Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2018-6389

Description

In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service (resource consumption) by using the large list of registered .js files (from wp-includes/script-loader.php) to construct a series of requests to load every file many times.

POC

Reference

- https://baraktawily.blogspot.fr/2018/02/how-to-dos-29-of-world-wide-websites.html

- https://github.com/WazeHell/CVE-2018-6389

- https://thehackernews.com/2018/02/wordpress-dos-exploit.html

- https://www.exploit-db.com/exploits/43968/

Github

- https://github.com/0xT11/CVE-POC

- https://github.com/0xZEros66/Wordpress-Exploit-AiO-Package

- https://github.com/0xsaju/Awesome-Bugbounty-Writeups

- https://github.com/20142995/nuclei-templates

- https://github.com/302Found1/Awesome-Writeups

- https://github.com/6lyxt/collection-of-exploits

- https://github.com/ARPSyndicate/cvemon

- https://github.com/ARPSyndicate/kenzer-templates

- https://github.com/AdamKryach/Cybersecurity-Tool

- https://github.com/AdamLBS/Wordpress-installer

- https://github.com/Adelittle/Wordpressz_Dos_CVE_2018_6389

- https://github.com/Afetter618/WordPress-PenTest

- https://github.com/BiswajeetRay7/Loadscript-payload

- https://github.com/BlackRouter/cve-2018-6389

- https://github.com/CeCe2018/Codepath

- https://github.com/CeCe2018/Codepath-Week-7-Alternative-Assignment-Essay

- https://github.com/CnHack3r/Penetration_PoC

- https://github.com/CybVulnHunter/Cyber_Security_Tools

- https://github.com/Daas335b/Codepath.week7

- https://github.com/Daas335b/Week-7

- https://github.com/DeyaaMuhammad/WPDOSLoader

- https://github.com/EchoGin404/-

- https://github.com/EchoGin404/gongkaishouji

- https://github.com/El-Palomo/DerpNStink

- https://github.com/Elsfa7-110/kenzer-templates

- https://github.com/Fa1c0n35/Awesome-Bugbounty-Writeups

- https://github.com/Hacker-Fighter001/Bug-Bounty-Hunter-Articles

- https://github.com/ImranTheThirdEye/Awesome-Bugbounty-Writeups

- https://github.com/ItinerisLtd/trellis-cve-2018-6389

- https://github.com/JavierOlmedo/wordpress-cve-2018-6389

- https://github.com/Jetserver/CVE-2018-6389-FIX

- https://github.com/JulienGadanho/cve-2018-6389-php-patcher

- https://github.com/LvL23HT/Web-Pentest-Cheklist

- https://github.com/Mr-hunt-007/CyberSecurity-Tools

- https://github.com/Mr-xn/Penetration_Testing_POC

- https://github.com/Neelakandan-A/BugBounty_CheatSheet

- https://github.com/NemesisCyberForce/WordPress-CVE-2018-6389

- https://github.com/Patrikx0x0/Awesome-Bugbounty-Writeups

- https://github.com/Prabirrimi/Awesome-Bugbounty-Writeups

- https://github.com/Prabirrimi/BugBounty_CheatSheet

- https://github.com/Prodrious/writeups

- https://github.com/R3dg0/writeups

- https://github.com/RClueX/Hackerone-Reports

- https://github.com/Saidul-M-Khan/Awesome-Bugbounty-Writeups

- https://github.com/Scatter-Security/wordpressure

- https://github.com/SexyBeast233/SecBooks

- https://github.com/Shamsuzzaman321/Wordpress-Exploit-AiO-Package

- https://github.com/Slayingripper/hacksocworkshop

- https://github.com/SunDance29/for-learning

- https://github.com/Tanvi20/Week-7-Alternative-Assignment-wp-cve

- https://github.com/TheBountyBox/Awesome-Writeups

- https://github.com/Tyro-Shan/gongkaishouji

- https://github.com/VishuGahlyan/Awesome-Bugbounty-Writeups

- https://github.com/WazeHell/CVE-2018-6389

- https://github.com/YIXINSHUWU/Penetration_Testing_POC

- https://github.com/YemiBeshe/Codepath-WP1

- https://github.com/YoWhatsUp1976/ToolsAndStuff

- https://github.com/ZTK-009/Penetration_PoC

- https://github.com/Zazzzles/Wordpress-DOS

- https://github.com/abuzafarhaqq/bugBounty

- https://github.com/ajino2k/Awesome-Bugbounty-Writeups

- https://github.com/alcaudon89/WordPress-Tips

- https://github.com/alessiogilardi/PoC---CVE-2018-6389

- https://github.com/alexbieber/Bug_Bounty_writeups

