# ๐Ÿš€ HashForm Exploit Script

This script demonstrates the exploitation of CVE-2024-5084, a vulnerability in the Hash Form plugin for WordPress, which allows unauthenticated arbitrary file upload leading to remote code execution.

## ๐Ÿ“– Vulnerability Details

- **Name**: CVE-2024-5084
- **Description**: Unauthenticated Arbitrary File Upload to Remote Code Execution.
- **Affected Plugin**: Hash Form โ€“ Drag & Drop Form Builder <= 1.1.0
- **Source**: [Wordfence - Vulnerability Details](

## โš™๏ธ Installation

1. Clone the repository:
   git clone
   cd CVE-2024-5084

2. Install the required dependencies:
   pip install -r requirements.txt

## ๐Ÿš€ Usage

1. Run the script:
   python --url ""

   Replace `` with the base URL of the WordPress site you want to test.

2. If the upload is successful, you will enter an interactive shell to execute commands on the server.

## ๐Ÿ” Dorks

- **ZoomEye**: `banner:"var hashform_vars"`

## โš ๏ธ Disclaimer

**Disclaimer**: This script is intended for educational purposes only. Unauthorized use of this script on systems you do not own or do not have explicit permission to test is illegal and unethical. The author is not responsible for any misuse of this script.