# Drupal

<https://www.drupal.org/>

***

## Tools

* [droopescan](https://estebanzarate.gitbook.io/hackache/tools/droopescan)

***

## Discovery/Footprinting

```bash
curl -s http://drupal.inlanefreight.local | grep Drupal
```

### Directorios

[Directory Structure](https://www.drupal.org/docs/getting-started/understanding-drupal/directory-structure#top)

```
/node/
```

## Enumeration

```bash
curl -s http://drupal-acc.inlanefreight.local/CHANGELOG.txt | grep -m2 ""
curl -s http://drupal.inlanefreight.local/CHANGELOG.txt
```

## Configuration files

```
/sites/default/
```

## Hardening

<https://www.drupal.org/docs/security-in-drupal>

<https://www.drupal.org/docs/7/managing-users/hide-user-login>
