Sploitus

Exploit for Improper Input Validation in Drupal CVE-2018-7600

githubexploit · 2018-04-16

Exploit Code

README23 lines
## https://sploitus.com/exploit?id=FF9E5DC2-E97D-50FB-A62C-3DF8297AFE7A
# CVE-2018-7600
CVE-2018-7600 - Drupal 7.x RCE

Drupal < 7.58 unauthenticated RCE

Requirements
  - python3
  - python requests (pip install requests)

Usage
  - Install dependencies
  - modify the HOST variable in the script
  - run the code
  - win

Just install requests (pip install requests), edit the file to change the host and run the exploit:

```
python .\poc.py
uid=33(www-data) gid=33(www-data) groups=33(www-data)
[{"command":"settings",......
```