dreadlocked Drupalgeddon2 issues

dreadlocked / Drupalgeddon2

Exploit for Drupal v7.x + v8.x (Drupalgeddon 2 / CVE-2018-7600 / SA-CORE-2018-002)

574 stars 174 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Connection reset by peer (Errno::ECONNRESET

#70 mzrismuarf opened 12 months ago
0
Connection reset by peer

#69 whoamins closed 2 years ago
0
ModuleNotFoundError: No module named 'colorclass'

#68 K4IdO closed 3 years ago
1
Help in determining injection path

#67 Ravaan21 opened 3 years ago
0
Opens up regex to include http in version check

#66 cruzanstx closed 3 years ago
0
Drupal v7.54

#65 feint9 opened 3 years ago
0
Target is not exploitabe

#64 KatalyzerG closed 3 years ago
1
drupalgeddon2 options for insecure https

#63 izzatzr closed 3 years ago
1
Not working for me :( please help!!

#62 Devilemox closed 5 years ago
3
error

#61 Kalimon12 closed 5 years ago
1
Bug fixes

#59 g0tmi1k closed 5 years ago
0
using the user/login instead user/password?

#58 intrd opened 5 years ago
2
issue-55: troubleshooting entry added to doc for troubles with dependencies

#57 iammyr closed 5 years ago
0
[WIP] Initial Refactor

#56 KINGSABRI opened 5 years ago
0
error when running

#55 0ktavandi closed 5 years ago
4
[WIP] Initial Refactor

#54 KINGSABRI closed 5 years ago
12
Bug Fix: Form Path always defaulting to 1 in customizable-beta + form-build-ID extraction

#53 iammyr closed 5 years ago
1
Feature Request: Support for Session-Cookie Form and POST-based Authentication

#52 iammyr closed 5 years ago
2
Feature Request: Control verbosity via Command-Line Argument

#51 iammyr closed 5 years ago
2
proposed fixes for issues #49 #51 and #52

#50 iammyr closed 5 years ago
3
Can not detect Drupal version cause it stops iterating when one of the possible URLs gets a 200 response

#49 iammyr closed 5 years ago
2
Adapt to drupal 6

#48 H4ckTrooper closed 5 years ago
1
More verbose output

#47 g0tmi1k closed 5 years ago
0
Add meta tag check

#46 g0tmi1k closed 5 years ago
0
Drupal v8.x detected as v6.x?

#45 WTPRabbit closed 5 years ago
1
Use multiple methods for Drupal v8.x

#44 g0tmi1k closed 6 years ago
0
Multiple Improvements!

#43 g0tmi1k closed 6 years ago
0
Drupal 7.37 (form_id and form_build_id)

#42 ghost closed 5 years ago
2
disabled PHP function?

#41 ivnish closed 6 years ago
1
Strange behavior with Drupal 7.34

#40 leo72 closed 6 years ago
4
False Positive: can't execute the commands through shell

#39 Ninja-Pandit closed 6 years ago
3
[drupalgeddon2-customizable-beta.rb] 4th argument method - always /user/password

#38 TheRogue27 closed 5 years ago
2
Improved direct shell output, more verbose, add error checking

#37 g0tmi1k closed 6 years ago
0
CVE-2018-7602 (SA-CORE-004) #Drupalgeddon3

#36 syrius01 closed 6 years ago
6
Fix NoMethodError in version detection section

#35 Forst closed 6 years ago
1
Fixes and Improvesments

#34 g0tmi1k closed 6 years ago
0
/usr/lib/ruby/2.3.0/net/http.rb:1561:in `addr_port': undefined method `+' for nil:NilClass (NoMethodError)

#33 TheRogue27 closed 6 years ago
2
[drupalgeddon2-customizable-beta.rb] breaks with special characters / non-escaped payloads (Found and Fixed)

#32 m4lv0id closed 6 years ago
4
Backup the .htaccess file incase ./sites/default/files/ was found writeable

#31 lnxg33k closed 6 years ago
0
sites/default/files

#30 TheRogue27 closed 6 years ago
1
Fix for Bug #21

#28 Kushagra closed 6 years ago
2
Drupal 6.x Vulnerablity

#27 stewpeed closed 6 years ago
1
[drupalgeddon2-customizable-beta.rb] false positive?

#26 f3d0x0 closed 6 years ago
7
Fixed typo on line 70. http -> @http

#25 jedthe3rd closed 6 years ago
0
Can't get it to work. How do I enable write access?

#24 jedthe3rd closed 6 years ago
4
Drupal v7.9 - "[+] Drupal!: can detect a matching directory"

#23 kill-20 opened 6 years ago
2
Not even able to execute *direct commands*

#22 0xQwip closed 6 years ago
5
Failing to read CHANGELOG.txt (HTTP 405 - GET vs POST)

#21 0xQwip closed 6 years ago
7
MISSING: https://**************.org/CHANGELOG.txt

#20 dbjpanda closed 6 years ago
1
Assert is the new sexy

#19 X-C3LL closed 6 years ago
5