> For the complete documentation index, see [llms.txt](https://ret2basic.gitbook.io/ctfnote/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ret2basic.gitbook.io/ctfnote/red-teaming/enumeration/drupal.md).

# Drupal

## Drupal Version Enumeration

Visit `/core/install.php` to learn Drupal version:

![/core/install.php](/files/-MhGKH1IpAQGS_nra7zu)

## Leaked Credential in Configuration Files

In `/var/www/html/sites/default/settings.php`, there is a database credential:

![settings.php](/files/-MhMJJKCBkEY134f75Jm)

Maybe this credential can be used for SSH.