Seems that wp2shell PoCs are now floating around the internet, so we've published our blog post including our research methodology for finding the bug as well as a deep dive into the chain itself -
hashkitten
@hash_kitten
Joined September 2016
- I reported a pre auth RCE in Wordpress - it can be exploited with no preconditions, patch your instances!
- Thanks everyone for playing! I talk about the solution here, as well as how I discovered this behavior while looking into the Chrome Sanitizer API: slcyber.io/research-cente…Posting a mini XSS challenge! Goal is to pop an alert. I believe this trick is not well known. Intended solution is chrome only. Thanks to @kevin_mizu for beta testing! Don't post solutions in the thread; DM only! xss.hashkitten.io/xss1.html
- Posting a mini XSS challenge! Goal is to pop an alert. I believe this trick is not well known. Intended solution is chrome only. Thanks to @kevin_mizu for beta testing! Don't post solutions in the thread; DM only! xss.hashkitten.io/xss1.html
- I've written another set of challenges this year and I'm really happy with how they turned out. Make sure you check out DUCTF this weekend :)Attention ALL Hackers - We are now ONE WEEK AWAY from DUCTF 4.0! 🔥 Sign-ups are now OPEN! 🔥 play.duc.tf
