+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.ly/Forum-Website-Server-Hacking)
+--- Thread: XSS2SHELL - Leverage XSS to RCE in a matter of seconds on Wordpress (/Thread-XSS2SHELL-Leverage-XSS-to-RCE-in-a-matter-of-seconds-on-Wordpress)
Pages:
1
2
RE: XSS2SHELL - Leverage XSS to RCE in a matter of seconds on Wordpress - Dyme - 12-03-2014
Would edit the OP but apparently it's too old.
XSS2SHELL is now V3
Code:
Changelog:
v3 - Akismet is now used for backdooring WP; Themes are no longer used.
V2 - Added Joomla supportNew video demonstrating how effective XSS2SHELL can be with the newly found WP 3.x persistent XSS vuln:
RE: XSS2SHELL - Leverage XSS to RCE in a matter of seconds on Wordpress - Reiko - 12-03-2014
Is Akismet always installed? I haven't looked at Dongpress in a while.
RE: XSS2SHELL - Leverage XSS to RCE in a matter of seconds on Wordpress - Dyme - 12-03-2014
(12-03-2014, 04:33 AM)Reiko Wrote: Is Akismet always installed? I haven't looked at Dongpress in a while.
I've never seen it not installed. I know for a fact that it's installed but not "active" by default on 3.9.x, and I assume it's the same for most versions below and above.
RE: XSS2SHELL - Leverage XSS to RCE in a matter of seconds on Wordpress - Alan Turing - 12-03-2014
nice font rendering KEKEKEkekEKEK
RE: XSS2SHELL - Leverage XSS to RCE in a matter of seconds on Wordpress - gh05t3d - 02-05-2015
thanks for such interesting tool and the videos. I will look into this tool tomorrow mate.
RE: XSS2SHELL - Leverage XSS to RCE in a matter of seconds on Wordpress - huglander - 03-09-2015
It just edits the plugins and adds your php code? Nice too btw