Word Press Exploit - Uploading a Deface Site
Hello everyone I will be sharing with you a very simple Word Press upload exploit. I will be showing you how to upload a simple Text file as a deface page.
Go to Google and search inurl:/wp-content/plugins/easy-comment-uploads/upload-form.php

The next step is to pick your site on which you would like to upload your deface page. I'm gonna choose the first site that we see in the image.
Website Link

The website should look something like the image above. The next thing you do is create a simple text file and write down your deface message in it and upload it on the website using the Upload button.
Now after it finished uploading the text file you replace the following line in the URL:
With this ( ex. uploads/2011/12/darkbyte.txt ):
Now browse to your Defaced site.
http://www.tonicfoodclub.com/wp-cont...2/darkbyte.txt


Feel Free to Thank me and give yourself a little Pat on the back also.

The next step is to pick your site on which you would like to upload your deface page. I'm gonna choose the first site that we see in the image.
Website Link

The website should look something like the image above. The next thing you do is create a simple text file and write down your deface message in it and upload it on the website using the Upload button.
Now after it finished uploading the text file you replace the following line in the URL:
Code:
"plugins/easy-comment-uploads/upload-form.php"
Code:
uploads/[YEAR UPLOADED]/[MONTH UPLOADED]/sample.txt
http://www.tonicfoodclub.com/wp-cont...2/darkbyte.txt


Feel Free to Thank me and give yourself a little Pat on the back also.

![=]](/forum/images/emotions/=].gif)