Chocapikk / CVE-2023-6553

Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution
https://www.wordfence.com/blog/2023/12/critical-unauthenticated-remote-code-execution-found-in-backup-migration-plugin/
71 stars 23 forks source link

Snytax error #4

Closed desimephisto closed 8 months ago

desimephisto commented 8 months ago

Hello, When using your exploit for CVE 2023-6553. This is showing an error at line 75 as 'syntax error: invalid syntax'. Can you tell how to fix it. Thank you

desimephisto commented 8 months ago

Can you please tell me the problem ??

Chocapikk commented 8 months ago

Just add http:// or https:// in the url.

desimephisto commented 8 months ago

I have tried adding http and https in the URL but it does not work. Do I have to add the orignal url in the exploit.py file also at line 75 where it is mentioned self.base.url ??

File "exploit.py", line 75 f"{self.http://target url}/wp-content/plugins/backup-backup/includes/backup-heart.php", ^ SyntaxError: invalid syntax this is the error I am getting I have tried adding http and https both. Please help if you can. thank you