Add RCE Gadget Chain WordPress Core

ambionics / phpggc

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

https://ambionics.io/blog

Apache License 2.0

3.25k stars 502 forks source link

Closed PandH4cker closed 1 year ago

PandH4cker commented 1 year ago

Hi,

I just added the PoC for the RCE Gadget Chain in WordPress Core for WordPress < 6.3.2.

cfreal commented 1 year ago

Good job! This solves #165.

cfreal commented 1 year ago

So, to document, the author indicated that:

The function gets called AFTER the curl call
In order to ensure it works fast, an invalid port number is used, yielding an error