[ｍＯｂｉＩｅ]

WordPress Plugins WP Job Manager - Arbitrary File Upload

Been seeing this exploit in the wild a lot lately so I'd thought I'd share it. 👍

Tutorial:
1.) Google Dork/s:

PHP Code


<?php 
inurl:/wp-content/plugins/wp-job-manager/
inurl:/wp-content/uploads/wp-job-manager-uploads/ 


2.) After you choose a site, go to an html online site.
http://htmledit.squarefree.com

Paste PoC:

Change target.com with your target's URL.

3.) Choose an image and click upload.

Path to file:

PHP Code


<?php 
https://www.target.com/wp-content/uploads/job-manager-uploads/files/YYYY/MM/your-files.jpg 


Example:

PHP Code


<?php 
http://mydevices.com/wp-content/uploads/job-manager-uploads/files/2017/06/legends.gif 


Video Demo:




Source:
https://cxsecurity.com/issue/WLB-2017060029

Now you can tell your friends you uploaded a photo that said "Hacked" to a website. 🤣
Enjoy. I guess. 🤝

[ｋａ＄ｈ]

Nice tutorial mObiIe, looks great.

[ᏙictorҮ]

Nice tutorial, reminded me of the challenge we did :')

[Skull-13]

Excellent material, keep it going!. This are true tutorials.

[Root-Cat]

Thank you for this nice tutorial

[t3nd3r]

can it upload shell aswell?