CVE-2014-0166 PoC — WordPress 授权问题漏洞

Source

https://github.com/Ettack/POC-CVE-2014-0166

Associated Vulnerability

Title:WordPress 授权问题漏洞 (CVE-2014-0166)
Description:The wp_validate_auth_cookie function in wp-includes/pluggable.php in WordPress before 3.7.2 and 3.8.x before 3.8.2 does not properly determine the validity of authentication cookies, which makes it easier for remote attackers to obtain access via a forged cookie.

Description

POC of CVE-2014-0166 (WordPress cookie forgery vulnerability)

Readme

##POC&EXP of CVE-2014-0166
####WordPress < 3.8.2 cookie forgery vulnerability

**Details of this vulnerability can be found at [here](http://www.ettack.org/wordpress-cookie-forgery/)**

There are three files:

* _wp\_zero\_cookie\_generator.php_
    * **POC to verify this vulnerability.**  
        * It **won't** send any requests, just a local brute-forcer.  
        * Redefine variables to supply info and it will try to find out a **_zero cookie_**.

* _zeroCatcher.py_
    * **Multiprocessing POC written in python**
        * The same as _wp\_zero\_cookie\_generator.php_.
        * Except that multiprocessing is applied for better performance.
        
* _cookieForger.py_
    * **Multi thread remote EXP**  
        * Read the source code and you will understand **_everything_** about it.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!