2022-03-23 16:35:01 +00:00
|
|
|
id: wordpress-wp-cron
|
|
|
|
|
|
|
|
|
|
info:
|
|
|
|
|
name: Wordpress wp-cron.php DOS
|
|
|
|
|
author: pathtaga
|
2022-03-24 09:19:46 +00:00
|
|
|
severity: info
|
2022-03-23 16:35:01 +00:00
|
|
|
description: When this file is accessed a heavy MySQL query is performed, so it could be used by attackers to cause a DoS.
|
|
|
|
|
reference:
|
|
|
|
|
- https://book.hacktricks.xyz/pentesting/pentesting-web/wordpress
|
2022-03-24 09:19:46 +00:00
|
|
|
- https://medium.com/@thecpanelguy/the-nightmare-that-is-wpcron-php-ae31c1d3ae30
|
2023-04-28 08:11:21 +00:00
|
|
|
metadata:
|
|
|
|
|
max-request: 2
|
2023-10-14 11:27:55 +00:00
|
|
|
tags: wordpress,cron,wp,dos
|
2022-03-23 16:35:01 +00:00
|
|
|
|
2023-04-27 04:28:59 +00:00
|
|
|
http:
|
2022-03-24 09:19:46 +00:00
|
|
|
- method: GET
|
|
|
|
|
path:
|
2022-03-24 10:50:45 +00:00
|
|
|
- "{{BaseURL}}"
|
2022-03-24 09:19:46 +00:00
|
|
|
- "{{BaseURL}}/wp-cron.php"
|
2022-03-23 16:35:01 +00:00
|
|
|
|
2022-03-24 09:19:46 +00:00
|
|
|
matchers-condition: and
|
|
|
|
|
matchers:
|
2022-03-24 10:50:45 +00:00
|
|
|
- type: dsl
|
|
|
|
|
dsl:
|
|
|
|
|
- (regex("<link[^>]+s\d+\.wp\.com",body_1))
|
|
|
|
|
- (regex("<!-- This site is optimized with the Yoast (?:WordPress )?SEO plugin v([\d.]+) -",body_1))
|
|
|
|
|
- (regex("<!--[^>]+WP-Super-Cache",body_1))
|
|
|
|
|
- contains(body_1, "/wp-content/themes/")
|
|
|
|
|
- contains(body_1, "/wp-includes/")
|
|
|
|
|
- contains(body_1, 'name=\"generator\" content=\"wordpress')
|
|
|
|
|
- contains(body_1, '<!-- performance optimized by w3 total cache.')
|
|
|
|
|
condition: or
|
2022-03-24 12:53:32 +00:00
|
|
|
|
|
|
|
|
- type: dsl
|
|
|
|
|
dsl:
|
|
|
|
|
- "len(body_2) == 0"
|
|
|
|
|
- "status_code_2 == 200"
|
|
|
|
|
- "contains(content_type_2, 'text/html')"
|
2023-11-27 10:10:24 +00:00
|
|
|
# digest: 490a004630440220550ffdf9877636e4f9abde1f8e964c567e68e01529dc4cf24b727b28c6d5d561022069a4f5588f50689175ce976b54747aa4d9cf5dae8cde9b0ae5f67f49e70fffea:922c64590222798bb761d5b6d8e72950
|
