Skip to content

daynis-olman/drupalgeddon-shell-exploit

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

6 Commits
 
 
 
 

Repository files navigation

drupalgeddon-shell-exploit for Drupal 8.0.0

A Bash script to exploit the Drupalgeddon2 vulnerability (CVE-2018-7600) in Drupal websites. This vulnerability allows an attacker to execute arbitrary code on the server by exploiting a flaw in the Drupal core.

Requirements

This script requires the following tools to be installed on the system:

  • Bash shell
  • curl
  • Usage To use this script, run the following command from the terminal:

bash Copy code ./drupalgeddon2.sh -h -c where:

is the URL of the target Drupal website. is the command to be executed on the server. For example:

bash Copy code ./exploit.sh -h http://www.drupal-test.daynisolman.com -c 'ls -la' This will exploit the Drupal vulnerability on the website and execute the command ls -la on the server.

License

This script is released under the MIT License. See LICENSE for more information.

About

No description, website, or topics provided.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages