##POC&EXP of CVE-2014-0166 ####WordPress < 3.8.2 cookie forgery vulnerability

Details of this vulnerability can be found at here

There are three files:

• wp_zero_cookie_generator.php

  • POC to verify this vulnerability.
    • It won't send any requests, just a local brute-forcer.
    • Redefine variables to supply info and it will try to find out a zero cookie.

• zeroCatcher.py

  • Multiprocessing POC written in python
    • The same as wp_zero_cookie_generator.php.
    • Except that multiprocessing is applied for better performance.

• cookieForger.py

  • Multi thread remote EXP
    • Read the source code and you will understand everything about it.