The stories and information posted here are artistic works of fiction and falsehood. Only a fool would take anything posted here as fact.
|
XSS2SHELL - Leverage XSS to RCE in a matter of seconds on Wordpress
filter_list
|
|
|
Thirteen Years of Service
Posts: 954
Threads: 26
RE: XSS2SHELL - Leverage XSS to RCE in a matter of seconds on Wordpress 12-03-2014, 04:31 AM
#11
Would edit the OP but apparently it's too old.
XSS2SHELL is now V3
Code:
Changelog:
v3 - Akismet is now used for backdooring WP; Themes are no longer used.
V2 - Added Joomla support
New video demonstrating how effective XSS2SHELL can be with the newly found WP 3.x persistent XSS vuln:
![[+]](https://sinister.ly/images/modern/collapse_collapsed.png)
The following 1 user Likes Dyme's post:1 user Likes Dyme's post
• gh05t3d
Thirteen Years of Service
Posts: 700
Threads: 19
RE: XSS2SHELL - Leverage XSS to RCE in a matter of seconds on Wordpress 12-03-2014, 04:33 AM
#12
Is Akismet always installed? I haven't looked at Dongpress in a while.
PGP
Sign: F202 79C9 76F7 40BB 54EC 494F 5DEF 1D70 14C1 C4CC
Encrypt: A5B3 1B21 55E1 80AF 4C6E DE83 467B 8EFC 3DEE 681C
Auth: CD55 E8A5 1A08 2933 8BA6 BC88 D81F 1943 739A 3C47
•
Thirteen Years of Service
Posts: 954
Threads: 26
RE: XSS2SHELL - Leverage XSS to RCE in a matter of seconds on Wordpress 12-03-2014, 04:37 AM
#13
(12-03-2014, 04:33 AM)Reiko Wrote: Is Akismet always installed? I haven't looked at Dongpress in a while.
I've never seen it not installed. I know for a fact that it's installed but not "active" by default on 3.9.x, and I assume it's the same for most versions below and above.
•
Twelve Years of Service
Posts: 396
Threads: 37
RE: XSS2SHELL - Leverage XSS to RCE in a matter of seconds on Wordpress 12-03-2014, 05:25 AM
#14
nice font rendering KEKEKEkekEKEK
Unleash the lead from my pistol into my head bumpin' crystal
•
Twelve Years of Service
Posts: 189
Threads: 6
RE: XSS2SHELL - Leverage XSS to RCE in a matter of seconds on Wordpress 02-05-2015, 03:35 AM
#15
thanks for such interesting tool and the videos. I will look into this tool tomorrow mate.
•
Eleven Years of Service
Posts: 5
Threads: 0
RE: XSS2SHELL - Leverage XSS to RCE in a matter of seconds on Wordpress 03-09-2015, 04:37 AM
#16
It just edits the plugins and adds your php code? Nice too btw
•
Users browsing this thread: 1 Guest(s)
