c0r3dump3d/wp_drupal_timing_attack

PoC

Python scripts to exploit CVE-2014-9016 and CVE-2014-9034

view exploit source poc_in_githubauthor c0r3dump3dpublished 2014-12-01catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2014-9016US	medium5.0	82.2% (100th)	Exploit	2014-11-24
The password hashing API in Drupal 7.x before 7.34 and the Secure Password Hashes (aka phpass) module 6.x-2.x before 6.x-2.1 for Drupal allows remote attackers to cause a denial of…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.