Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass# CVE-2024-10924-Exploit
Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass
# 📖 Description
This script exploits a vulnerability in the Really Simple Security plugin (versions 9.0.0 - 9.1.1.1) for WordPress.The flaw allows authentication bypass due to improper error handling in the `check_login_and_get_user` function in the Two-Factor Authentication API.
Using this exploit, an attacker can log in as any user (e.g., administrator) if 2FA is enabled.Once authenticated, the script automatically launches a browser session with the obtained session cookies.
## 🛠 Requirements
Before running the script, install the required dependencies:
```
pip install requests selenium webdriver-manager
```
## 🚀 How to Use
```
python CVE-2024-10924.py -u http://TARGET-WEBSITE.com/
```
- The script exploits the authentication bypass vulnerability to obtain valid session cookies.
- It launches Chrome automatically and opens the WordPress dashboard as an administrator.
## 🔍 How It Works
1. Exploits CVE-2024-10924 by sending a POST request to:
```
/wp-json/reallysimplessl/v1/two_fa/skip_onboarding
```
2. Extracts session cookies from the response.
3. Launches Google Chrome via Selenium.
4. Injects the cookies into the browser session.
5. Redirects to `/wp-admin/`, granting administrator access without needing a password.
## Usage:
```
usage: CVE-2024-10924.py [-h] -u URL
WordPress Login Exploit | Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication
Bypass
options:
-h, --help show this help message and exit
-u URL, --url URL Target WordPress URL
```
### Disclaimer
This script is intended for educational purposes and authorized security assessments only. Misuse of this script may result in legal consequences. Always obtain proper authorization before testing on any system.
[4.0K] /data/pocs/b3e8432c018e8c25b3ce53e06d790ba9be44f8e9
├── [3.3K] CVE-2024-10924.py
└── [1.8K] README.md
0 directories, 2 files