Wordpress 0day Exploiter is a tool that allows you to register as a new administrator on WordPress sites that have an error in the file ajax.php. (authorization file hranilesche user data
Instructions for use zero-day vulnerabilities Online Wordpress:
1. In the URL field, paste the link of the site and in the field, write the name of the theme topics, and in a field You mail prescribes ; soap;
2. Confirm Exploit ;
3. If the site is vulnerable, then T "Register" button will be enabled;
4. Click on the Register and the web browser will take you to the registration page;
5. Enter the user name and e-mail address
6. Check your inbox for confirmation and the password of your account.
7. If you selected a site on Wordpress is vulnerable and you have done all the above steps correctly then you have successfully registered on this site on the rights of the administrator;
Wordpress 0day Exploiter
Wordpress 0day Exploiter is a tool that enable you to register as new admin on a wordpress site which have the bug on the Ajax.php file.
How to create dorks?
It's very easy so create the dorks, the list of vulnerable themes are already provided on the right richtext box. So, you just need to add the theme name.
Dork:
Code:
inurl:/wp-content/themes/[theme_name]
Example:
Code:
inurl:/wp-content/themes/appius
How to use the tools?
It's easy, once you have found your target,
1- Simply paste the site URL,theme name, an your email in the textbox
2- Click on Confirm > Exploit
3- If your target is vulnerable, the "Register" button will be enabled
4- Click on Register and the webbrowser will bring you to the registration page
5- Enter your username and email
6- Check your email inbox for the confirmation and the password for your account.
7- Login to the site and there you go
8- You also can upload shell into the site.
Khuyến cáo dùng trên máy ảo
Đăng nhận xét Blogger Facebook