CVE-2023-6553 概念验证（本地文件包含到远程代码执行）

Backup Migration（WordPress插件）中的未认证远程代码执行。

运行

$ python exploit.py 

将执行以下PHP脚本。

<?php `date > out.txt`; ?>

参考

• Critical Unauthenticated Remote Code Execution Found in Backup Migration Plugin
  https://www.wordfence.com/blog/2023/12/critical-unauthenticated-remote-code-execution-found-in-backup-migration-plugin/
• synacktiv/php_filter_chain_generator
  https://github.com/synacktiv/php_filter_chain_generator/
• LFI2RCE via PHP Filters - HackTricks
  https://book.hacktricks.xyz/pentesting-web/file-inclusion/lfi2rce-via-php-filters