There's no Metasploit module that can perform a vulnerability scan on Drupal. As such, we need to use a third-party tool, such as droopescan, to help us find vulnerabilities in Drupal. droopescan can be downloaded from https://github.com/droope/droopescan:
- Let's clone the Git repository of droopescan for installation using the following command:
git clone https://github.com/droope/droopescan
The following screenshot shows the output of the preceding command:
- Before running droopescan, we still need to install the necessary Python modules, which can be done using the following command:
pip install -r requirements.txt
- Once all the packages are installed on the system, we can test the installation by executing droopescan using the following command:
./droopescan
- If there's an error while executing droopescan, we...