+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: Bypass Wordpress File Upload (/showthread.php?tid=6272078)
Bypass Wordpress File Upload - chisatomisaki - May 28, 2024
Hi everyone, I'm a newbie here. Recently I've access to a website wordpress admin and I want to upload a backdoor shell to it so I can comeback later if the password chagne. But i don't have any permisson to access to plugins/files editor because it's disable in wp-config. So that I want bypass wp media upload to up shell to it and I've tried many way but nothing work-out. Does someone know how to get through it?
RE: Bypass Wordpress File Upload - HussaRPL0029 - May 28, 2024
(May 28, 2024 08:54 AM)chisatomisaki Wrote: Hi everyone, I'm a newbie here. Recently I've access to a website wordpress admin and I want to upload a backdoor shell to it so I can comeback later if the password chagne. But i don't have any permisson to access to plugins/files editor because it's disable in wp-config. So that I want bypass wp media upload to up shell to it and I've tried many way but nothing work-out. Does someone know how to get through it?
A quick google search for your issue produces this "github.com/22XploiterCrew-Team/Wpushell"
This is one example, but I am sure there are others.
If you have access to the WordPress administration, I would look for privilege escalation opportunities, however, that depends on what your objective is :)