Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 7 additions & 7 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
#Attacking Drupal
# Attacking Drupal
greg . foss [at] owasp . org

v0.5 Beta -- 1/11/2015
Expand All @@ -10,7 +10,7 @@ Scripts and a basic checklist used to augment the penetration testing and securi

--------------------------------------------------

#[account-forcer]
# [account-forcer]
A Drupal account brute-forceing script.

There are two versions, Drupal 6 and Drupal 7 as each has slight differences in the code. This script will work with any wordlist against a Drupal 6 application, assuming that it does not have additional protections in place such as rate limiting, MFA, SSO, CAPTCHA (implemented properly) etc. Drupal 7 is a bit trickier, and will only work if a small wordlist is used.
Expand All @@ -21,7 +21,7 @@ There are two versions, Drupal 6 and Drupal 7 as each has slight differences in

--------------------------------------------------

#[devel-exploit]
# [devel-exploit]
This script will harvest all user e-mails and password hashes from an application running the Drupal Devel module.

There are two versions, Drupal 6 and Drupal 7 as each has slight differences in the code. This script can be used to automate the task of extracting user account information from any site that has left the devel module enabled.
Expand All @@ -32,14 +32,14 @@ There are two versions, Drupal 6 and Drupal 7 as each has slight differences in

--------------------------------------------------

#[drupal-security-checklist]
# [drupal-security-checklist]
Basic checklist which helps developers and security teams alike avoid common security pitfalls when developing Drupal web applications.

Checklist is located within the /presentation/ directory.

--------------------------------------------------

#[presentation-&-movies]
# [presentation-&-movies]
The BSidesLV presentation can be viewed here:
https://www.youtube.com/watch?v=-0ZeL_SMNB8

Expand All @@ -48,7 +48,7 @@ The slides are located in the /presentation/ directory or can be viewed on slide

--------------------------------------------------

#[changelog]
# [changelog]

1/11/2015 - Security Checklist Update
-Closed Issue #1
Expand All @@ -74,7 +74,7 @@ The slides are located in the /presentation/ directory or can be viewed on slide

--------------------------------------------------

#[License]
# [License]

Copyright (c) 2014, Greg Foss
All rights reserved.
Expand Down