There's no Metasploit module that can perform a vulnerability scan on Drupal. As such, we need to use a third-party tool, such as droopescan, to help us find vulnerabilities in Drupal. droopescan can be downloaded from https://github.com/droope/droopescan:
- Let's clone the Git repository of droopescan for installation using the following command:
git clone https://github.com/droope/droopescan
The following screenshot shows the output of the preceding command:
![](https://static.packt-cdn.com/products/9781789953527/graphics/assets/11fd5fe7-a373-405b-ac8c-eb972a52afe8.png)
- Before running droopescan, we still need to install the necessary Python modules, which can be done using the following command:
pip install -r requirements.txt
- Once all the packages are installed on the system, we can test the installation by executing droopescan using the following command:
./droopescan
- If there's an error while executing droopescan, we...