CVE-2016-10924

This repository contains a functional Python script that exploits a directory traversal vulnerability (CVE-2016-10924) in the WordPress plugin 'ebook-download' (versions < 1.2). The exploit allows unauthorized file reads by manipulating the 'ebookdownloadurl' parameter in a crafted GET request.

This repository contains a functional Python script that exploits a directory traversal vulnerability (CVE-2016-10924) in the WordPress plugin 'ebook-download' (versions < 1.2). The exploit allows unauthorized file reads by manipulating the 'ebookdownloadurl' parameter in a GET request.

This repository contains a functional Python script that exploits a directory traversal vulnerability (CVE-2016-10924) in the WordPress plugin 'ebook-download' (versions < 1.2). The exploit allows unauthorized file reads by manipulating the 'ebookdownloadurl' parameter in a GET request.

The repository contains a functional Python script that exploits a directory traversal vulnerability (CVE-2016-10924) in the WordPress ebook-download plugin (<1.2). The script brute-forces process IDs to read sensitive files like /proc/sched_debug and /proc/[pid]/cmdline.

The repository contains a functional Python script that exploits CVE-2016-10924, a file disclosure vulnerability in the WordPress eBook Download plugin (version 1.1). The script brute-forces process IDs via the vulnerable `filedownload.php` endpoint to leak `/proc/<PID>/cmdline` contents.