> For the complete documentation index, see [llms.txt](https://ret2basic.gitbook.io/ctfnote/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ret2basic.gitbook.io/ctfnote/red-teaming/enumeration/drupal.md).

# Drupal

## Drupal Version Enumeration

Visit `/core/install.php` to learn Drupal version:

![/core/install.php](https://3988450783-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MWVjG_njKgBtvmnKaJh%2F-MhG9icPVoAaztkWeHad%2F-MhGKH1IpAQGS_nra7zu%2Fimage.png?alt=media\&token=fccd7785-6a33-4122-af49-d4edb08b91b7)

## Leaked Credential in Configuration Files

In `/var/www/html/sites/default/settings.php`, there is a database credential:

![settings.php](https://3988450783-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MWVjG_njKgBtvmnKaJh%2F-MhMI4uirVoiD84BZCN8%2F-MhMJJKCBkEY134f75Jm%2Fimage.png?alt=media\&token=e632135d-eafa-4573-ac5d-fe5387654e2e)

Maybe this credential can be used for SSH.