Word Press Exploit - Uploading a Deface Site
Word Press Exploit - Uploading a Deface Site
Hello everyone I will be sharing with you a very simple Word Press upload exploit. I will be showing you how to upload a simple Text file as a deface page.
Go to Google and search inurl:/wp-content/plugins/easy-comment-uploads/upload-form.php
The next step is to pick your site on which you would like to upload your deface page. I'm gonna choose the first site that we see in the image.
Website Link
The website should look something like the image above. The next thing you do is create a simple text file and write down your deface message in it and upload it on the website using the Upload button.
Now after it finished uploading the text file you replace the following line in the URL:
With this ( ex. uploads/2011/12/darkbyte.txt ):
Now browse to your Defaced site.
http://www.tonicfoodclub.com/wp-cont...2/darkbyte.txt
Feel Free to Thank me and give yourself a little Pat on the back also.
The next step is to pick your site on which you would like to upload your deface page. I'm gonna choose the first site that we see in the image.
Website Link
The website should look something like the image above. The next thing you do is create a simple text file and write down your deface message in it and upload it on the website using the Upload button.
Now after it finished uploading the text file you replace the following line in the URL:
Code:
"plugins/easy-comment-uploads/upload-form.php"
Code:
uploads/[YEAR UPLOADED]/[MONTH UPLOADED]/sample.txt
http://www.tonicfoodclub.com/wp-cont...2/darkbyte.txt
Feel Free to Thank me and give yourself a little Pat on the back also.
Originally Posted by FUKO
