https://github.com/randomrobbiebf/wordpress-php-object-helper

Know a plugin has a php object exploit but need to find which lib to use?
https://github.com/randomrobbiebf/wordpress-php-object-helper

Last synced: about 1 month ago
JSON representation

Know a plugin has a php object exploit but need to find which lib to use?

• Host: GitHub
• URL: https://github.com/randomrobbiebf/wordpress-php-object-helper
• Owner: RandomRobbieBF
• License: gpl-3.0
• Created: 2023-08-15T09:09:41.000Z (over 1 year ago)
• Default Branch: main
• Last Pushed: 2023-08-15T09:19:07.000Z (over 1 year ago)
• Last Synced: 2023-08-15T10:39:45.705Z (over 1 year ago)
• Language: Python
• Size: 508 KB
• Stars: 1
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# wordpress-php-object-helper

About

---

You have a Known plugin with a PHP object exploit?, but you need to determine which library to use to exploit the issue and run with phpggc.

This should help you out.

Example Output

----

```

$ python3 finder.py -u http://wordpress.lan -f wp-plugins.lst

Processing URLs: 100%|█████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████| 26/26 [00:00<00:00, 26.74it/s]

Found the following plugins:

http://wordpress.lan/wp-content/plugins/updraftplus/readme.txt

Checking Wordpress SVN for vendor folder.

Vendor Folder found at http://plugins.svn.wordpress.org/updraftplus/trunk/vendor/

Checking for known libraries for phpgcc inside vendor folder.

You may be able to use the following Guzzle with this updraftplus plugin.

You may be able to use the following Symfony with this updraftplus plugin.

You may be able to use the following PHPSecLib with this updraftplus plugin.

```