Thumbs upWord Press Exploit - Uploading a Deface Site

Posts 115 of 19 · Page 1 of 2
Word Press Exploit - Uploading a Deface Site
Hello everyone I will be sharing with you a very simple Word Press upload exploit. I will be showing you how to upload a simple Text file as a deface page.

Go to Google and search inurl:/wp-content/plugins/easy-comment-uploads/upload-form.php


The next step is to pick your site on which you would like to upload your deface page. I'm gonna choose the first site that we see in the image.
Website Link


The website should look something like the image above. The next thing you do is create a simple text file and write down your deface message in it and upload it on the website using the Upload button.

Now after it finished uploading the text file you replace the following line in the URL:
Code:
"plugins/easy-comment-uploads/upload-form.php"
With this ( ex. uploads/2011/12/darkbyte.txt ):
Code:
uploads/[YEAR UPLOADED]/[MONTH UPLOADED]/sample.txt
Now browse to your Defaced site.
http://www.tonicfoodclub.com/wp-cont...2/darkbyte.txt


Feel Free to Thank me and give yourself a little Pat on the back also.
Words from my deface? lol.

Nice little exploit, but it doesn't really go with "upgrade your security before potential data is lost or stolen" because it's only a ********* exploit and you can't shell the site like that.

Nice job though, pic tut and all :3
Quote Originally Posted by FUKO View Post
Words from my deface? lol.

Nice little exploit, but it doesn't really go with "upgrade your security before potential data is lost or stolen" because it's only a ********* exploit and you can't shell the site like that.

Nice job though, pic tut and all :3
haha yup didn't know what else really to write so I just used that as an example, hope you don't mind. And yeah I just wanted to demonstrate how to upload a little deface page. I'm still learning I don't get everything right.

And thanks.
That's not "defacing" a ********* site. That's simply uploading a txt file via a plugin. A TRUE deface would be replacing the entire site with a "hacked" message.
Quote Originally Posted by avalanch07 View Post
That's not "defacing" a ********* site. That's simply uploading a txt file via a plugin. A TRUE deface would be replacing the entire site with a "hacked" message.
Ok mr.smarty pants, I don't think you really understand my point in this thread.
Quote Originally Posted by DarkByte7 View Post
Hello everyone I will be sharing with you a very simple Word Press upload exploit. I will be showing you how to upload a simple Text file as a deface page.

Go to Google and search inurl:/wp-content/plugins/easy-comment-uploads/upload-form.php


The next step is to pick your site on which you would like to upload your deface page. I'm gonna choose the first site that we see in the image.
Website Link


The website should look something like the image above. The next thing you do is create a simple text file and write down your deface message in it and upload it on the website using the Upload button.

Now after it finished uploading the text file you replace the following line in the URL:
Code:
"plugins/easy-comment-uploads/upload-form.php"
With this ( ex. uploads/2011/12/darkbyte.txt ):
Code:
uploads/[YEAR UPLOADED]/[MONTH UPLOADED]/sample.txt
Now browse to your Defaced site.
http://www.tonicfoodclub.com/wp-cont...2/darkbyte.txt


Feel Free to Thank me and give yourself a little Pat on the back also.
Hacked.
^< -- that's my work.
Quote Originally Posted by .Amnesia View Post


Hacked.
^< -- that's my work.
How exactly is that your work?
Quote Originally Posted by DarkByte7 View Post

How exactly is that your work?
Because that's my fucking Deface you dumb fuck. Ask -DownFall or zerofreakz. O wait, that's right, you don't know popular hackers' names.
Quote Originally Posted by .Amnesia View Post

Because that's my fucking Deface you dumb fuck. Ask -DownFall or zerofreakz. O wait, that's right, you don't know popular hackers' names.
So is it yours or DownFalls since he said something similar in a much more mature manner check out the first post. And then check out the second post which is the reason why I used those words. If it really bothers you that much I would change it, but I am not able to edit my post. Shouldn't you feel honored if I used your words? Since I am not saying those are mine or anything it was just an example.
Quote Originally Posted by DarkByte7 View Post

So is it yours or DownFalls since he said something similar in a much more mature manner check out the first post. And then check out the second post which is the reason why I used those words. If it really bothers you that much I would change it, but I am not able to edit my post. Shouldn't you feel honored if I used your words? Since I am not saying those are mine or anything it was just an example.
You asked in whatever way that was my Deface, well, why would I upload somebody elses' Deface, and then claim it as it is mine?
I'm a moral-fag, so please, don't accuse me of something I did or did not do.
Quote Originally Posted by .Amnesia View Post

Because that's my fucking Deface you dumb fuck. Ask -DownFall or zerofreakz. O wait, that's right, you don't know popular hackers' names.
Who's this DownFall noob and how is he popular?
Quote Originally Posted by .Amnesia View Post

Because that's my fucking Deface you dumb fuck. Ask -DownFall or zerofreakz. O wait, that's right, you don't know popular hackers' names.
Why would we want to fantasize about popular hackers?
Quote Originally Posted by Gamerusher View Post
Why would we want to fantasize about popular hackers?
Who wouldn't want to fantasize about those guys? You're tripping.
sweet exploit
Posts 115 of 19 · Page 1 of 2

Post a Reply

Similar Threads

Tags for this Thread

None

Need help?