+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.li/Forum-Website-Server-Hacking)
+--- Thread: Need help [timthumb prob.] (/Thread-Need-help-timthumb-prob)
Need help [timthumb prob.] - smoochy - 06-19-2013
Hi guys...
is there any person here who knows how to upload shell in timthumb?? i got the vulnerable link of the site and i search about uploading shell in timthumb...
i used this >>> http://site/wp-content/themes/themesname/functions/timthumb.php?src=SHELL.php;.gif
but every time im doing that its give me an error...
thanks in advance...
RE: Need help [timthumb prob.] - The Real Slim Shady - 06-19-2013
This vulnerability is a few years old now isnt it? are you sure the wordpress you are testing is vulnerable?
And what error do you get? file not found? a quick google search and it appears that that timthumb.php is in another directory, /scripts/timthumb.php, not /functions/timthumb.php from what i saw on one site...
but any ways... when you get an error and ask for help... you should always post the error.