CVE-2018-6389 PoC — WordPress 安全漏洞

Source

Associated Vulnerability

Description

Exploit for vulnerability CVE-2018-6389 on wordpress sites

Readme

# CVE-2018-6389 exploit for Wordpress sites

> A small DOS script targeting an unpatched vulnerability in wordpress sites. 
> Uses `/wp-admin/load-scripts.php` to request additional scripts from hosting server.
> Includes large list of scripts as request payload

> This implementation is for testing purposes only

## Usage

> `python wpdos.py -t 5000 -g 'https://www.wordpresswebsite.co.za'` 

> `-t` specifies how many threads requests should run on

> `-g` Specifies GET request type

## Dependancies

> This script requires the `requests` package. Reccommend installation with [pip](https://bootstrap.pypa.io/get-pip.py)

## Acknowledgements

> This script was put together with snippets from @m3ssap0 @WazeHell and @Palvinder-Singh

File Snapshot

 [4.0K]  /data/pocs/31782af19e8545f5127bea04f26baf8a6906fc71
├── [1.6M]  get-pip.py
├── [ 738]  README.md
└── [6.1K]  wpdos.py

0 directories, 3 files

Remarks