mirror of
https://github.com/AbdullahRizwan101/CTF-Writeups
synced 2024-11-21 19:43:03 +00:00
Update Cheat Sheet.md
This commit is contained in:
parent
f549e0e497
commit
28c76d812a
1 changed files with 5 additions and 0 deletions
|
@ -256,6 +256,11 @@ To bruteforce passwords
|
|||
After logging into the wordpress dashboard , we can edit theme's 404.php page with a php revershell
|
||||
`http://<ip>/wordpress/wp-content/themes/twentytwenty/404.php`
|
||||
|
||||
To get a RCE
|
||||
|
||||
* Goto `Appearance` -> `Editor` Select the 404.php template of the current theme and paste php reverse-shell.
|
||||
* Then navigate to `http://ip/wp-content/themes/twentyfifteen/404.php` (theme name can be twentytwenty for the latest one)
|
||||
|
||||
# Wordlists
|
||||
|
||||
### Directory Bruteforcing
|
||||
|
|
Loading…
Reference in a new issue