Drupal 7.xx SQL Injection Exploit

Drupal 7.xx SQL Injection Vulnerability
This exploit add a new Drupal administrator account (preserving original) via Sql Injection.

NOTE: THIS IS ONLY FOR EDUCATION PURPOSES, AND FOR SAFETY PURPOSE. WE ARE NOT RESPONSIBLE ANY HARM DONE BY YOU.

Requirements:-

1). Python

2). Exploit Script.py

         OR

3). Drupal Auto Exploiter

In this tutorial, i'm just going to show you how to exploit using our Drupal Auto Exploiter since it is fast and easy.

Steps:-

1). Download the auto exploiter from the given link
2). Extract and run it
3).  Find your target on Google by using this dork

intext:"powered by drupal"

4). Choose any site, paste it in exploiter and click EXPLOIT
5). If the site is vulnerable, you will see something like this

6). Click the given login URL and login with the username and password given.

Having Problems?

Feel free to read the Frequent Asked Questions(FAQs) by clicking on HELP

Downloads:-

Python

Exploit Script.py

Drupal AutoExploiter