
Exploit for CVE-2017-5487 to enumerate WordPress user accounts via the REST API, extracting sensitive information from vulnerable 4.7 installations.
Before starting, make sure you have the following tools installed on your machine:
Clone the repository
Use git to clone the repository:
git clone https://github.com/dream434/CVE-2017-5487
Navigate to the project directory
cd CVE-2017-5487
Install dependencies 📥
pip install -r requirements.txt
Run the application
python3 leak-wordpress-user.py -list urls.txt -number 10
⚠️ Warning :Use of this tool for malicious purposes is strictly prohibited. Please use it responsibly and only for testing and educational purposes.**