> For the complete documentation index, see [llms.txt](https://cajac.gitbook.io/ctf-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cajac.gitbook.io/ctf-notes/web/cms/drupal.md). # Drupal **Drupal** is a free and open-source web content management system (CMS) written in **PHP** and distributed under the GNU General Public License. Drupal provides an open-source back-end framework for at least 14% of the top 10,000 websites worldwide and 1.2% of the top 10 million websites — ranging from personal blogs to corporate, political, and government sites. Drupal can also be used for knowledge management and for business collaboration. ## Droopescan Scan a Drupcal installation ```bash ┌──(kali㉿kali)-[/mnt/…/OffSec_PG/PG_Play/Easy/DC-1] └─$ source ~/Python_venvs/Python3.10/bin/activate ┌──(Python3.10)─(kali㉿kali)-[/mnt/…/OffSec_PG/PG_Play/Easy/DC-1] └─$ droopescan scan drupal -u http://$TARGET_IP/ -t 32 [+] Plugins found: ctools http://192.168.199.193/sites/all/modules/ctools/ http://192.168.199.193/sites/all/modules/ctools/LICENSE.txt http://192.168.199.193/sites/all/modules/ctools/API.txt views http://192.168.199.193/sites/all/modules/views/ http://192.168.199.193/sites/all/modules/views/README.txt http://192.168.199.193/sites/all/modules/views/LICENSE.txt profile http://192.168.199.193/modules/profile/ php http://192.168.199.193/modules/php/ image http://192.168.199.193/modules/image/ [+] Themes found: seven http://192.168.199.193/themes/seven/ garland http://192.168.199.193/themes/garland/ [+] Possible version(s): 7.22 7.23 7.24 7.25 7.26 [+] Possible interesting urls found: Default admin - http://192.168.199.193/user/login [+] Scan finished (0:05:26.944394 elapsed) ``` ## Resources droopescan - GitHub: droopescan - PyPI: Drupal - Wikipedia: