Saturday, April 28, 2012

WordPress Remote File Upload Vulnerability with Asset Manager

Hello Readers In this Tutorial i will share with you WordPress  Assets Manager File Upload Vulnerability and its an old WordPress vulnerability. This vulnerability found in many WordPress sites.

In WordPress we can upload our deface page using Remote File Upload Vulnerability with Asset Manager. Asset Manager is a plugin that allows you to upload your files Just simply follow the simple steps to hack the WordPress website.  


Some easy Steps to Performing Attack..... 


* First you find Vulnerable Website by using Google Dork.


   Go to  Google and type below Google Dorks. 


 inurl:Editor/assetmanager/assetmanager.asp


 

* Now you will see lots of websites. Pick anyone









Now you will see something like this:


[wordpress%2520hacking%255B3%255D.png] 


Now We Can Upload Files From Our Computer. Press Browse and select your file and click Upload selected files.


Demo Websites:

http://egypt-hosts.com/Editor/assetmanager/assetmanager.asp


If you have any doubt feel free to comment here and You like my this post then kindly Share with your friends and groups. and hit like on InvisibleHackers Official or

Connect With us on Facebook.

 
Thank You For Visiting.....







Written by

Hello, My name is Ankit Bhandari You can visit and Learn Ethical Hacking from my blog. But all these hacking tricks only for educational purpose. Me and My Blog will not responsible for any wrong use of this. Enjoy it but never miss use it.

0 comments:

Post a Comment

 

© 2014 Invisible Hackers. All rights Reserved. Designed by InvisibleHackers