WordPress 0day exploit Revslider

Revslider scanner

For this exploit ::

dork :  revslider.php "index of" site:**
           inurl:/revslider/rs-plugin/videojs/video-js.swf
           inurl:/revslider/rs-plugin/videojs/

you can deface so many websites using this exploit :)




Among the best exploits on WordPress now is WordPress revslider LFI

this exploit allow us to download config of site

that u can connect database and change the admin user and pass info's

and login on DashBoard  site.**/wp-login.php and upload shell ...

i coded tool on PHP can scaning sites a mass scan and get just important info from config like

db-user , db-pass , db-host  and db-name


Download the Scanner here

Share on Google Plus

Unknown

About Unknown

Hi , This is Osama Mahmood and i will share all my knowledge and skills on #infosec with you and hope you will enjoy learning new and unique things. follow me on twitter @OsamaMahmood007