Join GitHub today
GitHub is home to over 28 million developers working together to host and review code, manage projects, and build software together.Sign up
upload non-encapsulated payload when zip installation fails #52
When playng the Stapler CTF (https://www.vulnhub.com/entry/stapler-1,150/) I realized that wpxf wouldn't able to get a reverse shell using the admin_shell_upload module. The module was able to upload the zip file in wp-content/uploads/ but wasn't able to extract it to wp-content/plugins/ because lack of permissions on this dir. I don't know if this is a common behaviour. I wrote a workaround that uploads directly the php payload file (without encapsulating it in a zip) and then accesses the payload in wp-content/uploads/PAYLOADNAME.php
I apologize for any mistake in my code. I'm not familiar with ruby.