CVE-2018-6389 PoC — WordPress 安全漏洞

Source

https://github.com/safebuffer/CVE-2018-6389

Associated Vulnerability

Title: WordPress 安全漏洞 (CVE-2018-6389)
Description:In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service (resource consumption) by using the large list of registered .js files (from wp-includes/script-loader.php) to construct a series of requests to load every file many times.

Description

CVE-2018-6389 Exploit In WordPress DoS

Readme

# CVE-2018-6389 Wordpress Exploit

CVE-2018-6389 Exploit Can Down Any Wordpress site under 4.9.3 <Br>
The flaw affects the *load-scripts.php* WordPress script, it receives a parameter called load[] 

## About PoC
A simple Script In Python With threading could allow anyone to take down most WordPress websites with single machine
### Info

Can Down Any Website with Tested Wordpress versions <Br>
* Tested : WordPress (Version 4.9.2) 
* Tested : WordPress (Version 4.9.1)

```
Note : I Am Not The Author Of the Exploit 
```

## Ref

* [PoC](https://www.youtube.com/watch?v=nNDsGTalXS0) - Youtube
* [ Barak Tawily ](https://baraktawily.blogspot.com/2018/02/how-to-dos-29-of-world-wide-websites.html) - Blog

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →