Cheap KYC Verifications & Openups ◆ Spoof Call and Spoof SMS set any caller ◆ ProxiesFood: Unlimited Residential Proxy ◆ Anvilpoint CyberOps - Hacker for Hire ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Grayhat • Purple Team • Hybrid Security Website Hacking › [SHELL CHALLENGE #5:]>_Upload Shell to Server_[/ WordPress | Joomla ]

Thread Closed 

[SHELL CHALLENGE #5:]>_Upload Shell to Server_[/ WordPress | Joomla ]
ｍＯｂｉＩｅ
ｍＯｂｉＩｅ Offline
Ｌ Ｅ Ｇ Ｅ Ｎ Ｄ Ｓ ™
***
HF Ub3r
Posts:
1,641
Threads:
574
Credibility:
700
Popularity:
1,665
βytes:
β -82
Game XP:
1,338
Apr 24, 2015 08:15 PM (This post was last modified: Apr 26, 2015 02:34 PM by ｍＯｂｉＩｅ.)
[img]http://i492.photobucket.com/albums/rr281/hardrockpdc19/pirate-flag-final.gif[/img]
[Image: Qa7MBtA.gif]


Sup bitchez!? Welcome to Shell Challenge #5 In this challenge we will be using the resent WordPress plugin exploit.

WordPress Plugin 'WP Mobile Edition' 2.7 - Remote File Disclosure Vulnerability
Quote:www.exploit-db.com/exploits/36733/


[img]http://www.socialbusinesstrust.org/wp-content/uploads/2012/02/The-Challenge-NEW-logo-250x170.png[/img]

Target:
PHP Code

<?php 
http://emailextractor14.com 
Spoiler (Click to View)
  • Tasks:
    [+] -Log in to MySQL Database
    [+] -Log in to WordPress Dashboard
    [+] -Upload shell


  • [+] -Locate Joomla target (solutionarchitects.nl) on the same server.
    [+] - Log in to Joomla Dashboard
    [+] -Upload shell


  • [+] -Go to Challenge/Finished.html
    [+] -Post your name
    [+] -Finished! 🎉



PoC:
WordPress:
PHP Code

<?php 
http://emailextractor14.com/wp-content/mobile/bha.php 
Joomla:
PHP Code

<?php 
http://solutionarchitects.nl/bha.php 
[Image: vtHLbJb.jpg]

PHP Code

<?php 
http://solutionarchitects.nl/challenge/finished.html 
[Image: 8bnxrqb.jpg]

Solvers:
1.) makmaniac
2.) Redemption
3.) boboboy
4.) benzi
5.)

This is a fun and simple challenge to complete. And for those of you that DO complete this challenge, write this down, it will save you some time later on. 👍
Quote: [4] [8] [23] [37] [80]


Edit: Having trouble? ..Need help?
Quote:https://hackforums.net/showthread.php?tid=4780684


Good Luck to all & thanks for viewing my thread. 🤝

Challenge Closed:
(Apr 26, 2015 10:45 AM)VultureNigga Wrote:  actually it was me... I accidently change the wp-logins url page... :// Im so sorry, it was my first time..
☀[Teacher|Student Training Course :]>_Learn Website Hacking & Make $$_[/n00b Friendly]☀
[Image: LWpI0zO.png]
ℛedemption
ℛedemption Offline
Redemption
***
HF Ub3r
Posts:
1,668
Threads:
3
Credibility:
300
Popularity:
1,027
βytes:
β 253.35
Game XP:
4,372
Apr 25, 2015 12:33 AM (This post was last modified: Apr 25, 2015 07:36 AM by ℛedemption.)
nice challenge somewhat easy. Someone kept logging into the WordPress password making me log out :(
VultureNigga
VultureNigga Offline
[n00b@HF:]
*
Registered
Posts:
4
Threads:
0
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Apr 25, 2015 04:36 AM (This post was last modified: Apr 25, 2015 04:41 AM by VultureNigga.)
The wordpress thing is broken. I think someone deleted it. When i try to login, it just changes the url...

You can get password and login, but you cannot log into website..
Viktory
Viktory Offline
[bin@HF:]
***
HF l33t
Posts:
1,293
Threads:
72
Credibility:
000
Popularity:
8
βytes:
β 0
Game XP:
1
Apr 25, 2015 08:38 AM
Nice, you idiots shat all over the website.

Keep it up hf 👍
Can you hear my voice
come thru the music?
boboboy
boboboy Offline
[user@HF:]
*
Registered
Posts:
151
Threads:
11
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Apr 26, 2015 10:23 AM
done ..

[img]http://s12.postimg.org/hc0p0c7od/Screenshotz.png[/img]

thanks 🤝
Tricks7er
Guest
 
Apr 26, 2015 10:26 AM
The target site is fully deleted :/
xx 0x0 xx
xx 0x0 xx Offline
[closed@HF:]
Posts:
2,093
Threads:
120
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Apr 26, 2015 10:31 AM
i think someone did something wrong to this tharget brother as it dont show anything no page no anything

anyway good work from u brother
VultureNigga
VultureNigga Offline
[n00b@HF:]
*
Registered
Posts:
4
Threads:
0
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Apr 26, 2015 10:45 AM
actually it was me... I accidently change the wp-logins url page... :// Im so sorry, it was my first time..
Next Oldest | Next Newest
Thread Closed 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by ~[DogiD]~Jul 28, 2021 03:02 AM 26 1,689 Jul 28, 2021 03:02 AM
Last Post: bgyacine
by DrCrypterNov 3, 2020 03:36 PM 2 240 Nov 3, 2020 03:36 PM
Last Post: DrCrypter
by TetraHCSep 10, 2019 04:20 AM 1 164 Sep 10, 2019 04:20 AM
Last Post: crahck hachihak