Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2023-6553-PoC — Python proof-of-concept exploit for CVE-2023-6553, demonstrating unauthenticated remote code execution via PHP filter chain in the Backup Migration WordPress plugin. | Kitploit
Tools/GitHubGitHub/motikan2010/cve-2023-6553-poc
Vulnerability AnalysisCode AnalysisExploitationWeb Application ExploitationPenetration TestingPayload Development
GitHubmotikan2010/cve-2023-6553-poc

CVE-2023-6553-PoC

Python proof-of-concept exploit for CVE-2023-6553, demonstrating unauthenticated remote code execution via PHP filter chain in the Backup Migration WordPress plugin.

View Repository
4192 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2023-6553 PoC (LFI to RCE)

Unauthenticated Remote Code Execution in Backup Migration (WordPress Plugin).

Run

$ python exploit.py

The following PHP script is executed.

<?php `date > out.txt`; ?>

References

  • Critical Unauthenticated Remote Code Execution Found in Backup Migration Plugin
    https://www.wordfence.com/blog/2023/12/critical-unauthenticated-remote-code-execution-found-in-backup-migration-plugin/
  • synacktiv/php_filter_chain_generator
    https://github.com/synacktiv/php_filter_chain_generator/
  • LFI2RCE via PHP Filters - HackTricks
    https://book.hacktricks.xyz/pentesting-web/file-inclusion/lfi2rce-via-php-filters
Download Tool