WordPress Plugin Mail Masta 1.0 - CVE-2016-10956 Exploit

This script exploits the CVE-2016-10956 vulnerability in WordPress Plugin Mail Masta 1.0 to extract credentials from wp-config.php.

How to Use

1. Clone the repository:

   root@kitploit:~

   git clone https://github.com/Hakchoven/wp-mail-masta-exploit.git
   

2. Navigate to the directory:

   root@kitploit:~

   cd wp-mail-masta-exploit/
   

3. Run the script with the target URL as an argument:

   root@kitploit:~

   python3 mail-masta.py http://example.com/wordpress
   

Replace http://example.com/wordpress with the target WordPress site URL.

Proof of Concept (PoC)

-

Disclaimer

This script is intended for educational purposes only. The author does not condone or support the use of this script for illegal or unethical activities. This script should only be used in legal security research or CTF environments. Use at your own risk.

---

Made by Hackhoven