Exploit Development Exercise [Beginner] 03-25-2015, 11:27 PM
#1
While bored in school today I came across an advisory on Sucuri for a relatively small wordpress plugin (~90k installs). The plugin allows unauthenticated users to obtain an admin session with only his username - a pretty ridiculous flaw to say the least. Since @Eclipse is always hitting me up for projects, and this vulnerability is as straight forward as it gets, I figured it would make a good exercise for individuals who want to get their feet wet in web app exploit development.
Advisory: http://blog.sucuri.net/2015/03/security-...lugin.html
Download: https://downloads.wordpress.org/plugin/m....0.9.1.zip
Goal: Make a fully functional exploit that achieves php/bash/sh command execution in some way or another.
Below is an example of my exploit for this vulnerability:
![[Image: JYhZCiL.gif]](http://i.imgur.com/JYhZCiL.gif)
l33ts, please refrain from shitting on this thread. This is meant to help beginners learn by using real world examples.
Feel free to post below if you need any help or would like my code.
Sucuri Wrote:*Due to the severity we will not provide a Proof of Concept and will be very light on the technical details. Make sure to update asap!Since Sucuri didn't release an exploit, and there are currently none available on the net atm, you have the perfect opportunity to create your own and practice basic exploit dev skills.
Advisory: http://blog.sucuri.net/2015/03/security-...lugin.html
Download: https://downloads.wordpress.org/plugin/m....0.9.1.zip
Goal: Make a fully functional exploit that achieves php/bash/sh command execution in some way or another.
Below is an example of my exploit for this vulnerability:
Spoiler:
l33ts, please refrain from shitting on this thread. This is meant to help beginners learn by using real world examples.
Feel free to post below if you need any help or would like my code.
![[+]](https://sinister.ly/images/modern/collapse_collapsed.png)
