Check for instances of Drupal or its nodes Attacking Drupal versions prior to version 8 [PHP Filter Module] In Drupal versions prior to 8, it’s possible to login as an admin to enable the PHP Filter Module The PHP Filter Module basically allows PHP code to always be executed Follow these steps: