To help speed up the process of evaluating the tool, please make sure to include the following information (the more information you include, the more beneficial it will for us):

• [Name] - The name of the tool
• [Version] - What version of the tool should be added?
  --- If it uses source control (such as git), please make sure there is a release to match (e.g. git tag)
• [Homepage] - Where can the tool be found online? Where to go to get more information?
• [Download] - Where to go to get the tool? either a download page or a link to the latest version
• [Author] - Who made the tool?
• [Licence] - How is the software distributed? What conditions does it come with?
• [Description] - What is the tool about? What does it do?
• [Dependencies] - What is needed for the tool to work?
• [Similar tools] - What other tools are out there?
• [Activity] - When did the project start? Is is still actively being deployed?
• [How to install] - How do you compile it?
  --- Note, using source code to acquire (e.g. git clone/svn checkout) can't be used - Also downloading from the head. Please use a "tag" or "release" version.
• [How to use] - What are some basic commands/functions to demonstrate it?

[Name]
Drupwn

[Version]
release

[Homepage]
https://github.com/immunIT/drupwn
https://www.immunit.ch/blog/2018/04/10/yet-another-drupal-scanner-drupwn/

[Download]
https://github.com/immunIT/drupwn/archive/master.zip

[Author]
Jean Lejeune - Nitrax - Immunit

[Licence]
GPL V3

[Description]
Drupwn is a python script, following a modular architecture for maintenance and enhancement purposes, which allows exploiting and enumerating various kind of information that could be valuable to any security assessment against such platform.

[Dependencies]
python3
requests
veryprettytable
prompt_toolkit

[Similar tools]
Other tools e.g. Droopscan, drupscan allows performing enumeration attack. However, Drupwn is by far well more complete with an exploit mode allowing to exploit last drupal CVE. (Drupalgedon 2/3).

[Activity]
Drupwn has been release two months ago and still maintained (last push a few days ago)

[How to install]
Using the setup.py installer.
#python3 setup.py install

The tag release must be use to get the last release.

[How to use]
drupwn enum http://example.com #will apply all the numeration module
drupwn exploit http://example.com #will use the exploit mode

Hope it helps.
Best,

HI there,

Any news about the review of the tool above?

Best,

This tool looks good, however, the lack of commits is a little worrying
If dev picks up again, then we may add it in