CVE-2017-5487 PoC — WordPress 安全漏洞

Source

https://github.com/patilkr/wp-CVE-2017-5487-exploit

Associated Vulnerability

Title: WordPress 安全漏洞 (CVE-2017-5487)
Description:wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before 4.7.1 does not properly restrict listings of post authors, which allows remote attackers to obtain sensitive information via a wp-json/wp/v2/users request.

Description

WordPress  CVE-2017-5487  Exploit in Python

Readme

# WordPress  CVE-2017-5487  Exploit in Python
---------------------------------------------
**Usage Examples:**

- python3 krpexploit.py  -h

- python3 krpexploit.py --url http://examplesite.com

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →