Not even able to execute *direct commands* about drupalgeddon2

[dreadlocked]

Give Drupal write permissions!

[0xQwip]

So, if a Drupal installation don't have write permissions the RCE cannot be exploited in any way? And I think the Drupal installation I am targeting is having write permission, not sure though. ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐

…

On April 19, 2018 1:05 AM, Dreadlocked ***@***.***> wrote: Give Drupal write permissions! — You are receiving this because you authored the thread. Reply to this email directly, [view it on GitHub](#22 (comment)), or [mute the thread](https://github.com/notifications/unsubscribe-auth/Akt9cddPZuBnNZDYrA-bWYa7XoH8PNN5ks5tp5VkgaJpZM4Tac-x).

[g0tmi1k]

Is the the target Drupal v7 @0xQwip ?
Could you give a complete output of the script?

[0xQwip]

Yes, @g0tmi1k the target is Drupal 7.31.

Here is the complete output of the script: https://ghostbin.com/paste/msk2z

P.S. I have changed the script to consider it as Drupal 7.x because it was not able to detect it itself.

elsif response.code == "403"
puts "[+] Found : #{uri} (#{response.code})"
# Get version from URL
# $drupalverion = uri.match(/core/)? "8.x" : "7.x"
$drupalverion = "7.x"
else

Changed snippet of code ^

[g0tmi1k]

The HTTP 405 is the same as #21 (Using POST rather than GET). Thats been fixed up - so it should be able to detect the version from the changelog.txt file now.

Is there any disabled functions in PHP? A WAF?

Now installing v7.31 locally to test.

---

Edit: Out of the box, working for me. Guessing its some configuration thats causing the issue.
Whats the OS? PHP version? Apache version? Anything functions disabled? Security in place?