CVE-2018-6389 PoC — WordPress 安全漏洞

Description

CVE-2018-6389 WordPress Core - 'load-scripts.php' Denial of Service <= 4.9.4

介绍

# WordPress-CVE-2018-6389

## WordPress Core - 'load-scripts.php' Denial of Service <= 4.9.4

**Date:** 05/02/2018

**Software Link:** [WordPress](https://wordpress.org/)

**Version:** <= 4.9.4

**Tested on:** KaLi Linux 2018.1

**CVE:** [CVE-2018-6389](https://www.certsi.es/en/early-warning/vulnerabilities/cve-2018-6389)

**Discovered by:** [Barak Tawily](https://github.com/Quitten)

**Exploit by:** [Javier Olmedo](https://twitter.com/jjavierolmedo)
## HOW TO USE?
Clone this repository
```
git clone https://github.com/JJavierOlmedo/wordpress-cve-2018-6389.git
```
Go to local repository
```
cd wordpress-cve-2018-6389
```
Change the access permissions
```
sudo chmod +x wordpress-cve-2018-6389.py
```
Launch attack!!
```
python3 wordpress-cve-2018-6389.py -u <TARGET> -t <THREADS>
```
## PoC
![cve-2018-6389](https://hackpuntes.com/wp-content/uploads/2018/03/cve-2018-6389.gif)

文件快照

备注