+- Hack Forums (https://hackforums.net)
+-- Forum: Marketplace (https://hackforums.net/forumdisplay.php?fid=105)
+--- Forum: Premium (https://hackforums.net/forumdisplay.php?fid=451)
+---- Forum: Premium Sellers Section (https://hackforums.net/forumdisplay.php?fid=107)
+---- Thread: Selling Wordpress 0day (/showthread.php?tid=6265269)
Selling Wordpress 0day - Scrubspoof - Mar 4, 2024
Autoshell (c99 or any php file) with this wordpress plugin 0day. This php script will upload a file to about 110k affected websites and output a list of the urls.
Open to offers, looking for 10k.. which is a great deal considering one shell goes for $1-5.
Not going first under any circumstances, crypto only.
[contract=tid]Start Contract[/contract]
RE: Selling Wordpress 0day - Money- - Mar 4, 2024
You found this exploit or this is public exploit but you modified and tweaked it?
RE: Selling Wordpress 0day - Scrubspoof - Mar 4, 2024
(Mar 4, 2024 05:52 PM)Money- Wrote: You found this exploit or this is public exploit but you modified and tweaked it?
I found an upload vulnerability in a particular wordpress plugin that 110k sites use. No one else has this.
RE: Selling Wordpress 0day - samchicotte00 - Mar 7, 2024
(Mar 4, 2024 05:46 PM)Scrubspoof Wrote: Autoshell (c99 or any php file) with this wordpress plugin 0day. This php script will upload a file to about 110k affected websites and output a list of the urls.
Open to offers, looking for 10k.. which is a great deal considering one shell goes for $1-5.
Not going first under any circumstances, crypto only.
[contract=tid]Start Contract[/contract]
This is scary wow ahahah one day i hope i'll be able to buy these or even find them. Good job.
RE: Selling Wordpress 0day - Hackers - Mar 9, 2024
I can't afford to splurge on information like this and don't have a personal use for it, but this is very interesting. Is this something where the 110k amount could potentially increase over time?
RE: Selling Wordpress 0day - an4l 1st - Mar 9, 2024
would you possibly have a list of theses sites organized per country?
I know I am pushing it a little but who knows, maybe you are one of those hyper organized people who we love so much
RE: Selling Wordpress 0day - Scrubspoof - Mar 9, 2024
(Mar 9, 2024 11:51 AM)nodes Wrote: I can't afford to splurge on information like this and don't have a personal use for it, but this is very interesting. Is this something where the 110k amount could potentially increase over time?
Yep its a paid plugin and more people use it every day.
(Mar 9, 2024 01:21 PM)an4l 1st Wrote: would you possibly have a list of theses sites organized per country?
I know I am pushing it a little but who knows, maybe you are one of those hyper organized people who we love so much
No
RE: Selling Wordpress 0day - AnGrY Bo - Mar 10, 2024
Well worth the money
But…what guaranty do you give that this 0day exploit won’t be patched tomorrow
RE: Selling Wordpress 0day - Scrubspoof - Mar 10, 2024
(Mar 10, 2024 12:17 PM)AnGrY Bo Wrote: Well worth the money
But…what guaranty do you give that this 0day exploit won’t be patched tomorrow
I've had this for a while and it has persisted through plugin updates. They have no idea and unless you do something incredibly stupid with every shell nobody will ever even figure out what plugin it is.
You could autoroot these and sell rooted servers for $30 each, WELL worth 10k.
You could also iframe every blog and sell traffic.
RE: Selling Wordpress 0day - john_wallace - May 14, 2024
hey mate. I'm interested to buy PM you for more details
RE: Selling Wordpress 0day - Scrubspoof - May 14, 2024
(May 14, 2024 12:44 PM)john_wallace Wrote: hey mate. I'm interested to buy PM you for more details
Waiting on your PM.