MegaQuagga Pentesting Report

This repository contains a full web application penetration test performed against a WordPress environment. The assessment includes vulnerability discovery, exploitation, post-exploitation, and documentation of real-world attack impact.

🔍 Project Overview

• Target: WordPress environment running vulnerable Social Warfare plugin
• CVE Exploited: CVE-2019-9978
• Attack Type: Unauthenticated Remote Code Execution (RCE)
• Tools Used: Burp Suite, Metasploit, Netcat, Linux, WordPress exploitation tools

🛠 Key Achievements

• Identified and exploited a critical RCE vulnerability
• Executed a reverse shell and escalated to a Meterpreter session
• Performed post-exploitation reconnaissance and system intelligence gathering
• Documented findings with screenshots and remediation recommendations

📄 Full Report

PDF Report: Available in this repository
File name: MegaQuagga_Pentesting_Report_Asrafun_Nesa_Aktia.pdf

📸 Screenshots

Screenshots included in the /screenshots folder.