Web-Penetration-Test

Web-Penetration-Test 利用 WordPress 漏洞（CVE-2025-34077），通过 Cookie 注入绕过身份验证，并提权至 root。这是我网络安全专业化课程的一部分。 第一天：入侵我的第一个网站 实验报告：入侵“BigWear”服务器 在网络安全之旅的第一节课中，我摒弃了那些神话。我认识到，要发现安全漏洞，你不需要是数学天才或专业程序员；你需要的是创造力、逻辑和一套扎实的方法论。 分步解析：“BigWear”服务器失陷过程 我把“BigWear”服务器比作一栋办公楼，而我的目标是抵达保险库。以下是我遵循的逻辑流程： 第一步：敲门侦察（扫描）...

Exploit for CVE-2025-34077

CVE-2025-34077 Unauthenticated Admin Session Hijack - Pie Regist...

📄 WordPress Pie Register 3.7.1.4 Shell Upload

WordPress Pie Register plugin versions 3.7.1.4 and below suffer from a bypass vulnerability that enables an attacker to upload a shell. Exploit Title: Pie Register WordPress Plugin 3.7.1.4 - Authentication Bypass to RCE Google Dork: inurl:/wp-content/plugins/pie-register/ Date: 2025-07-09 Exploit...

Pie Register WordPress Plugin 3.7.1.4 - Authentication Bypass to RCE

Exploit Title: Pie Register WordPress Plugin 3.7.1.4 - Authentication Bypass to RCE Google Dork: inurl:/wp-content/plugins/pie-register/ Date: 2025-07-09 Exploit Author: Md Amanat Ullah xSwads Vendor Homepage: https://wordpress.org/plugins/pie-register/ Software Link:...

Exploit for CVE-2025-34077

CVE-2025-34077 — WordPress Pie Register ≤ 3.7.1.4 - Admin Priv...

CVE-2025-34077 WordPress Pie Register Plugin ≤ 3.7.1.4 Authentication Bypass RCE

An authentication bypass vulnerability exists in the WordPress Pie Register plugin ≤ 3.7.1.4 that allows unauthenticated attackers to impersonate arbitrary users by submitting a crafted POST request to the login endpoint. By setting socialsite=true and manipulating the useridsocialsite parameter,...