vulncheck-oss / go-exploit

A Go-based Exploit Framework
https://pkg.go.dev/github.com/vulncheck-oss/go-exploit
Apache License 2.0
309 stars 29 forks source link

Add the "product" and "product/wordpress" structure #197

Closed terrorbyte closed 4 months ago

terrorbyte commented 4 months ago

Currently go-exploit does not have any public product specific handling, but I've had to write a few WordPress plugin RCEs lately and was getting tired of reinventing the wheel.

This lays the groundwork to have product specific functions and handling. This also only implements: authentication, nonce selection, and plugin upload based RCE.

In the future I had a few thoughts that we could potentially add:

j-baines commented 4 months ago

Looks good to me, I just had the two basic comments (use framework logging and possibly move the one function). Other than that, looks good.