so1icitx/cve-2024-25600Unauthenticated RCE exploit for CVE-2024-25600 in WordPress Bricks Builder <= 1.9.6. Executes arbitrary code remotely.
An exploit script for CVE-2024-25600, a critical unauthenticated Remote Code Execution (RCE) vulnerability in the Bricks Builder plugin for WordPress. This tool detects the flaw, extracts the nonce, and provides an interactive shell for executing arbitrary commands on vulnerable targets. Tested on Bricks Builder version 1.9.5, it affects all versions up to and including 1.9.6. This security flaw allows attackers to remotely inject and execute malicious PHP code without authentication, potentially leading to full site compromise, data theft, or malware distribution.
pip install requests beautifulsoup4 prompt_toolkit
python3 exploit.py -u <target_url> [options]
-u, --url: Target WordPress URL (e.g., http://example.com) - required for single scan.-l, --list: Path to a file with a list of URLs for bulk RCE scanning (optional).-o, --output: File to save vulnerable WordPress URLs (optional).python3 exploit.py -u http://10.10.10.10
python3 exploit.py -l targets.txt -o vulnerable.txt
# whoami
# exit
/wp-json/bricks/v1/render_element endpoint.max_workers in the script for performance tweaks.[email protected] for support or issues!This tool is for educational and authorized security testing purposes only. Unauthorized exploitation of CVE-2024-25600 is illegal and unethical.