CVE-2023-6634 PoC — WordPress Plugin LearnPress 安全漏洞

Description

CVE-2023-6634

介绍

# CVE-2023-6634 Exploit Script

## Description

This repository contains a Python script designed to exploit the CVE-2023-6634 vulnerability found in the LearnPress plugin for WordPress, versions up to and including 4.2.5.7. The vulnerability allows for remote code execution (RCE) due to improper input validation in the `load_content_via_ajax` function.

## Disclaimer

This tool is provided for educational purposes and authorized penetration testing only. Use of this tool against systems without explicit permission is illegal and unethical. By downloading or using this tool, you agree to use it in a responsible and ethical manner.

## Installation

No installation is necessary beyond having Python 3 and the `requests` library installed on your system. You can install the required Python library using the following command:

```
pip install requests
```

## Usage

The script can be run from the command line by providing the target URL and the command you wish to execute on the vulnerable WordPress site. For example:

```
python CVE-2023-6634.py http://example.com "whoami"
```

Replace `http://example.com` with the URL of the target WordPress site and `"whoami"` with the command you wish to execute.

## Features

- Dynamic payload construction for exploiting CVE-2023-6634.
- Command-line arguments for easy use and integration into automated workflows.
- Detailed response output for assessing exploit success.

## Contributing

Contributions to improve the script or extend its functionality are welcome. Please ensure that any pull requests or issues adhere to ethical guidelines and do not promote unauthorized use.

## License

[MIT License](LICENSE)

## References

- https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/learnpress/learnpress-4257-command-injection
- https://wpscan.com/vulnerability/909580f4-1306-4e61-ac7d-e7a2eb0961f8/
- https://nvd.nist.gov/vuln/detail/CVE-2023-6634

## Acknowledgments

- Authors of the exploit: iamnoooob, rootxharsh, pdresearch
- Vulnerability researchers and the cybersecurity community for providing the insights necessary to develop this script.

文件快照

备注