- https://github.com/alexjasso/Project_7-WordPress_Pentesting

- https://github.com/allwinnoah/CyberSecurity-Tools

- https://github.com/amankapoor/trellis-wordpress-starter-kit

- https://github.com/amit-pathak009/CVE-2018-6389-FIX

- https://github.com/armaanpathan12345/WP-DOS-Exploit-CVE-2018-6389

- https://github.com/aryanicc/cybertools

- https://github.com/blitz-cmd/Bugbounty-writeups

- https://github.com/bogdanovist2061/Project-7---WordPress-Pentesting

- https://github.com/bot8080/awesomeBugbounty

- https://github.com/bugrider/devanshbatham-repo

- https://github.com/chalern/Pentest-Tools

- https://github.com/choudharyrajritu1/Bug_Bounty-POC

- https://github.com/crpytoscooby/resourses_web

- https://github.com/cyberguideme/Tools

- https://github.com/cybershadowvps/Awesome-Bugbounty-Writeups

- https://github.com/d4n-sec/d4n-sec.github.io

- https://github.com/dalersinghmti/writeups

- https://github.com/devanshbatham/Awesome-Bugbounty-Writeups

- https://github.com/developer3000S/PoC-in-GitHub

- https://github.com/dipesh259/Writeups

- https://github.com/dsfau/wordpress-CVE-2018-6389

- https://github.com/ducducuc111/Awesome-Bugbounty-Writeups

- https://github.com/fakedob/tvsz

- https://github.com/fulplan/Awesome-Bugbounty-Writeups

- https://github.com/haminsky/Week7-WP

- https://github.com/harrystaley/CSCI4349_Week9_Honeypot

- https://github.com/harrystaley/TAMUSA_CSCI4349_Week9_Honeypot

- https://github.com/hasee2018/Penetration_Testing_POC

- https://github.com/hectorgie/PoC-in-GitHub

- https://github.com/holmes-py/reports-summary

- https://github.com/huike007/penetration_poc

- https://github.com/huike007/poc

- https://github.com/huisetiankong478/penetration_poc

- https://github.com/huisetiankong478/poc

- https://github.com/ianxtianxt/CVE-2018-6389

- https://github.com/imhunterand/hackerone-publicy-disclosed

- https://github.com/jguerrero12/WordPress-Pentesting

- https://github.com/jk-cybereye/codepath-week7

- https://github.com/kehcat/CodePath-Fall

- https://github.com/khast3x/Offensive-Dockerfiles

- https://github.com/knqyf263/CVE-2018-6389

- https://github.com/kurrishashi/Awesome-Bugbounty-Writeups

- https://github.com/lions2012/Penetration_Testing_POC

- https://github.com/lnick2023/nicenice

- https://github.com/m3ssap0/wordpress_cve-2018-6389

- https://github.com/madhukancharla1234/bugbounty

- https://github.com/martintorrespy/Awesome-Bugbounty-Writeups

- https://github.com/mrcyberninj4/Cyber-Tools

- https://github.com/mudhappy/Wordpress-Hack-CVE-2018-6389

- https://github.com/nobody246/wordPressDOSPOC

- https://github.com/oleksandrbi/CodePathweek7

- https://github.com/pankajkryadav/Hacktivity

- https://github.com/password520/Penetration_PoC

- https://github.com/paulveillard/cybersecurity-tools

- https://github.com/pentration/gongkaishouji

- https://github.com/piyushimself/Bugbounty_Writeups

- https://github.com/plancoo/Bugbounty_Writeups

- https://github.com/qazbnm456/awesome-cve-poc

- https://github.com/rastating/modsecurity-cve-2018-6389

- https://github.com/s0md3v/Shiva

- https://github.com/safebuffer/CVE-2018-6389

- https://github.com/salihkiraz/Web-Uygulamasi-Sizma-Testi-Kontrol-Listesi

- https://github.com/sreechws/Bou_Bounty_Writeups

- https://github.com/thechrono13/PoC---CVE-2018-6389

- https://github.com/vineetkia/Wordpress-DOS-Attack-CVE-2018-6389

- https://github.com/webexplo1t/BugBounty

- https://github.com/winterwolf32/CVE-S---Penetration_Testing_POC-

- https://github.com/xbl3/Awesome-Bugbounty-Writeups_devanshbatham

- https://github.com/xbl3/awesome-cve-poc_qazbnm456

- https://github.com/xuetusummer/Penetration_Testing_POC

- https://github.com/yedada-wei/-

- https://github.com/yedada-wei/gongkaishouji

- https://github.com/yolabingo/wordpress-fix-cve-2018-6389

- https://github.com/zeev-mindali/cyber

- https://github.com/zeev-mindali/cyber-security-tools