CVEs-PoC/2018/CVE-2018-6389.md

CVE-2018-6389

Description

In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service (resource consumption) by using the large list of registered .js files (from wp-includes/script-loader.php) to construct a series of requests to load every file many times.

POC

Reference

• https://baraktawily.blogspot.fr/2018/02/how-to-dos-29-of-world-wide-websites.html
• https://github.com/WazeHell/CVE-2018-6389
• https://thehackernews.com/2018/02/wordpress-dos-exploit.html
• https://www.exploit-db.com/exploits/43968/

Github

• https://github.com/0xT11/CVE-POC
• https://github.com/0xZEros66/Wordpress-Exploit-AiO-Package
• https://github.com/0xsaju/Awesome-Bugbounty-Writeups
• https://github.com/20142995/nuclei-templates
• https://github.com/302Found1/Awesome-Writeups
• https://github.com/6lyxt/collection-of-exploits
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/AdamKryach/Cybersecurity-Tool
• https://github.com/AdamLBS/Wordpress-installer
• https://github.com/Adelittle/Wordpressz_Dos_CVE_2018_6389
• https://github.com/Afetter618/WordPress-PenTest
• https://github.com/BiswajeetRay7/Loadscript-payload
• https://github.com/BlackRouter/cve-2018-6389
• https://github.com/CeCe2018/Codepath
• https://github.com/CeCe2018/Codepath-Week-7-Alternative-Assignment-Essay
• https://github.com/CnHack3r/Penetration_PoC
• https://github.com/CybVulnHunter/Cyber_Security_Tools
• https://github.com/Daas335b/Codepath.week7
• https://github.com/Daas335b/Week-7
• https://github.com/DeyaaMuhammad/WPDOSLoader
• https://github.com/EchoGin404/-
• https://github.com/EchoGin404/gongkaishouji
• https://github.com/El-Palomo/DerpNStink
• https://github.com/Elsfa7-110/kenzer-templates
• https://github.com/Fa1c0n35/Awesome-Bugbounty-Writeups
• https://github.com/Hacker-Fighter001/Bug-Bounty-Hunter-Articles
• https://github.com/ImranTheThirdEye/Awesome-Bugbounty-Writeups
• https://github.com/ItinerisLtd/trellis-cve-2018-6389
• https://github.com/JavierOlmedo/wordpress-cve-2018-6389
• https://github.com/Jetserver/CVE-2018-6389-FIX
• https://github.com/JulienGadanho/cve-2018-6389-php-patcher
• https://github.com/LvL23HT/Web-Pentest-Cheklist
• https://github.com/Mr-hunt-007/CyberSecurity-Tools
• https://github.com/Mr-xn/Penetration_Testing_POC
• https://github.com/Neelakandan-A/BugBounty_CheatSheet
• https://github.com/NemesisCyberForce/WordPress-CVE-2018-6389
• https://github.com/Patrikx0x0/Awesome-Bugbounty-Writeups
• https://github.com/Prabirrimi/Awesome-Bugbounty-Writeups
• https://github.com/Prabirrimi/BugBounty_CheatSheet
• https://github.com/Prodrious/writeups
• https://github.com/R3dg0/writeups
• https://github.com/RClueX/Hackerone-Reports
• https://github.com/Saidul-M-Khan/Awesome-Bugbounty-Writeups
• https://github.com/Scatter-Security/wordpressure
• https://github.com/SexyBeast233/SecBooks
• https://github.com/Shamsuzzaman321/Wordpress-Exploit-AiO-Package
• https://github.com/Slayingripper/hacksocworkshop
• https://github.com/SunDance29/for-learning
• https://github.com/Tanvi20/Week-7-Alternative-Assignment-wp-cve
• https://github.com/TheBountyBox/Awesome-Writeups
• https://github.com/Tyro-Shan/gongkaishouji
• https://github.com/VishuGahlyan/Awesome-Bugbounty-Writeups
• https://github.com/WazeHell/CVE-2018-6389
• https://github.com/YIXINSHUWU/Penetration_Testing_POC
• https://github.com/YemiBeshe/Codepath-WP1
• https://github.com/YoWhatsUp1976/ToolsAndStuff
• https://github.com/ZTK-009/Penetration_PoC
• https://github.com/Zazzzles/Wordpress-DOS
• https://github.com/abuzafarhaqq/bugBounty
• https://github.com/ajino2k/Awesome-Bugbounty-Writeups
• https://github.com/alcaudon89/WordPress-Tips
• https://github.com/alessiogilardi/PoC---CVE-2018-6389
• https://github.com/alexbieber/Bug_Bounty_writeups
• https://github.com/alexjasso/Project_7-WordPress_Pentesting
