Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2016-10033 — Code and vulnerable WordPress container for exploiting CVE-2016-10033 | Kitploit
Tools/GitHubGitHub/chipironcin/cve-2016-10033
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingLearning & EducationLabs & Practice
GitHubchipironcin/cve-2016-10033

CVE-2016-10033

Code and vulnerable WordPress container for exploiting CVE-2016-10033

View Repository
179 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE2016-10033 explotation PoC

This repository holds the necessary files to exploit CVE2016-10033 on a vulnerable version of WordPress.

With these instructions you will be able to get a reverse interactive shell (not Pseudo-TTY) in the container that is running the WordPress as the user that is running the Apache server.

This exploit does not require any type of authentication or plugin. Just plain WordPress code + Exim4 MTA to send emails from WordPress (installed in most servers).

  • Full advisory CVE2016-10033

Requirements

  • Linux based operative system
  • Docker
  • docker-compose

How-to

  1. Deploy docker-compose
  2. Enter your WordPress site and follow the installation wizard using admin as username
  3. Execute the exploit script

Attributions

  • Dawid Golunski (@dawid_golunski) at LegalHackers for the discovery and first version of PoC exploit
Download Tool