CVE-2024-1071 com Docker

🎯 Quer praticar com o novo CVE do WordPress? Siga as instruções

Monte o laboratório

1. Instale o Docker: https://docs.docker.com/get-docker/
2. Clone o projeto: git clone https://github.com/Trackflaw/CVE-2024-1071-Docker.git.
3. Acesse o projeto: cd CVE-2024-1071-Docker
4. Execute o arquivo Docker Compose: docker compose up -d.
5. Conecte-se a http://localhost com as credenciais root:root.
6. Ative o plugin em http://localhost/wp-admin/plugins.php
7. Ative a opção Enable the use of a custom table for account metadata em http://localhost/wp-admin/admin.php?page=um_options&tab=misc

PoC