[SHELL CHALLENGE #5:]>_Upload Shell to Server_[/ WordPress

[SHELL CHALLENGE #5:]>_Upload Shell to Server_[/ WordPress | Joomla ] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [SHELL CHALLENGE #5:]>_Upload Shell to Server_[/ WordPress | Joomla ] (/showthread.php?tid=4793546)

[SHELL CHALLENGE #5:]>_Upload Shell to Server_[/ WordPress | Joomla ] - ｍＯｂｉＩｅ - Apr 24, 2015

[img]http://i492.photobucket.com/albums/rr281/hardrockpdc19/pirate-flag-final.gif[/img]
[Image: Qa7MBtA.gif]

Sup bitchez!? Welcome to Shell Challenge #5 In this challenge we will be using the resent WordPress plugin exploit.

WordPress Plugin 'WP Mobile Edition' 2.7 - Remote File Disclosure Vulnerability

Quote:www.exploit-db.com/exploits/36733/

[img]http://www.socialbusinesstrust.org/wp-content/uploads/2012/02/The-Challenge-NEW-logo-250x170.png[/img]

Target:

PHP Code 


<?php 
http://emailextractor14.com 

Spoiler (Click to View)

Tasks:
[+] -Log in to MySQL Database
[+] -Log in to WordPress Dashboard
[+] -Upload shell

[+] -Locate Joomla target (solutionarchitects.nl) on the same server.
[+] - Log in to Joomla Dashboard
[+] -Upload shell

[+] -Go to Challenge/Finished.html
[+] -Post your name
[+] -Finished! 🎉

PoC:
WordPress:

PHP Code 


<?php 
http://emailextractor14.com/wp-content/mobile/bha.php 

Joomla:

PHP Code 


<?php 
http://solutionarchitects.nl/bha.php 

PHP Code 


<?php 
http://solutionarchitects.nl/challenge/finished.html 

Solvers:
1.) makmaniac
2.) Redemption
3.) boboboy
4.) benzi
5.)

This is a fun and simple challenge to complete. And for those of you that DO complete this challenge, write this down, it will save you some time later on. 👍

Quote: [4] [8] [23] [37] [80]

Edit: Having trouble? ..Need help?

Quote:https://hackforums.net/showthread.php?tid=4780684

Good Luck to all & thanks for viewing my thread. 🤝

Challenge Closed:

(Apr 26, 2015 10:45 AM)VultureNigga Wrote: actually it was me... I accidently change the wp-logins url page... :// Im so sorry, it was my first time..

* - ℛedemption - Apr 25, 2015

nice challenge somewhat easy. Someone kept logging into the WordPress password making me log out :(

* - VultureNigga - Apr 25, 2015

The wordpress thing is broken. I think someone deleted it. When i try to login, it just changes the url...

You can get password and login, but you cannot log into website..

* - Viktory - Apr 25, 2015

Nice, you idiots shat all over the website.

Keep it up hf 👍

* - boboboy - Apr 26, 2015

done ..

[img]http://s12.postimg.org/hc0p0c7od/Screenshotz.png[/img]

thanks 🤝

* - Tricks7er - Apr 26, 2015

The target site is fully deleted :/

* - xx 0x0 xx - Apr 26, 2015

i think someone did something wrong to this tharget brother as it dont show anything no page no anything

anyway good work from u brother

* - VultureNigga - Apr 26, 2015

actually it was me... I accidently change the wp-logins url page... :// Im so sorry, it was my first time..