WP Object Injection Proof of Concept archived
This is a simple plugin to help in PoC's of PHP Object Injection in Wordpress.
by Growlnx · github.com/growlnx/wp-object-injection-poc · website
★ 1stars
0forks
Install
No release zip yet. The repository archive installs, but the folder name will carry the branch suffix and updates will not flow:
wp plugin install https://github.com/growlnx/wp-object-injection-poc/archive/refs/heads/master.zipFrom the readme
WP Object Injection Proof of Concept
This is a simple plugin to help in PoC's of PHP Object Injection in Wordpress.
How use
First download the WP-Object-Injection-PoC plugin on your "wp-content/plugin" directory and then activate in your wordpress dashboard.
Now you can easily do the PoC of insecure deserialization without worrying about POP chains.
Payload Example
References
- https://www.php.net/manual/en/language.oop5.magic.php
- https://www.php.net/manual/en/function.unserialize.php
- https://www.owasp.org/images/9/9e/Utilizing-Code-Reuse-Or-Return-Oriented-Programming-In-PHP-Application-Exploits.pdf