• https://github.com/allwinnoah/CyberSecurity-Tools
• https://github.com/amankapoor/trellis-wordpress-starter-kit
• https://github.com/amit-pathak009/CVE-2018-6389-FIX
• https://github.com/armaanpathan12345/WP-DOS-Exploit-CVE-2018-6389
• https://github.com/aryanicc/cybertools
• https://github.com/blitz-cmd/Bugbounty-writeups
• https://github.com/bogdanovist2061/Project-7---WordPress-Pentesting
• https://github.com/bot8080/awesomeBugbounty
• https://github.com/bugrider/devanshbatham-repo
• https://github.com/chalern/Pentest-Tools
• https://github.com/choudharyrajritu1/Bug_Bounty-POC
• https://github.com/crpytoscooby/resourses_web
• https://github.com/cyberguideme/Tools
• https://github.com/cybershadowvps/Awesome-Bugbounty-Writeups
• https://github.com/d4n-sec/d4n-sec.github.io
• https://github.com/dalersinghmti/writeups
• https://github.com/devanshbatham/Awesome-Bugbounty-Writeups
• https://github.com/developer3000S/PoC-in-GitHub
• https://github.com/dipesh259/Writeups
• https://github.com/dsfau/wordpress-CVE-2018-6389
• https://github.com/ducducuc111/Awesome-Bugbounty-Writeups
• https://github.com/fakedob/tvsz
• https://github.com/fulplan/Awesome-Bugbounty-Writeups
• https://github.com/haminsky/Week7-WP
• https://github.com/harrystaley/CSCI4349_Week9_Honeypot
• https://github.com/harrystaley/TAMUSA_CSCI4349_Week9_Honeypot
• https://github.com/hasee2018/Penetration_Testing_POC
• https://github.com/hectorgie/PoC-in-GitHub
• https://github.com/holmes-py/reports-summary
• https://github.com/huike007/penetration_poc
• https://github.com/huike007/poc
• https://github.com/huisetiankong478/penetration_poc
• https://github.com/huisetiankong478/poc
• https://github.com/ianxtianxt/CVE-2018-6389
• https://github.com/imhunterand/hackerone-publicy-disclosed
• https://github.com/jguerrero12/WordPress-Pentesting
• https://github.com/jk-cybereye/codepath-week7
• https://github.com/kehcat/CodePath-Fall
• https://github.com/khast3x/Offensive-Dockerfiles
• https://github.com/knqyf263/CVE-2018-6389
• https://github.com/kurrishashi/Awesome-Bugbounty-Writeups
• https://github.com/lions2012/Penetration_Testing_POC
• https://github.com/lnick2023/nicenice
• https://github.com/m3ssap0/wordpress_cve-2018-6389
• https://github.com/madhukancharla1234/bugbounty
• https://github.com/martintorrespy/Awesome-Bugbounty-Writeups
• https://github.com/mrcyberninj4/Cyber-Tools
• https://github.com/mudhappy/Wordpress-Hack-CVE-2018-6389
• https://github.com/nobody246/wordPressDOSPOC
• https://github.com/oleksandrbi/CodePathweek7
• https://github.com/pankajkryadav/Hacktivity
• https://github.com/password520/Penetration_PoC
• https://github.com/paulveillard/cybersecurity-tools
• https://github.com/pentration/gongkaishouji
• https://github.com/piyushimself/Bugbounty_Writeups
• https://github.com/plancoo/Bugbounty_Writeups
• https://github.com/qazbnm456/awesome-cve-poc
• https://github.com/rastating/modsecurity-cve-2018-6389
• https://github.com/s0md3v/Shiva
• https://github.com/safebuffer/CVE-2018-6389
• https://github.com/salihkiraz/Web-Uygulamasi-Sizma-Testi-Kontrol-Listesi
• https://github.com/sreechws/Bou_Bounty_Writeups
• https://github.com/thechrono13/PoC---CVE-2018-6389
• https://github.com/vineetkia/Wordpress-DOS-Attack-CVE-2018-6389
• https://github.com/webexplo1t/BugBounty
• https://github.com/winterwolf32/CVE-S---Penetration_Testing_POC-
• https://github.com/xbl3/Awesome-Bugbounty-Writeups_devanshbatham
• https://github.com/xbl3/awesome-cve-poc_qazbnm456
• https://github.com/xuetusummer/Penetration_Testing_POC
• https://github.com/yedada-wei/-
• https://github.com/yedada-wei/gongkaishouji
• https://github.com/yolabingo/wordpress-fix-cve-2018-6389
• https://github.com/zeev-mindali/cyber
• https://github.com/zeev-mindali/cyber-security-tools