+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.li/Forum-Tutorials)
+--- Thread: Tutorial Shell Upload in Wordpress 2nd Method (/Thread-Tutorial-Shell-Upload-in-Wordpress-2nd-Method)
Shell Upload in Wordpress 2nd Method - Lotus Black - 01-28-2014
Some newbie may trouble shelling in wordpress. I'll post 1st method later. So now you need to download wp plugin, download here. And inside wp.zip replace instoll.php with your own shell code like wso.php.
Spoiler:
![[Image: jBq8u8R4Hf23x.jpg]](http://i.minus.com/jBq8u8R4Hf23x.jpg)
Login WP that you already got admin access and go Plugins>Add New>Upload>Choose File
Upload wp.zip as step belows.
Spoiler:
![[Image: j5WA1s95PT8tY.jpg]](http://i.minus.com/j5WA1s95PT8tY.jpg)
Spoiler:
![[Image: jbs67tZxmA4qrv.jpg]](http://i.minus.com/jbs67tZxmA4qrv.jpg)
Spoiler:
![[Image: jSFwwF5aFo1pO.jpg]](http://i.minus.com/jSFwwF5aFo1pO.jpg)
Spoiler:
![[Image: jce8j79cRcLPX.jpg]](http://i.minus.com/jce8j79cRcLPX.jpg)
Spoiler:
![[Image: jtis6FkMrrZ3n.jpg]](http://i.minus.com/jtis6FkMrrZ3n.jpg)
Spoiler:
![[Image: jbectRnIs3pIXz.jpg]](http://i.minus.com/jbectRnIs3pIXz.jpg)
After uploading, shell link will be like
Code:
www.someone.com/wp-content/plugins/stats/instoll.phpNow you get shell
Spoiler:
![[Image: judeU9Iv5jEv.jpg]](http://i.minus.com/judeU9Iv5jEv.jpg)
Hope my tutorial with pictures will be understandable.
Regard,
Lotus Black
RE: Shell Upload in Wordpress 2nd Method - Eclipse - 02-04-2014
Thanks for the share! I'll check this out.