+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.li/Forum-Tutorials)
+--- Thread: Tutorial Shelling in Wordpress (/Thread-Tutorial-Shelling-in-Wordpress)
Shelling in Wordpress - Lotus Black - 02-08-2014
Requirement: You need to get Admin access in wordpress site
So when you got admin access, login with admin username and password
Spoiler:
![[Image: wp-login.jpg]](http://1.bp.blogspot.com/-AQBHkgEcxBA/UhkPZUY-2XI/AAAAAAAABoA/Zn_84H-aHds/s1600/wp-login.jpg)
Go to Appearance>Theme>Editor you will see Default Theme, in my case, Nice Hotel
You can shell upload in there,
Spoiler:
![[Image: themes.jpg]](http://3.bp.blogspot.com/--AhbaJWCJmU/UhkRJAeQsCI/AAAAAAAABoM/57OeU88fTq8/s1600/themes.jpg)
but, i just change to another theme, Twenty Eleven Theme, so it will be looks like
Spoiler:
![[Image: theme1.jpg]](http://1.bp.blogspot.com/-Et9h1PgFY8I/UhkSNFUD7JI/AAAAAAAABoY/hII9kWRCrEg/s1600/theme1.jpg)
And click to 404 Template.
Spoiler:
![[Image: 404.jpg]](http://1.bp.blogspot.com/-u1BKeemPYTk/UhkTH-SyR5I/AAAAAAAABog/0Hczs3o8_UQ/s1600/404.jpg)
Edit 404 Template php code and replace with your own shell code just like below. You need to update php file by clicking Update File
Spoiler:
![[Image: shellcodereplace.jpg]](http://2.bp.blogspot.com/-sbHzjLkL65E/UhkVUS1zj1I/AAAAAAAABo0/Xnaz8MszVAo/s1600/shellcodereplace.jpg)
Now, you shell link will be www.someone.com/wp-content/themes/twentyeleven/404.php
Cause i change to Twenty Eleven Theme, it depend on your choice and it may be variable.
Spoiler:
![[Image: shell_url.jpg]](http://2.bp.blogspot.com/-V_AFVZNXfxc/UhkYGYVmc8I/AAAAAAAABpA/kDBhmKqo3DU/s1600/shell_url.jpg)
Sorry for my poor english, but i hope my tutorial is understandable.
Regards
Lotus Black
RE: Shelling in Wordpress - Cressi - 02-08-2014
Nice guide, and great tutorial ^^ Thanks for the share.
RE: Shelling in Wordpress - Customer - 02-08-2014
I remember when Kirito made a tutorial for this a while ago, shit was so cash.