As we talked about in earlier chapters, reconnaissance and enumeration is a crucial step in any kind of penetration testing. In this section, we will look at some of the methods that can be used to identify a Drupal installation and the installed version.
Drupal reconnaissance and enumeration
Detection via README.txt
This is the easiest and the most basic technique. All we have to do is visit the README.txt page and we will see a line that reads "Protect files and directories from prying eyes":
This will indicate that the instance is indeed a Drupal instance.
