diff --git a/subdomain-takeover/drupal.yaml b/subdomain-takeover/drupal.yaml
new file mode 100644
index 0000000000..1fd7f0cedf
--- /dev/null
+++ b/subdomain-takeover/drupal.yaml
@@ -0,0 +1,18 @@
+id: drupal
+
+info:
+  name: Drupal Install
+  author: NkxxkN
+  severity: medium
+
+requests:
+  - method: GET
+    path: 
+      - "{{BaseURL}}/core/install.php"
+      - "{{BaseURL}}/install.php"
+    matchers:
+      - type: word
+        words:
+          - 'Choose language'
+          - 'Verify requirements'
+        condition: and