CVE-2018-6389

CVE-2018-6389 Exploit CVE-2018-6389 Checker — a small, non‑destructive Python tool that checks for indicators of the CVE‑2018‑6389 WordPress vulnerability by issuing three controlled load-scripts.php requests and analysing response size, timing and JS token patterns. ⚠️ Disclaimer Use this tool...

wordpress-cve-2018-6389

WordPress-CVE-2018-6389 WordPress Core - 'load-scripts.php' Denial of Service = 4.9.4 Date: 05/02/2018 Software Link: WordPress Version: = 4.9.4 Tested on: KaLi Linux 2018.1 CVE: CVE-2018-6389 Discovered by: Barak Tawily Exploit by: Javier Olmedo HOW TO USE? Clone this repository root@kitploit: g...

WP-DOS-Exploit-CVE-2018-6389

WP-DOS-Exploit-CVE-2018-6389 Este es un exploit del ataque DoS de Wordpress CVE 2018-6389. USO python3 wp-dosCVE-2018-6389.py domain threads Ejemplo python3 wp-dosCVE-2018-6389.py http://example.com 1000...

tvsz

CVE-2018-6389 PoC node js multisite with proxy This script is based on CVE-2018-6389, a rather insidious problem in Wordpress, which unfortunately will likely not be fixed by the team developing the platform, even though it has been known for quite some time. !!! IMPORTANT BEFORE YOU CONTINUE !!!...

CVE-2018-6389

CVE-2018-6389 WordPress DoS CVE-2018-6389 Referencia https://baraktawily.blogspot.jp/2018/02/how-to-dos-29-of-world-wide-websites.html Cómo hacer DoS Iniciar WordPress root@kitploit: $ docker-compose up -d Pulling wordpress wordpress:4.9.3... 4.9.3: Pulling from library/wordpress e7bb522d92ff: Pu...

CVE-2018-6389-FIX

Este repositorio no tiene un README...

wordpress_cve-2018-6389

wordpresscve-2018-6389 Intenta explotar una vulnerabilidad de WordPress CVE-2018-6389 que puede ser utilizada para causar una Denegación de Servicio. ADVERTENCIA: Este software no realiza un DoS en objetivos vulnerables; ejecuta solo una llamada HTTP GET para verificar si la vulnerabilidad está...

cve-2018-6389-php-patcher

cve-2018-6389-php-patcher Patch Wordpress DOS breach CVE-2018-6389 in PHP. 1. Place patcher.php in WordPress root directory 2. Request yourwordpress.com/patcher.php 3. Delete patcher.php Source : https://www.securemydata.fr/patch-de-la-faille-cve-2018-6389-dos-wordpress/...

cve-2018-6389

cve-2018-6389 Twitter: https://twitter.com/Ja7adR Telegram: https://t.me/Ja7adR...

CVE-2018-6389-FIX

This repository does not have a README...

modsecurity-cve-2018-6389

modsecurity-cve-2018-6389 A ModSecurity ruleset for detecting potential attacks using CVE-2018-6389. For more information, see https://www.rastating.com/protecting-wordpress-against-cve-2018-6389/...

trellis-cve-2018-6389

trellis-cve-2018-6389 Mitigate CVE-2018-6389 WordPress load-scripts / load-styles attacks. Goal Why? Mitigation Why Not? Requirements Installation Trellis WordPress FAQs Can I use this on managed hosting? It looks awesome. Where can I find some more goodies like this? This isn't on wp.org. Where...

wordpress-fix-cve-2018-6389

wordpress-fix-cve-2018-6389 Apache RewriteRule to mitigate potential DoS attack via Wordpress wp-admin/load-scripts.php file Initial disclosure by Barak Tawily: https://baraktawily.blogspot.in/2018/02/how-to-dos-29-of-world-wide-websites.html...

PoC---CVE-2018-6389

PoC - CVE-2018-6389 Prueba de concepto de la vulnerabilidad CVE-2018-6389 en Wordpress 4.9.2...

Shiva

Shiva First of all, put Shiva on watch. I will be upgrading it to a full stress testing suite over time. Shiva is designed to perform Denial Of Service DOS attack on wordpress sites by loading all jquery scripts at once through load-scripts.php. So basically its an exploit for CVE-2018-6389...

Wordpress-Hack-CVE-2018-6389

WordPress › ReadMe Semantic Personal Publishing Platform First Things First Welcome. WordPress is a very special project to me. Every developer and contributor adds something unique to the mix, and together we create something beautiful that I’m proud to be a part of. Thousands of hours have gone...

Publitas: CVE-2018-6389 exploitation - using scripts loader

An unauthenticated denial of service vulnerability in WordPress was discovered, tracked as CVE-2018-6389. By requesting a large number of JavaScript files through the load-scripts.php endpoint, an attacker could consume excessive resources on the server. This vulnerability could allow denial of...

Fastly VDP: CVE-2018-6389 exploitation - using scripts loader

Vulnerability description not provided...

U.S. Dept Of Defense: DoS at █████(CVE-2018-6389)

A vulnerability in WordPress allowed unauthenticated attackers to launch a denial of service attack by listing a large number of registered .js files from wp-includes/script-loader.php. The vulnerability was assigned CVE-2018-6389. Attackers could use this function to deplete server resources and...

U.S. Dept Of Defense: DoS at ████████ (CVE-2018-6389)

An unauthenticated attacker could cause a denial of service resource consumption on a WordPress site by using the large list of registered .js files to construct a series of requests to load every file many times. The vulnerability was registered as CVE-2018-6389...