+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Upload shell through wordpress /blog/wp-admin ? (/showthread.php?tid=4525811)
Upload shell through wordpress /blog/wp-admin ? - 21redallday12 - Nov 6, 2014
Does anybody know if it's possible get a shell through the wordpress blog admin.
Just so you know, i am not talking about the normal admin panel eg site.com/wp-admin
I'm talking about for example a magento website, that has also got wordpress installed at /blog/ and where the admin page is /blog/wp-admin.
What i have noticed is when you log in to /blog/wp-admin, it's not a full wordpress admin panel, i cannot see themes, plugins etc (when i am a fully privelled user).
Does anybody know what i mean?
If so does anyone know how to upload a shell through it?
[added]
Also just to be clear, obviously you can install wordpress to what ever folder you eg /blog/ /home/ /www/ /wordpress/ etc.
But i mean when you log-in there's like a wordpress panel that hasn't got all the normal wordpress capabilities.
And i've noticed that 99% of sites with wordpress installed at /blog/wpcontent /blog/wp-admin etc all have this semi capable wordpress admin panel
PS i have googled for the answer for a very long time and didn't find anything.
Because it's hard to describe to google what you mean.
Thanks in advance (i have fully tried to find the answer, but no luck)
* - _AntiHacker_ - Nov 7, 2014
you can upload using themes + plugins if you cant check your username might be not admin user---