CVE-2018-6389

CVE-2018-6389 Exploit CVE-2018-6389 Checker — a small, non‑destructive Python tool that checks for indicators of the CVE‑2018‑6389 WordPress vulnerability by issuing three controlled load-scripts.php requests and analysing response size, timing and JS token patterns. ⚠️ Disclaimer Use this tool...

WP-DOS-Exploit-CVE-2018-6389

WP-DOS-Exploit-CVE-2018-6389 Este es un exploit del ataque DoS de Wordpress CVE 2018-6389. USO python3 wp-dosCVE-2018-6389.py domain threads Ejemplo python3 wp-dosCVE-2018-6389.py http://example.com 1000...

tvsz

CVE-2018-6389 PoC node js 多站点带有代理 这个脚本基于 CVE-2018-6389，一个相当棘手的 Wordpress 问题，遗憾的是，尽管该问题已知已久，但开发该平台的团队可能不会修复它。 ！！！重要：在你继续之前！！！ 整个仓库和此处分享的信息可以以任何形式自由使用——复制、修改、升级、共享。但将共享信息用于教学目的之外，例如实验或保护你自己的 Wordpress 平台，很可能违反许多我不熟悉的法律。不要使用该脚本攻击网站！我对你的行为不承担任何责任。使用它即表示你同意这些条款。DDoS 攻击（拒绝服务）针对非自己拥有的网站，可能被视为恐怖袭击。...

wordpress-cve-2018-6389

WordPress-CVE-2018-6389 WordPress Core - 'load-scripts.php' Denegación de Servicio = 4.9.4 Fecha: 05/02/2018 Enlace del software: WordPress Versión: = 4.9.4 Probado en: KaLi Linux 2018.1 CVE: CVE-2018-6389 Descubierto por: Barak Tawily Exploit por: Javier Olmedo ¿CÓMO USARLO? Clona este repositor...

CVE-2018-6389

CVE-2018-6389 WordPress DoS CVE-2018-6389 Referencia https://baraktawily.blogspot.jp/2018/02/how-to-dos-29-of-world-wide-websites.html Cómo hacer DoS Iniciar WordPress root@kitploit: $ docker-compose up -d Pulling wordpress wordpress:4.9.3... 4.9.3: Pulling from library/wordpress e7bb522d92ff: Pu...

cve-2018-6389

cve-2018-6389 Twitter: https://twitter.com/Ja7adR Telegram: https://t.me/Ja7adR...

CVE-2018-6389-FIX

Este repositorio no tiene un README...

modsecurity-cve-2018-6389

modsecurity-cve-2018-6389 A ModSecurity ruleset for detecting potential attacks using CVE-2018-6389. For more information, see https://www.rastating.com/protecting-wordpress-against-cve-2018-6389/...

trellis-cve-2018-6389

trellis-cve-2018-6389 缓解 CVE-2018-6389 WordPress 的 load-scripts / load-styles 攻击。 目标 为什么？ 缓解措施 为什么不？ 要求 安装 Trellis WordPress 常见问题 我可以在托管主机上使用这个吗？ 这看起来很酷。我在哪里可以找到更多这样的好东西？ 这不在 wp.org 上。我在哪里可以给出 ⭐️⭐️⭐️⭐️⭐️ 的评价？ 替代方案 测试 语法检查 作者信息 反馈 更新日志 许可 目标 通过 Nginx 拒绝所有对 wp-admin/load-scripts.php 和...

wordpress-fix-cve-2018-6389

wordpress-fix-cve-2018-6389 Regla Apache RewriteRule para mitigar un posible ataque DoS mediante el archivo wp-admin/load-scripts.php de Wordpress Divulgación inicial por Barak Tawily: https://baraktawily.blogspot.in/2018/02/how-to-dos-29-of-world-wide-websites.html...

PoC---CVE-2018-6389

PoC - CVE-2018-6389 Prueba de concepto de la vulnerabilidad CVE-2018-6389 en Wordpress 4.9.2...

Shiva

Shiva First of all, put Shiva on watch. I will be upgrading it to a full stress testing suite over time. Shiva is designed to perform Denial Of Service DOS attack on wordpress sites by loading all jquery scripts at once through load-scripts.php. So basically its an exploit for CVE-2018-6389...

Wordpress-Hack-CVE-2018-6389

WordPress › Léeme Plataforma semántica de publicación personal Primero lo primero Bienvenido. WordPress es un proyecto muy especial para mí. Cada desarrollador y colaborador aporta algo único al conjunto, y juntos creamos algo hermoso del que estoy orgulloso de formar parte. Se han invertido mile...

CVE-2018-6389-FIX

Este repositorio no tiene un README...

wordpress_cve-2018-6389

wordpresscve-2018-6389 Intenta explotar una vulnerabilidad de WordPress CVE-2018-6389 que puede ser utilizada para causar una Denegación de Servicio. ADVERTENCIA: Este software no realiza un DoS en objetivos vulnerables; ejecuta solo una llamada HTTP GET para verificar si la vulnerabilidad está...

cve-2018-6389-php-patcher

cve-2018-6389-php-patcher Patch Wordpress DOS breach CVE-2018-6389 in PHP. 1. Place patcher.php in WordPress root directory 2. Request yourwordpress.com/patcher.php 3. Delete patcher.php Source : https://www.securemydata.fr/patch-de-la-faille-cve-2018-6389-dos-wordpress/...

Publitas: CVE-2018-6389 exploitation - using scripts loader

An unauthenticated denial of service vulnerability in WordPress was discovered, tracked as CVE-2018-6389. By requesting a large number of JavaScript files through the load-scripts.php endpoint, an attacker could consume excessive resources on the server. This vulnerability could allow denial of...

Fastly VDP: CVE-2018-6389 exploitation - using scripts loader

Vulnerability description not provided...

U.S. Dept Of Defense: DoS at █████(CVE-2018-6389)

A vulnerability in WordPress allowed unauthenticated attackers to launch a denial of service attack by listing a large number of registered .js files from wp-includes/script-loader.php. The vulnerability was assigned CVE-2018-6389. Attackers could use this function to deplete server resources and...

U.S. Dept Of Defense: DoS at ████████ (CVE-2018-6389)

An unauthenticated attacker could cause a denial of service resource consumption on a WordPress site by using the large list of registered .js files to construct a series of requests to load every file many times. The vulnerability was registered as CVE-2018-6389...