Cara Deface Wordpress Theme Anthology Vulnerablity File Upload

HumarTutor - Cara Deface Wordpress Theme Anthology Vulnerability File Upload

Yak, sebenernya ini exploit lama, iseng iseng dorking eh... nemu vuln zh, yah share aja di HumarTutor deh
Lansung aja kuy...

Syarat :

1. Shell :

- Download Shell IndoXploit
- Download File Manager X.X (Mini Shell)

2.. Dork :

inurl:/themes/Anthology/

inurl:wp-content/themes/Anthology/

2. Exploit :

/functions/upload-handler.php

Contoh :

site.com/wp-content/themes/Anthology/functions/upload-handler.php

3. CSRF :

- CSRF Versi Online
- CSRF Versi HTML

Langkah :

1. Dorking dulu bos q

2. Exploit pake exploit diatas.

Vuln? ada tulisan error.

Ga ada? skip.

3. Selanjutnya eksekusi pake CSRF, terserah mau pake yang apa. Mau gampang ya Pake online.

Tampilan CRF Online

- URL = isi dengan web target.
- POSTFILE = untuk method ini pake "pexetofile" (tanpa kutip)

4. Kalo udah,
Sukses exploit? ada nama file yang lu upload.
Nothing? skip

5. Shell Access

site.com/wp-content/uploads/[yeat]/[month]/namafilenya.waug

EZ kan??

Baca juga:

Title :

Cara Deface Wordpress Theme Anthology Vulnerablity File Upload

Reviewed by

Humar

On

22.29.00

Rating :

5

Ayo berlangganan melalui email, jangan lewatkan update terbaru kami

Share this

Humar

I'm a blogger wannabe, programmer wannabe, and hacker wannabe