## `blog.inlanefreight.local` - visit page ![[images/Pasted image 20260628151507.png]] - Drupal 9 - `/user/login` ![[images/Pasted image 20260628151544.png]] - `/contact` ![[images/Pasted image 20260628151712.png]] - `/user/register` allows me to upload a picture ![[images/Pasted image 20260628154056.png]] - hmm i'm getting a wait for admin type message when i register a test user ![[images/Pasted image 20260628154048.png]] - `robots.txt` ![[images/Pasted image 20260628205238.png]] ### `droopescan` - had issuing run `droopescan` but with a little help from gemini I was able to run this command to create a venx running python 3.11 ```bash uv run --python 3.11 --with-requirements requirements.txt python3 ./droopescan scan drupal -u blog.inlanefreight.local ``` ![[images/Pasted image 20260628204703.png]] ### `drupwn` - seems like the more modern version of above ```bash python3 drupwn --mode enum --target http://blog.inlanefreight.local ``` ![[images/Pasted image 20260628205655.png]] - `/core/install.php` shows version 9.3.13 ![[images/Pasted image 20260628205647.png]] ### fuzzing - directory