关联漏洞
标题：
Drupal 安全漏洞
(CVE-2018-7600)
描述：Drupal是Drupal社区所维护的一套用PHP语言开发的免费、开源的内容管理系统。 Drupal中带有默认或通用模块配置的多个子系统存在安全漏洞。远程攻击者可利用该漏洞执行任意代码。以下版本受到影响：Drupal 7.58之前版本，8.3.9之前的8.x版本，8.4.6之前的8.4.x版本，8.5.1之前的8.5.x版本。
描述
PoC of CVE-2018-7600
介绍
# CVE-2018-7600 (Drupalgeddon2) Exploit – Python3
> **DISCLAIMER:**
> This project is for **educational and authorized penetration testing purposes only**.
> Do **NOT** use this code on systems you do not own or have explicit written permission to test.
> Unauthorized use is **illegal** and punishable by law.
> The author assumes no liability for any misuse of this tool.
## Description
This Python3 script exploits the **CVE-2018-7600 (Drupalgeddon2)** vulnerability — a critical **Remote Code Execution (RCE)** bug affecting multiple Drupal versions. The vulnerability allows attackers to execute arbitrary commands on a vulnerable server without authentication. This exploit sends a malicious payload via a crafted `POST` request to the `/user/register` endpoint, leveraging Drupal's AJAX form rendering to execute system commands.
Additionally, the script includes:
- **Reverse Shell Listener** – Automatically waits for incoming connections.
- **Fully Interactive Shell Upgrade** – Allows real-time interaction with the compromised host.
---
## Affected Versions
Drupal **7.x** and **8.x** (prior to patched releases in March 2018) are vulnerable.
For details, see:
🔗 [Drupal Security Advisory](https://www.drupal.org/sa-core-2018-002)
---
## Requirements
Install the required Python modules:
```bash
pip install requests termcolor
```
## Usage
```bash
python3 exploit.py <TARGET_URL> <LISTENER_IP>
```
文件快照
[4.0K] /data/pocs/e177e8b56be713bf9c9b8aba9f91305eddb7dafd
├── [4.1K] poc.py
└── [1.4K] README.md
0 directories, 2 files
备注
1. 建议优先通过来源进行访问。
2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。