Tutorial Deface Poc Wp-Ghost Themes

Tutorial Deface Poc Wp-Ghost Themes

Bahan: dork: inurl:wp-content/themes/Ghost Exploit: wp-content/themes/Ghost//includes/uploadify/upload_settings_image.php 1. Pertama kalian dork aja dulu:v nah cari live target kalian:v disini gw pakek live target gw hehehe

2. Dan ini live target gw :v mari kita tambahkan exploit nya yak hehe

3. Nah klo vuln begini :v

4. Nah lalu kalian salin web nya yak :v http://www.juvankoski.com/wp-content/themes/Ghost//includes/uploadify/upload_settings_image.php ( nah itu kalian salin aja terus kalian ke csrf :v 5. Nah jika sudah kalian paste in aja yang kalian salin tadi :v hehe terus kalian pilih mau filedata/userfile 6. Terus kalian pencet oke :v 7. Terus kalian pilih file html kalian yak wkwkw4. Nah lalu kalian salin web nya yak :v http://www.juvankoski.com/wp-content/themes/Ghost//includes/uploadify/upload_settings_image.php ( nah itu kalian salin aja terus kalian ke csrf :v 5. Nah jika sudah kalian paste in aja yang kalian salin tadi :v hehe terus kalian pilih mau filedata/userfile 6. Terus kalian pencet oke :v 7. Terus kalian pilih file html kalian yak wkwkw

8. Nah kalo udh dia begitu :v terus cara memanggil nya gmn-! 9. http://target.com/wp-content/uploads/settingsimages/sclu.html 10. Berhasil dah aowkaowk :v