Another popular CMS is Drupal, which is also open source and based on PHP as with the previous ones. Although not as widespread, it holds a considerable share of the market with more than 1 million sites using it according to its official site (https://www.drupal.org/project/usage/drupal).
In this recipe, we will install CMSmap, a vulnerability scanner for Drupal, WordPress, and Joomla, and use it to identify vulnerabilities in the Drupal version installed in bee-box, one of the vulnerable virtual machines in our laboratory. After finding a relevant attack vector, we will exploit it and gain command execution on the server.
