Malam semua
Kali ini gw akan share Tutorial Deface Wp Plugins Simple-Forum

Langsung aja tod, gak usah banyak bacod

Dork     : inurl:/wp-content/plugins/simple-forum
Exploit : /resources/jscript/ajaxupload/sf-uploader.php
Bisa ente kembangkan sendiri

1. CSRF Download
2. Search target dengan dork
3. Pilih salah satu target, kemudia masukin exploit /resources/jscript/ajaxupload/sf-uploader.php
4. Jika vuln akan muncul seperti gambar di bawah ini

5. Buka CSRF yg telah di download tadi, edit target nya

6. Jika berhasil akan muncul tulisan success

7. Jreng jreng :v :v
Shell Access :
https://google.com/wp-content/plugins/simple-forum/resources/jscript/ajaxupload/namashell.php
Klau ada yg blom pnya shell, bisa download di sini
Download Priv8 Shania Shell

Sekian dari saya

SvN_NeVerMore

Share on Google Plus

About Unknown

This is a short description in the author block about the author. You edit it by entering text in the "Biographical Info" field in the user admin panel.