search

ambionics / phpggc

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
https://ambionics.io/blog
Apache License 2.0
3.25k stars 502 forks source link

How to utilize the WordPress rec pop chain #179

Closed yuedinga closed 10 months ago

yuedinga commented 10 months ago

I have browsed through many articles online and cannot find the point at which the WordPress WordPress/RCE2 chain should be utilized. Please let me know

cfreal commented 10 months ago

Hello yuedinga,

I don't understand. What do you mean by "the point at which" ? You can generate it as you do for other chains.

yuedinga commented 10 months ago

I'm glad you can reply to me. The point I'm referring to is the utilization point. The chain has already been generated, but I don't know if the chain generated by WordPress/RCE2 should be placed in a certain URL or function point on the website to execute this chain for me to complete this test.

yuedinga commented 10 months ago

Also, there is WordPress/RCE2, I hope you can help me

cfreal commented 10 months ago

You need a plugin that calls unserialize() with user supplied data. Please read about unserialize() vulnerabilities online.

Closing!