This module exploits a Drupal property injection in the Forms API.
Drupal 6.x, < 7.58, 8.2.x, < 8.3.9, < 8.4.6, and < 8.5.1 are vulnerable.
To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':
msf > use exploit/unix/webapp/drupal/drupalgeddon2msf undefined(drupalgeddon2) > show actions ...actions...msf undefined(drupalgeddon2) > set ACTION < action-name >msf undefined(drupalgeddon2) > show options ...show and set options...msf undefined(drupalgeddon2) > runWith curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub