Upload Shell In WordPress -M3GAFAB.

 #megafab.net
//////////////////////////////////////////////////////////////////////////////////////////////////////

#########################################################################################
# Tutorial .
# How to Upload Shell in WordPress Site's
# Author : M3GAFAB ( Albanian Hacker )
# Greetz - to all my friendS ^_^ <3 !..............!
##########################################################################################

In This Post I will Tell You the Two Successfully ways For Uploading Shell On WordPress.

1) By Editing The WordPress Theme.
2) By Uploading New Theme.

Most Of The Times  , For Security Reasons The Website admin Changes  the Permissions Of Theme Editing Option , So That IT cant Be edited Or Changed .
In That Case We will use The Next Option That is Theme Uploading.

So Lets Start ....

1) Upload  Shell By Editing The existing  WordPress Theme ..

After you login in to word press site as admin you see Dashboard .
In The Left Hand Site Take Your Mouse Pointer At Appearance , In That Click On Editor.
When you will click on Editor it will shows you some files that u can edit .
On Your Right Side..Select The Theme Twenty Ten " Note:- There are More Other Themes Activated By Admin , But It Will be Better That You don't Upload Your Shell On Activated Theme ,Always Upload Shell On Unactivated Theme , Best Is Twenty Ten Or Twenty Eleven)

¤ Now Select 404.php ,

Remove all the Source code There And Paste The Shell Code in 404.php and Update It .

Now Its Shell Execution Time , To Execute The Shell ,

URL will be :-
http://www.site.com/wp-content/themes/themename/404.php

Here Theme Name On the Above Screen Shot is Twenty Ten

So I will Execute Shell Like This
http://www.site.com/wp-content/themes/twentyten/404.php

Done .... Shell Uploaded so now DO WHAT YOU GONNA dO :D ...

Ok now lets start with method number 2 ^_^ !! ¤

2) Upload Shell By Uploading New Theme .

As I Already Tell You Above , Most Of the Time Website Security Is High , Admin Change The CHMOD Permissions Of the Theme or Any Other Settings , Like Plugins Editing All That Shit .
So You Cant Edit Anything On Site.

So Here Comes The Second Way To Upload Shell In WordPress
Here We will Upload the WordPress Theme , Hiding Our Shell In It .

I'am Giving The Modified WordPress Theme , With Madspot Shell In It. So You Just Have to Download This Theme.

Download Link - ( https://www.dropbox.com/s/n3uu8g1pbtmc9r4/news.zip) .

Now This Time Go To Themes .
Then Click On Install Themes Button.
Now you can see a Upload option.

#¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤#

Now Browse The  Theme Which You Downloaded Above  i.e news.zip , and Click On Install Now.
After Successfully Install it will shows you " Theme installed successfully " .

GooD now , our Shell it's uploaded Successfully . Now Its Execution Time ..

URL For Execution ( www.site.com/wp-content/themes/news/mcs.php )

And now it will show you the SHELL :D ^_^  Do What YOU Gonna DO ..

####################################################################################################
cyberz0ne.net
megafab.net (Official Website)
twitter.com/M3GAFAB ( Follow )
facebook.com/m3gafabb ( Like )

Thanks For Reading .. Sharing Its CarinG .. ^_^
./LogOut
####################################################################################################