Deface Wordpress site's index when you can't plant shell
Before proceeding :
Must have permissions to edit wordpress theme files.
There can be several ways(executing php codes and doing blah blah blah), I am mentioning very easy one that worked fine for me or can be confirmed as 'tested'.
okay, let's get onto the action ...
go to localhost/installed-wp-directory/wp-admin/theme-editor.php (admin panel access required!)
now, click on 'header.php' of active theme(note that,'active theme') of the site.replace all codes with 'file uploader form(php scripted, available in google)'
navigate to localhost/installed-wp-directory/index.php
you will see 'file uploader' on top of homepage!now select your deface page(ex. index.php) and upload.when finished, reload the page :D pwned :p or localhost/wp-installed-directory/deface-page.php
done ...
Greets to : Allah for giving me a brain.Alhamdulillah.
end of tutorial ..
No comments:
Post a Comment