Module: Msf::Exploit::Remote::HTTP::Wordpress::Register

Included in:
Msf::Exploit::Remote::HTTP::Wordpress
Defined in:
lib/msf/core/exploit/remote/http/wordpress/register.rb

Instance Method Summary collapse

Instance Method Details

#wordpress_register(user, email, timeout = 20) ⇒ Bool

performs a wordpress registration

Parameters:

  • user (String) —

    Username

  • email (String) —

    Email Address

  • timeout (Integer) (defaults to: 20) —

    The maximum number of seconds to wait before the request times out

Returns:

  • (Bool) —

    registration request success status



10
11
12
13
14
15
16
17
18
19
 
# File 'lib/msf/core/exploit/remote/http/wordpress/register.rb', line 10

def wordpress_register(user, email, timeout = 20)
  redirect = "#{target_uri}#{Rex::Text.rand_text_alpha(8)}"
  res = send_request_cgi({
      'method' => 'POST',
      'uri' => ,
      'vars_get' => {'action' => 'register'},
      'vars_post' => wordpress_helper_register_post_data(user, email, redirect)
  }, timeout)
  res && res.redirect? && res.redirection && res.redirection.to_s == redirect
end