a2u / cve-2018-7600 Goto Github PK

Which version of drupal do you test?
It does no work for me.
drupal version 7.51 and 8.33.

Hi, I have 0 experience in programming but when I was running this code, my kali box kept giving me syntax errors when inputting the url of the website. Here's a screenshot:

I don't exactly know why, but it seemed to be fixed when I replaced the input function on line 13 with the raw_input function.

Hope those with the same errors find this helpful!

This PoC assumes that the document root is writable by www-data, which is hopefully not the case for most installations. A more reliable test would be to write the file to sites/default/files/.

author may forgot add '/'，if you read the code,you can find this.
by the way,code is so short :-D
(my longming English)

I am starting to wonder if Drupal was trolling all of us.

Although I don't really think it's a joke, I'm spending some time on that vulnerability, and still nothing.

Maybe after the holidays someone will take it more seriously :)

And credit for my meme will be appreciated in any case :)

I'm attempting to use the ModSecurity rule provided but unfortunately, I cannot get it to work.

[Sat Oct 02 07:41:40.466003 2021] [:error] [pid 1739] [client 192.168.247.129:45424] [client 192.168.247.129] ModSecurity: Warning. Pattern match "#(submit|validate|pre_render|post_render|element_validate|after_build|value_callback|process|access_callback|lazy_builder)|\\[#(submit|validate|pre_render|post_render|element_validate|after_build|value_callback|process|access_callback|lazy_builder)" at ARGS_NAMES:name[#post_render][]. [file "/etc/apache2/modsecurity-crs/coreruleset-3.3.0/rules/drupal.conf"] [line "2"] [id "3295"] [hostname "www.ict379drupal7.com"] [uri "/"] [unique_id "YVgNND9KAmtIGa2izcMOBAAAAAA"]

I'm unsure as to what I'm doing wrong. The exploit is not being blocked, regardless of the pattern being detected.

1.I try to test hello1.txt is not existent,but r.status_code is still 200,why?

2.I can't find hello.txt in the root directory of the website,why?

Any idea to adpat to drupal 6 because it's also vulnerable but it answer not.