Tutorial Deface Poc Wp-Ghost Themes
Tutorial Deface Poc Wp-Ghost Themes
Bahan: dork: inurl:wp-content/themes/Ghost Exploit:
wp-content/themes/Ghost//includes/uploadify/upload_settings_image.php 1. Pertama
kalian dork aja dulu:v nah cari live target kalian:v disini gw pakek live target
gw hehehe
2. Dan ini live target gw :v mari kita tambahkan exploit nya yak hehe
3. Nah klo vuln begini :v
4. Nah lalu kalian salin web nya yak :v
http://www.juvankoski.com/wp-content/themes/Ghost//includes/uploadify/upload_settings_image.php
( nah itu kalian salin aja terus kalian ke csrf :v 5. Nah jika sudah kalian
paste in aja yang kalian salin tadi :v hehe terus kalian pilih mau
filedata/userfile 6. Terus kalian pencet oke :v 7. Terus kalian pilih file html
kalian yak wkwkw4. Nah lalu kalian salin web nya yak :v
http://www.juvankoski.com/wp-content/themes/Ghost//includes/uploadify/upload_settings_image.php
( nah itu kalian salin aja terus kalian ke csrf :v 5. Nah jika sudah kalian
paste in aja yang kalian salin tadi :v hehe terus kalian pilih mau
filedata/userfile 6. Terus kalian pencet oke :v 7. Terus kalian pilih file html
kalian yak wkwkw
8. Nah kalo udh dia begitu :v terus cara memanggil nya gmn-! 9.
http://target.com/wp-content/uploads/settingsimages/sclu.html 10. Berhasil dah
aowkaowk :v
Komentar