Deface Wordpress Themes Sportimo File Upload
Hallo semuanya kali ini saya akan share Tutorial Deface Wordpress Themes Sportimo
Oke langsung weh..
Bahan - Bahan
- Dork : inurl:/wp-content/themes/sportimo-theme
- Exploit : /wp-content/themes/sportimo-theme/functions/upload-handler.php
- CSRF : Disini *save dengan extensi .html
- Shell Backdoor / Script Deface
Pertama - tama kalian dorking site nya terlebih dahulu menggunakan dork di atas, tapi disini saya mempunyai live target
Live Target : http://ichd.ma/
Selanjutnya masukkan exploit nya
http://ichd.ma/wp-content/themes/sportimo-theme/functions/upload-handler.php
Jika muncul tulisan error itu tandanya vuln.
Selanjutnya kita masukkan sitenya ke CSRF.
Buka CSRF nya di browser anda, lalu pilih Shell Backdoor/Script Deface kalian.
Klik upload, jika sukses maka akan muncul nama file yang kalian upload
Contoh :
Tinggal kita akses file nya di
site.com/wp-content/uploads/tahun/bulan/filekalian
Contoh : http://ichd.ma/wp-content/uploads/2019/06/dot.html
Oke mungkin cukup sekian tutorial kali ini
Terima Kasih
Oke langsung weh..
Bahan - Bahan
- Dork : inurl:/wp-content/themes/sportimo-theme
- Exploit : /wp-content/themes/sportimo-theme/functions/upload-handler.php
- CSRF : Disini *save dengan extensi .html
- Shell Backdoor / Script Deface
Pertama - tama kalian dorking site nya terlebih dahulu menggunakan dork di atas, tapi disini saya mempunyai live target
Live Target : http://ichd.ma/
Selanjutnya masukkan exploit nya
http://ichd.ma/wp-content/themes/sportimo-theme/functions/upload-handler.php
Jika muncul tulisan error itu tandanya vuln.
Selanjutnya kita masukkan sitenya ke CSRF.
Buka CSRF nya di browser anda, lalu pilih Shell Backdoor/Script Deface kalian.
Klik upload, jika sukses maka akan muncul nama file yang kalian upload
Contoh :
Tinggal kita akses file nya di
site.com/wp-content/uploads/tahun/bulan/filekalian
Contoh : http://ichd.ma/wp-content/uploads/2019/06/dot.html
Oke mungkin cukup sekian tutorial kali ini
Terima Kasih
Thanks for your insight for your fantastic posting. I’m glad I have taken the time to see this. wordpress plugin
ReplyDeletegokil bet wordpress sportimo
ReplyDeleteMany people think before you buy Botulinum toxin A you have to see a dermatologist for a prescription and you have to go a pharmacy to ask for the product with a lot of fear and trembling. Which all these have been made easy and safe online where you order your product without fear and you pay from home directly. We also made it possible for you to buy botulinum toxin A online with common payment methods such as; Bitcoins, Paypal and other discreet methods of payment. Buy Botox Online With Discreet Home Delivery
ReplyDeleteBotox can aid medical conditions to improve muscles relaxation within the face, Top selling 100%. Authentic at the best wholesale cost. Fast worldwide shipping & secure online shopping. Buy Botox Online, Buy Botox Online With PayPal, Buy Botox Online With Credit Card
CONTACT US:
Website: http://www.arjunihair.com
Email: arjunibeautystore@protonmail.com
Phone: +17622232514
Welome to millinium online pharmacy Purchase Dexedrine Online Without Prescription Legit in a Legal Way.
ReplyDeleteDexedrine is a drug used to treat Attention Deficit Hyper-innovativeness Disorder (ADHD). It changes the measure of certain common substances in the cerebrum. Dextroamphetamine likewise has a place with a class of medications known as energizers. it encourages increment your capacity to remain concentrated on a movement, focus improves ones listening aptitudes. More to that this medicine is likewise used to treat some dozing issue (narcolepsy) which encourages you remain conscious during the day. anyway it ought to be utilized to hold off rest or to treat tiredness in those that don’t have a rest issue. Purchase Dexedrine Online Here Without Prescription.
Best Place to Buy Dexedrine Online Without Prescription–Dexedrine available to be purchased Here Safely and Legit Buy ADHD Medication Online
Here, you can securely and safely purchase Dexedrine online without remedy. Our Products are of the best quality from FDA Approved offices. Bundling is sheltered and sending is 100% attentive and conveyance is quick. We transport with different expedited delivery conveyance administrations like DHL, FedEx, EMS…
www.milliniumpharmacy.com