Vulnerable WordPress October 2024 (Zahhak Castle)

Github Repo: https://github.com/onhexgroup/Vulnerable-WordPress

Various vulnerabilities in different programs are discovered and reported nowadays. If you’re a security researcher, you’re interested in working on them. For example, analyzing them, writing exploits, and so on.
But to do these things, you first need to have a laboratory environment. And this might be the most challenging stage of the process.

To simplify the research process, I release a vulnerable version of WordPress. The vulnerable version includes vulnerable plugins that are collected monthly.
The vulnerable plugins are extracted from Wordfence.com reports and downloaded from the WordPress website.

The vulnerable version can be used for various purposes such as exploit development, training, developing new Nuclei templates, developing hacking tools, and participating in bug bounty programs [1,2].

We have released the October version under the name Zahhak Castle. Below, you can see images of this version.

Worpress version: 6.7.1Number of installed plugins (Clean and Vulnerable) : 59Number of vulnerabilities: 57Admin user: onhexgroupAdmin pass: ZO4moPPcrfTGE$RBYVHash Vulnerable_WordPress_October_2024.7z: 128521FDD454EC1D490795F0A9E9ACD98AFE03FB89DF523C62E3AE9A5422BA2AThe list of vulnerable plugins for this month.This version includes vulnerable plugins, so please exercise caution when using it.Do not update the plugins.The plugins have been extracted based on reports from the wordfence.com.The plugins have not been activated due to the potential for disruption.It only includes plugins that are downloadable through the WordPress website.Vulnerabilities with a score of 7 and above are collected.Download the file (You can also download from Google Drive) and extract it from the compressed format.Create a database and a user for the database.Run the installer.php file in your browser.

Video: How to install on Wamp (windows)

Video: How to install on Kali (Linux)

Donate:
Bitcoin: 1HPfpSES4kpuTgJDsbsxY3iMZWsxChcZm5
Ethereum: 0xb59922b7b786d59c31B8180024dE34D3D7932fb4
Tether usd: 0xb59922b7b786d59c31B8180024dE34D3D7932fb4
BNB coin: bnb1ncm9ln8ywx8557v3d428w8z82hg97379w070e3
Monero: 44XHPK7jDMcFiL44p6sez4KBmgXrPsgnQiiV8TiKv9yAeLDJQk9ZNmKWRgfSR8efeDGrN5v3MV1p46k3hT9J5zGR6vzDGFW
Iranian

Contact us:

Site | Telegram | Twitter | Youtube | Linkedin | Instagram