https://wpscan.com/search 之后做个脚本小子就行了,复现漏洞 xmlrpc.php 如果网站存在xmlrpc.php,有以下几种利用方式 查看系统允许的方法 POST /xmlrpc.php HTTP/1.1 Host: example.com Content-Length: 135 <?xml version="1.0" encoding="utf-8"?> <methodCall> <methodName>system.listMe...
今天登录阿里云控制台,云盾感知给我推送了漏洞通知:wordpress /wp-includes/http.php文件中的wp_http_validate_url函数对输入IP验证不当,导致黑客可构造类似于012.10.10.10这样的畸形IP绕过验证,进行SSRF。如何去解决它呢?我参考了云盾自研解决方案。进入wp-includes/,找到http.php这个文件,在文件的526行(不同的Word...
quickpress add tracking SSRF Dec 11, 2022 quickpress.go Update quickpress.go Aug 11, 2021 Repository files navigation README quickpress Scan urls or a single URL against XMLRPC wordpress issues. usage: Install $ go install github.com/incogbyte/quickpress@latest Compiling by yourself git clone...