
Proof-of-concept exploit for CVE-2021-29447, an authenticated XXE vulnerability in WordPress 5.6-5.7. Includes lab setup, malicious WAV generation, and attacker server for educational testing.
$ make up-wp
$ make up-mal
$ make make-wav
open http://localhost:8000/
open http://localhost:8000/wp-admin/
在控制台中查看被盗文件并可进行解码
关于攻击者DTD文件中可能命令的信息 https://www.php.net/manual/en/wrappers.php.php