Skip to content

Commit 71ee987

Browse files
authored
Add additional documentation steps, and use 0 for the payload http timeout
1 parent 9eb630d commit 71ee987

File tree

2 files changed

+7
-6
lines changed

2 files changed

+7
-6
lines changed

documentation/modules/exploit/multi/http/wp_givewp_rce.md

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ PHP object leading to remote code execution (RCE) when combined with a suitable
77

88
## Setup
99

10-
1. **Docker Compose Setup**: Use the following `docker-compose.yml` file to set up a vulnerable WordPress environment.
10+
1. **Docker Compose Setup**: Create the following `docker-compose.yml` file to set up a vulnerable WordPress environment:
1111

1212
```yaml
1313
services:
@@ -37,16 +37,17 @@ services:
3737
volumes:
3838
db_data:
3939
```
40-
41-
2. **Download and Install Vulnerable GiveWP Plugin**:
40+
1. Run Docker: `docker compose up`
41+
1. Access the WordPress instance at `http://127.0.0.1` and complete the installation process
42+
1. **Download and Install Vulnerable GiveWP Plugin**:
4243
- Download the plugin: [GiveWP 3.14.1](https://downloads.wordpress.org/plugin/give.3.14.1.zip)
4344
- Unzip the plugin and copy it to the Docker container:
4445
```bash
45-
docker cp give docker-wordpress-1:/var/www/html/wp-content/plugins
46+
docker compose cp give wordpress:/var/www/html/wp-content/plugins
4647
```
4748
- Access the WordPress instance at `http://localhost` and activate the GiveWP plugin via the admin dashboard.
4849

49-
3. **Create a Donation Form**:
50+
1. **Create a Donation Form**:
5051
- Navigate to the "Forms" section within the GiveWP plugin and click on "Add Form."
5152
- Select any form.
5253
- Configure the form as needed, publish it.

modules/exploits/multi/http/wp_givewp_rce.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -166,6 +166,6 @@ def send_exploit_request(give_form_id, give_form_hash, give_price_id, give_amoun
166166
'method' => 'POST',
167167
'uri' => normalize_uri(target_uri.path, 'wp-admin', 'admin-ajax.php'),
168168
'data' => URI.encode_www_form(data)
169-
})
169+
}, 0)
170170
end
171171
end

0 commit comments

Comments
 (0)