Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
demo-CVE-2021-29447-lezione — Proof-of-concept exploit for CVE-2021-29447, an authenticated XXE vulnerability in WordPress 5.6-5.7. Includes lab setup, malicious WAV generation, and attacker server for educational testing. | Kitploit
Tools/GitHubGitHub/specializzazione-cyber-security/demo-cve-2021-29447-lezione
Vulnerability AnalysisExploitationWeb Application ExploitationCTFLearning & EducationLabs & Practice
GitHubspecializzazione-cyber-security/demo-cve-2021-29447-lezione

demo-CVE-2021-29447-lezione

Proof-of-concept exploit for CVE-2021-29447, an authenticated XXE vulnerability in WordPress 5.6-5.7. Includes lab setup, malicious WAV generation, and attacker server for educational testing.

View Repository
21 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

POC CVE-2021029447 - XXE in WordPress

WordPress 5.6-5.7 - Authenticated (Author+) XXE (CVE-2021-29447)

  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29447

Using

Step1. Run WordPress

root@kitploit:~
$ make up-wp

Step2. Run Attacker web server

root@kitploit:~
$ make up-mal

Step3. Generate malicious WAV file

With wavefile npm

root@kitploit:~
$ make make-wav

Step4. Login to WordPress & Upload WAV file to New Media

root@kitploit:~
open http://localhost:8000/
open http://localhost:8000/wp-admin/

vedi in console il file trafugato e puo' essere decodificato

Risorse online

info sui comandi possibili nel file attaccante dtd https://www.php.net/manual/en/wrappers.php.php

Spiegazione codice vulnerabile

https://github.com/Abdulazizalsewedy/CVE-2021-29447

Walktroght

  • https://www.youtube.com/watch?v=tE8Smz1Jvb8
  • https://github.com/Slowdeb/Tryhackme/blob/dfbdebe880ddcb5fbfc1f8608812a0e79fd7cf24/Wordpress-CVE-202129447.md?plain=1#L69 Create a php reverse shell with "msfvenom" or use the awesome php reverse shell from Pentestmonkey.

Altre risorse

  • https://www.trendmicro.com/it_it/research/19/d/zero-day-xml-external-entity-xxe-injection-vulnerability-in-internet-explorer-can-let-attackers-steal-files-system-info.html
Download Tool