WordPressMassExploiter

WordPressMassExploiter 针对 WordPress CMS 的 CVE-2015-1579 批量利用工具 该批量利用工具基于 CVE-2015-1579，由 CLAUDIO VIVIANI 发现（https://www.exploit-db.com/exploits/36554/） 工作原理： 1 - 我使用 Selenium 框架在 Google 上进行搜索。 2 - 搜索结果会被解析，链接会存储到 wordpressAFDresults.txt 文件中。 3 - fuzzer 和 downloadwpconfig 会尝试从所有目标下载 wp-config。...

WordPressMassExploiter

WordPressMassExploiter Mass exploiter of CVE-2015-1579 for WordPress CMS This mass exploiter is based on CVE-2015-1579, discovered by CLAUDIO VIVIANI https://www.exploit-db.com/exploits/36554/ How it works: 1 - I use Selenium Framework to make the search on google. 2 - The results of search, are...

WordPress Elegant Themes Divi Theme Directory Traversal Nmap NSE Script

local http = require "http" local shortport = require "shortport" local stdnse = require "stdnse" local string = require "string" local vulns = require "vulns" local nmap = require "nmap" description = Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote...

CVE-2015-1579

A directory traversal vulnerability exists in the Elegant Themes Divi theme for WordPress. The flaw stems from a failure to adequately filter the img parameter within the revslider_show_image action in the wp-admin/admin-ajax.php script. A remote attacker can use .. (dot dot) sequences to read ar...

WordPress Slider Revolution Plugin Local File Inclusion (CVE-2014-9734; CVE-2015-1579)

An information disclosure vulnerability has been reported in WordPress Slider Revolution Plugin. Successful exploitation of this vulnerability could allow a remote attacker to download local files, and may lead to disclosure of database credentials...