CVE-2018-7600 - Drupal 7.x 远程代码执行exp

工具介绍

---

CVE-2018-7600

CVE-2018-7600 - Drupal 7.x RCE

Drupal < 7.58 unauthenticated RCE

Requirements

• python3

• python requests (pip install requests)

Usage

• Install dependencies

• modify the HOST variable in the script

• run the code

• win

Just install requests (pip install requests), edit the file to change the host and run the exploit:

使用方法

---

python .\poc.py uid=33

(www-data) gid=33(www-data) groups=33(www-data) 

[{"command":"settings",......

下载地址

---

https://github.com/FireFart/CVE-2018-7600

点击阅读原文可直接打开