+----------------------------------------------------------------------+
+ DES: by zhzyker as https://github.com/zhzyker/exphub +
+ Drupal Drupalgeddon 2 远程代码执行 CVE-2018-7600 +
+----------------------------------------------------------------------+
+ USE: python3 <filename> <url> +
+ EXP: python3 cve-2018-7600_cmd.py http://1.1.1.1:8080 +
+ VER: Drupal 6.x +
+ Drupal 7.x < 7.58 +
+ Drupal 8.3 < 8.3.9 +
+ Drupal 8.4 < 8.4.6 +
+ Drupal 8.5 < 8.5.1 +
+----------------------------------------------------------------------+
+ DES: Shell仅能回显一行代码,多行代码结果查看http://xxxx/exphub.txt +
+----------------------------------------------------------------------+
更多Drupal利用脚本:https://github.com/zhzyker/exphub