This talk focuses on the penetration tester's perspective on Drupal and dives into streamlining the assessment and remediation of commonly observed application and configuration flaws by way of custom exploit code and security checklists, all of which are open-source and can be downloaded from: https://github.com/gfoss/attacking-drupal